$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7F8336CA721B11EF81654E68C4F9AE02.roa File: 7F8336CA721B11EF81654E68C4F9AE02.roa (raw, json) Hash identifier: 99wlq0q1NCPHGeGTBYC6Ld9oIu+HMPp/BFrDDfzFMYE= Subject key identifier: 36:3C:90:7C:1D:42:2A:88:7F:9D:D5:47:78:AA:DB:C5:FE:57:76:A3 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 4E Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7F8336CA721B11EF81654E68C4F9AE02.roa Signing time: Fri 13 Sep 2024 21:59:50 +0000 ROA not before: Fri 13 Sep 2024 21:59:50 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 38265 IP address blocks: 202.29.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:59:50 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4b5d6-657d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:1c:dc:fa:fb:b4:6a:bf:1a:80:bd:8c:9d: 64:16:7b:9a:cc:ae:eb:62:f1:cd:bb:e8:4a:17:3f: 5f:b1:50:51:1c:1d:18:45:07:07:c0:e6:80:65:4e: 07:2c:58:38:69:c2:63:23:3e:1e:35:81:9e:61:1c: a6:66:c6:92:ba:f3:6d:06:d6:43:8e:33:13:4d:84: 28:19:54:03:79:db:c2:5d:75:77:89:17:46:4b:79: 78:f5:0f:d0:b5:aa:3b:11:da:58:5a:35:02:9a:22: b1:3f:65:b1:39:d6:c5:47:17:81:e2:b4:4c:08:51: c7:bf:3e:73:8b:94:c7:29:92:49:e2:a0:c1:68:11: 35:70:34:f4:c3:0a:d7:8b:ae:7e:26:1b:fb:53:03: ee:ea:df:29:0a:48:0d:c3:6f:12:0f:5a:b3:6a:09: bd:97:ec:03:7f:4f:37:3c:6e:9b:b9:6a:d1:4a:18: a4:e4:9a:5f:89:44:ed:1b:d6:84:e2:31:ca:78:d0: a2:03:c7:a6:76:b3:93:b7:2c:f8:aa:44:d0:eb:70: be:98:67:46:bf:6e:02:d7:31:9f:44:a0:bd:18:25: b3:3f:4d:af:fe:6b:bb:8e:ec:b0:1d:26:8a:1a:9b: 43:ff:88:6c:c0:4a:33:51:90:33:11:90:d2:11:b7: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:90:7C:1D:42:2A:88:7F:9D:D5:47:78:AA:DB:C5:FE:57:76:A3 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7F8336CA721B11EF81654E68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.57.0/24 Signature Algorithm: sha256WithRSAEncryption a2:31:9b:66:bb:ff:a6:26:12:ec:90:e2:04:94:4b:c2:81:f7: 6e:59:52:b9:a5:9a:f3:e2:3d:48:31:af:f7:82:ca:88:28:11: 1d:f2:60:ff:82:c6:9a:0c:38:d9:c1:ae:5d:27:6a:11:2f:9a: 2b:f3:e5:24:52:e1:90:0d:60:c9:78:5a:a8:6b:a4:2c:5e:2e: 4b:e5:76:04:60:79:bf:cd:7b:a3:82:0e:98:d8:6a:d2:99:69: 0d:b9:e7:56:fa:e4:47:4f:e9:b6:ff:4c:b3:8c:07:09:fd:16: 90:84:c2:03:e3:3b:63:ac:3e:10:4b:90:76:bd:13:4a:59:de: 9a:f4:d2:06:44:fe:c0:ea:2e:5b:cd:ed:fe:d9:66:7c:8a:d1: 1d:ac:de:e8:ac:2c:51:21:52:d6:1a:df:68:1f:d8:27:86:74: 28:fa:e2:d5:57:8e:49:0c:82:0b:b3:d5:0f:cc:9e:4a:92:f0: c3:0d:5d:af:dc:e3:b6:b3:42:d8:1e:36:d9:39:5d:92:62:4d: 0f:3a:10:ef:db:e9:4f:a5:49:82:e5:7d:96:fc:d9:48:12:26: 6d:16:13:42:00:8c:1e:87:ca:4b:df:93:22:9d:1e:54:25:da: 49:9e:7a:fa:59:ee:93:09:f5:f3:c5:8a:34:07:4e:97:12:09: 95:9d:70:e3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTU5NTBaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRiNWQ2LTY1N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQKBzc+vu0ar8agL2MnWQWe5rMruti8c276EoXP1+xUFEcHRhFBwfA5oBlTgcs WDhpwmMjPh41gZ5hHKZmxpK6820G1kOOMxNNhCgZVAN528JddXeJF0ZLeXj1D9C1 qjsR2lhaNQKaIrE/ZbE51sVHF4HitEwIUce/PnOLlMcpkknioMFoETVwNPTDCteL rn4mG/tTA+7q3ykKSA3DbxIPWrNqCb2X7AN/Tzc8bpu5atFKGKTkml+JRO0b1oTi Mcp40KIDx6Z2s5O3LPiqRNDrcL6YZ0a/bgLXMZ9EoL0YJbM/Ta/+a7uO7LAdJooa m0P/iGzASjNRkDMRkNIRt0w1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNjyQfB1C Koh/ndVHeKrbxf5XdqMwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi83RjgzMzZDQTcy MUIxMUVGODE2NTRFNjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAModOTANBgkqhkiG9w0BAQsFAAOCAQEAojGbZrv/piYS7JDi BJRLwoH3bllSuaWa8+I9SDGv94LKiCgRHfJg/4LGmgw42cGuXSdqES+aK/PlJFLh kA1gyXhaqGukLF4uS+V2BGB5v817o4IOmNhq0plpDbnnVvrkR0/ptv9Ms4wHCf0W kITCA+M7Y6w+EEuQdr0TSlnemvTSBkT+wOouW83t/tlmfIrRHaze6KwsUSFS1hrf aB/YJ4Z0KPri1VeOSQyCC7PVD8yeSpLwww1dr9zjtrNC2B422TldkmJNDzoQ79vp T6VJguV9lvzZSBImbRYTQgCMHofKS9+TIp0eVCXaSZ56+lnukwn188WKNAdOlxIJ lZ1w4w== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org