$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/C74B01CA3C3E11EBA08CAC72C4F9AE02.roa File: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (raw, json) Hash identifier: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg= Subject key identifier: C5:BF:41:B4:7B:58:2C:06:E8:99:70:D4:CF:3A:9C:0F:D5:9B:17:69 Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 06CA Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/C74B01CA3C3E11EBA08CAC72C4F9AE02.roa Signing time: Sat 26 Oct 2024 22:03:12 +0000 ROA not before: Sat 26 Oct 2024 22:03:12 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 55834 IP address blocks: 49.0.8.0/23 maxlen: 23 49.0.8.0/24 maxlen: 24 49.0.9.0/24 maxlen: 24 49.0.10.0/23 maxlen: 23 49.0.10.0/24 maxlen: 24 49.0.12.0/24 maxlen: 24 49.0.13.0/24 maxlen: 24 49.0.14.0/23 maxlen: 23 49.0.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: Oct 26 22:03:12 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=671d6720-31eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ba:44:05:f9:bb:a4:3d:ed:e3:11:72:b4:35: 07:34:93:69:50:35:bc:e8:a4:b1:e0:aa:fe:c7:1a: 9f:16:af:27:c3:19:b9:01:6e:c0:c3:66:41:b2:32: 7e:6d:1e:e7:64:8b:26:38:e2:bc:4a:0b:ce:ff:62: 36:fa:27:44:88:c9:64:18:c7:53:b0:16:e8:95:a5: 33:76:77:f7:78:24:e5:66:b4:81:6b:fb:6b:12:2b: 3e:fe:57:76:72:63:f5:e3:e0:30:70:7c:60:32:f0: b0:19:73:30:2e:14:56:7e:b3:a7:d1:7e:ea:16:2e: 47:10:3a:91:78:f6:ea:5f:49:da:e8:05:b7:3e:a3: 48:59:b3:60:d4:85:43:4e:95:9f:8e:ea:6f:09:0b: ba:67:92:2a:66:13:07:c1:2f:86:71:fa:39:d3:5d: db:b6:9d:a6:42:62:6c:21:8e:09:06:2b:5f:5a:ab: 6c:cd:a6:94:3f:2b:6a:99:ef:23:6b:cd:1a:c8:47: c9:84:af:65:1e:66:88:7b:f7:28:4f:d1:27:02:aa: 9a:57:30:27:78:80:fe:00:2e:a8:fc:82:7d:2e:4c: f7:dc:e0:65:40:64:c1:b5:e2:af:17:72:f2:bc:9c: f8:63:75:03:05:8e:60:5a:ea:da:10:6c:08:c2:00: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BF:41:B4:7B:58:2C:06:E8:99:70:D4:CF:3A:9C:0F:D5:9B:17:69 X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/C74B01CA3C3E11EBA08CAC72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.0.8.0/21 Signature Algorithm: sha256WithRSAEncryption 76:32:2c:a3:21:18:68:42:e4:5e:be:d5:34:39:35:fb:ef:fe: 8d:b1:83:55:6e:94:11:c1:94:ae:02:4d:2a:63:c9:d0:2c:e3: 98:5a:81:94:56:25:f2:35:e3:e2:3c:82:53:1e:e6:9e:5b:34: 3b:d5:f3:06:d5:6a:91:51:ba:23:3c:eb:f4:b9:cb:f0:bd:16: e2:8f:93:2f:8f:e1:d4:6f:f5:cb:37:9f:9c:b2:1f:29:ca:3d: 56:45:c7:f3:18:3f:42:bf:fa:ff:04:63:fb:e4:e1:bd:4a:71: 0c:2e:59:a4:28:d1:e4:33:fe:1f:0f:91:97:70:dc:ef:ff:e6: b9:c0:69:22:bb:53:47:ba:b7:5d:33:e1:e8:73:df:d7:c2:ec: 22:0a:70:3c:4e:fc:91:8b:9b:fe:e5:a7:cd:10:09:87:7d:93: ff:c0:e9:25:ae:3b:4e:e1:ca:5e:6f:c5:29:5c:c1:1f:93:fd: 08:39:88:89:9c:04:55:a8:a3:1f:a6:e6:fe:b8:fe:cb:bf:9f: ee:0d:7d:d9:35:34:32:8a:19:a7:78:98:f3:2a:ce:89:dd:4f: d4:1a:f7:4c:b8:08:8a:62:20:d7:5f:60:10:93:70:b4:13:f6: 3c:70:31:55:10:23:86:77:e0:a2:9a:3c:47:da:b3:fd:b0:67: f9:f0:31:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjQxMDI2MjIwMzEyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFkNjcyMC0zMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LpEBfm7pD3t4xFytDUHNJNpUDW86KSx4Kr+xxqfFq8nwxm5AW7Aw2ZBsjJ+ bR7nZIsmOOK8SgvO/2I2+idEiMlkGMdTsBbolaUzdnf3eCTlZrSBa/trEis+/ld2 cmP14+AwcHxgMvCwGXMwLhRWfrOn0X7qFi5HEDqRePbqX0na6AW3PqNIWbNg1IVD TpWfjupvCQu6Z5IqZhMHwS+Gcfo5013btp2mQmJsIY4JBitfWqtszaaUPytqme8j a80ayEfJhK9lHmaIe/coT9EnAqqaVzAneID+AC6o/IJ9Lkz33OBlQGTBteKvF3Ly vJz4Y3UDBY5gWuraEGwIwgBTzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMW/QbR7 WCwG6Jlw1M86nA/VmxdpMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU4RkYvMTIwNEFCM0MzQzNEMTFFQkI5MzgxRjcxQzRGOUFFMDIvQzc0QjAxQ0Ez QzNFMTFFQkEwOENBQzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAMxAAgwDQYJKoZIhvcNAQELBQADggEBAHYyLKMhGGhC5F6+ 1TQ5Nfvv/o2xg1VulBHBlK4CTSpjydAs45hagZRWJfI14+I8glMe5p5bNDvV8wbV apFRuiM86/S5y/C9FuKPky+P4dRv9cs3n5yyHynKPVZFx/MYP0K/+v8EY/vk4b1K cQwuWaQo0eQz/h8PkZdw3O//5rnAaSK7U0e6t10z4ehz39fC7CIKcDxO/JGLm/7l p80QCYd9k//A6SWuO07hyl5vxSlcwR+T/Qg5iImcBFWoox+m5v64/su/n+4Nfdk1 NDKKGad4mPMqzondT9Qa90y4CIpiINdfYBCTcLQT9jxwMVUQI4Z34KKaPEfas/2w Z/nwMb0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org