$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa File: 902F4AAC567011EFA451BD7CC4F9AE02.roa (raw, json) Hash identifier: WvYTPLC8D/H51zdraaz+bVZaE4a8MBmNr/IiBuSJhaA= Subject key identifier: 0A:79:FA:42:34:AF:E4:00:57:46:DA:97:81:BA:3D:1A:3E:13:5E:00 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 3279 Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa Signing time: Fri 09 Aug 2024 16:58:13 +0000 ROA not before: Fri 09 Aug 2024 16:58:13 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 58867 IP address blocks: 163.47.176.0/24 maxlen: 24 203.175.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12921 (0x3279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: Aug 9 16:58:13 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66b64aa4-76a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:30:72:33:a3:b8:95:ab:c3:3d:ea:b9:05: 72:e4:ca:a9:f8:f9:1c:f9:b8:43:f1:8d:80:00:b0: b9:38:26:51:b9:83:61:27:81:60:ee:54:b1:16:c1: 64:d9:20:46:f0:2f:cf:ea:23:7c:ed:95:66:64:c4: c1:91:de:a6:7e:48:48:36:51:d4:a4:55:29:c6:46: c9:91:c8:f9:b6:11:7f:54:ce:9b:0c:b0:b5:81:41: d9:f0:5e:c7:cc:f8:c4:7a:ba:a0:7d:bf:3c:24:73: 28:96:e2:d7:c9:23:e5:b0:33:4b:69:76:d2:0a:b9: 38:61:e8:48:9f:4e:31:48:84:a0:85:12:50:49:87: 6c:f6:7a:98:63:43:7f:3a:62:19:cb:23:47:ce:d6: aa:a5:0c:37:fc:f5:f7:4a:16:4c:97:ae:97:b9:76: 93:b7:61:95:3a:09:ea:39:2a:d9:13:37:ed:6d:23: dd:ab:58:31:5b:84:4f:f3:3d:ee:b2:c9:e7:36:f7: 55:a7:e5:80:a7:b2:9f:94:95:14:b6:e4:46:a3:ed: 35:47:88:5f:86:de:b3:25:4f:a0:00:03:fe:a9:8c: 04:61:13:d5:b0:84:63:ed:ac:99:8f:71:5d:f2:b1: ca:97:ea:98:0c:42:1d:de:52:f3:93:c0:77:2e:4a: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:79:FA:42:34:AF:E4:00:57:46:DA:97:81:BA:3D:1A:3E:13:5E:00 X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.47.176.0/24 203.175.175.0/24 Signature Algorithm: sha256WithRSAEncryption 14:33:2e:3f:8c:dd:ee:87:dc:9f:ae:58:24:4a:23:3c:7c:9d: 43:88:3d:d2:24:34:fb:c3:cf:12:7a:c5:09:f8:8d:c2:2b:45: 57:5b:32:b2:fd:8a:12:80:93:98:ab:67:6d:a8:da:27:f1:49: 52:5d:51:db:b1:84:7a:2a:cc:49:fd:96:57:22:71:cf:9c:17: 76:61:86:66:eb:1a:68:33:51:d9:fe:e7:d1:01:95:da:a9:14: 18:db:39:dd:38:1f:4f:fa:5d:86:0f:9d:5c:88:b8:a8:f9:d7: 82:51:bd:b8:4f:ed:86:73:38:e3:1c:52:8f:bb:fa:94:25:8c: 60:53:51:0f:5b:44:22:aa:ae:ba:68:fb:e1:0a:b2:53:8a:04: 50:b7:e5:8f:8f:88:e2:57:57:7b:11:c1:a4:fd:d5:3c:e7:08: e6:c0:39:ca:5f:7b:e1:01:22:14:c8:98:f1:81:6f:e2:0a:ec: ca:c8:93:6a:bf:3c:a5:b0:1a:c3:cf:fa:92:b4:62:54:91:f0: 4c:b9:bd:bc:13:17:48:49:b7:a2:02:8f:9c:04:d1:e6:94:1f: 0c:23:0a:cc:e6:93:ae:45:04:48:96:11:82:73:63:16:76:a6: 7b:ed:66:69:40:07:5c:0f:a2:c0:91:87:54:7b:ed:ea:64:a0: 76:be:4f:6a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICMnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjQwODA5MTY1ODEzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI2NGFhNC03NmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7MwcjOjuJWrwz3quQVy5Mqp+Pkc+bhD8Y2AALC5OCZRuYNhJ4Fg7lSxFsFk 2SBG8C/P6iN87ZVmZMTBkd6mfkhINlHUpFUpxkbJkcj5thF/VM6bDLC1gUHZ8F7H zPjEerqgfb88JHMoluLXySPlsDNLaXbSCrk4YehIn04xSISghRJQSYds9nqYY0N/ OmIZyyNHztaqpQw3/PX3ShZMl66XuXaTt2GVOgnqOSrZEzftbSPdq1gxW4RP8z3u ssnnNvdVp+WAp7KflJUUtuRGo+01R4hfht6zJU+gAAP+qYwEYRPVsIRj7ayZj3Fd 8rHKl+qYDEId3lLzk8B3LkoNAwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAp5+kI0 r+QAV0bal4G6PRo+E14AMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4NjMvQkZFNTRBNjg4MTVCMTFFMjlCNThBNzNCMzI5MkI1RTgvOTAyRjRBQUM1 NjcwMTFFRkE0NTFCRDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACjL7ADBADLr68wDQYJKoZIhvcNAQELBQADggEBABQzLj+M 3e6H3J+uWCRKIzx8nUOIPdIkNPvDzxJ6xQn4jcIrRVdbMrL9ihKAk5irZ22o2ifx SVJdUduxhHoqzEn9llcicc+cF3ZhhmbrGmgzUdn+59EBldqpFBjbOd04H0/6XYYP nVyIuKj514JRvbhP7YZzOOMcUo+7+pQljGBTUQ9bRCKqrrpo++EKslOKBFC35Y+P iOJXV3sRwaT91TznCObAOcpfe+EBIhTImPGBb+IK7MrIk2q/PKWwGsPP+pK0YlSR 8Ey5vbwTF0hJt6ICj5wE0eaUHwwjCszmk65FBEiWEYJzYxZ2pnvtZmlAB1wPosCR h1R77epkoHa+T2o= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org