$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/DF8602D05E5B11ED994E491CC4F9AE02.roa File: DF8602D05E5B11ED994E491CC4F9AE02.roa (raw, json) Hash identifier: KKCg2NooRoQGuF3KYpzz51c9C/45UUPObnLo2e5njhU= Subject key identifier: 68:BC:55:81:FB:EB:96:6A:F0:8D:47:6A:B9:B4:0F:CD:53:36:A2:E9 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 34E4 Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/DF8602D05E5B11ED994E491CC4F9AE02.roa Signing time: Wed 02 Oct 2024 14:50:34 +0000 ROA not before: Wed 02 Oct 2024 14:50:34 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 38851 IP address blocks: 58.115.0.0/18 maxlen: 18 58.115.8.0/21 maxlen: 21 58.115.16.0/20 maxlen: 20 58.115.32.0/19 maxlen: 19 58.115.48.0/21 maxlen: 24 58.115.192.0/20 maxlen: 20 203.133.56.0/24 maxlen: 24 203.203.220.0/22 maxlen: 22 203.203.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Oct 2 14:50:34 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fd5dba-0fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:a9:b8:cb:c2:04:8e:02:e3:c7:4a:ed:0d: f0:fc:66:37:3f:55:04:48:f8:c2:50:2f:8c:e8:e0: 6b:8c:d5:6a:7d:f3:5c:db:32:18:c1:47:c6:19:60: cb:2b:42:67:94:9f:00:06:0b:07:2a:29:81:09:69: fb:37:da:3f:5d:ed:b5:75:9e:a7:97:57:a9:4f:05: 2e:cd:a9:b4:fa:3d:46:02:ac:e2:79:b3:09:d6:90: 58:7a:98:08:89:9e:86:e3:33:ba:f6:26:c0:75:26: 2c:dc:57:c2:89:f7:e9:e9:ae:88:29:75:eb:d5:fc: e8:61:24:91:48:5c:7a:6f:be:be:43:aa:b8:a7:18: cb:5d:17:ac:55:3b:71:2a:c7:08:26:09:94:23:e5: da:33:65:44:1c:73:c0:d8:13:f0:89:91:ac:df:e2: 0e:ba:5c:8f:6d:58:94:c3:48:74:77:8a:df:89:1a: 99:93:eb:70:0f:c4:7a:d4:aa:15:88:0f:25:54:03: 8a:82:25:2a:ad:17:3e:a6:ad:67:77:1c:1b:55:b1: ff:28:b0:47:8b:fd:83:b7:d6:14:6e:99:ad:7c:d0: 15:2e:13:ce:0c:d1:64:50:6a:a5:f2:27:cd:d5:fe: 2b:f4:37:27:33:45:f3:cc:bf:b3:a5:c6:b7:1a:34: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BC:55:81:FB:EB:96:6A:F0:8D:47:6A:B9:B4:0F:CD:53:36:A2:E9 X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/DF8602D05E5B11ED994E491CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.115.0.0/18 58.115.192.0/20 203.133.56.0/24 203.203.220.0-203.203.255.255 Signature Algorithm: sha256WithRSAEncryption 3b:a7:f6:20:79:e1:c5:ac:2e:f4:6d:04:8e:45:c9:b7:6b:ea: 43:fe:b6:de:66:3d:30:0e:5a:cd:40:27:6f:0e:32:46:ad:04: 18:78:ad:21:a0:57:74:3d:97:a3:d0:a2:d1:34:56:72:94:5d: 77:9a:44:be:9d:38:0f:41:54:9d:e8:d5:94:42:8e:86:9a:6b: 8a:cb:ae:cb:03:56:ea:f5:ae:c2:48:14:d4:ce:0b:3f:47:fb: 85:ef:ca:25:12:7f:ac:7a:c0:ce:b0:9f:28:8a:3d:ae:50:bf: ba:88:d9:ff:12:a7:4d:62:86:fe:16:55:ce:89:6f:df:79:ce: 1b:34:30:f4:a8:eb:4a:31:b9:b4:fc:25:9c:9a:9f:b6:2e:5d: 74:c7:93:2e:e5:47:a8:86:b4:92:40:9d:67:31:42:9e:02:cc: aa:21:cc:b5:c6:42:3b:ba:5a:12:ab:df:55:cb:17:71:96:11: e9:d9:9d:d9:7f:d4:e1:c8:cf:00:f0:74:85:a7:a9:47:6c:18: e7:bd:0f:02:54:c1:cc:b3:10:ba:bf:f1:5f:c8:2a:8b:13:1f: a8:7a:ec:68:61:76:fc:ec:2b:83:3a:03:c5:2a:9b:6f:7d:9b: b5:7c:a6:16:3e:33:b9:0f:18:6f:d5:48:3b:7a:a0:6c:a9:dc: 4e:7c:ad:10 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjQxMDAyMTQ1MDM0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkNWRiYS0wZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg+puMvCBI4C48dK7Q3w/GY3P1UESPjCUC+M6OBrjNVqffNc2zIYwUfGGWDL K0JnlJ8ABgsHKimBCWn7N9o/Xe21dZ6nl1epTwUuzam0+j1GAqziebMJ1pBYepgI iZ6G4zO69ibAdSYs3FfCiffp6a6IKXXr1fzoYSSRSFx6b76+Q6q4pxjLXResVTtx KscIJgmUI+XaM2VEHHPA2BPwiZGs3+IOulyPbViUw0h0d4rfiRqZk+twD8R61KoV iA8lVAOKgiUqrRc+pq1ndxwbVbH/KLBHi/2Dt9YUbpmtfNAVLhPODNFkUGql8ifN 1f4r9DcnM0XzzL+zpca3GjRsxQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFGi8VYH7 65Zq8I1Harm0D81TNqLpMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZGNDcvQjRBODZDMzgxRDg0MTFFMjk2OUZDNURBMDhCMDJDRDIvREY4NjAyRDA1 RTVCMTFFRDk5NEU0OTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMCUEAgABMB8DBAY6cwADBAQ6c8ADBADLhTgwCwMEAsvL3AMDAsvIMA0GCSqG SIb3DQEBCwUAA4IBAQA7p/YgeeHFrC70bQSORcm3a+pD/rbeZj0wDlrNQCdvDjJG rQQYeK0hoFd0PZej0KLRNFZylF13mkS+nTgPQVSd6NWUQo6GmmuKy67LA1bq9a7C SBTUzgs/R/uF78olEn+sesDOsJ8oij2uUL+6iNn/EqdNYob+FlXOiW/fec4bNDD0 qOtKMbm0/CWcmp+2Ll10x5Mu5UeohrSSQJ1nMUKeAsyqIcy1xkI7uloSq99Vyxdx lhHp2Z3Zf9ThyM8A8HSFp6lHbBjnvQ8CVMHMsxC6v/FfyCqLEx+oeuxoYXb87CuD OgPFKptvfZu1fKYWPjO5Dxhv1Ug7eqBsqdxOfK0Q -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org