$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F000862E721A11EFBDE87567C4F9AE02.roa File: F000862E721A11EFBDE87567C4F9AE02.roa (raw, json) Hash identifier: 0RYker4t9eNQ/KWQFEDt7dsz53DxEAIi9WIPLA1D5aY= Subject key identifier: 96:E0:85:00:30:A0:AF:4A:84:C6:12:D1:BD:E1:F8:EF:E1:BE:E2:EB Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 48 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F000862E721A11EFBDE87567C4F9AE02.roa Signing time: Fri 13 Sep 2024 21:55:50 +0000 ROA not before: Fri 13 Sep 2024 21:55:49 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 55545 IP address blocks: 202.28.40.0/24 maxlen: 24 202.28.41.0/24 maxlen: 24 202.28.42.0/24 maxlen: 24 202.28.43.0/24 maxlen: 24 2001:3c8:c301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:55:49 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4b4e5-7379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:4a:2d:68:5c:47:23:21:27:b0:8a:5c:fa: f2:52:9f:9f:b5:3f:cb:03:5b:6d:32:68:27:40:ec: 61:be:48:d6:0c:70:ab:19:e4:6b:61:cd:2a:59:e2: cd:e1:95:f2:06:4d:44:80:3e:d3:37:99:a9:aa:80: 23:69:4d:96:59:05:4f:08:79:3d:47:b7:b8:fe:61: 2b:01:33:51:3d:fe:f5:e6:52:bf:e9:25:91:df:e5: 03:84:b5:1d:89:83:79:6d:3e:9c:55:12:18:b2:6a: 34:9c:80:68:29:49:ad:70:12:f1:d4:36:9c:27:33: c9:b1:78:26:c3:28:fa:b9:1f:fd:39:80:83:28:68: 91:86:85:e9:d7:b3:87:36:63:5c:86:ef:7a:3a:e8: 1c:34:4f:c3:6d:34:e3:9d:f9:18:f0:fd:c9:91:0b: 82:2f:95:3c:93:33:ed:50:79:bd:7b:3e:d9:c8:c0: fa:f9:be:01:88:83:40:7d:a3:27:ec:9b:ef:5d:b4: 84:93:7b:0f:08:a3:af:e1:3f:66:af:d1:e1:c8:c0: 8c:43:f9:62:59:d9:ce:de:3c:64:fd:d8:fd:b8:a6: 21:f2:d1:53:53:77:48:02:94:79:94:63:0c:29:68: ef:32:d4:91:aa:f0:43:c0:64:b1:28:e0:f4:a5:cb: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E0:85:00:30:A0:AF:4A:84:C6:12:D1:BD:E1:F8:EF:E1:BE:E2:EB X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F000862E721A11EFBDE87567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.40.0/22 IPv6: 2001:3c8:c301::/48 Signature Algorithm: sha256WithRSAEncryption ae:82:9c:a0:fa:02:8e:a0:99:cc:ad:7f:f1:27:86:86:6f:c9: 25:24:45:09:39:d2:1e:32:4c:15:2d:da:3d:44:a7:8e:f1:01: e2:c1:fc:97:c6:7c:02:a5:46:e1:82:c9:5d:fb:a6:16:ae:f4: 14:a4:db:41:3c:cb:f7:18:c0:75:3b:af:cc:7c:08:0c:fd:7e: d3:a3:aa:aa:5b:1c:40:5e:6c:64:61:e4:5e:a2:8e:1f:b9:b3: b2:95:23:2f:e5:d7:bb:b9:0c:4c:c5:2a:f7:92:43:58:e5:1a: 01:6b:dc:f7:47:10:d1:85:06:0d:89:d7:07:e4:53:a2:b0:eb: 4a:52:88:90:66:56:3a:ed:71:34:b3:e4:53:f8:6e:3c:5d:09: cc:eb:19:58:f1:14:5d:a7:17:22:95:20:7d:a0:5e:0b:d9:28: 7a:fc:4e:60:07:88:a1:bc:81:53:5a:31:f7:0b:80:0d:ab:fc: 9b:ae:46:eb:4b:b2:02:a5:d1:7b:0a:19:05:80:f0:15:b3:51: 79:0a:56:84:13:48:d3:9b:f3:3e:49:12:31:b0:c0:3a:4c:62: 78:66:d9:62:2e:3f:ef:ea:b1:07:0c:4d:a6:d1:ee:86:6a:0d: 90:27:d5:db:5e:01:cd:1a:ca:a6:bf:43:aa:e2:dc:4b:33:74: 55:fd:aa:bd -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTU1NDlaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRiNGU1LTczNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHwEotaFxHIyEnsIpc+vJSn5+1P8sDW20yaCdA7GG+SNYMcKsZ5GthzSpZ4s3h lfIGTUSAPtM3mamqgCNpTZZZBU8IeT1Ht7j+YSsBM1E9/vXmUr/pJZHf5QOEtR2J g3ltPpxVEhiyajScgGgpSa1wEvHUNpwnM8mxeCbDKPq5H/05gIMoaJGGhenXs4c2 Y1yG73o66Bw0T8NtNOOd+Rjw/cmRC4IvlTyTM+1Qeb17PtnIwPr5vgGIg0B9oyfs m+9dtISTew8Io6/hP2av0eHIwIxD+WJZ2c7ePGT92P24piHy0VNTd0gClHmUYwwp aO8y1JGq8EPAZLEo4PSlyyQBAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUluCFADCg r0qExhLRveH47+G+4uswHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9GMDAwODYyRTcy MUExMUVGQkRFODc1NjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAsocKDAPBAIAAjAJAwcAIAEDyMMBMA0GCSqGSIb3DQEBCwUA A4IBAQCugpyg+gKOoJnMrX/xJ4aGb8klJEUJOdIeMkwVLdo9RKeO8QHiwfyXxnwC pUbhgsld+6YWrvQUpNtBPMv3GMB1O6/MfAgM/X7To6qqWxxAXmxkYeReoo4fubOy lSMv5de7uQxMxSr3kkNY5RoBa9z3RxDRhQYNidcH5FOisOtKUoiQZlY67XE0s+RT +G48XQnM6xlY8RRdpxcilSB9oF4L2Sh6/E5gB4ihvIFTWjH3C4ANq/ybrkbrS7IC pdF7ChkFgPAVs1F5ClaEE0jTm/M+SRIxsMA6TGJ4ZtliLj/v6rEHDE2m0e6Gag2Q J9XbXgHNGsqmv0Oq4txLM3RV/aq9 -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:48 2024 by rpki-client on console-fra.rpki-client.org