$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/E248BDA63C5211EF94184A20C4F9AE02.roa File: E248BDA63C5211EF94184A20C4F9AE02.roa (raw, json) Hash identifier: Gw3lyprk2wHQfVI8gyQDjj5muddHnRtxMvJMvAySrdk= Subject key identifier: 61:FF:4F:1E:A3:CE:EF:B5:54:D3:3C:8B:57:40:6A:B4:E9:6C:57:BA Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0373 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/E248BDA63C5211EF94184A20C4F9AE02.roa Signing time: Sun 07 Jul 2024 11:20:15 +0000 ROA not before: Sun 07 Jul 2024 11:20:15 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136454 IP address blocks: 116.204.241.0/24 maxlen: 24 2400:e640:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Jul 7 11:20:15 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=668a79ef-e7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:13:a1:72:69:a7:55:59:b4:45:8d:d2:83:6f: 0e:03:ab:fd:5d:5e:24:41:f0:0f:75:ea:54:7d:47: 3b:09:1d:17:38:e3:fd:b4:e8:ec:45:ae:a4:9f:9d: 91:6e:03:20:08:24:8b:84:84:8e:28:36:44:c4:0e: 20:2a:f6:5f:16:c5:a2:9c:e1:51:38:7e:eb:df:7a: 54:1d:51:af:1a:e2:7d:26:f3:e7:b5:9e:3e:9d:81: ea:56:29:07:3b:71:2c:b1:12:0b:28:03:85:11:d7: 0f:24:b2:24:06:3a:30:cc:b6:a1:63:22:2e:b4:eb: f8:6f:92:62:98:06:03:dc:2e:84:f3:b3:39:ff:e7: 95:ef:d7:8d:51:5f:d0:c2:5e:57:9c:33:08:ee:d8: b8:e7:64:f8:a1:e9:ef:28:e3:b7:ac:90:d3:7b:59: fa:d1:0c:82:a1:b7:6a:8e:6e:7d:4a:74:c9:bf:f2: 02:21:b3:c2:79:5b:e2:89:ab:38:66:1b:53:70:85: 5a:37:8c:a4:88:64:3c:a3:30:06:d7:2c:4b:77:1d: 02:90:07:3a:2f:19:7e:60:9a:29:94:61:64:86:8c: 52:67:2a:55:2d:f5:9f:e9:82:ca:77:62:58:72:a4: 04:b6:d6:3a:c1:40:26:80:c8:dc:e9:ee:74:66:f1: 82:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FF:4F:1E:A3:CE:EF:B5:54:D3:3C:8B:57:40:6A:B4:E9:6C:57:BA X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/E248BDA63C5211EF94184A20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.204.241.0/24 IPv6: 2400:e640:1000::/36 Signature Algorithm: sha256WithRSAEncryption 59:b2:71:59:98:c8:06:ae:a0:59:78:d8:cb:1b:e9:9d:4c:93: fe:7c:18:3a:49:52:0c:4e:bc:78:03:87:0d:f8:e6:70:a1:70: d1:43:28:20:fc:c0:81:b4:08:29:55:35:4a:6d:2f:b8:f4:40: 07:2e:49:1b:67:93:3b:50:64:ab:7a:97:0a:62:1c:54:4e:1b: d3:81:71:62:f6:b7:dd:6a:67:d8:14:c2:83:09:46:0b:25:4b: 4c:0e:ce:15:b6:b1:af:1b:c1:91:09:50:f4:e4:d6:a6:b2:ed: 6f:a7:22:a4:8d:39:b7:b6:c0:f2:a0:77:54:cb:fa:c3:96:fb: 32:ec:13:33:20:81:65:82:2e:84:d3:f6:4c:47:42:48:2f:f0: 3d:ea:ae:03:33:2e:3d:0e:0f:bf:c4:95:78:e2:49:de:b8:d2: 75:50:84:56:d7:89:c8:b5:01:5b:a7:7d:56:a4:8c:4a:0a:97: cb:10:33:e7:ed:08:a9:bb:ce:65:fd:4f:d4:cd:83:ad:f5:b1: be:31:b9:92:56:b4:e2:22:c8:a2:6c:98:31:79:7b:c6:9c:74: b4:3f:82:6b:e8:fe:03:05:f8:ff:52:a6:6a:64:27:3e:d4:39: ff:74:55:bb:9f:67:bd:19:c0:db:6c:8c:ff:1c:28:81:c4:2c: 87:55:b9:6e -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjQwNzA3MTEyMDE1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhhNzllZi1lN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xOhcmmnVVm0RY3Sg28OA6v9XV4kQfAPdepUfUc7CR0XOOP9tOjsRa6kn52R bgMgCCSLhISOKDZExA4gKvZfFsWinOFROH7r33pUHVGvGuJ9JvPntZ4+nYHqVikH O3EssRILKAOFEdcPJLIkBjowzLahYyIutOv4b5JimAYD3C6E87M5/+eV79eNUV/Q wl5XnDMI7ti452T4oenvKOO3rJDTe1n60QyCobdqjm59SnTJv/ICIbPCeVviias4 ZhtTcIVaN4ykiGQ8ozAG1yxLdx0CkAc6Lxl+YJoplGFkhoxSZypVLfWf6YLKd2JY cqQEttY6wUAmgMjc6e50ZvGCKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGH/Tx6j zu+1VNM8i1dAarTpbFe6MB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvRTI0OEJEQTYz QzUyMTFFRjk0MTg0QTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAB0zPEwDgQCAAIwCAMGBCQA5kAQMA0GCSqGSIb3DQEBCwUA A4IBAQBZsnFZmMgGrqBZeNjLG+mdTJP+fBg6SVIMTrx4A4cN+OZwoXDRQygg/MCB tAgpVTVKbS+49EAHLkkbZ5M7UGSrepcKYhxUThvTgXFi9rfdamfYFMKDCUYLJUtM Ds4VtrGvG8GRCVD05Namsu1vpyKkjTm3tsDyoHdUy/rDlvsy7BMzIIFlgi6E0/ZM R0JIL/A96q4DMy49Dg+/xJV44kneuNJ1UIRW14nItQFbp31WpIxKCpfLEDPn7Qip u85l/U/UzYOt9bG+MbmSVrTiIsiibJgxeXvGnHS0P4Jr6P4DBfj/UqZqZCc+1Dn/ dFW7n2e9GcDbbIz/HCiBxCyHVblu -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org