$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4FCF92C716B11ED9F349A49C4F9AE02.roa File: D4FCF92C716B11ED9F349A49C4F9AE02.roa (raw, json) Hash identifier: UuOQPjOHW3te4OiVFYw+HXL7r4q+xv2PoIFABxSLF70= Subject key identifier: 44:1E:51:DD:49:67:F4:42:64:39:EF:3C:7D:0F:AC:EC:A1:71:C9:C3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 04F4 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4FCF92C716B11ED9F349A49C4F9AE02.roa Signing time: Sun 27 Oct 2024 00:36:23 +0000 ROA not before: Sun 27 Oct 2024 00:36:23 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 65004 IP address blocks: 122.15.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Oct 27 00:36:23 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=671d8b07-f65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:d7:6f:a1:db:a5:dc:69:93:fd:c0:54:d8: c7:62:27:b2:aa:36:f9:de:67:fa:31:cf:c9:dc:0b: a9:0b:a3:18:c9:aa:ee:f0:e9:d3:75:02:0d:36:54: b2:01:f6:b1:b0:d0:dd:20:24:a0:1a:64:15:d2:c4: 09:41:24:80:9b:da:28:88:32:3e:b5:85:bc:11:a8: ab:16:1d:84:34:db:36:03:3d:48:ad:c4:d3:f9:76: a9:b4:fb:05:24:fd:2e:cf:b3:28:ff:d6:63:01:3f: 81:e5:ce:40:6d:d8:3f:b6:bc:c1:75:aa:9a:86:31: 20:1f:4e:51:e8:b4:5a:b2:86:0a:29:7a:ec:9b:a6: e2:98:99:bf:f0:c9:fc:c3:83:76:78:85:a2:ec:bc: 9c:11:4e:72:9d:c6:a2:ca:c3:e2:b4:e7:4e:c7:6a: ba:31:72:83:1b:6b:22:21:c3:f2:90:66:44:2f:01: e6:a5:86:fd:7e:dc:1b:15:82:c0:db:d3:6d:bf:c7: ab:7d:ca:96:7e:a9:c1:23:48:a2:2c:c9:9d:c6:a1: 33:ff:f7:6a:c5:e1:bc:61:7e:91:cc:d3:f3:c6:ca: af:6c:15:41:cd:4f:7b:e9:35:2a:cb:1f:12:0f:7e: a0:38:52:d0:45:c7:84:ca:cd:35:9a:eb:ea:43:42: 0e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1E:51:DD:49:67:F4:42:64:39:EF:3C:7D:0F:AC:EC:A1:71:C9:C3 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4FCF92C716B11ED9F349A49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.15.208.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:8e:db:b3:b5:9f:7a:b4:dc:fb:5f:27:9d:8e:4a:1a:90:9c: 21:cf:f2:d7:af:55:14:64:42:10:fe:f0:1d:7a:1b:2c:49:50: 0b:82:4a:64:2a:ca:b0:ea:1d:9d:bc:9e:78:26:51:f6:ac:dc: 61:27:89:e8:5c:58:27:97:91:d8:8e:b1:fa:dd:e2:85:41:80: f6:12:dd:9a:d0:85:7a:0b:7c:88:19:3c:d0:09:be:68:d1:4c: 3c:0c:e8:20:4b:1f:5f:5d:cb:31:c5:dd:35:f7:f1:8b:a5:0c: e1:3f:66:59:4d:f4:77:30:cc:52:a1:46:55:65:f4:59:a7:6f: 5e:ff:0d:16:00:ec:1e:36:fe:62:3e:64:4e:8c:04:a6:35:04: 08:1f:2c:d5:d0:24:d9:21:3d:3a:49:2f:f0:c0:4f:20:2b:a2: 63:7d:41:c6:0e:ad:b4:62:e8:95:ed:6c:0a:3f:fe:39:df:f9: 54:08:b6:4e:a3:dc:3d:5d:5a:50:cc:f5:5d:a6:53:7f:f2:21: 36:79:71:55:2a:0a:40:95:b4:e1:ca:39:24:f4:8a:ee:fb:4c: 00:10:92:2d:e7:42:8e:d2:d8:d0:f0:b0:4b:c5:d1:db:5a:66: 61:e0:de:89:c5:be:71:1d:71:42:df:90:1d:a8:7f:40:2f:41: 41:45:b6:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjQxMDI3MDAzNjIzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFkOGIwNy1mNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnbXb6Hbpdxpk/3AVNjHYieyqjb53mf6Mc/J3AupC6MYyaru8OnTdQINNlSy AfaxsNDdICSgGmQV0sQJQSSAm9ooiDI+tYW8EairFh2ENNs2Az1IrcTT+XaptPsF JP0uz7Mo/9ZjAT+B5c5Abdg/trzBdaqahjEgH05R6LRasoYKKXrsm6bimJm/8Mn8 w4N2eIWi7LycEU5yncaiysPitOdOx2q6MXKDG2siIcPykGZELwHmpYb9ftwbFYLA 29Ntv8erfcqWfqnBI0iiLMmdxqEz//dqxeG8YX6RzNPzxsqvbBVBzU976TUqyx8S D36gOFLQRceEys01muvqQ0IOFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEQeUd1J Z/RCZDnvPH0PrOyhccnDMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvRDRGQ0Y5MkM3 MTZCMTFFRDlGMzQ5QTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB6D9AwDQYJKoZIhvcNAQELBQADggEBAA6O27O1n3q03Ptf J52OShqQnCHP8tevVRRkQhD+8B16GyxJUAuCSmQqyrDqHZ28nngmUfas3GEniehc WCeXkdiOsfrd4oVBgPYS3ZrQhXoLfIgZPNAJvmjRTDwM6CBLH19dyzHF3TX38Yul DOE/ZllN9HcwzFKhRlVl9Fmnb17/DRYA7B42/mI+ZE6MBKY1BAgfLNXQJNkhPTpJ L/DATyAromN9QcYOrbRi6JXtbAo//jnf+VQItk6j3D1dWlDM9V2mU3/yITZ5cVUq CkCVtOHKOST0iu77TAAQki3nQo7S2NDwsEvF0dtaZmHg3onFvnEdcULfkB2of0Av QUFFtjw= -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:32 2024 by rpki-client on console-fra.rpki-client.org