$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa File: 81ACB3888C9611EE88DE0726C4F9AE02.roa (raw, json) Hash identifier: k8UmxA4SbwbaZ421n0imukn2nmBZM0f5sHMchmg01MM= Subject key identifier: ED:AC:49:20:62:FC:1D:C2:2E:BA:4C:61:B5:67:E5:35:02:52:91:A2 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 3520 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa Signing time: Mon 16 Sep 2024 14:50:58 +0000 ROA not before: Mon 16 Sep 2024 14:50:58 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135027 IP address blocks: 117.121.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13600 (0x3520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 16 14:50:58 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e845d1-72f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c7:50:76:62:5c:b8:23:8f:b5:26:de:b7:b5: c3:7c:16:f3:56:01:73:07:87:4b:ea:05:fc:50:ce: 85:d1:59:cb:82:07:6d:79:37:17:11:04:b9:34:9d: 6b:da:9a:20:68:93:30:35:5f:5a:ec:e8:f1:26:f1: 2d:14:be:4b:87:c8:e8:86:82:88:27:92:22:81:4e: 2a:62:4d:cc:4b:c2:6e:31:59:a4:22:02:b0:72:2c: be:5c:8b:79:21:f2:9a:da:a2:82:e4:a4:d2:2f:fd: 0c:83:f2:2d:a5:88:f4:0e:ff:3f:c5:59:91:2a:48: b6:e6:a5:96:ae:df:6f:76:c1:cc:bf:c9:96:56:65: b6:51:a3:52:d7:97:5f:db:c0:fd:60:4b:8f:22:d2: 8a:e2:ff:cd:43:06:0c:32:b3:e9:16:67:7e:f3:7f: e1:79:28:6c:22:98:90:c3:6c:c0:d1:53:7c:3d:ab: ec:55:08:20:49:b3:da:c3:6c:5e:4b:ac:e0:d4:a0: d2:db:83:8c:49:9e:20:32:4f:73:99:9d:4b:37:2e: 7c:29:c3:33:43:cb:13:6a:b3:2e:fa:88:ee:95:bb: a8:22:e8:79:b8:6f:35:a7:a0:e0:f8:39:3f:fd:97: 54:fd:02:b0:69:dc:ca:c7:01:7a:96:d3:e5:f2:bb: 30:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AC:49:20:62:FC:1D:C2:2E:BA:4C:61:B5:67:E5:35:02:52:91:A2 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.121.243.0/24 Signature Algorithm: sha256WithRSAEncryption 42:1f:35:30:09:c1:cb:27:67:bb:60:74:1c:34:c7:c1:fa:a6: 5e:59:05:ee:bd:42:f8:56:f0:1f:e0:62:c3:5e:29:b9:be:09: d3:ba:29:c5:3a:a1:0d:39:20:89:68:a2:cd:c6:ee:7d:9e:2f: 4d:bc:dc:99:67:23:93:69:95:6a:e0:c3:38:60:29:35:53:c1: 4d:52:74:4f:5f:7c:6f:ab:4c:2b:e2:19:ba:d0:50:ea:89:5b: 71:ac:6d:36:07:04:49:7f:99:ce:08:c1:4d:ae:36:f5:60:92: ba:ce:2c:46:98:ce:26:0f:ec:40:5d:40:c5:e7:f9:d8:24:37: 4a:fc:7f:44:cb:53:5e:c6:6c:e6:8e:ba:bd:b2:a4:1c:db:f9: bc:92:47:de:c2:4c:71:72:88:4d:fb:9d:54:ad:d0:34:9d:c3: 63:e0:40:55:05:c8:bd:c7:f0:58:e4:d8:76:42:65:19:13:ee: be:64:f0:e0:d7:0a:94:50:2c:f1:92:ad:f2:bf:a7:61:72:8f: a6:57:ac:27:a4:a2:ac:b1:bd:69:54:d9:cf:06:45:23:88:0c: 1d:80:a3:85:3d:b7:f0:94:f6:a8:bd:41:c6:16:37:c7:dc:7e: b1:55:d8:90:97:97:2d:e3:d6:92:24:7c:5b:a9:9c:73:85:07: 7b:e7:7f:c1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjQwOTE2MTQ1MDU4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU4NDVkMS03MmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MdQdmJcuCOPtSbet7XDfBbzVgFzB4dL6gX8UM6F0VnLggdteTcXEQS5NJ1r 2pogaJMwNV9a7OjxJvEtFL5Lh8johoKIJ5IigU4qYk3MS8JuMVmkIgKwciy+XIt5 IfKa2qKC5KTSL/0Mg/ItpYj0Dv8/xVmRKki25qWWrt9vdsHMv8mWVmW2UaNS15df 28D9YEuPItKK4v/NQwYMMrPpFmd+83/heShsIpiQw2zA0VN8PavsVQggSbPaw2xe S6zg1KDS24OMSZ4gMk9zmZ1LNy58KcMzQ8sTarMu+ojulbuoIuh5uG81p6Dg+Dk/ /ZdU/QKwadzKxwF6ltPl8rswJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO2sSSBi /B3CLrpMYbVn5TUCUpGiMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvODFBQ0IzODg4 Qzk2MTFFRTg4REUwNzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB1efMwDQYJKoZIhvcNAQELBQADggEBAEIfNTAJwcsnZ7tg dBw0x8H6pl5ZBe69QvhW8B/gYsNeKbm+CdO6KcU6oQ05IIloos3G7n2eL0283Jln I5NplWrgwzhgKTVTwU1SdE9ffG+rTCviGbrQUOqJW3GsbTYHBEl/mc4IwU2uNvVg krrOLEaYziYP7EBdQMXn+dgkN0r8f0TLU17GbOaOur2ypBzb+bySR97CTHFyiE37 nVSt0DSdw2PgQFUFyL3H8Fjk2HZCZRkT7r5k8ODXCpRQLPGSrfK/p2Fyj6ZXrCek oqyxvWlU2c8GRSOIDB2Ao4U9t/CU9qi9QcYWN8fcfrFV2JCXly3j1pIkfFupnHOF B3vnf8E= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:53 2024 by rpki-client on console-fra.rpki-client.org