$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/5F22E1129B3011EF952F2762C4F9AE02.roa File: 5F22E1129B3011EF952F2762C4F9AE02.roa (raw, json) Hash identifier: GzI1DKhtNKvZlRIctznDCQywZe9adFXYq+KIp89kCD4= Subject key identifier: A9:52:9E:05:5B:94:0A:E1:A9:0B:34:41:79:B8:7D:C6:BA:DC:A7:B7 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 34B0 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/5F22E1129B3011EF952F2762C4F9AE02.roa Signing time: Tue 05 Nov 2024 04:46:32 +0000 ROA not before: Tue 05 Nov 2024 04:46:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 17827 IP address blocks: 182.52.48.0/24 maxlen: 24 182.52.54.0/24 maxlen: 24 2001:ec0:8ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Nov 5 04:46:32 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6729a328-2c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:99:71:60:dc:af:70:82:7d:45:47:0e:ed: 87:e0:90:0c:8d:d3:cc:6e:3c:67:6f:2d:d0:c1:30: e2:f1:f9:3c:eb:50:2d:c8:db:e3:2a:fb:da:f5:10: 4f:12:2b:e4:d5:92:63:85:8b:54:4f:7b:41:49:64: 53:ba:62:7c:aa:15:57:2a:b4:06:ab:0a:b2:ec:88: 6d:47:85:b2:b8:40:6c:0e:48:4f:e8:be:c9:fb:eb: b2:42:6e:74:d3:a2:18:24:e7:6d:92:3f:02:0c:dc: d0:79:cf:2c:6a:a1:25:41:a4:5c:fa:b6:cf:46:d3: dd:f0:94:ee:17:7b:b9:dd:0a:42:95:5f:46:ed:f6: 4c:fe:49:52:96:0a:ff:ce:34:40:0d:1c:02:dc:25: f9:20:69:cf:da:cc:fc:1b:9a:d7:75:d9:6a:6e:a2: f2:5d:00:98:82:ff:22:69:4b:12:f3:fc:f6:d4:ee: 3b:48:3f:37:0c:e0:fd:40:6d:19:0a:7d:66:a8:08: 16:38:de:3b:48:e6:b6:b3:5f:c5:ed:35:e3:60:2a: 0b:18:e2:11:f8:1c:de:f2:52:0c:ae:91:eb:d2:6b: 5f:ce:b0:4d:47:17:d6:1c:df:d5:ec:c3:c5:af:67: b5:55:0f:80:ad:f5:5b:84:7e:94:1b:bb:98:81:26: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:52:9E:05:5B:94:0A:E1:A9:0B:34:41:79:B8:7D:C6:BA:DC:A7:B7 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/5F22E1129B3011EF952F2762C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.52.48.0/24 182.52.54.0/24 IPv6: 2001:ec0:8ab::/48 Signature Algorithm: sha256WithRSAEncryption 63:5d:ff:2d:1c:73:88:f7:4f:31:24:b9:d6:8b:74:77:00:12: b9:1b:6b:cc:a0:d4:12:c6:d0:82:b2:d5:69:d3:28:b4:16:1c: b5:6f:d2:ae:09:e5:d0:15:e0:c0:47:77:65:12:98:90:30:51: 28:3b:e4:44:f2:fa:36:c6:60:2f:c3:38:b0:d0:32:71:a3:87: f5:69:26:31:5b:c8:99:75:13:77:16:1e:ce:b8:05:07:a3:64: ee:d7:05:26:43:1a:ed:66:54:d8:d8:02:ac:14:83:7c:1c:57: 8b:e1:a0:f7:4e:09:f4:d3:64:2d:e3:cf:de:4e:0c:23:b1:84: f8:b7:b9:f2:ac:7a:b6:ba:d3:7f:e1:d9:d6:b9:53:e0:50:1c: df:9d:83:ff:31:87:af:5a:14:c3:e7:53:bd:27:82:be:ad:6a: 97:98:73:68:dc:26:db:da:79:5a:39:ee:37:05:54:5a:69:bc: 4c:a0:22:d2:d9:2d:fe:cd:36:df:59:1f:63:25:56:3f:a7:31: 13:03:61:4b:85:2d:fb:11:e4:10:59:75:a3:75:7d:2a:2b:d0: ba:b7:10:7d:6a:89:03:e0:2f:d1:e6:dd:c0:9c:d6:d6:94:c5: a7:33:fc:e8:ac:5c:db:82:df:d6:5e:4f:1f:52:89:6d:25:07: ef:21:2c:3c -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjQxMTA1MDQ0NjMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI5YTMyOC0yYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy+ZcWDcr3CCfUVHDu2H4JAMjdPMbjxnby3QwTDi8fk861AtyNvjKvva9RBP Eivk1ZJjhYtUT3tBSWRTumJ8qhVXKrQGqwqy7IhtR4WyuEBsDkhP6L7J++uyQm50 06IYJOdtkj8CDNzQec8saqElQaRc+rbPRtPd8JTuF3u53QpClV9G7fZM/klSlgr/ zjRADRwC3CX5IGnP2sz8G5rXddlqbqLyXQCYgv8iaUsS8/z21O47SD83DOD9QG0Z Cn1mqAgWON47SOa2s1/F7TXjYCoLGOIR+Bze8lIMrpHr0mtfzrBNRxfWHN/V7MPF r2e1VQ+ArfVbhH6UG7uYgSaqkwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKlSngVb lArhqQs0QXm4fca63Ke3MB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvNUYyMkUxMTI5 QjMwMTFFRjk1MkYyNzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAC2NDADBAC2NDYwDwQCAAIwCQMHACABDsAIqzANBgkqhkiG 9w0BAQsFAAOCAQEAY13/LRxziPdPMSS51ot0dwASuRtrzKDUEsbQgrLVadMotBYc tW/Srgnl0BXgwEd3ZRKYkDBRKDvkRPL6NsZgL8M4sNAycaOH9WkmMVvImXUTdxYe zrgFB6Nk7tcFJkMa7WZU2NgCrBSDfBxXi+Gg904J9NNkLePP3k4MI7GE+Le58qx6 trrTf+HZ1rlT4FAc352D/zGHr1oUw+dTvSeCvq1ql5hzaNwm29p5WjnuNwVUWmm8 TKAi0tkt/s0231kfYyVWP6cxEwNhS4Ut+xHkEFl1o3V9KivQurcQfWqJA+Av0ebd wJzW1pTFpzP86Kxc24Lf1l5PH1KJbSUH7yEsPA== -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:18 2024 by rpki-client on console-ams.rpki-client.org