$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/81D7045C0F5511EFA55FC44EC4F9AE02.roa File: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (raw, json) Hash identifier: XCfCmftMwhI1jamDgRcIxFJNNZ6OneW30ciSDRXltTE= Subject key identifier: D4:D7:B1:B8:C3:1E:B3:D3:95:47:4A:12:D5:EF:E4:A8:B2:2B:B8:F4 Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Certificate serial: 29 Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/81D7045C0F5511EFA55FC44EC4F9AE02.roa Signing time: Sat 11 May 2024 05:30:58 +0000 ROA not before: Sat 11 May 2024 05:30:58 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152644 IP address blocks: 202.47.134.0/24 maxlen: 24 202.47.135.0/24 maxlen: 24 2401:89a0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 04:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Validity Not Before: May 11 05:30:58 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=663f0291-3f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:89:ed:4c:cc:e0:d0:d7:c8:07:fd:b1:77:92: a0:6f:eb:e5:62:d6:61:41:ab:12:97:81:33:28:9d: d4:1e:ba:17:d5:c8:67:05:8f:b8:c8:84:16:b4:22: f2:c1:01:11:84:14:91:88:23:0c:40:34:02:41:0e: 6b:5a:a8:63:fc:81:2e:27:15:0a:7b:39:8d:03:4b: a0:21:c1:dc:ba:e1:03:33:30:4e:5f:b5:6a:cb:08: d2:e7:4c:4b:ed:6b:28:4b:bb:62:47:79:0a:3f:7c: 85:67:e4:f1:13:a1:8f:04:f8:3c:01:a9:1a:d8:14: 6b:8a:19:92:86:20:e4:f3:49:82:b3:b2:40:70:8c: ac:8c:86:10:ad:b7:15:ad:0a:32:ae:28:9d:1d:ac: 2e:91:12:5d:4e:65:a2:4c:dc:da:b2:31:28:d2:ff: 9e:ff:64:6f:b9:eb:e6:01:7f:f0:85:b7:08:93:1e: 1c:eb:46:b7:5d:c6:60:05:ac:07:cd:ce:25:08:13: f7:e4:b6:3c:50:e7:70:99:4d:0d:d7:da:c5:24:32: 7e:92:19:96:19:a8:9a:76:6e:db:ca:30:17:48:96: 0f:89:83:5c:ad:6f:4a:5b:59:fd:dc:23:bd:b7:f9: de:6f:f9:f9:15:39:b5:16:8b:0c:b9:97:96:cc:63: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D7:B1:B8:C3:1E:B3:D3:95:47:4A:12:D5:EF:E4:A8:B2:2B:B8:F4 X509v3 Authority Key Identifier: keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/81D7045C0F5511EFA55FC44EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.134.0/23 IPv6: 2401:89a0::/32 Signature Algorithm: sha256WithRSAEncryption 83:8c:b3:bc:41:f7:8d:90:a0:9b:97:30:55:32:98:90:c5:e0: 58:3f:18:42:19:d9:52:67:04:c5:eb:4b:c1:d9:5d:27:4f:6e: ac:81:a6:0d:ea:ae:89:7c:6d:43:cc:26:61:ec:de:f4:b3:2a: 82:a3:b2:81:97:ee:4e:88:5b:32:f0:8d:b0:2c:8c:a6:aa:70: 79:67:51:8a:7a:6d:f1:70:16:6e:df:a1:17:f9:31:22:98:f3: 15:04:f6:2e:40:c9:9d:d5:f7:7c:e3:06:24:ae:2c:32:f9:b9: 17:8a:c5:8d:a8:af:40:cd:63:25:fb:a3:8d:db:85:94:77:04: 28:79:28:3c:ab:ff:6b:34:cc:8a:e6:ef:6a:9d:3c:c6:af:be: 92:f4:97:44:30:67:39:8b:0d:b2:3e:2b:27:64:bb:0a:6f:f8: b0:75:c0:54:ef:cd:70:1a:bc:5c:cc:55:ed:a3:15:b4:e8:f0: f2:b3:d5:a4:71:90:a4:b0:1a:11:07:d0:3f:36:b7:e9:16:f5: a8:c6:bf:f8:d8:f2:db:e0:1b:d8:27:9e:93:f0:bc:68:cd:cb: b8:0b:51:1f:34:1d:52:7d:be:b8:61:05:7d:21:72:d2:9c:b9: 45:84:ba:66:76:7e:bb:ae:ce:10:03:bb:e4:18:a0:7b:a2:78: c3:b1:3a:ea -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OEREMTExMC8GA1UEBRMoMDZENjJDN0E4NDA3NkUxQzY0OTQwNDA2MjU4OTE5RDY3 RDE1QUJFMTAeFw0yNDA1MTEwNTMwNThaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2M2YwMjkxLTNmNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0ie1MzODQ18gH/bF3kqBv6+Vi1mFBqxKXgTMondQeuhfVyGcFj7jIhBa0IvLB ARGEFJGIIwxANAJBDmtaqGP8gS4nFQp7OY0DS6Ahwdy64QMzME5ftWrLCNLnTEvt ayhLu2JHeQo/fIVn5PEToY8E+DwBqRrYFGuKGZKGIOTzSYKzskBwjKyMhhCttxWt CjKuKJ0drC6REl1OZaJM3NqyMSjS/57/ZG+56+YBf/CFtwiTHhzrRrddxmAFrAfN ziUIE/fktjxQ53CZTQ3X2sUkMn6SGZYZqJp2btvKMBdIlg+Jg1ytb0pbWf3cI723 +d5v+fkVObUWiwy5l5bMYxqVAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU1NexuMMe s9OVR0oS1e/kqLIruPQwHwYDVR0jBBgwFoAUBtYseoQHbhxklAQGJYkZ1n0Vq+Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REQxLzI1REQ1OUY4RTFD OTExRUVCRTFGNTA2OEM0RjlBRTAyL0J0WXNlb1FIYmh4a2xBUUdKWWtaMW4wVnEt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQnRZc2VvUUhiaHhrbEFRR0pZa1oxbjBWcS1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEREMS8yNURENTlGOEUxQzkxMUVFQkUxRjUwNjhDNEY5QUUwMi84MUQ3MDQ1QzBG NTUxMUVGQTU1RkM0NEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAcovhjANBAIAAjAHAwUAJAGJoDANBgkqhkiG9w0BAQsFAAOC AQEAg4yzvEH3jZCgm5cwVTKYkMXgWD8YQhnZUmcExetLwdldJ09urIGmDequiXxt Q8wmYeze9LMqgqOygZfuTohbMvCNsCyMpqpweWdRinpt8XAWbt+hF/kxIpjzFQT2 LkDJndX3fOMGJK4sMvm5F4rFjaivQM1jJfujjduFlHcEKHkoPKv/azTMiubvap08 xq++kvSXRDBnOYsNsj4rJ2S7Cm/4sHXAVO/NcBq8XMxV7aMVtOjw8rPVpHGQpLAa EQfQPza36Rb1qMa/+Njy2+Ab2Ceek/C8aM3LuAtRHzQdUn2+uGEFfSFy0py5RYS6 ZnZ+u67OEAO75Bige6J4w7E66g== -----END CERTIFICATE-----Generated at Wed Nov 27 06:13:44 2024 by rpki-client on console-ams.rpki-client.org