$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/4EF3836CF11C11EB8CA9C866C4F9AE02.roa File: 4EF3836CF11C11EB8CA9C866C4F9AE02.roa (raw, json) Hash identifier: fH/sz2m2s1/H8ir4lRWNKvgFkdVm+RXB2n5Wzz2ZOaY= Subject key identifier: D2:1D:B1:D9:CA:3B:64:3A:E9:92:CC:41:BA:44:0C:5D:A0:CD:D0:C9 Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 1111 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/4EF3836CF11C11EB8CA9C866C4F9AE02.roa Signing time: Wed 06 Nov 2024 17:35:34 +0000 ROA not before: Wed 06 Nov 2024 17:35:34 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 4773 IP address blocks: 27.104.128.0/18 maxlen: 18 43.245.104.0/22 maxlen: 22 43.245.106.0/24 maxlen: 24 175.156.128.0/19 maxlen: 19 2401:7400:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4369 (0x1111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Nov 6 17:35:34 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672ba8e6-3dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:b7:bf:af:0e:b6:64:7e:9a:12:be:3c:cc: b6:54:3f:d1:da:c6:84:5b:f5:f3:fd:65:6f:3d:c3: ca:41:0e:b9:ad:71:4c:b9:39:b5:9e:5c:df:3d:11: 78:48:40:d9:8c:d3:f1:77:b1:9a:80:80:36:ed:db: 41:aa:f4:54:d1:a5:ed:3b:ce:db:8a:d0:81:e7:e3: 08:74:cd:69:63:6a:d0:fe:f2:7c:46:cb:03:f0:80: 04:c9:2d:6f:19:0d:b3:d8:e4:65:dc:bf:15:a7:b8: 83:15:8c:25:b8:b5:81:ce:d5:46:41:df:5d:b2:9d: f8:ad:40:97:2f:22:91:95:38:de:f1:c4:01:9d:8c: 78:81:58:59:7c:36:51:a1:d9:9a:f8:e7:19:00:44: 16:ed:58:37:b5:fd:a2:ef:31:1b:e0:9b:5c:02:9a: 4d:80:8a:2b:50:4d:65:ad:bf:1b:ba:d5:27:78:a1: a0:57:40:32:b5:9c:55:5f:7d:51:7b:c1:1a:fc:20: ea:49:af:9c:4d:fc:08:85:c4:3c:bb:8a:2c:15:16: 2e:3c:16:b2:38:cc:9e:c5:1e:d4:b8:00:3d:62:64: f7:a5:d3:a8:13:05:17:ec:de:96:30:42:66:ac:f4: 3c:62:1e:68:b2:86:b9:d5:e7:67:b6:dd:ef:eb:75: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1D:B1:D9:CA:3B:64:3A:E9:92:CC:41:BA:44:0C:5D:A0:CD:D0:C9 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/4EF3836CF11C11EB8CA9C866C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.104.128.0/18 43.245.104.0/22 175.156.128.0/19 IPv6: 2401:7400:1000::/48 Signature Algorithm: sha256WithRSAEncryption 67:24:22:60:9e:42:d5:ec:1f:c0:f9:a3:ce:61:da:9c:f2:5d: e7:5b:76:30:26:fe:b4:8f:df:5e:57:17:12:6a:d7:27:c5:22: 01:0f:79:9a:d0:5b:00:9a:51:a7:d9:6e:bf:0e:a9:72:dc:4b: a0:b8:6c:0b:0b:14:67:f1:52:cd:62:82:70:9f:54:ac:1c:6f: d4:d8:94:ca:e6:02:aa:ce:b0:ab:02:a2:7a:d8:16:e3:e4:6d: 1d:fb:24:9c:18:ee:01:a4:7d:8c:4b:ca:5f:10:e6:15:66:b5: ac:0d:41:f2:fe:1a:db:3f:e4:89:80:78:b4:0e:8c:ee:eb:70: 08:0d:ff:4a:00:55:c1:42:bd:44:0a:b7:de:75:13:47:56:62: 49:4f:5b:b7:5e:1f:89:98:d3:b4:aa:da:01:64:b7:93:be:97: ec:41:77:2f:8f:75:d7:a2:d1:2a:8e:8f:89:7a:43:b5:14:01: ac:e8:a1:e1:28:7a:dd:8f:ec:25:08:45:ba:f3:d1:e8:ca:b4: 73:34:f8:a7:1f:fc:d4:20:70:8d:54:6f:ae:ca:93:0a:e2:d8: 4c:dd:43:a9:00:90:09:ff:53:c3:02:70:e1:f1:10:5a:cc:3d: 2b:64:17:6f:57:21:ff:04:f4:94:28:de:db:f5:1b:cc:d9:61: 2d:96:06:02 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICEREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjQxMTA2MTczNTM0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYThlNi0zZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17y3v68OtmR+mhK+PMy2VD/R2saEW/Xz/WVvPcPKQQ65rXFMuTm1nlzfPRF4 SEDZjNPxd7GagIA27dtBqvRU0aXtO87bitCB5+MIdM1pY2rQ/vJ8RssD8IAEyS1v GQ2z2ORl3L8Vp7iDFYwluLWBztVGQd9dsp34rUCXLyKRlTje8cQBnYx4gVhZfDZR odma+OcZAEQW7Vg3tf2i7zEb4JtcAppNgIorUE1lrb8butUneKGgV0AytZxVX31R e8Ea/CDqSa+cTfwIhcQ8u4osFRYuPBayOMyexR7UuAA9YmT3pdOoEwUX7N6WMEJm rPQ8Yh5osoa51edntt3v63W9LwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFNIdsdnK O2Q66ZLMQbpEDF2gzdDJMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REU3REUvQ0VFM0Q3MTgwNEUxMTFFOThFQTdEODcyQzRGOUFFMDIvNEVGMzgzNkNG MTFDMTFFQjhDQTlDODY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAYbaIADBAIr9WgDBAWvnIAwDwQCAAIwCQMHACQBdAAQADAN BgkqhkiG9w0BAQsFAAOCAQEAZyQiYJ5C1ewfwPmjzmHanPJd51t2MCb+tI/fXlcX EmrXJ8UiAQ95mtBbAJpRp9luvw6pctxLoLhsCwsUZ/FSzWKCcJ9UrBxv1NiUyuYC qs6wqwKietgW4+RtHfsknBjuAaR9jEvKXxDmFWa1rA1B8v4a2z/kiYB4tA6M7utw CA3/SgBVwUK9RAq33nUTR1ZiSU9bt14fiZjTtKraAWS3k76X7EF3L49116LRKo6P iXpDtRQBrOih4Sh63Y/sJQhFuvPR6Mq0czT4px/81CBwjVRvrsqTCuLYTN1DqQCQ Cf9TwwJw4fEQWsw9K2QXb1ch/wT0lCje2/UbzNlhLZYGAg== -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org