$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE93C5C6721A11EFBDE87567C4F9AE02.roa File: EE93C5C6721A11EFBDE87567C4F9AE02.roa (raw, json) Hash identifier: klPlOkr8sW2Grw18Ei9elK7pMMKd54OqxWe0ws9Cqf8= Subject key identifier: 93:7D:D5:D2:F1:41:E9:FA:C0:D8:5D:55:AD:82:FA:56:33:71:7C:D1 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 9F Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE93C5C6721A11EFBDE87567C4F9AE02.roa Signing time: Sat 21 Dec 2024 05:49:37 +0000 ROA not before: Sat 21 Dec 2024 05:49:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132493 IP address blocks: 202.29.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2 Validity Not Before: Dec 21 05:49:37 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676656f1-379a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:6b:85:5f:9b:d3:6d:69:f5:21:1e:74:5c: c4:7a:e4:51:02:50:6c:37:a6:85:ea:12:15:96:20: dd:11:39:ed:77:23:b0:bd:1e:bd:be:84:f9:6c:5d: 0e:38:5d:42:5e:f7:b8:87:44:62:8f:55:e5:ac:a7: 46:75:fc:9e:86:62:05:da:43:2b:0a:36:ae:ae:89: 81:fa:38:fa:60:4a:a7:0f:be:37:1e:88:12:37:c3: 57:cf:20:46:aa:d5:3b:c3:66:da:2f:6b:e9:f4:da: 6d:26:87:b8:a8:d5:e0:90:12:36:4d:4e:cf:7f:f6: ce:13:e7:16:fd:df:1f:95:bc:22:87:2d:87:c5:9d: 9e:50:a1:df:f3:82:6a:16:71:c0:87:76:bd:a9:f3: 8c:3e:e0:6c:ef:0b:73:7e:f0:8c:e5:7e:ed:70:56: 1c:80:f8:b5:23:2c:ca:ca:57:eb:1a:89:03:81:a8: 0c:e6:55:24:70:82:08:fd:cf:b2:00:45:e1:c5:7f: 31:53:cc:cb:f5:e7:07:fa:fc:9a:59:3a:c9:b4:88: 21:47:e7:dd:56:51:c4:5d:71:c5:dd:b8:03:6e:e1: 51:a1:85:54:49:b0:a8:ce:f3:b5:ed:c9:bf:b0:e9: 69:df:1b:69:6f:04:8d:13:72:27:66:c3:eb:d7:ba: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7D:D5:D2:F1:41:E9:FA:C0:D8:5D:55:AD:82:FA:56:33:71:7C:D1 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE93C5C6721A11EFBDE87567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.58.0/24 Signature Algorithm: sha256WithRSAEncryption 42:da:88:04:68:4f:90:88:76:54:8a:02:66:43:f3:2b:88:dc: 04:4a:53:0b:ea:52:23:8d:f5:93:6b:2f:01:46:cf:b4:ca:25: 36:33:17:b4:95:f2:28:86:61:34:5c:15:cd:9f:92:01:17:cc: 06:36:62:68:f4:fc:3d:6d:ed:23:1f:a3:7c:06:bb:be:81:24: d0:5f:88:44:c4:c9:14:b3:aa:b9:4f:4f:9b:7c:9f:0e:7b:15: 5c:89:f8:dc:90:ae:3a:3e:a0:dc:54:91:9f:0c:6d:c8:c1:a6: 73:60:8e:04:15:73:f1:bc:15:aa:7b:8c:ae:81:03:2f:e5:c3: 1e:b2:be:da:4e:8c:8c:fb:b8:40:4e:bc:fb:99:ab:ea:9a:43: d6:a4:dc:eb:22:e2:e8:95:cb:04:c3:a4:ab:8d:ca:97:11:82: 3a:d7:23:c4:29:f2:9e:c3:9b:6a:e5:8d:e6:00:b1:bf:d1:ec: 7e:7b:ca:ba:e5:6d:f6:fa:c6:c6:9d:45:91:b3:91:f5:f0:3b: cb:7e:b7:7a:44:2e:d7:e3:87:50:9e:a8:83:82:58:cc:4c:48: ef:b7:3d:ab:68:fd:9e:95:8c:73:3f:7f:3b:d3:23:c8:3d:ba: 3e:e1:dc:6c:3b:81:d5:58:78:98:73:4e:1c:56:08:45:5f:4d: c9:a4:80:b9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjQxMjIxMDU0OTM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NTZmMS0zNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw75rhV+b021p9SEedFzEeuRRAlBsN6aF6hIVliDdETntdyOwvR69voT5bF0O OF1CXve4h0Rij1XlrKdGdfyehmIF2kMrCjauromB+jj6YEqnD743HogSN8NXzyBG qtU7w2baL2vp9NptJoe4qNXgkBI2TU7Pf/bOE+cW/d8flbwihy2HxZ2eUKHf84Jq FnHAh3a9qfOMPuBs7wtzfvCM5X7tcFYcgPi1IyzKylfrGokDgagM5lUkcIII/c+y AEXhxX8xU8zL9ecH+vyaWTrJtIghR+fdVlHEXXHF3bgDbuFRoYVUSbCozvO17cm/ sOlp3xtpbwSNE3InZsPr17qWyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJN91dLx Qen6wNhdVa2C+lYzcXzRMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRUU5M0M1QzY3 MjFBMTFFRkJERTg3NTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKHTowDQYJKoZIhvcNAQELBQADggEBAELaiARoT5CIdlSK AmZD8yuI3ARKUwvqUiON9ZNrLwFGz7TKJTYzF7SV8iiGYTRcFc2fkgEXzAY2Ymj0 /D1t7SMfo3wGu76BJNBfiETEyRSzqrlPT5t8nw57FVyJ+NyQrjo+oNxUkZ8MbcjB pnNgjgQVc/G8Fap7jK6BAy/lwx6yvtpOjIz7uEBOvPuZq+qaQ9ak3Osi4uiVywTD pKuNypcRgjrXI8Qp8p7Dm2rljeYAsb/R7H57yrrlbfb6xsadRZGzkfXwO8t+t3pE Ltfjh1CeqIOCWMxMSO+3Pato/Z6VjHM/fzvTI8g9uj7h3Gw7gdVYeJhzThxWCEVf TcmkgLk= -----END CERTIFICATE-----Generated at Mon Feb 17 08:26:20 2025 by rpki-client