$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/75906378FC1F11ECAD09AF21C4F9AE02.roa File: 75906378FC1F11ECAD09AF21C4F9AE02.roa (raw, json) Hash identifier: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8= Subject key identifier: C3:DB:EA:0C:97:63:7C:85:2D:D6:0D:32:A1:5D:79:0B:12:8A:93:18 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 3428 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/75906378FC1F11ECAD09AF21C4F9AE02.roa Signing time: Fri 30 Aug 2024 15:20:58 +0000 ROA not before: Fri 30 Aug 2024 15:20:58 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 7468 IP address blocks: 116.214.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13352 (0x3428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Aug 30 15:20:58 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d1e35a-2ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:47:5f:ab:34:ff:b5:0a:db:1c:1e:1e:8a: c1:7e:2a:e3:cf:ff:79:37:78:29:e3:4c:0e:82:78: 1f:5f:1d:02:f6:76:7b:2b:88:5f:e9:02:50:82:f5: b5:62:2d:35:2d:95:15:69:09:56:9c:da:bc:6f:c0: 23:82:a5:79:22:f3:27:3a:5a:2a:7a:7c:c8:7a:91: 38:03:fd:b5:a1:56:cd:93:a1:38:1d:11:44:20:c7: 70:5d:93:8b:e3:a2:1a:dd:06:50:aa:06:31:b7:2b: c8:2c:fe:be:b8:79:87:5b:d9:56:60:e1:fd:16:ac: fe:cb:1c:74:96:bc:69:86:42:8b:8e:80:14:41:a0: 03:aa:80:44:61:2f:86:2c:ab:9a:f4:dd:43:bf:2b: e3:e1:0b:58:97:c6:d1:ff:83:19:bd:0c:85:bd:a0: 8e:86:c2:bc:1d:e6:af:36:26:1b:11:f8:6d:8f:e7: ce:5d:f2:2e:a9:ef:8a:b0:fe:7d:36:8e:8e:f8:e3: 10:7a:10:45:76:12:05:d4:ae:37:64:ae:e4:37:35: 2f:eb:b6:22:8c:c3:47:e4:67:8f:f8:c0:b7:e3:29: f1:41:77:c1:3f:b0:ca:61:3e:63:3e:74:38:93:fb: e0:26:fe:66:6f:26:84:6d:47:b2:91:fb:0f:ba:79: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DB:EA:0C:97:63:7C:85:2D:D6:0D:32:A1:5D:79:0B:12:8A:93:18 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/75906378FC1F11ECAD09AF21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.214.110.0/23 Signature Algorithm: sha256WithRSAEncryption 91:d6:89:17:69:d6:cd:64:76:07:d8:ad:1a:00:60:cf:6c:fa: ee:5b:17:78:4b:67:bd:ce:3a:35:cc:52:ca:01:b6:82:75:f3: 56:83:9a:03:57:34:63:c0:81:dd:59:97:31:8d:16:3f:a1:56: b1:a0:cb:6d:cb:42:af:c8:08:2a:84:24:cf:2a:ea:eb:81:5f: 04:82:db:34:fc:db:47:dc:e4:b3:98:af:1b:d7:2b:83:51:ad: 2f:95:0f:98:44:c8:dc:e2:7f:f2:19:fc:72:b2:17:31:75:d4: 8d:ed:a2:be:38:34:dd:2d:e0:b9:26:1a:b9:8e:a3:db:08:b5: 32:25:26:e2:a3:da:68:3a:2a:f9:58:19:76:c6:24:cd:7d:7e: 8e:47:ee:b1:cf:2e:fc:6b:b6:2c:5c:63:ce:ed:ec:76:95:5c: bb:56:43:9e:a0:c1:2f:9b:71:0e:bc:9a:33:8e:4c:a1:03:86: 8f:c4:82:bf:98:35:fb:b2:b5:01:09:c2:fa:ae:63:00:b5:86: 04:c5:6d:22:37:3e:fe:30:a4:e7:dd:5d:e9:56:dc:e5:09:10: fe:41:9f:8e:84:15:98:54:4f:c1:16:b4:84:9f:8d:22:13:46: 40:c2:af:9a:d7:98:78:84:b0:dc:2e:f8:d1:d5:e9:e7:21:25: c2:f7:7a:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjQwODMwMTUyMDU4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQxZTM1YS0yZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnh5HX6s0/7UK2xweHorBfirjz/95N3gp40wOgngfXx0C9nZ7K4hf6QJQgvW1 Yi01LZUVaQlWnNq8b8AjgqV5IvMnOloqenzIepE4A/21oVbNk6E4HRFEIMdwXZOL 46Ia3QZQqgYxtyvILP6+uHmHW9lWYOH9Fqz+yxx0lrxphkKLjoAUQaADqoBEYS+G LKua9N1Dvyvj4QtYl8bR/4MZvQyFvaCOhsK8HeavNiYbEfhtj+fOXfIuqe+KsP59 No6O+OMQehBFdhIF1K43ZK7kNzUv67YijMNH5GeP+MC34ynxQXfBP7DKYT5jPnQ4 k/vgJv5mbyaEbUeykfsPunkvPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMPb6gyX Y3yFLdYNMqFdeQsSipMYMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VBQTIvRDJBQjI5MkMxRDk5MTFFMkJBNTI5QTg2MDhCMDJDRDIvNzU5MDYzNzhG QzFGMTFFQ0FEMDlBRjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF01m4wDQYJKoZIhvcNAQELBQADggEBAJHWiRdp1s1kdgfY rRoAYM9s+u5bF3hLZ73OOjXMUsoBtoJ181aDmgNXNGPAgd1ZlzGNFj+hVrGgy23L Qq/ICCqEJM8q6uuBXwSC2zT820fc5LOYrxvXK4NRrS+VD5hEyNzif/IZ/HKyFzF1 1I3tor44NN0t4LkmGrmOo9sItTIlJuKj2mg6KvlYGXbGJM19fo5H7rHPLvxrtixc Y87t7HaVXLtWQ56gwS+bcQ68mjOOTKEDho/Egr+YNfuytQEJwvquYwC1hgTFbSI3 Pv4wpOfdXelW3OUJEP5Bn46EFZhUT8EWtISfjSITRkDCr5rXmHiEsNwu+NHV6ech JcL3ekY= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:51 2024 by rpki-client on console-fra.rpki-client.org