$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa File: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (raw, json) Hash identifier: FfGvWbRgw7M2d0HlF6t0whQketZeGqrQDCwVLn5jEfk= Subject key identifier: 71:95:84:3B:75:66:A0:5E:39:DD:FA:E0:81:1B:AB:D7:51:DB:58:00 Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 0767 Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa Signing time: Wed 06 Nov 2024 21:19:54 +0000 ROA not before: Wed 06 Nov 2024 21:19:54 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 64073 IP address blocks: 118.67.192.0/23 maxlen: 24 118.67.194.0/23 maxlen: 24 118.67.196.0/22 maxlen: 24 202.36.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Nov 6 21:19:54 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672bdd7a-a860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:88:39:4c:18:f2:96:1b:42:de:47:54:77: 4e:fa:de:26:6c:30:f9:7a:d7:ee:20:d5:ce:dd:c7: 1c:ee:e7:a0:93:85:57:5f:f9:00:db:84:3b:6f:ce: 22:d7:6b:0d:fd:00:43:30:4e:0f:5c:ed:a1:fb:24: c6:70:a2:9c:0b:9f:8b:e3:64:3e:54:59:67:6c:8c: 05:76:ee:54:79:45:e5:7f:53:09:33:75:23:6d:7a: bb:75:a8:35:88:b9:91:93:6b:06:83:a8:ea:9e:c9: 1e:c6:28:b4:b0:14:e7:bb:3c:fe:31:13:35:e2:bf: e1:6a:2f:43:3f:df:3f:bf:2b:e0:69:71:73:de:6e: 3f:2b:8e:9d:d8:83:2d:24:41:7c:24:51:1d:35:74: ec:47:16:82:7b:73:d1:04:51:3f:8e:c2:78:5d:19: 74:b0:18:86:67:07:ba:d1:71:d1:d2:56:6f:48:2f: 84:35:1b:78:83:c5:04:ee:47:2f:2d:ce:fc:8a:62: ad:a3:29:f2:12:03:d2:50:fa:af:e2:bd:3d:60:0d: 68:6f:27:a6:c8:90:9c:c0:fc:c6:0e:9f:ce:e2:bb: 68:74:37:a1:a2:ec:c3:fa:b6:d6:2b:ee:91:aa:43: 7a:54:1e:31:91:d9:90:af:2c:11:02:8e:42:4b:6c: 3e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:95:84:3B:75:66:A0:5E:39:DD:FA:E0:81:1B:AB:D7:51:DB:58:00 X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.67.192.0/21 202.36.209.0/24 Signature Algorithm: sha256WithRSAEncryption ac:a3:bb:00:5b:2e:97:2f:61:a7:f8:4a:c1:50:53:aa:12:54: bc:a3:ca:a8:33:50:0b:14:14:85:8d:48:4d:ba:d7:23:c0:75: d5:c8:4f:f7:e5:c9:2e:b9:49:ce:65:a4:a5:45:0e:f2:a0:56: 72:35:35:99:3b:14:a1:78:5b:18:7a:39:bc:14:fa:bd:cf:88: a2:24:1f:1f:d5:aa:b8:1b:81:0b:27:af:3a:98:29:a2:7b:ce: 6e:3b:87:fb:34:b7:4d:53:67:3b:c4:e3:c0:d5:e4:89:41:11: f9:75:6a:f4:a0:87:01:f1:38:f8:2e:07:b0:96:3a:75:77:08: 93:3e:81:be:ac:33:11:10:97:7e:33:41:5c:51:f1:d5:78:e3: 64:11:d7:cd:60:01:45:3e:a5:93:53:c7:2f:c5:8d:12:6f:e1: f7:50:21:ec:9e:f5:3f:7a:48:c7:54:27:b3:12:c2:11:ea:ee: 9d:55:45:11:30:51:bd:65:bf:8a:12:f1:6e:a8:e8:fd:24:c7: 3c:f4:7f:ff:b3:7b:3f:11:f4:0c:34:45:bd:b4:ae:b1:eb:e0: 3b:08:93:41:42:d7:be:04:0e:c8:1b:3a:8c:44:38:64:f0:84: a7:62:fc:58:e8:06:81:60:c5:9c:68:25:6c:f7:b1:85:e5:97: 92:69:f5:f0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjQxMTA2MjExOTU0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiZGQ3YS1hODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuuIOUwY8pYbQt5HVHdO+t4mbDD5etfuINXO3ccc7uegk4VXX/kA24Q7b84i 12sN/QBDME4PXO2h+yTGcKKcC5+L42Q+VFlnbIwFdu5UeUXlf1MJM3UjbXq7dag1 iLmRk2sGg6jqnskexii0sBTnuzz+MRM14r/hai9DP98/vyvgaXFz3m4/K46d2IMt JEF8JFEdNXTsRxaCe3PRBFE/jsJ4XRl0sBiGZwe60XHR0lZvSC+ENRt4g8UE7kcv Lc78imKtoynyEgPSUPqv4r09YA1obyemyJCcwPzGDp/O4rtodDehouzD+rbWK+6R qkN6VB4xkdmQrywRAo5CS2w+UQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHGVhDt1 ZqBeOd364IEbq9dR21gAMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY4QzMvRDBFMzNGQTQwMkMzMTFFQjhBREMzMjM4QzRGOUFFMDIvMEJEMDREMzAw RjZEMTFFQzhEOUYxRTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAN2Q8ADBADKJNEwDQYJKoZIhvcNAQELBQADggEBAKyjuwBb LpcvYaf4SsFQU6oSVLyjyqgzUAsUFIWNSE261yPAddXIT/flyS65Sc5lpKVFDvKg VnI1NZk7FKF4Wxh6ObwU+r3PiKIkHx/VqrgbgQsnrzqYKaJ7zm47h/s0t01TZzvE 48DV5IlBEfl1avSghwHxOPguB7CWOnV3CJM+gb6sMxEQl34zQVxR8dV442QR181g AUU+pZNTxy/FjRJv4fdQIeye9T96SMdUJ7MSwhHq7p1VRREwUb1lv4oS8W6o6P0k xzz0f/+zez8R9Aw0Rb20rrHr4DsIk0FC174EDsgbOoxEOGTwhKdi/FjoBoFgxZxo JWz3sYXll5Jp9fA= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:52 2024 by rpki-client on console-ams.rpki-client.org