$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/E5675F48336E11EA94623E18C4F9AE02.roa File: E5675F48336E11EA94623E18C4F9AE02.roa (raw, json) Hash identifier: iPbzGQb+v1UtoJ+/xdLJYlI0s4JJe78IGCPidttsEfQ= Subject key identifier: 13:30:0D:6A:FC:E1:85:FF:42:ED:E0:E7:20:85:A2:E6:BE:26:C0:91 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0ACA Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/E5675F48336E11EA94623E18C4F9AE02.roa Signing time: Tue 02 Jul 2024 20:07:54 +0000 ROA not before: Tue 02 Jul 2024 20:07:54 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 16509 IP address blocks: 202.52.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2762 (0xaca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27 Validity Not Before: Jul 2 20:07:54 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66845e1a-8de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:0d:5b:f5:e3:e9:95:d2:37:13:19:16:f0: 19:11:72:3e:e4:85:a7:9d:51:a5:ac:c3:e8:6f:44: 09:c0:85:26:10:43:29:1f:fa:a1:d6:24:69:9e:d1: 5b:81:ad:f2:61:d3:2b:30:76:2b:25:66:f7:b3:80: de:e3:9a:0a:a1:54:8a:4b:96:21:26:82:4c:9b:3f: 3e:e8:fe:89:bd:a1:b1:90:ee:69:2b:27:0d:7a:3a: 7b:8e:67:f3:02:bf:f7:09:43:8d:9b:ee:cb:1b:52: 70:23:60:bf:d8:78:5c:ea:93:01:54:67:82:c6:db: 3e:da:88:06:d2:af:50:01:15:bf:b5:d0:5d:2a:38: cb:4c:92:55:88:21:15:34:60:be:09:a5:9a:96:83: 02:f0:46:ad:0e:5e:c0:6a:43:5c:8d:b7:f7:59:61: f6:ba:b2:66:d4:6d:2b:87:c5:76:a5:29:22:ef:8b: a8:3c:d6:3a:7a:74:4f:e4:43:55:61:ae:44:9c:8c: 10:e3:58:f6:92:c2:91:6b:ce:8e:13:5e:d7:b9:d9: d9:66:1c:21:7f:ae:e1:3f:10:c7:2f:d7:2c:95:2f: 4c:be:43:8b:30:fc:b7:0b:2f:18:3b:78:21:d0:05: 37:69:33:6a:4f:84:26:1e:2d:90:31:d0:63:f8:4a: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:30:0D:6A:FC:E1:85:FF:42:ED:E0:E7:20:85:A2:E6:BE:26:C0:91 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/E5675F48336E11EA94623E18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.52.43.0/24 Signature Algorithm: sha256WithRSAEncryption 86:0e:e0:3b:ca:7e:83:52:ce:e9:93:f2:9c:cf:9b:32:39:c7: eb:b4:b5:c1:ab:43:d6:d3:bb:04:39:49:32:10:13:41:9a:0d: 3a:04:ff:6e:5b:3f:a0:56:9e:0a:d4:05:b7:14:f2:e1:26:ca: 71:c9:73:f1:ac:38:21:77:bc:aa:47:fe:7c:5c:9e:7a:aa:de: 44:b2:f1:0f:44:8b:93:bb:c6:17:fd:77:26:4f:91:42:20:e3: 1a:52:fc:c5:bb:71:27:50:7d:31:fe:47:fd:2e:85:dd:f0:af: 50:3f:cf:c4:09:bf:1a:af:76:db:4b:60:c7:80:e5:aa:9e:f6: 9e:05:87:0b:79:43:78:ee:d6:57:05:d3:52:a2:dd:42:b1:26: fe:26:be:ef:19:7c:b7:9a:0c:9d:32:cd:43:9e:37:6a:20:75: fd:3c:d0:9f:ff:5c:ca:1e:f8:5f:04:e4:80:32:a4:03:9e:f2: 25:77:dc:19:3f:0e:5b:cb:0f:d4:da:c7:ea:cb:b6:6a:60:45: 23:b1:7c:cf:29:6b:bf:e8:4f:fd:33:7b:27:19:7f:47:2e:14: c7:0e:c2:95:ea:67:23:1b:69:13:be:3c:dc:1a:b2:2a:10:75: f9:23:6b:d2:a7:0a:38:6d:76:80:d6:b0:38:36:28:60:b6:5b: ea:97:37:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjQwNzAyMjAwNzU0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0NWUxYS04ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2sNW/Xj6ZXSNxMZFvAZEXI+5IWnnVGlrMPob0QJwIUmEEMpH/qh1iRpntFb ga3yYdMrMHYrJWb3s4De45oKoVSKS5YhJoJMmz8+6P6JvaGxkO5pKycNejp7jmfz Ar/3CUONm+7LG1JwI2C/2Hhc6pMBVGeCxts+2ogG0q9QARW/tdBdKjjLTJJViCEV NGC+CaWaloMC8EatDl7AakNcjbf3WWH2urJm1G0rh8V2pSki74uoPNY6enRP5ENV Ya5EnIwQ41j2ksKRa86OE17XudnZZhwhf67hPxDHL9cslS9MvkOLMPy3Cy8YO3gh 0AU3aTNqT4QmHi2QMdBj+Eo2TwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBMwDWr8 4YX/Qu3g5yCFoua+JsCRMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZCMjcvODJCRjJCRjQzMDU0MTFFQUFGQzkxMTZFQzRGOUFFMDIvRTU2NzVGNDgz MzZFMTFFQTk0NjIzRTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKNCswDQYJKoZIhvcNAQELBQADggEBAIYO4DvKfoNSzumT 8pzPmzI5x+u0tcGrQ9bTuwQ5STIQE0GaDToE/25bP6BWngrUBbcU8uEmynHJc/Gs OCF3vKpH/nxcnnqq3kSy8Q9Ei5O7xhf9dyZPkUIg4xpS/MW7cSdQfTH+R/0uhd3w r1A/z8QJvxqvdttLYMeA5aqe9p4Fhwt5Q3ju1lcF01Ki3UKxJv4mvu8ZfLeaDJ0y zUOeN2ogdf080J//XMoe+F8E5IAypAOe8iV33Bk/DlvLD9Tax+rLtmpgRSOxfM8p a7/oT/0zeycZf0cuFMcOwpXqZyMbaRO+PNwasioQdfkja9KnCjhtdoDWsDg2KGC2 W+qXN4M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:37 2025 by rpki-client