$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa File: 2086256888B911ECAC54E716C4F9AE02.roa (raw, json) Hash identifier: /smgLTvvzRlAwFgnnrG53rcZxe+TUuxudK7zpLwd5hk= Subject key identifier: FC:77:63:FD:CC:51:45:0A:C2:7C:20:DC:2C:8C:1D:CD:49:AC:2F:1C Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 0808 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa Signing time: Tue 08 Oct 2024 20:59:51 +0000 ROA not before: Tue 08 Oct 2024 20:59:51 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 17439 IP address blocks: 43.252.88.0/22 maxlen: 24 101.53.128.0/19 maxlen: 24 103.20.212.0/22 maxlen: 24 2001:df0:411::/48 maxlen: 48 2001:df4:3500::/48 maxlen: 48 2406:69c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Oct 8 20:59:51 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67059d47-273f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:50:99:7f:b5:8d:72:d2:fc:1a:78:88:83:8a: 2f:85:e8:24:32:45:04:5a:ab:be:44:5f:26:2c:63: 3b:56:5b:ef:3a:ed:ee:58:65:d7:6d:64:69:83:2d: 09:1d:0c:f4:98:a7:45:f8:2c:7e:12:79:92:e2:da: f5:7f:1a:2a:21:57:49:4d:7e:ad:b0:6a:a9:14:f6: ba:c0:8d:ea:d7:80:a5:e2:81:eb:04:c3:aa:ab:ff: 23:b6:06:0f:9c:6b:66:1b:53:19:d1:88:dd:55:f5: 05:64:89:d8:69:43:7b:c7:c2:cf:ee:9f:48:40:8e: 45:b6:9f:2e:ea:2c:54:86:a6:8d:b0:00:c9:1c:32: e6:d5:1e:df:2f:9c:8c:87:c2:ad:61:8f:80:5a:76: f8:15:ce:55:67:6b:57:6d:b6:6f:ff:47:1d:1a:f5: 3a:9b:0e:11:87:fc:c2:2d:d4:63:fd:f2:e1:d5:16: 3e:ed:8b:88:d8:9e:fc:fc:0a:ba:fc:5d:7e:81:98: a2:8a:c1:63:2b:e4:d0:17:44:68:d4:d3:40:72:91: d4:f6:51:76:e5:2e:90:36:91:79:23:94:8f:da:87: 05:9e:9d:a8:32:56:62:84:42:2f:46:82:ff:00:d9: 7f:a8:ca:cd:c2:63:7c:38:88:ec:15:9d:63:e2:e4: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:77:63:FD:CC:51:45:0A:C2:7C:20:DC:2C:8C:1D:CD:49:AC:2F:1C X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.88.0/22 101.53.128.0/19 103.20.212.0/22 IPv6: 2001:df0:411::/48 2001:df4:3500::/48 2406:69c0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:dd:51:a8:6f:88:3f:bf:43:bc:07:83:01:d1:c0:36:4a:a5: ae:e1:42:bc:04:b5:eb:79:72:7e:f0:a5:1d:90:f1:3e:dd:e7: 88:c6:fb:8d:7a:ac:dd:f4:6a:8b:0f:1c:1b:a3:18:84:50:52: 89:39:c5:d1:96:98:04:26:6d:fb:e8:99:75:50:57:12:74:aa: 61:65:57:37:3e:9e:8e:7c:cf:3d:c9:94:28:45:e2:40:2d:c6: e6:5d:fe:e2:05:4a:04:e4:c4:0e:5c:84:03:f9:3b:2b:ef:bd: 10:36:ca:b9:f5:04:a6:89:57:c6:df:e7:2c:ef:fc:4d:2e:3f: c9:5c:1c:84:40:d7:72:1d:19:c2:ee:2d:74:40:56:a0:a3:b0: 78:29:cb:98:00:01:2d:34:8c:70:75:c1:3e:05:d2:47:e6:09: 41:aa:5a:8d:c4:ff:f0:a1:cd:5c:2e:65:b4:2c:ad:37:17:a6: 15:ca:15:6d:35:42:07:96:48:a7:af:97:74:6b:64:70:94:6a: 0e:34:4f:f3:e5:66:d3:6a:2c:c0:a3:2a:31:4c:67:ff:bd:c3: 40:df:d1:b7:8a:4c:6e:12:ff:a6:25:cb:de:94:ff:46:a9:88: b8:0e:e2:ef:a6:fe:34:5c:df:b0:ee:a4:65:6d:c8:de:42:fd: 2e:7a:ce:04 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjQxMDA4MjA1OTUxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1OWQ0Ny0yNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11CZf7WNctL8GniIg4ovhegkMkUEWqu+RF8mLGM7VlvvOu3uWGXXbWRpgy0J HQz0mKdF+Cx+EnmS4tr1fxoqIVdJTX6tsGqpFPa6wI3q14Cl4oHrBMOqq/8jtgYP nGtmG1MZ0YjdVfUFZInYaUN7x8LP7p9IQI5Ftp8u6ixUhqaNsADJHDLm1R7fL5yM h8KtYY+AWnb4Fc5VZ2tXbbZv/0cdGvU6mw4Rh/zCLdRj/fLh1RY+7YuI2J78/Aq6 /F1+gZiiisFjK+TQF0Ro1NNAcpHU9lF25S6QNpF5I5SP2ocFnp2oMlZihEIvRoL/ ANl/qMrNwmN8OIjsFZ1j4uTKFQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFPx3Y/3M UUUKwnwg3CyMHc1JrC8cMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvRjA3NzU5OEVDQzNEMTFFQThCQzQ1QzI5QzRGOUFFMDIvMjA4NjI1Njg4 OEI5MTFFQ0FDNTRFNzE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MBgEAgABMBIDBAIr/FgDBAVlNYADBAJnFNQwHwQCAAIwGQMHACABDfAEEQMH ACABDfQ1AAMFACQGacAwDQYJKoZIhvcNAQELBQADggEBAA7dUahviD+/Q7wHgwHR wDZKpa7hQrwEtet5cn7wpR2Q8T7d54jG+416rN30aosPHBujGIRQUok5xdGWmAQm bfvomXVQVxJ0qmFlVzc+no58zz3JlChF4kAtxuZd/uIFSgTkxA5chAP5OyvvvRA2 yrn1BKaJV8bf5yzv/E0uP8lcHIRA13IdGcLuLXRAVqCjsHgpy5gAAS00jHB1wT4F 0kfmCUGqWo3E//ChzVwuZbQsrTcXphXKFW01QgeWSKevl3RrZHCUag40T/PlZtNq LMCjKjFMZ/+9w0Df0beKTG4S/6Yly96U/0apiLgO4u+m/jRc37DupGVtyN5C/S56 zgQ= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:47 2024 by rpki-client on console-fra.rpki-client.org