$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/EEECC55A8C3611EFA07E612DC4F9AE02.roa File: EEECC55A8C3611EFA07E612DC4F9AE02.roa (raw, json) Hash identifier: eTwkMuYUIOgdznBYVf6eQsQpDlEOTC7ueZ80Zm3peOI= Subject key identifier: 68:A0:F4:FC:CC:3D:36:89:32:2A:5F:85:15:34:45:E1:6F:67:29:D4 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 03C9 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/EEECC55A8C3611EFA07E612DC4F9AE02.roa Signing time: Thu 17 Oct 2024 03:21:44 +0000 ROA not before: Thu 17 Oct 2024 03:21:44 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 214785 IP address blocks: 204.52.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Oct 17 03:21:44 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=671082c7-c488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:c8:76:b5:02:5b:8b:b0:7f:eb:bc:c4:c1: fc:7c:21:bf:ff:57:12:43:fd:0f:e9:ae:3b:e2:41: 8a:51:da:93:cc:37:cf:63:de:c2:c0:b1:87:01:3e: 5f:e1:d0:1b:c4:bc:34:3c:ea:23:a2:1c:c0:db:dc: f5:af:90:26:2b:7c:6e:48:7b:8a:aa:50:aa:1e:24: cc:c7:a4:41:5d:0a:fe:f3:cb:18:61:3a:c6:16:9d: e5:df:d6:10:dc:1e:7a:60:e2:de:79:78:dc:5d:b9: f3:0e:f2:14:a9:d5:73:af:e7:60:8b:2d:0e:d2:e5: 48:8b:cc:58:8b:10:b8:1e:97:24:1d:67:54:99:44: 1b:59:07:36:a4:ac:9a:64:8a:2a:a5:f2:52:31:58: 64:df:ce:f6:99:e4:ce:4f:e4:be:2e:dd:5e:ba:8b: 60:3d:ec:fc:76:04:19:51:49:99:d4:56:5d:0b:cd: 2d:6d:17:d5:4e:50:12:f1:c0:06:c0:df:b9:16:f7: e6:72:ad:bf:a1:24:47:ef:3a:55:39:cd:dc:e8:9c: 48:45:73:43:d3:1d:59:cc:21:9c:1e:d2:72:a6:a8: 34:6f:56:ff:a4:9c:02:f1:3c:8b:75:d7:98:cd:b7: 27:ba:86:6a:17:42:66:b7:38:40:f0:7e:4a:0a:46: 88:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A0:F4:FC:CC:3D:36:89:32:2A:5F:85:15:34:45:E1:6F:67:29:D4 X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/EEECC55A8C3611EFA07E612DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 204.52.191.0/24 Signature Algorithm: sha256WithRSAEncryption b3:d9:01:84:3f:8c:10:2f:61:e7:8d:d0:2a:f7:db:9f:90:5b: 29:0a:9e:91:02:f2:f1:6b:c9:a6:74:48:d2:7b:9e:a3:cc:cd: 9d:28:d3:10:29:a8:3a:dd:c9:80:be:58:73:69:bb:2b:4f:27: e5:1f:cd:a5:33:4d:a0:f0:d8:44:c1:75:f7:e1:fc:4a:55:ab: b3:77:7f:a9:fa:96:56:1b:5d:8c:1d:6b:93:55:e3:8c:af:b0: 65:54:53:6a:05:83:0d:5e:04:ea:d5:d8:b8:c2:32:63:83:1c: 0e:fc:db:ad:3f:7d:4f:6f:ea:77:cf:1d:5f:29:d2:8d:36:86: c8:a8:de:76:3d:ca:b1:cf:f3:2c:17:74:06:54:65:9d:46:23: fd:0e:99:25:20:62:b9:29:5d:9b:0b:1a:c9:b9:f7:f7:cd:e4: 94:1f:9f:d1:63:45:6d:41:33:92:f1:a7:37:0a:e3:52:e6:88: 7b:21:54:95:d7:06:ee:89:57:76:8b:05:51:a4:39:f8:36:0d: a3:14:42:40:b2:bf:00:c7:4c:60:fb:88:74:84:fc:b1:39:3e: e0:67:7d:bd:b0:3a:8e:ac:47:a2:75:f2:ff:71:d1:49:93:d2: bc:3c:b7:06:13:17:ec:68:6e:be:c8:43:f9:bd:ca:80:e5:1b: d9:bc:3e:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjQxMDE3MDMyMTQ0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwODJjNy1jNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWHIdrUCW4uwf+u8xMH8fCG//1cSQ/0P6a474kGKUdqTzDfPY97CwLGHAT5f 4dAbxLw0POojohzA29z1r5AmK3xuSHuKqlCqHiTMx6RBXQr+88sYYTrGFp3l39YQ 3B56YOLeeXjcXbnzDvIUqdVzr+dgiy0O0uVIi8xYixC4HpckHWdUmUQbWQc2pKya ZIoqpfJSMVhk3872meTOT+S+Lt1euotgPez8dgQZUUmZ1FZdC80tbRfVTlAS8cAG wN+5Fvfmcq2/oSRH7zpVOc3c6JxIRXND0x1ZzCGcHtJypqg0b1b/pJwC8TyLddeY zbcnuoZqF0JmtzhA8H5KCkaI6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGig9PzM PTaJMipfhRU0ReFvZynUMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVCODEvQ0Y5NjYzQzY3MEY3MTFFQ0IzMThFNDNBQzRGOUFFMDIvRUVFQ0M1NUE4 QzM2MTFFRkEwN0U2MTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADMNL8wDQYJKoZIhvcNAQELBQADggEBALPZAYQ/jBAvYeeN 0Cr325+QWykKnpEC8vFryaZ0SNJ7nqPMzZ0o0xApqDrdyYC+WHNpuytPJ+UfzaUz TaDw2ETBdffh/EpVq7N3f6n6llYbXYwda5NV44yvsGVUU2oFgw1eBOrV2LjCMmOD HA78260/fU9v6nfPHV8p0o02hsio3nY9yrHP8ywXdAZUZZ1GI/0OmSUgYrkpXZsL Gsm59/fN5JQfn9FjRW1BM5LxpzcK41LmiHshVJXXBu6JV3aLBVGkOfg2DaMUQkCy vwDHTGD7iHSE/LE5PuBnfb2wOo6sR6J18v9x0UmT0rw8twYTF+xobr7IQ/m9yoDl G9m8Pro= -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:06 2024 by rpki-client on console-ams.rpki-client.org