$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0515DA4721511EF9D7B9F3DC4F9AE02.roa File: C0515DA4721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: bGmBvE4NmuZxP2et+WEhk/G1C4k8wwnmeTddb2JjMWs= Subject key identifier: 32:9F:7C:F1:0E:97:5D:0A:D9:B3:86:3F:B5:93:81:03:5B:DC:85:13 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 2C Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0515DA4721511EF9D7B9F3DC4F9AE02.roa Signing time: Fri 13 Sep 2024 21:18:42 +0000 ROA not before: Fri 13 Sep 2024 21:18:42 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134064 IP address blocks: 202.29.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:18:42 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4ac32-8898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:61:36:a3:e2:84:1f:ef:43:fe:4c:6b:99: 53:2d:6e:cd:e2:6e:ad:c3:78:61:11:6f:c3:07:88: c3:dc:3b:5e:37:90:a7:50:01:70:2d:10:94:24:6e: 19:e2:26:d0:24:e2:f2:ae:e2:1f:28:f9:5c:01:92: ca:13:6f:ca:64:4a:cd:4f:f9:76:7b:2d:bb:45:fa: 25:ec:5e:8a:97:57:c5:bb:c2:06:36:36:d4:cb:84: 45:d1:a3:b6:dc:d4:35:ea:e2:bc:49:d4:5a:66:6f: ac:53:9f:bc:54:10:cb:89:a1:b4:e8:45:ad:d3:55: 4b:bc:55:ab:a8:e2:4d:94:5c:8c:22:ed:37:a5:55: c4:6d:c4:cc:0b:1c:8a:81:1d:6b:4f:6c:f9:8d:77: 7d:9c:a2:db:63:57:e1:e8:06:bd:57:3c:24:f3:bb: db:49:ae:e1:90:9f:36:80:89:32:c5:99:b3:b2:72: 39:cf:cd:01:f4:13:20:8f:96:f5:ba:13:67:71:51: a6:c5:e4:01:08:33:15:12:a1:2e:f2:a4:44:0e:04: 08:66:cf:b6:b6:f1:98:b4:3a:50:db:66:55:fe:2e: c1:9f:54:64:4d:2d:f0:08:98:6d:b2:7b:8a:d7:c5: c8:36:46:0c:90:fe:b1:c7:01:3c:23:7d:10:bc:1d: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9F:7C:F1:0E:97:5D:0A:D9:B3:86:3F:B5:93:81:03:5B:DC:85:13 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0515DA4721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.106.0/24 Signature Algorithm: sha256WithRSAEncryption 52:b5:6d:70:7f:f6:0b:ba:b8:c0:45:6d:87:00:bf:82:14:f9: 3c:10:33:fa:59:bb:92:75:b5:20:32:fb:79:ff:6f:fd:08:64: 21:66:07:17:e9:0c:cd:ee:d6:8a:75:a2:91:85:a1:63:81:e0: dc:37:4d:41:3e:fb:dd:01:55:7c:7e:9c:6d:a2:bc:90:8b:b8: c2:10:dd:07:c8:04:6a:31:32:7a:e9:f3:e5:cd:61:f2:ed:b5: 2e:78:27:9e:ee:4e:6d:2f:3c:68:45:9e:f8:2f:21:ee:5f:2d: f4:51:c7:6e:fb:72:1c:94:57:47:b9:2f:a3:84:b3:b9:75:3c: 25:91:7d:f7:01:74:8a:92:59:c0:d5:eb:9d:f7:25:58:26:02: 67:0d:9c:a5:93:0e:0c:bf:c3:bc:63:9d:cc:75:eb:7a:89:7f: 79:1e:70:e1:94:73:d2:17:b6:21:ec:b4:b2:67:ec:7e:fe:b9: d4:a1:b7:1f:b4:67:8f:3d:ce:f8:90:9d:90:64:c8:3f:5d:21: fe:61:85:e9:58:da:0d:74:c1:4c:31:5c:9c:f6:82:bb:94:a2: 52:96:c9:f1:19:0d:c5:8c:d8:0a:c1:37:80:8c:c3:22:cb:84: f4:a6:06:71:60:9b:1e:01:c5:df:0d:df:55:8d:f1:bf:ca:d5: 78:96:dc:27 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTE4NDJaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRhYzMyLTg4OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+4GE2o+KEH+9D/kxrmVMtbs3ibq3DeGERb8MHiMPcO143kKdQAXAtEJQkbhni JtAk4vKu4h8o+VwBksoTb8pkSs1P+XZ7LbtF+iXsXoqXV8W7wgY2NtTLhEXRo7bc 1DXq4rxJ1Fpmb6xTn7xUEMuJobToRa3TVUu8Vauo4k2UXIwi7TelVcRtxMwLHIqB HWtPbPmNd32cottjV+HoBr1XPCTzu9tJruGQnzaAiTLFmbOycjnPzQH0EyCPlvW6 E2dxUabF5AEIMxUSoS7ypEQOBAhmz7a28Zi0OlDbZlX+LsGfVGRNLfAImG2ye4rX xcg2RgyQ/rHHATwjfRC8HYQTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMp988Q6X XQrZs4Y/tZOBA1vchRMwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9DMDUxNURBNDcy MTUxMUVGOUQ3QjlGM0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAModajANBgkqhkiG9w0BAQsFAAOCAQEAUrVtcH/2C7q4wEVt hwC/ghT5PBAz+lm7knW1IDL7ef9v/QhkIWYHF+kMze7WinWikYWhY4Hg3DdNQT77 3QFVfH6cbaK8kIu4whDdB8gEajEyeunz5c1h8u21Lngnnu5ObS88aEWe+C8h7l8t 9FHHbvtyHJRXR7kvo4SzuXU8JZF99wF0ipJZwNXrnfclWCYCZw2cpZMODL/DvGOd zHXreol/eR5w4ZRz0he2Iey0smfsfv651KG3H7Rnjz3O+JCdkGTIP10h/mGF6Vja DXTBTDFcnPaCu5SiUpbJ8RkNxYzYCsE3gIzDIsuE9KYGcWCbHgHF3w3fVY3xv8rV eJbcJw== -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org