$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/2DED29046A8E11EF948C2811C4F9AE02.roa File: 2DED29046A8E11EF948C2811C4F9AE02.roa (raw, json) Hash identifier: mhSDrNTd50cS8wLIGVZl7Ze3yEkifRrR2iMHOlgICfE= Subject key identifier: C6:08:1B:69:B4:32:3D:5A:FB:17:81:9B:F5:3E:E6:55:EA:B0:DA:DC Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 345E Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/2DED29046A8E11EF948C2811C4F9AE02.roa Signing time: Wed 04 Sep 2024 07:21:05 +0000 ROA not before: Wed 04 Sep 2024 07:21:05 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 10139 IP address blocks: 121.1.0.0/20 maxlen: 24 121.1.16.0/20 maxlen: 24 121.1.32.0/19 maxlen: 24 121.54.0.0/17 maxlen: 24 125.60.128.0/17 maxlen: 24 175.158.192.0/18 maxlen: 24 175.176.0.0/17 maxlen: 24 203.84.160.0/19 maxlen: 24 203.87.128.0/17 maxlen: 24 203.111.224.0/20 maxlen: 24 203.201.180.0/24 maxlen: 24 2407:9800:2000::/36 maxlen: 36 2407:9800:5000::/36 maxlen: 36 2407:9800:6000::/36 maxlen: 36 2407:9800:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13406 (0x345e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: Sep 4 07:21:05 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66d80a61-41a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:f0:01:d5:fa:11:5a:25:83:55:83:c9:b6: 79:97:a9:8a:95:0f:d7:54:97:b6:d1:be:db:2e:68: 3d:41:bf:a3:ab:bf:8b:e4:37:62:65:6b:31:db:9a: 05:79:0f:fe:7d:e1:4d:65:10:45:82:d7:3c:36:2e: 88:62:09:14:30:49:c6:af:a0:01:30:80:bd:9c:bf: df:48:79:80:2a:cf:f8:b4:ab:e8:8f:b2:60:02:36: 8e:f3:da:be:2c:b0:cf:e7:4f:9c:b5:86:48:52:74: 49:dc:e2:9e:49:45:14:a0:32:37:b7:21:61:96:10: 1b:0a:46:a0:4c:1a:cf:ab:31:50:af:20:99:1e:dd: ba:2a:75:2a:b2:44:ea:27:9c:3c:d2:4d:ce:21:86: aa:04:18:85:28:a3:66:bb:ea:71:37:b2:86:2a:79: 5d:62:ae:81:77:40:99:38:f4:b7:68:b0:76:64:a4: 84:c5:76:9b:10:6a:3b:e4:55:83:65:4d:3a:81:70: 0e:b4:ff:71:2e:f8:81:8f:43:b3:06:5b:c8:c0:41: 88:5d:1a:52:5c:c5:68:48:45:5b:c0:ad:41:0e:0f: 6c:d5:2a:e9:78:c4:b5:96:1d:1e:6e:3e:d4:46:27: 3a:b0:78:7c:2c:30:61:87:d9:fa:c5:2b:91:14:af: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:08:1B:69:B4:32:3D:5A:FB:17:81:9B:F5:3E:E6:55:EA:B0:DA:DC X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/2DED29046A8E11EF948C2811C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.1.0.0/18 121.54.0.0/17 125.60.128.0/17 175.158.192.0/18 175.176.0.0/17 203.84.160.0/19 203.87.128.0/17 203.111.224.0/20 203.201.180.0/24 IPv6: 