$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/8941689CB44911EA92F1F886C4F9AE02.roa File: 8941689CB44911EA92F1F886C4F9AE02.roa (raw, json) Hash identifier: 4Z25oEXKd2i0RXY7kF9Yj9e1Ufs0rVahsGX9EeBSaFg= Subject key identifier: CF:19:D8:73:84:6D:14:71:17:8D:6B:57:9C:93:2C:8C:B9:76:80:3D Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Certificate serial: 0BAC Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/8941689CB44911EA92F1F886C4F9AE02.roa Signing time: Thu 31 Oct 2024 15:21:02 +0000 ROA not before: Thu 31 Oct 2024 15:21:02 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134692 IP address blocks: 202.50.0.0/23 maxlen: 24 202.50.4.0/23 maxlen: 23 202.50.5.0/24 maxlen: 24 202.50.10.0/23 maxlen: 23 202.50.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2988 (0xbac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Validity Not Before: Oct 31 15:21:02 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6723a05e-bdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:28:07:af:98:0a:7b:e2:90:9a:66:44:5f:80: 7d:82:8d:22:98:c4:d5:a1:bf:9c:a3:61:30:0f:cd: ea:ad:6e:f3:53:be:80:27:db:01:73:8e:12:60:d3: 8d:cd:4d:c0:83:9e:21:a7:53:7b:cf:d9:08:89:a5: f0:61:e1:4d:e0:9e:31:7c:cc:c3:34:48:01:da:9e: 17:c6:02:1e:f5:89:27:56:e1:14:87:a6:06:09:3c: b8:40:6f:4c:7f:87:90:2c:98:da:48:3a:24:01:64: 1d:ca:29:81:d1:53:94:3e:c1:4c:55:a0:ad:b0:86: 9b:4b:34:a2:a5:b6:08:2d:39:5c:1f:50:80:ab:61: d9:e5:1d:e2:70:09:be:ed:bd:9f:a2:35:af:cb:e4: ad:28:1b:75:17:95:2b:c9:75:83:3e:07:01:85:0f: 9f:e4:db:50:64:fb:82:7f:eb:b9:b6:87:f9:31:f6: 44:86:48:97:f6:1d:99:a8:1e:28:35:6e:f6:c5:46: e2:8c:6b:e4:d1:de:9b:9e:7c:f4:33:55:06:26:c7: 6f:70:3b:af:06:89:04:c4:3f:37:ef:da:e1:f4:95: 09:5a:12:13:be:d9:c9:23:78:72:7f:8c:c8:2f:20: 9d:5d:cd:04:c0:5a:ea:27:07:e9:66:70:c0:e1:9a: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:19:D8:73:84:6D:14:71:17:8D:6B:57:9C:93:2C:8C:B9:76:80:3D X509v3 Authority Key Identifier: keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/8941689CB44911EA92F1F886C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.50.0.0/23 202.50.4.0/23 202.50.10.0/23 Signature Algorithm: sha256WithRSAEncryption bf:6d:7f:73:b5:3f:13:23:19:06:97:43:19:57:bc:7e:9b:59: 1e:e3:4e:79:7a:56:ea:fd:a8:5d:3f:01:51:7e:4d:60:81:d7: 88:9e:96:c5:4b:fc:67:58:d8:12:0f:bc:63:64:26:99:34:5f: 43:85:6a:b0:eb:25:3a:8e:8a:a5:d2:0f:a0:4f:a6:91:2b:54: 41:93:0a:8a:01:95:fe:ff:8d:b2:49:06:53:ca:8e:b9:5e:e4: 9f:67:b9:da:fd:00:ab:fd:67:1e:dd:f0:5d:48:8a:f6:0c:a8: 8e:16:ae:d7:64:ae:7f:69:a2:a6:18:ff:ed:6b:98:09:27:1e: 22:4e:ec:88:5a:d4:5e:94:58:50:1d:81:85:15:bf:c0:41:a7: 9a:ef:c6:f6:60:ef:63:86:e0:bc:95:b2:60:5e:6e:3b:a3:d7: a3:99:95:89:cd:fd:ab:c6:03:48:71:8e:a2:4c:e5:bf:d3:e5: a5:e9:8c:37:e4:56:8c:86:40:62:8d:f3:df:35:b0:74:93:0a: 17:d3:4f:41:66:d5:2f:a6:58:9b:24:ae:1a:ec:e5:28:69:7c: 2e:81:d9:84:c9:63:be:28:d4:64:f0:a5:fd:45:45:7d:8e:ce: 6d:47:62:71:c3:2c:98:e0:5f:98:98:a3:b0:20:1e:79:21:eb: 18:05:79:b7 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy RDNCMjY0Q0EwHhcNMjQxMDMxMTUyMTAyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIzYTA1ZS1iZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmigHr5gKe+KQmmZEX4B9go0imMTVob+co2EwD83qrW7zU76AJ9sBc44SYNON zU3Ag54hp1N7z9kIiaXwYeFN4J4xfMzDNEgB2p4XxgIe9YknVuEUh6YGCTy4QG9M f4eQLJjaSDokAWQdyimB0VOUPsFMVaCtsIabSzSipbYILTlcH1CAq2HZ5R3icAm+ 7b2fojWvy+StKBt1F5UryXWDPgcBhQ+f5NtQZPuCf+u5tof5MfZEhkiX9h2ZqB4o NW72xUbijGvk0d6bnnz0M1UGJsdvcDuvBokExD8379rh9JUJWhITvtnJI3hyf4zI LyCdXc0EwFrqJwfpZnDA4ZowSQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFM8Z2HOE bRRxF41rV5yTLIy5doA9MB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFDNDkvQzQ5Rjc1RjgxRDlGMTFFMjlFRkJBMjkwMDhCMDJDRDIvODk0MTY4OUNC NDQ5MTFFQTkyRjFGODg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAHKMgADBAHKMgQDBAHKMgowDQYJKoZIhvcNAQELBQADggEB AL9tf3O1PxMjGQaXQxlXvH6bWR7jTnl6Vur9qF0/AVF+TWCB14ielsVL/GdY2BIP vGNkJpk0X0OFarDrJTqOiqXSD6BPppErVEGTCooBlf7/jbJJBlPKjrle5J9nudr9 AKv9Zx7d8F1IivYMqI4Wrtdkrn9poqYY/+1rmAknHiJO7Iha1F6UWFAdgYUVv8BB p5rvxvZg72OG4LyVsmBebjuj16OZlYnN/avGA0hxjqJM5b/T5aXpjDfkVoyGQGKN 8981sHSTChfTT0Fm1S+mWJskrhrs5ShpfC6B2YTJY74o1GTwpf1FRX2Ozm1HYnHD LJjgX5iYo7AgHnkh6xgFebc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org