$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa File: 0D0517EE716911EDA03D4A50C4F9AE02.roa (raw, json) Hash identifier: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4= Subject key identifier: 61:D6:AB:EC:83:A7:6A:E5:C4:79:B2:7C:27:63:4F:36:31:0D:DF:1E Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 04EE Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa Signing time: Sun 27 Oct 2024 00:36:18 +0000 ROA not before: Sun 27 Oct 2024 00:36:18 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 23664 IP address blocks: 118.185.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Oct 27 00:36:18 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=671d8b02-1b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:99:92:a8:69:a8:c6:c9:f6:c3:66:22:0b: 81:45:fa:46:41:55:4d:15:82:4a:f0:73:3d:6e:77: 47:d4:42:3d:e5:72:39:65:ac:dc:3e:db:4e:17:b1: 00:49:26:8e:1d:e6:49:34:cf:cc:e6:40:d7:07:de: 9b:17:3f:bc:9a:a9:8c:bf:b0:17:53:98:50:a8:64: f7:d3:4b:ff:5d:33:1e:42:34:98:ae:eb:4f:47:47: 90:38:9a:58:68:66:6c:4a:f4:12:ac:4b:fc:49:6a: 9d:63:65:4a:df:a9:ba:30:be:a9:32:67:13:6e:b3: 6b:e0:82:f7:60:bc:c7:a1:e7:f4:71:d5:bc:98:30: e5:3d:b2:5f:5f:e9:79:71:42:eb:1c:be:6c:a0:e3: ba:f8:07:a6:ff:ef:54:fc:01:bf:21:69:8f:ff:33: 8a:6f:a1:ac:4c:a7:a5:2f:32:d7:3d:19:f9:09:1e: 68:fd:c6:23:26:88:15:1c:87:5f:18:bb:91:f1:e2: d5:79:ee:d5:c3:b1:cc:3c:93:50:ff:d6:45:4c:ef: eb:09:54:84:ea:38:32:01:5b:8f:6d:33:67:35:4d: b2:f5:8b:3d:2a:fb:47:e8:3e:2f:68:38:3a:e5:10: 23:36:be:68:cd:58:01:3c:50:91:03:9b:b4:c7:00: 21:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D6:AB:EC:83:A7:6A:E5:C4:79:B2:7C:27:63:4F:36:31:0D:DF:1E X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.185.96.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:23:6c:12:56:d8:2d:17:8d:5f:a6:26:af:55:41:36:7e:be: 36:e3:9e:39:68:ac:90:d1:be:37:93:04:8b:51:55:9c:d7:44: 06:01:1b:c7:88:bc:3e:40:ae:59:11:97:d5:54:28:0b:e8:ff: 8b:e3:b5:77:c3:cb:c5:be:6b:66:c0:0d:41:12:cc:07:8b:5d: 8f:32:56:3b:4e:9a:4a:7b:05:84:97:42:15:5d:73:0e:93:1d: 74:8a:f8:1b:2c:1f:18:b0:90:ce:a0:66:6d:67:6c:b5:5b:3b: da:c2:b2:87:80:b6:cc:5e:6a:8e:0f:9b:b2:af:87:73:f6:e1: 20:0b:b2:32:58:fc:ce:b9:28:4d:47:7d:57:99:bf:11:00:35: 7e:dc:29:ba:88:5d:f8:6f:01:e3:68:b1:6a:ce:36:b1:01:e4: 16:fe:a9:67:b9:9d:20:0d:17:ad:ae:0a:9a:e8:08:55:d2:2e: 6c:a4:8b:9c:1f:61:d1:0e:56:97:59:a9:a9:c9:a5:90:5d:e1: 95:f9:81:f0:c8:d6:d8:e6:aa:b2:39:3e:c7:0e:d6:fe:62:04: 3d:e9:17:02:b6:82:cc:0b:f2:74:a7:cf:24:1c:46:8b:20:d5: 9b:dc:18:d0:31:c3:7e:1a:3f:69:f2:a7:d4:69:a0:59:0a:8e: 16:69:e4:e6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjQxMDI3MDAzNjE4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFkOGIwMi0xYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRiZkqhpqMbJ9sNmIguBRfpGQVVNFYJK8HM9bndH1EI95XI5ZazcPttOF7EA SSaOHeZJNM/M5kDXB96bFz+8mqmMv7AXU5hQqGT300v/XTMeQjSYrutPR0eQOJpY aGZsSvQSrEv8SWqdY2VK36m6ML6pMmcTbrNr4IL3YLzHoef0cdW8mDDlPbJfX+l5 cULrHL5soOO6+Aem/+9U/AG/IWmP/zOKb6GsTKelLzLXPRn5CR5o/cYjJogVHIdf GLuR8eLVee7Vw7HMPJNQ/9ZFTO/rCVSE6jgyAVuPbTNnNU2y9Ys9KvtH6D4vaDg6 5RAjNr5ozVgBPFCRA5u0xwAhcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGHWq+yD p2rlxHmyfCdjTzYxDd8eMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMEQwNTE3RUU3 MTY5MTFFREEwM0Q0QTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB2uWAwDQYJKoZIhvcNAQELBQADggEBAJ8jbBJW2C0XjV+m Jq9VQTZ+vjbjnjlorJDRvjeTBItRVZzXRAYBG8eIvD5ArlkRl9VUKAvo/4vjtXfD y8W+a2bADUESzAeLXY8yVjtOmkp7BYSXQhVdcw6THXSK+BssHxiwkM6gZm1nbLVb O9rCsoeAtsxeao4Pm7Kvh3P24SALsjJY/M65KE1HfVeZvxEANX7cKbqIXfhvAeNo sWrONrEB5Bb+qWe5nSANF62uCproCFXSLmyki5wfYdEOVpdZqanJpZBd4ZX5gfDI 1tjmqrI5PscO1v5iBD3pFwK2gswL8nSnzyQcRosg1ZvcGNAxw34aP2nyp9RpoFkK jhZp5OY= -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:05 2024 by rpki-client on console-ams.rpki-client.org