2407:9800:2000::/36 2407:9800:5000::-2407:9800:6fff:ffff:ffff:ffff:ffff:ffff 2407:9800:9000::/36 Signature Algorithm: sha256WithRSAEncryption df:32:7a:fa:9d:4c:5a:fd:38:62:f9:10:de:5a:a7:d5:10:b2: 16:cb:97:5d:75:a1:9c:11:60:b5:3a:d9:a5:07:5b:25:d0:f3: 9a:c3:b0:fb:84:9d:7d:3d:48:fe:18:a6:b9:03:7f:a8:86:9d: b0:57:bc:04:d6:8d:66:18:35:d7:3f:88:1f:08:84:a7:9b:0a: 13:86:86:da:8a:63:8d:ef:55:7d:73:ad:43:bb:19:22:59:9d: a2:fd:a1:5e:3e:09:7d:db:94:6f:ee:db:a8:58:d5:69:56:37: 32:5e:2a:38:08:d4:37:34:f7:68:5f:fa:d3:c6:99:3d:3c:36: 02:19:5b:b7:48:21:19:a7:75:a6:15:66:30:5c:6f:ae:23:78: 74:16:0c:02:34:19:aa:92:9e:88:37:66:fd:4a:9b:1e:79:66: 92:f7:a1:ad:e0:13:5a:3c:cf:e0:e2:03:b2:05:7f:90:ba:3b: e3:00:28:79:23:cd:25:bc:71:64:82:e1:c1:94:0e:1e:58:42: 5b:e3:3e:eb:57:3c:a1:88:db:30:fd:17:73:8c:e6:ea:f9:0f: 73:04:f0:6f:7f:54:c7:e0:84:39:d6:f4:ed:14:d4:71:db:0a: 80:84:38:68:f5:0e:f0:ff:9e:89:28:0c:04:26:2e:4e:9f:08: 24:ef:52:dc -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgICNF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjQwOTA0MDcyMTA1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4MGE2MS00MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVLwAdX6EVolg1WDybZ5l6mKlQ/XVJe20b7bLmg9Qb+jq7+L5DdiZWsx25oF eQ/+feFNZRBFgtc8Ni6IYgkUMEnGr6ABMIC9nL/fSHmAKs/4tKvoj7JgAjaO89q+ LLDP50+ctYZIUnRJ3OKeSUUUoDI3tyFhlhAbCkagTBrPqzFQryCZHt26KnUqskTq J5w80k3OIYaqBBiFKKNmu+pxN7KGKnldYq6Bd0CZOPS3aLB2ZKSExXabEGo75FWD ZU06gXAOtP9xLviBj0OzBlvIwEGIXRpSXMVoSEVbwK1BDg9s1SrpeMS1lh0ebj7U Ric6sHh8LDBhh9n6xSuRFK83ywIDAQABo4IC7zCCAuswHQYDVR0OBBYEFMYIG2m0 Mj1a+xeBm/U+5lXqsNrcMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZERDgvRjA0ODUyNDIxRDg2MTFFMjg2MTE4Q0RFMDhCMDJDRDIvMkRFRDI5MDQ2 QThFMTFFRjk0OEMyODExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwweQYIKwYBBQUHAQcBAf8E ajBoMDwEAgABMDYDBAZ5AQADBAd5NgADBAd9PIADBAavnsADBAevsAADBAXLVKAD BAfLV4ADBATLb+ADBADLybQwKAQCAAIwIgMGBCQHmAAgMBADBgQkB5gAUAMGBCQH mABgAwYEJAeYAJAwDQYJKoZIhvcNAQELBQADggEBAN8yevqdTFr9OGL5EN5ap9UQ shbLl111oZwRYLU62aUHWyXQ85rDsPuEnX09SP4YprkDf6iGnbBXvATWjWYYNdc/ iB8IhKebChOGhtqKY43vVX1zrUO7GSJZnaL9oV4+CX3blG/u26hY1WlWNzJeKjgI 1Dc092hf+tPGmT08NgIZW7dIIRmndaYVZjBcb64jeHQWDAI0GaqSnog3Zv1Kmx55 ZpL3oa3gE1o8z+DiA7IFf5C6O+MAKHkjzSW8cWSC4cGUDh5YQlvjPutXPKGI2zD9 F3OM5ur5D3ME8G9/VMfghDnW9O0U1HHbCoCEOGj1DvD/nokoDAQmLk6fCCTvUtw= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:51 2024 by rpki-client on console-fra.rpki-client.org