$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/C1D6899A766D11EF8DE77D09C4F9AE02.roa File: C1D6899A766D11EF8DE77D09C4F9AE02.roa (raw, json) Hash identifier: hhDKyyrQxKGGNGFA6ebmUiEAzFW+VilENtN1Yqjy+bg= Subject key identifier: E9:97:2D:3E:C9:FA:56:31:B2:B0:B2:1E:97:C9:E9:E3:1D:B1:41:DD Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Certificate serial: 018D Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/C1D6899A766D11EF8DE77D09C4F9AE02.roa Signing time: Thu 19 Sep 2024 09:58:45 +0000 ROA not before: Thu 19 Sep 2024 09:58:45 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 10103 IP address blocks: 202.134.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Validity Not Before: Sep 19 09:58:45 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66ebf5d4-ebe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:5c:89:b1:24:bb:f7:f2:0d:c0:f3:77:c5: a0:9c:19:47:c9:51:76:b6:c9:58:22:25:4d:2a:e2: f8:11:5f:6b:27:2f:2e:b1:c5:6a:35:88:b3:f2:dc: 40:d0:1a:ba:43:36:44:b7:39:ed:5a:21:f5:ac:08: b8:24:0c:11:5f:6a:c0:0c:54:e7:bf:50:14:7b:e3: 55:c9:68:27:57:df:81:89:ef:90:3c:83:20:46:bb: e4:4a:d0:d7:2a:27:39:f8:e7:76:72:80:69:39:fb: 10:42:88:18:63:f0:09:e6:37:a8:ed:8e:28:dd:e7: b9:ec:be:8b:ff:f1:7d:85:67:8e:08:33:da:3c:b5: df:a4:e2:52:ca:3d:47:d2:18:15:16:46:e6:d5:77: 19:9b:b4:64:44:80:56:ef:29:cb:dc:44:d3:74:4f: 37:79:f8:6f:96:69:26:bd:eb:2f:04:ca:e8:c4:91: 23:1a:38:21:5f:dd:32:2d:06:0f:3c:e6:bc:5a:49: 69:fd:d4:e0:95:d8:54:4b:3e:23:80:b2:1f:43:52: a7:c5:40:96:82:bb:b6:30:34:fc:cc:ea:89:36:5b: b3:ab:0d:6d:ac:48:b4:cf:17:fc:08:70:99:80:be: 1c:d6:12:1f:23:f0:8d:5f:eb:5c:b8:dd:33:ed:a9: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:97:2D:3E:C9:FA:56:31:B2:B0:B2:1E:97:C9:E9:E3:1D:B1:41:DD X509v3 Authority Key Identifier: keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/C1D6899A766D11EF8DE77D09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.134.242.0/24 Signature Algorithm: sha256WithRSAEncryption b1:35:ef:48:5c:a7:7d:95:f4:1e:d5:a9:a6:14:29:e4:7f:38: 0c:45:80:fd:ac:3f:44:d3:dc:b8:f6:4b:90:26:89:56:b8:01: ae:9a:12:9c:01:ac:e2:3d:b8:b9:1d:6b:4f:c6:64:52:93:80: d2:eb:2e:7d:1b:14:0c:9f:c2:9d:d6:eb:d4:58:65:ce:cb:c5: cc:7c:9e:64:95:99:8b:20:8a:88:0f:9d:13:1c:05:6a:88:12: ae:78:c3:d4:5d:8d:0b:9c:40:5a:99:fb:9f:fb:97:10:93:61: 66:2a:7f:78:6d:c3:59:93:af:e2:f7:d3:fa:66:f9:dd:83:bc: ba:4a:45:90:f2:23:1d:5f:1c:24:44:cc:dd:16:94:f8:8d:10: 71:27:4c:ba:28:c0:77:e7:3f:48:bd:4b:34:66:32:a7:ab:55: c3:4e:04:0e:b4:f6:79:49:2f:05:1c:f2:2b:63:f7:43:be:85: 97:1e:0f:9c:02:8f:32:68:c8:e1:97:52:1c:65:f8:d0:7c:02: e2:29:18:ab:b3:f3:07:ef:37:87:d3:75:39:3f:3a:b0:41:4d: 6e:e5:b8:ca:63:12:2b:49:5c:37:5b:b7:dd:ff:8b:4e:c7:8f: 65:db:26:d5:91:48:80:8b:f5:87:0d:9d:61:b6:02:35:07:f7: 94:97:4d:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE Q0Q3ODMzMDUwHhcNMjQwOTE5MDk1ODQ1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmViZjVkNC1lYmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BxcibEku/fyDcDzd8WgnBlHyVF2tslYIiVNKuL4EV9rJy8uscVqNYiz8txA 0Bq6QzZEtzntWiH1rAi4JAwRX2rADFTnv1AUe+NVyWgnV9+Bie+QPIMgRrvkStDX Kic5+Od2coBpOfsQQogYY/AJ5jeo7Y4o3ee57L6L//F9hWeOCDPaPLXfpOJSyj1H 0hgVFkbm1XcZm7RkRIBW7ynL3ETTdE83efhvlmkmvesvBMroxJEjGjghX90yLQYP POa8Wklp/dTgldhUSz4jgLIfQ1KnxUCWgru2MDT8zOqJNluzqw1trEi0zxf8CHCZ gL4c1hIfI/CNX+tcuN0z7an3KwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOmXLT7J +lYxsrCyHpfJ6eMdsUHdMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvQzFENjg5OUE3 NjZEMTFFRjhERTc3RDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKhvIwDQYJKoZIhvcNAQELBQADggEBALE170hcp32V9B7V qaYUKeR/OAxFgP2sP0TT3Lj2S5AmiVa4Aa6aEpwBrOI9uLkda0/GZFKTgNLrLn0b FAyfwp3W69RYZc7Lxcx8nmSVmYsgiogPnRMcBWqIEq54w9RdjQucQFqZ+5/7lxCT YWYqf3htw1mTr+L30/pm+d2DvLpKRZDyIx1fHCREzN0WlPiNEHEnTLoowHfnP0i9 SzRmMqerVcNOBA609nlJLwUc8itj90O+hZceD5wCjzJoyOGXUhxl+NB8AuIpGKuz 8wfvN4fTdTk/OrBBTW7luMpjEitJXDdbt93/i07Hj2XbJtWRSICL9YcNnWG2AjUH 95SXTTU= -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org