$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/4E8DA224547711EF9EDD014DC4F9AE02.roa File: 4E8DA224547711EF9EDD014DC4F9AE02.roa (raw, json) Hash identifier: befFFpozyGTTud2Z8wsHoOu5TcgcBDvFYmEhZzj+W4I= Subject key identifier: AE:77:13:3A:80:22:3C:3C:30:B6:BE:61:8E:1A:CF:D7:A4:D0:7F:CA Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Certificate serial: 0263 Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/4E8DA224547711EF9EDD014DC4F9AE02.roa Signing time: Wed 07 Aug 2024 04:41:27 +0000 ROA not before: Wed 07 Aug 2024 04:41:27 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 18390 IP address blocks: 202.87.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 01:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Validity Not Before: Aug 7 04:41:27 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66b2faf6-16b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ca:87:9d:7e:76:8a:07:9e:dc:4a:20:1f:39: b8:32:af:17:21:4d:ec:c5:ee:aa:36:b0:e0:3f:86: 2a:82:54:22:18:fd:a6:f8:bf:26:e6:3d:8f:25:2f: 50:cd:ba:50:c4:7a:90:c3:11:ab:70:63:0a:5e:3d: 0e:fe:5c:e7:19:85:d8:c4:91:ab:c7:11:78:b5:c8: 41:82:15:18:ad:32:29:14:a0:cb:0e:94:8d:34:5a: 8b:ef:17:52:97:96:06:0b:8b:ee:d1:55:9d:5c:47: 79:d5:7f:65:fc:ad:34:6c:a6:49:77:0c:0e:e8:06: 5b:1b:b3:e2:47:4c:f0:5c:64:74:a1:57:71:29:fb: cd:06:0e:62:a1:e7:5b:ff:19:a9:20:60:2d:75:0f: 14:bf:6b:dd:06:aa:8e:61:c1:b7:02:23:57:90:63: e3:63:b7:98:67:71:02:a4:8d:ef:a2:8a:d5:be:68: 86:bf:c9:cc:f7:fd:38:0e:42:87:b3:b7:ab:2a:75: ea:83:a5:75:7f:dc:58:18:04:27:44:02:f8:e0:7f: f9:ca:2b:39:7f:67:58:6d:45:dd:13:7f:5d:e3:34: 05:80:94:8e:8d:8a:bb:e3:74:04:3c:e3:52:32:9e: e2:77:29:b7:1c:77:e5:c2:d2:55:16:67:75:06:32: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:77:13:3A:80:22:3C:3C:30:B6:BE:61:8E:1A:CF:D7:A4:D0:7F:CA X509v3 Authority Key Identifier: keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/4E8DA224547711EF9EDD014DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.87.160.0/20 Signature Algorithm: sha256WithRSAEncryption 23:37:4f:1e:cc:84:6d:f8:0e:bd:ab:66:44:c8:9d:4f:0e:e3: f6:4e:c3:2c:07:20:58:c5:a4:11:af:b3:da:84:38:48:0b:85: e2:c8:28:45:b0:4f:f1:16:18:3d:54:c6:ce:e6:83:ec:8b:bf: ea:1c:88:f5:c8:d0:bb:f0:99:16:b7:7d:47:ec:4a:11:6a:0e: 96:84:dd:89:c6:f1:41:31:b0:4f:0a:70:73:1b:3c:a9:54:53: 89:b0:31:35:9b:70:d2:57:85:5a:18:1a:b2:8d:54:0e:a5:8b: f5:a4:3f:94:25:53:6f:db:97:02:95:34:20:f8:ce:89:6a:30: 71:6d:eb:f8:27:be:99:7f:da:bf:53:3d:c2:35:19:ef:ee:5d: 6d:63:6f:c6:6a:39:a3:67:07:0d:75:1a:f4:c3:de:3a:b7:c2: 03:b1:3d:dd:da:49:7f:2e:d1:ff:e4:51:5b:1b:a0:ec:34:21: 07:ee:f8:d9:d1:8a:b8:c2:dd:07:b6:c3:3f:95:b1:3b:8d:cf: 22:04:b9:ad:e6:ab:5b:d3:65:b1:df:3b:04:76:c8:08:b0:79: 04:ff:90:1e:62:68:6a:61:c6:a7:9c:ad:09:b8:40:a4:dc:5f: ff:42:82:48:d0:2b:fb:d1:69:fa:a9:24:a5:90:82:88:4d:40: e9:5e:60:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENDMxMTAvBgNVBAUTKEZDNjg4RkI5NUNDNTIwNUUwM0U3MEE2MDVDOTk0QzVE NDk1QUIzMzIwHhcNMjQwODA3MDQ0MTI3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyZmFmNi0xNmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sqHnX52igee3EogHzm4Mq8XIU3sxe6qNrDgP4YqglQiGP2m+L8m5j2PJS9Q zbpQxHqQwxGrcGMKXj0O/lznGYXYxJGrxxF4tchBghUYrTIpFKDLDpSNNFqL7xdS l5YGC4vu0VWdXEd51X9l/K00bKZJdwwO6AZbG7PiR0zwXGR0oVdxKfvNBg5ioedb /xmpIGAtdQ8Uv2vdBqqOYcG3AiNXkGPjY7eYZ3ECpI3voorVvmiGv8nM9/04DkKH s7erKnXqg6V1f9xYGAQnRAL44H/5yis5f2dYbUXdE39d4zQFgJSOjYq743QEPONS Mp7idym3HHflwtJVFmd1BjLb+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFK53EzqA Ijw8MLa+YY4az9ek0H/KMB8GA1UdIwQYMBaAFPxoj7lcxSBeA+cKYFyZTF1JWrMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ0My83RDk5ODA3NkRD RDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklGNEQ1d3BnWEpsTVhVbGFz ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HaVB1VnpGSUY0RDV3cGdYSmxNWFVsYXN6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZENDMvN0Q5OTgwNzZEQ0QxMTFFQ0EzQUI5RDM2QzRGOUFFMDIvNEU4REEyMjQ1 NDc3MTFFRjlFREQwMTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATKV6AwDQYJKoZIhvcNAQELBQADggEBACM3Tx7MhG34Dr2r ZkTInU8O4/ZOwywHIFjFpBGvs9qEOEgLheLIKEWwT/EWGD1Uxs7mg+yLv+ociPXI 0LvwmRa3fUfsShFqDpaE3YnG8UExsE8KcHMbPKlUU4mwMTWbcNJXhVoYGrKNVA6l i/WkP5QlU2/blwKVNCD4zolqMHFt6/gnvpl/2r9TPcI1Ge/uXW1jb8ZqOaNnBw11 GvTD3jq3wgOxPd3aSX8u0f/kUVsboOw0IQfu+NnRirjC3Qe2wz+VsTuNzyIEua3m q1vTZbHfOwR2yAiweQT/kB5iaGphxqecrQm4QKTcX/9CgkjQK/vRafqpJKWQgohN QOleYAE= -----END CERTIFICATE-----Generated at Wed Nov 27 02:04:25 2024 by rpki-client on console-ams.rpki-client.org