$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/9F3A919468D811EFB2FE405FC4F9AE02.roa File: 9F3A919468D811EFB2FE405FC4F9AE02.roa (raw, json) Hash identifier: ZaxlSh3XWBv2fOJrVopMAyhJjHEvnP8TGG96c6iuXcg= Subject key identifier: A1:67:80:0F:CB:CB:D2:34:D3:A7:32:E0:07:5C:DF:0B:B3:B1:59:DC Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 34E1 Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/9F3A919468D811EFB2FE405FC4F9AE02.roa Signing time: Wed 02 Oct 2024 14:50:31 +0000 ROA not before: Wed 02 Oct 2024 14:50:31 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 131611 IP address blocks: 203.203.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Oct 2 14:50:31 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fd5db7-d08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2f:12:b3:a0:51:e6:52:5c:d1:f4:71:e1:0b: fe:40:52:fc:09:ba:91:e0:f0:ff:75:3d:5f:91:2c: a6:68:ef:a3:f8:c7:6a:6b:f1:5c:38:49:c2:e9:1a: 1d:48:72:31:df:9a:49:d9:7c:5b:d9:31:42:a9:f8: b4:2f:50:c0:cd:d3:88:fe:9e:0b:85:41:55:8a:32: 65:40:2d:9d:39:71:a6:bb:0d:64:06:49:a0:52:25: 17:cb:80:06:f6:a0:a1:91:2f:24:a9:86:b6:f7:89: 8b:52:1d:04:5b:78:29:7a:c1:dd:7b:df:a7:94:82: 03:52:78:3f:d5:0e:42:97:37:ea:ff:01:60:3f:96: be:4d:f5:8d:26:34:e4:96:0e:15:1a:39:aa:a6:d5: 76:b3:29:56:e0:4c:6a:c6:3d:57:5a:9e:52:5b:c2: 71:d8:a4:9d:30:9f:a7:3c:f3:2c:2a:75:06:cd:4f: 41:18:63:11:38:4c:23:d6:6d:3b:3a:bc:30:43:cd: af:da:40:20:2e:95:33:24:a3:e0:32:2a:28:5d:66: 9c:80:65:08:51:b6:8c:b8:05:ad:49:36:19:5b:6e: 11:ed:01:16:f8:03:0a:df:44:ec:93:84:e2:54:d2: 30:80:b0:90:a9:4c:c5:c1:78:9e:a0:36:39:64:f7: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:67:80:0F:CB:CB:D2:34:D3:A7:32:E0:07:5C:DF:0B:B3:B1:59:DC X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/9F3A919468D811EFB2FE405FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.203.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9d:b9:9d:a4:81:5a:e2:12:1b:f9:d6:07:ee:e4:cf:17:8e:04: 29:f6:24:d9:c0:86:a4:69:d2:3f:03:cd:7c:95:6a:79:20:a5: 96:e9:bd:e6:64:20:25:63:d5:56:c3:19:8d:82:b4:87:15:e2: 04:fd:b4:50:bd:14:7c:9f:92:4e:79:0d:ad:2f:45:1f:8d:90: 4d:e1:4d:45:7e:7c:6a:e1:7a:52:82:eb:b0:b1:91:bf:63:58: c5:6c:ca:74:b4:a5:2d:aa:25:3b:0a:4d:c8:a6:ac:ec:bf:c4: 4d:36:2f:a6:ce:aa:2f:77:33:fb:d5:c2:f9:68:01:1f:be:d8: f0:9a:d3:80:1d:45:8c:9f:d3:eb:f4:9b:ae:ba:51:af:3f:e1: ba:5f:0c:1d:c6:2c:6e:1a:2b:7d:6b:05:ae:92:44:7a:8b:2d: 6a:64:96:a1:ae:d1:d2:0b:f1:71:00:d6:b6:69:f8:e2:9c:a8: 97:ea:22:07:36:fe:5f:e9:69:20:7d:53:7f:04:5d:d5:53:85: 8d:58:d2:68:68:77:e7:f6:e7:17:52:0c:61:c1:2b:14:ba:ad: f0:cd:eb:f9:51:1c:68:b9:6b:bb:47:72:8a:da:75:74:0d:90: 3b:e6:6c:f7:b1:fc:4f:71:25:83:d9:63:de:48:6a:65:99:0f: 40:97:ef:aa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjQxMDAyMTQ1MDMxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkNWRiNy1kMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7C8Ss6BR5lJc0fRx4Qv+QFL8CbqR4PD/dT1fkSymaO+j+Mdqa/FcOEnC6Rod SHIx35pJ2Xxb2TFCqfi0L1DAzdOI/p4LhUFVijJlQC2dOXGmuw1kBkmgUiUXy4AG 9qChkS8kqYa294mLUh0EW3gpesHde9+nlIIDUng/1Q5Clzfq/wFgP5a+TfWNJjTk lg4VGjmqptV2sylW4Exqxj1XWp5SW8Jx2KSdMJ+nPPMsKnUGzU9BGGMROEwj1m07 OrwwQ82v2kAgLpUzJKPgMiooXWacgGUIUbaMuAWtSTYZW24R7QEW+AMK30Tsk4Ti VNIwgLCQqUzFwXieoDY5ZPcSewIDAQABo4IClTCCApEwHQYDVR0OBBYEFKFngA/L y9I006cy4Adc3wuzsVncMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZGNDcvQjRBODZDMzgxRDg0MTFFMjk2OUZDNURBMDhCMDJDRDIvOUYzQTkxOTQ2 OEQ4MTFFRkIyRkU0MDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAfLywAwDQYJKoZIhvcNAQELBQADggEBAJ25naSBWuISG/nW B+7kzxeOBCn2JNnAhqRp0j8DzXyVankgpZbpveZkICVj1VbDGY2CtIcV4gT9tFC9 FHyfkk55Da0vRR+NkE3hTUV+fGrhelKC67Cxkb9jWMVsynS0pS2qJTsKTcimrOy/ xE02L6bOqi93M/vVwvloAR++2PCa04AdRYyf0+v0m666Ua8/4bpfDB3GLG4aK31r Ba6SRHqLLWpklqGu0dIL8XEA1rZp+OKcqJfqIgc2/l/paSB9U38EXdVThY1Y0mho d+f25xdSDGHBKxS6rfDN6/lRHGi5a7tHcoradXQNkDvmbPex/E9xJYPZY95IamWZ D0CX76o= -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:43 2024 by rpki-client on console-fra.rpki-client.org