$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/2A8C8F708C7611EF85966855C4F9AE02.roa File: 2A8C8F708C7611EF85966855C4F9AE02.roa (raw, json) Hash identifier: YhA0Z4SW325ZBirlxgaDv0vvEr+YuIEw336XEXLXvik= Subject key identifier: 82:41:3D:B3:37:50:5D:7D:48:BF:A6:F8:21:C2:7B:CC:02:4F:84:E9 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0889 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/2A8C8F708C7611EF85966855C4F9AE02.roa Signing time: Thu 17 Oct 2024 10:54:22 +0000 ROA not before: Thu 17 Oct 2024 10:54:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38138 IP address blocks: 114.129.8.0/21 maxlen: 21 114.129.8.0/24 maxlen: 24 114.129.9.0/24 maxlen: 24 114.129.10.0/24 maxlen: 24 114.129.11.0/24 maxlen: 24 114.129.12.0/24 maxlen: 24 2405:eec0::/32 maxlen: 32 2405:eec0:1::/48 maxlen: 48 2405:eec0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Oct 17 10:54:22 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6710ecde-0cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:4c:c4:23:bf:9c:b7:8d:0c:09:3e:73:d8: 91:e5:b9:55:3b:82:1d:06:81:21:ee:41:99:6e:20: 65:dd:df:9a:9a:1e:97:3c:d7:fb:14:eb:77:05:6d: 29:30:21:ef:a9:ce:04:67:56:b4:8f:a1:e7:c6:73: 63:8b:26:8e:19:c8:33:92:17:ee:ed:14:45:2a:4a: a6:a2:24:d1:30:a3:e3:36:55:a8:0d:9b:30:36:4d: 1a:e1:0a:d8:65:14:f6:ca:33:9a:28:47:48:e7:9f: c9:82:e8:ad:16:51:70:e2:65:73:39:ff:0c:c2:f8: 27:09:34:cb:54:4f:a1:e8:d7:0e:86:84:05:7c:c9: f2:b0:25:41:3f:2e:b6:d4:8b:9f:4e:97:0f:55:de: 76:89:14:2a:e4:59:16:ee:af:57:fb:f1:7a:7b:ca: 25:e3:a5:c8:ea:2d:fc:19:59:99:03:97:3c:e3:ae: d5:4d:8a:9c:04:cc:ad:81:dc:33:22:0d:f9:0a:df: 6a:00:eb:87:45:d1:b4:af:50:62:9e:4f:a8:d6:e0: b5:10:db:b1:e1:84:6b:01:96:0f:e5:38:d7:4b:7f: c2:9e:73:3c:ca:af:3d:07:76:eb:d6:17:64:5a:a2: e4:fc:c7:ba:3d:47:c1:be:15:13:fa:4d:d1:cd:9f: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:41:3D:B3:37:50:5D:7D:48:BF:A6:F8:21:C2:7B:CC:02:4F:84:E9 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/2A8C8F708C7611EF85966855C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.129.8.0/21 IPv6: 2405:eec0::/32 Signature Algorithm: sha256WithRSAEncryption 5c:03:dd:4a:e1:73:40:07:5a:1f:47:96:39:d8:18:49:19:c4: 9e:9e:08:ec:98:5f:2a:67:bd:92:0c:74:ce:7c:7f:2c:b9:e4: 05:40:63:7d:96:8e:cb:55:bd:5c:80:db:13:db:ef:45:4e:d8: f3:cb:66:0e:e7:84:4d:92:31:de:eb:19:52:62:2e:0a:50:26: db:c1:c9:75:46:3e:42:b3:c8:01:58:5c:45:62:0f:96:f5:12: 10:5e:94:b3:e1:64:05:41:a5:39:02:e3:a9:36:19:61:bc:f8: f2:07:02:ab:96:f5:ba:3e:a0:a9:39:4f:5e:b5:c6:68:3f:89: 95:29:08:e4:80:15:99:b5:fc:6b:e3:0d:c0:22:d4:7b:5a:6e: 76:a2:e7:e4:5b:17:48:87:60:25:62:64:6e:2f:a0:55:26:e1: dc:10:cc:a3:02:c5:fd:76:d9:ff:32:5c:7a:b8:b8:23:5b:74: d6:2a:4e:4f:2f:13:3c:21:24:90:41:6e:59:bf:b4:0c:f8:75: ff:d0:33:9a:f6:dc:77:b1:ad:88:2c:b5:0b:5b:74:71:9c:78: fd:66:7c:d9:2a:cc:f1:30:a2:de:d6:3f:34:f3:9a:9c:6e:0b: 9b:f8:40:56:10:4c:06:41:03:de:ae:39:b1:61:32:2f:86:4d: cd:db:ef:d3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjQxMDE3MTA1NDIyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwZWNkZS0wY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrJMxCO/nLeNDAk+c9iR5blVO4IdBoEh7kGZbiBl3d+amh6XPNf7FOt3BW0p MCHvqc4EZ1a0j6HnxnNjiyaOGcgzkhfu7RRFKkqmoiTRMKPjNlWoDZswNk0a4QrY ZRT2yjOaKEdI55/JguitFlFw4mVzOf8MwvgnCTTLVE+h6NcOhoQFfMnysCVBPy62 1IufTpcPVd52iRQq5FkW7q9X+/F6e8ol46XI6i38GVmZA5c8467VTYqcBMytgdwz Ig35Ct9qAOuHRdG0r1Bink+o1uC1ENux4YRrAZYP5TjXS3/CnnM8yq89B3br1hdk WqLk/Me6PUfBvhUT+k3RzZ9rTwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIJBPbM3 UF19SL+m+CHCe8wCT4TpMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBCREUvN0U1QUMzRTA4OTcxMTFFQTkyNDAyQTBBQzRGOUFFMDIvMkE4QzhGNzA4 Qzc2MTFFRjg1OTY2ODU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBANygQgwDQQCAAIwBwMFACQF7sAwDQYJKoZIhvcNAQELBQAD ggEBAFwD3Urhc0AHWh9HljnYGEkZxJ6eCOyYXypnvZIMdM58fyy55AVAY32WjstV vVyA2xPb70VO2PPLZg7nhE2SMd7rGVJiLgpQJtvByXVGPkKzyAFYXEViD5b1EhBe lLPhZAVBpTkC46k2GWG8+PIHAquW9bo+oKk5T161xmg/iZUpCOSAFZm1/GvjDcAi 1Htabnai5+RbF0iHYCViZG4voFUm4dwQzKMCxf122f8yXHq4uCNbdNYqTk8vEzwh JJBBblm/tAz4df/QM5r23HexrYgstQtbdHGceP1mfNkqzPEwot7WPzTzmpxuC5v4 QFYQTAZBA96uObFhMi+GTc3b79M= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:58 2024 by rpki-client on console-ams.rpki-client.org