$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/006CE5442FBA11ECA05BB46EC4F9AE02.roa File: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (raw, json) Hash identifier: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY= Subject key identifier: 9F:FA:CA:13:B1:75:39:1A:9C:4B:C5:45:E6:B2:B1:F2:A4:9E:CD:8C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 3450 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/006CE5442FBA11ECA05BB46EC4F9AE02.roa Signing time: Sat 28 Sep 2024 15:00:56 +0000 ROA not before: Sat 28 Sep 2024 15:00:56 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139797 IP address blocks: 202.57.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13392 (0x3450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Sep 28 15:00:56 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f81a28-dffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:93:84:fe:24:ae:58:29:82:89:4a:70:65: 20:b5:3e:a9:29:e8:7b:2c:7f:a3:be:42:c6:0f:0c: 68:62:0e:e3:e6:21:ea:f6:84:a5:1e:a3:34:90:d0: 9d:b0:69:91:5d:45:54:5e:9d:ba:5e:8d:7e:4b:20: cc:50:d2:ee:a3:94:9e:41:5c:7b:3e:52:1d:5e:4d: 3c:43:dd:40:61:0d:c0:69:03:52:d8:19:2b:c1:1f: b7:4b:83:f3:3d:b7:a7:9e:55:61:6d:0a:da:46:3e: 83:2c:69:e1:ba:65:d5:ba:06:98:d8:01:bb:ba:5d: 47:cf:04:23:6c:37:50:83:88:c6:f0:99:df:15:a8: 55:fe:0d:e0:6d:e6:10:48:2f:59:e7:7a:ef:ab:b5: 93:c0:cb:39:19:ff:b4:f2:3d:0d:66:a4:cf:66:d8: a6:ad:eb:37:62:4e:2f:bf:3d:56:9a:a6:8b:c0:6a: f6:ac:f1:af:ed:15:e1:be:96:d0:52:c3:2f:39:a1: d5:cd:41:24:30:bf:65:74:eb:1f:94:be:8f:93:bf: f4:b0:44:c7:4b:7c:f9:d2:84:22:18:d1:28:5e:f9: 18:de:1c:72:c6:84:21:32:87:f2:84:85:ae:30:91: 38:e9:06:d6:ee:79:85:22:ad:ae:07:9d:0b:fa:d6: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FA:CA:13:B1:75:39:1A:9C:4B:C5:45:E6:B2:B1:F2:A4:9E:CD:8C X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/006CE5442FBA11ECA05BB46EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.57.208.0/24 Signature Algorithm: sha256WithRSAEncryption 87:49:69:a7:f8:3a:91:42:ca:d7:51:e1:e5:df:d2:a3:7c:4d: 91:0b:7c:6c:64:be:c7:b5:2e:d5:4b:48:0d:84:d3:42:8f:cf: aa:8c:e5:49:a1:c4:bd:34:99:e5:aa:91:2d:a6:28:b8:30:20: 97:c4:05:da:17:9f:e0:6c:b7:39:77:74:df:07:9e:26:18:e7: ad:42:4b:5e:3d:b6:60:27:dc:2e:97:67:ad:e9:6d:2b:fc:7b: 89:17:bc:c3:fa:a3:eb:82:98:d0:b2:45:6d:aa:eb:f5:dd:18: 98:66:cc:54:d7:f1:c5:57:69:25:62:12:ce:3a:7a:ef:95:c3: ec:74:96:2d:8d:80:bf:2e:8f:fb:c2:dc:ef:f5:fe:0d:f8:1a: 27:38:f0:94:31:9a:d7:65:75:61:02:37:b7:0b:94:74:34:d3: 33:6d:b9:78:7f:39:d0:51:9e:d6:ef:8a:7e:90:31:8f:36:89: b5:c9:6c:59:f0:bd:23:9e:39:31:8c:a3:4f:6a:53:71:43:7a: 53:fc:a4:12:d4:dc:be:04:f2:63:8b:73:60:0c:a3:cc:03:f1: ae:54:7d:c3:7e:79:5b:0a:c9:35:70:7f:e5:fb:8f:f2:83:8c: 77:53:9a:7f:32:39:f1:b3:f8:30:80:8b:f0:d7:29:bd:c2:d9: c9:02:b2:64 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjQwOTI4MTUwMDU2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4MWEyOC1kZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HCThP4krlgpgolKcGUgtT6pKeh7LH+jvkLGDwxoYg7j5iHq9oSlHqM0kNCd sGmRXUVUXp26Xo1+SyDMUNLuo5SeQVx7PlIdXk08Q91AYQ3AaQNS2BkrwR+3S4Pz PbennlVhbQraRj6DLGnhumXVugaY2AG7ul1HzwQjbDdQg4jG8JnfFahV/g3gbeYQ SC9Z53rvq7WTwMs5Gf+08j0NZqTPZtimres3Yk4vvz1WmqaLwGr2rPGv7RXhvpbQ UsMvOaHVzUEkML9ldOsflL6Pk7/0sETHS3z50oQiGNEoXvkY3hxyxoQhMofyhIWu MJE46QbW7nmFIq2uB50L+tbcHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ/6yhOx dTkanEvFReaysfKkns2MMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENBRTgvOEI2QURFMTQxRDkzMTFFMjkyQ0IyM0Y3MDhCMDJDRDIvMDA2Q0U1NDQy RkJBMTFFQ0EwNUJCNDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKOdAwDQYJKoZIhvcNAQELBQADggEBAIdJaaf4OpFCytdR 4eXf0qN8TZELfGxkvse1LtVLSA2E00KPz6qM5UmhxL00meWqkS2mKLgwIJfEBdoX n+Bstzl3dN8HniYY561CS149tmAn3C6XZ63pbSv8e4kXvMP6o+uCmNCyRW2q6/Xd GJhmzFTX8cVXaSViEs46eu+Vw+x0li2NgL8uj/vC3O/1/g34Gic48JQxmtdldWEC N7cLlHQ00zNtuXh/OdBRntbvin6QMY82ibXJbFnwvSOeOTGMo09qU3FDelP8pBLU 3L4E8mOLc2AMo8wD8a5UfcN+eVsKyTVwf+X7j/KDjHdTmn8yOfGz+DCAi/DXKb3C 2ckCsmQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org