$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9C1730A21DAC11EF8F519F64C4F9AE02.roa File: 9C1730A21DAC11EF8F519F64C4F9AE02.roa (raw, json) Hash identifier: gwKieEifNkuxdDvW6NUkCAPVYrlEkVRxdF9iIx3BGM4= Subject key identifier: F1:70:C0:A9:78:E1:84:65:CE:42:12:0E:7C:49:F1:32:52:FE:F9:43 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 1C2F Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9C1730A21DAC11EF8F519F64C4F9AE02.roa Signing time: Tue 12 Nov 2024 07:49:36 +0000 ROA not before: Tue 12 Nov 2024 07:49:36 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 15083 IP address blocks: 115.167.8.0/24 maxlen: 24 115.167.11.0/24 maxlen: 24 180.178.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7215 (0x1c2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Nov 12 07:49:36 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67330890-92e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:51:48:22:2b:bd:d2:f2:54:69:2f:6b:7e: e2:7e:ad:98:df:ac:4e:d7:de:06:ec:d8:34:cf:93: d8:7a:9b:42:88:16:8b:80:ac:27:76:14:7d:ad:44: 2e:79:7a:44:6b:20:83:ac:92:ef:4b:81:d8:80:a4: 74:67:69:1e:03:8d:76:11:44:d6:2b:2a:9b:71:37: d5:6f:50:78:89:61:63:2c:6c:65:1c:40:e6:5a:5b: 6f:8f:04:3d:2b:77:b6:af:0d:d7:03:cc:8a:fc:a3: 9a:41:24:91:28:3c:6c:54:82:cb:08:ef:ee:41:b4: a6:19:c7:02:ea:b9:4d:1a:09:20:ec:64:25:a6:b1: 09:11:c9:5f:43:6c:e5:de:4e:31:e4:88:ec:29:bc: 82:35:5a:49:1f:2c:68:27:87:f9:ec:60:00:14:76: 48:0f:21:69:8c:fb:92:10:5f:e2:ca:96:91:ba:58: e2:e3:36:8e:6b:cb:5a:62:ac:62:5d:68:09:e6:74: 18:af:95:e4:53:4b:27:a6:e5:8a:20:e8:f7:95:c9: 6e:ac:dc:04:80:ef:63:a5:f9:76:68:00:93:32:7b: 0d:a8:e9:09:1f:c1:84:e6:28:63:54:a5:02:01:f9: 47:82:b5:3f:55:c7:87:f4:0c:32:cb:b4:cb:36:b4: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:C0:A9:78:E1:84:65:CE:42:12:0E:7C:49:F1:32:52:FE:F9:43 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9C1730A21DAC11EF8F519F64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.8.0/24 115.167.11.0/24 180.178.152.0/22 Signature Algorithm: sha256WithRSAEncryption 17:f6:2c:56:c7:04:30:fe:c2:f7:17:b7:52:e3:f1:88:5f:eb: f9:10:b7:5d:23:f8:60:10:7d:7c:14:59:d6:41:d5:7a:1a:b5: be:a0:57:bf:c6:7d:4c:67:10:46:d7:6c:f9:00:8a:df:7a:aa: da:c5:a8:85:18:fe:dc:68:30:a0:00:29:81:ce:6d:7e:46:0e: b1:11:5e:4e:12:1f:86:f3:1e:0b:1a:91:2c:fb:f6:05:5a:d5: b3:ef:50:8c:66:f3:e0:f7:e2:89:3a:f1:a8:41:9f:bb:ce:0f: 8a:16:ea:1b:57:fe:72:d4:d7:ea:47:f2:33:9f:6e:f5:a8:a7: a9:e6:c9:9d:5c:d4:73:fc:47:83:f3:44:1b:ed:2f:4f:68:f2: 1c:ee:04:eb:fb:88:7c:b3:8c:f6:f1:5a:b4:d7:3a:e0:82:98: 87:75:cf:24:d9:df:3f:ad:09:b8:d1:f2:29:b7:01:8e:6c:70: fa:f2:dc:3c:d5:9d:6e:05:7d:0e:47:29:5a:2b:e7:9c:df:ba: 89:a6:9a:b5:3e:9e:91:b4:c2:d2:1d:0b:2f:4b:ea:13:17:67: d9:09:72:36:c8:06:65:f7:84:96:61:12:75:47:cf:43:99:1b: 78:fa:dd:da:fc:ad:e6:c9:aa:7c:75:4c:62:30:6d:6f:76:61: 7e:ef:9d:07 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICHC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjQxMTEyMDc0OTM2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMzMDg5MC05MmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC1RSCIrvdLyVGkva37ifq2Y36xO194G7Ng0z5PYeptCiBaLgKwndhR9rUQu eXpEayCDrJLvS4HYgKR0Z2keA412EUTWKyqbcTfVb1B4iWFjLGxlHEDmWltvjwQ9 K3e2rw3XA8yK/KOaQSSRKDxsVILLCO/uQbSmGccC6rlNGgkg7GQlprEJEclfQ2zl 3k4x5IjsKbyCNVpJHyxoJ4f57GAAFHZIDyFpjPuSEF/iypaRulji4zaOa8taYqxi XWgJ5nQYr5XkU0snpuWKIOj3lclurNwEgO9jpfl2aACTMnsNqOkJH8GE5ihjVKUC AflHgrU/VceH9Awyy7TLNrTg1QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPFwwKl4 4YRlzkISDnxJ8TJS/vlDMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOUMxNzMwQTIx REFDMTFFRjhGNTE5RjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABzpwgDBABzpwsDBAK0spgwDQYJKoZIhvcNAQELBQADggEB ABf2LFbHBDD+wvcXt1Lj8Yhf6/kQt10j+GAQfXwUWdZB1Xoatb6gV7/GfUxnEEbX bPkAit96qtrFqIUY/txoMKAAKYHObX5GDrERXk4SH4bzHgsakSz79gVa1bPvUIxm 8+D34ok68ahBn7vOD4oW6htX/nLU1+pH8jOfbvWop6nmyZ1c1HP8R4PzRBvtL09o 8hzuBOv7iHyzjPbxWrTXOuCCmId1zyTZ3z+tCbjR8im3AY5scPry3DzVnW4FfQ5H KVor55zfuommmrU+npG0wtIdCy9L6hMXZ9kJcjbIBmX3hJZhEnVHz0OZG3j63dr8 rebJqnx1TGIwbW92YX7vnQc= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:10 2024 by rpki-client on console-fra.rpki-client.org