$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa File: 964EB3D49A5F11EC9124627BC4F9AE02.roa (raw, json) Hash identifier: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE= Subject key identifier: CB:F1:A5:16:04:34:FE:EB:B0:0B:89:16:49:C1:55:2C:24:18:D7:42 Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 030F Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa Signing time: Wed 07 Aug 2024 02:24:07 +0000 ROA not before: Wed 07 Aug 2024 02:24:07 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 4049 IP address blocks: 202.37.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Aug 7 02:24:07 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b2dac7-e132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:41:db:72:24:2b:a7:b1:52:e5:aa:c3:b7: 1a:cf:34:a2:07:34:57:d2:d5:d8:de:6c:44:6c:db: a9:25:9d:6f:8b:c3:f3:10:14:6e:59:47:ab:c3:80: 55:c6:1c:d8:d1:f7:01:81:2d:77:df:6f:b0:26:59: 59:3c:ce:3f:34:f5:a5:56:ad:4b:62:fc:3f:e1:25: f0:80:9f:7e:ba:64:19:a3:b1:c1:61:55:a7:ae:40: 7d:25:a3:01:6a:79:ee:25:cd:d3:14:8b:be:db:7b: b3:91:26:e2:31:85:0b:a2:8d:99:03:b1:1d:76:a8: e8:09:1e:fc:b2:92:ff:52:52:91:2b:21:4a:08:fa: 93:d1:ca:85:c6:57:07:71:1a:02:a5:f9:fb:47:21: a8:10:7d:22:f5:43:8d:a6:e0:be:28:a0:15:7f:79: b0:49:79:4c:21:fd:ca:ce:85:f4:8e:ca:1d:eb:8f: 7b:df:04:9a:95:eb:ce:f6:a1:32:08:d6:6e:6b:80: 66:d8:9f:51:ca:50:38:80:e4:06:34:9b:70:1c:99: 4c:12:29:d1:df:5a:7b:e1:7c:ba:9d:43:87:6a:34: d9:0d:ee:61:36:59:1c:71:a8:1c:ec:44:e1:20:0c: 07:7d:8f:58:c8:a5:22:3d:22:df:21:58:02:98:7c: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F1:A5:16:04:34:FE:EB:B0:0B:89:16:49:C1:55:2C:24:18:D7:42 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.54.0/24 Signature Algorithm: sha256WithRSAEncryption c8:43:48:27:b0:91:59:f0:b1:ba:df:fc:1e:17:df:f9:2f:cf: 96:34:08:18:20:f3:ba:95:75:13:4a:24:5d:0e:b3:02:bb:d9: 46:b9:a1:a5:39:0f:03:27:02:20:98:86:a7:6c:22:58:43:3c: 4d:e3:4f:d9:18:52:94:34:f4:58:32:90:ef:4d:9f:34:96:c1: b1:55:7e:99:68:67:10:e1:ec:1c:03:23:f4:e1:9f:8a:65:a7: 6d:9a:56:4c:2b:bb:14:57:64:c7:af:e5:01:00:c7:e7:6a:22: 72:37:8d:b9:71:ca:a8:65:96:44:2b:48:ed:40:3d:b8:7f:82: ac:76:17:45:41:98:60:59:b5:4f:6e:44:63:71:e3:fc:ff:42: 10:69:6e:06:ce:21:55:23:cc:68:fd:b3:cb:e5:42:8b:04:f8: 35:87:b7:34:f7:c0:e7:02:a8:12:b9:37:ae:b8:0b:9d:20:1b: 3f:7c:d9:41:81:66:33:a5:99:cc:fc:bc:44:5b:c9:f2:9d:8f: 96:a8:46:e7:a0:08:0f:a8:36:cb:bf:13:47:91:79:3f:3b:43: 91:4f:3d:f9:34:70:8f:37:59:8a:d5:07:fa:06:0a:ba:7e:3b: 77:5b:80:df:1e:f7:5f:e1:74:4d:cf:05:3a:ae:2e:e2:47:95: b1:08:40:8f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjQwODA3MDIyNDA3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyZGFjNy1lMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJVB23IkK6exUuWqw7cazzSiBzRX0tXY3mxEbNupJZ1vi8PzEBRuWUerw4BV xhzY0fcBgS1332+wJllZPM4/NPWlVq1LYvw/4SXwgJ9+umQZo7HBYVWnrkB9JaMB annuJc3TFIu+23uzkSbiMYULoo2ZA7EddqjoCR78spL/UlKRKyFKCPqT0cqFxlcH cRoCpfn7RyGoEH0i9UONpuC+KKAVf3mwSXlMIf3KzoX0jsod64973wSalevO9qEy CNZua4Bm2J9RylA4gOQGNJtwHJlMEinR31p74Xy6nUOHajTZDe5hNlkccagc7ETh IAwHfY9YyKUiPSLfIVgCmHyoTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMvxpRYE NP7rsAuJFknBVSwkGNdCMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDFDMDIvQkQ3RjJGNTY5QTAwMTFFQzgzNkJDOTU4QzRGOUFFMDIvOTY0RUIzRDQ5 QTVGMTFFQzkxMjQ2MjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKJTYwDQYJKoZIhvcNAQELBQADggEBAMhDSCewkVnwsbrf /B4X3/kvz5Y0CBgg87qVdRNKJF0OswK72Ua5oaU5DwMnAiCYhqdsIlhDPE3jT9kY UpQ09FgykO9NnzSWwbFVfploZxDh7BwDI/Thn4plp22aVkwruxRXZMev5QEAx+dq InI3jblxyqhllkQrSO1APbh/gqx2F0VBmGBZtU9uRGNx4/z/QhBpbgbOIVUjzGj9 s8vlQosE+DWHtzT3wOcCqBK5N664C50gGz982UGBZjOlmcz8vERbyfKdj5aoRueg CA+oNsu/E0eReT87Q5FPPfk0cI83WYrVB/oGCrp+O3dbgN8e91/hdE3PBTquLuJH lbEIQI8= -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:58 2024 by rpki-client on console-fra.rpki-client.org