$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa File: 08AF618871AB11EFB81ED37EC4F9AE02.roa (raw, json) Hash identifier: rDmeM7r1CwSjGYi2Oai+ePKZXBdaXQy1d9c6B06y1HI= Subject key identifier: 6C:C5:C1:DB:E2:FE:DB:67:B7:49:D9:77:0B:72:02:FF:F1:40:91:41 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 0A Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa Signing time: Fri 13 Sep 2024 09:03:20 +0000 ROA not before: Fri 13 Sep 2024 09:03:20 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 133919 IP address blocks: 202.29.104.0/24 maxlen: 24 2001:3c8:100f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 09:03:20 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e3ffd8-63fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:17:97:0a:b2:8a:dc:46:3e:74:82:6a:f9: 69:ff:7b:d3:92:7b:2c:b5:ac:0a:cb:69:34:48:29: 0a:28:68:40:cf:cf:db:1c:b0:d3:1c:76:55:a9:6e: e2:76:80:ed:ff:d4:c9:00:bd:35:f1:91:8d:4b:d7: 51:55:c2:56:c4:82:a7:9f:14:e1:68:16:a3:05:ba: 8e:d2:13:db:66:a9:56:dc:fa:9b:06:c8:16:0b:e2: 89:ec:d9:a7:b1:9e:6c:8a:ff:e8:69:0f:c2:d6:ac: a7:13:5e:43:92:d4:97:e4:e5:9b:a2:cf:ff:41:c6: bd:8b:a0:0c:60:9e:5e:0c:19:ee:be:48:57:bb:42: 28:cc:ca:54:20:18:5c:f9:24:7b:f5:71:0e:9f:ab: 14:b7:a1:e8:16:03:1a:05:78:9c:e5:c9:7d:84:68: 28:a1:be:4a:b6:cc:52:23:e4:ad:2a:21:bb:94:73: 15:e9:e9:b2:86:d5:48:5f:96:d7:a5:12:82:a1:7f: 6e:58:3b:5e:d8:0d:c9:27:82:d1:bb:b0:af:de:1f: 21:b9:3e:37:d0:53:b7:8e:4b:f7:be:89:b5:71:04: 6e:e8:da:29:91:d8:d3:3b:53:d3:44:96:92:6a:e3: 87:f6:c8:74:ad:b5:3b:1d:48:63:8d:0e:8d:d0:58: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C5:C1:DB:E2:FE:DB:67:B7:49:D9:77:0B:72:02:FF:F1:40:91:41 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.104.0/24 IPv6: 2001:3c8:100f::/48 Signature Algorithm: sha256WithRSAEncryption 8a:d8:f4:86:b0:d7:df:57:4e:44:b7:67:08:5a:d1:04:87:18: 7d:bb:56:0a:10:c0:14:6e:26:3a:24:1e:e0:c4:32:0f:15:1b: b6:bd:5f:4c:8e:f5:0d:38:3f:5b:88:b7:c8:83:ea:3c:3c:56: af:58:c9:24:e8:0b:43:2b:30:f1:c9:10:fb:21:ad:ce:fe:28: 85:8d:d6:c4:9f:a7:a1:10:30:bd:9f:37:64:74:79:52:1d:6b: 20:d8:6e:aa:19:47:88:3c:3c:1f:4a:a1:8c:8d:dd:70:27:41: 6d:ed:55:3d:0e:23:62:32:99:40:62:f9:6b:f4:46:96:84:aa: 41:55:01:d9:77:71:8f:58:5a:cc:88:2f:35:a8:99:d9:b7:5b: e6:2d:32:80:0a:52:cf:3b:d9:6e:6e:f2:23:6f:ff:7b:88:19: 9a:b7:b5:74:38:a6:f7:76:48:f8:63:48:fe:d7:af:91:3a:4b: 4e:f6:00:ed:71:7d:dc:c0:50:85:46:69:dd:ea:fc:ae:20:17: bc:4a:7c:1d:ed:e9:10:66:65:00:eb:5d:60:41:79:34:a8:0d: 23:7e:f0:ff:57:b5:f6:15:ed:ba:18:07:9c:76:9c:b6:47:b9: 1a:6f:5b:67:c4:a5:ac:f4:0a:f6:93:f9:cb:77:a3:14:98:a9: 4f:50:85:ca -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMwOTAzMjBaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTNmZmQ4LTYzZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKFBeXCrKK3EY+dIJq+Wn/e9OSeyy1rArLaTRIKQooaEDPz9scsNMcdlWpbuJ2 gO3/1MkAvTXxkY1L11FVwlbEgqefFOFoFqMFuo7SE9tmqVbc+psGyBYL4ons2aex nmyK/+hpD8LWrKcTXkOS1Jfk5Zuiz/9Bxr2LoAxgnl4MGe6+SFe7QijMylQgGFz5 JHv1cQ6fqxS3oegWAxoFeJzlyX2EaCihvkq2zFIj5K0qIbuUcxXp6bKG1Uhfltel EoKhf25YO17YDckngtG7sK/eHyG5PjfQU7eOS/e+ibVxBG7o2imR2NM7U9NElpJq 44f2yHSttTsdSGONDo3QWI8LAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUbMXB2+L+ 22e3Sdl3C3IC//FAkUEwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi8wOEFGNjE4ODcx QUIxMUVGQjgxRUQzN0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAModaDAPBAIAAjAJAwcAIAEDyBAPMA0GCSqGSIb3DQEBCwUA A4IBAQCK2PSGsNffV05Et2cIWtEEhxh9u1YKEMAUbiY6JB7gxDIPFRu2vV9MjvUN OD9biLfIg+o8PFavWMkk6AtDKzDxyRD7Ia3O/iiFjdbEn6ehEDC9nzdkdHlSHWsg 2G6qGUeIPDwfSqGMjd1wJ0Ft7VU9DiNiMplAYvlr9EaWhKpBVQHZd3GPWFrMiC81 qJnZt1vmLTKAClLPO9lubvIjb/97iBmat7V0OKb3dkj4Y0j+16+ROktO9gDtcX3c wFCFRmnd6vyuIBe8Snwd7ekQZmUA611gQXk0qA0jfvD/V7X2Fe26GAecdpy2R7ka b1tnxKWs9Ar2k/nLd6MUmKlPUIXK -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org