$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa File: EF706AC45C7311EF9CC47281C4F9AE02.roa (raw, json) Hash identifier: vjLJIbHY8cYp0MYdF36S+lma3wzeIloym0TLu9Xd1c4= Subject key identifier: CB:10:E5:D6:93:1A:C2:3B:FA:98:CB:EC:73:D2:A9:15:A6:8B:3A:E5 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 3521 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa Signing time: Mon 16 Sep 2024 14:50:59 +0000 ROA not before: Mon 16 Sep 2024 14:50:59 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141158 IP address blocks: 117.121.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13601 (0x3521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 16 14:50:59 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e845d2-da69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:e3:7a:18:40:35:1e:18:36:f7:51:73:61: a9:be:84:5b:f7:d0:cb:46:96:44:3d:6b:38:fb:01: bf:ba:ae:ee:1c:a2:63:ed:67:25:66:7a:4b:b2:3f: 20:0e:5b:60:6b:5d:69:71:06:64:d9:64:01:5b:79: 01:e5:48:9d:88:cb:e7:b0:c4:93:02:7d:fb:e8:e1: 98:04:bc:49:f7:37:79:0d:d1:6c:55:f1:16:51:8a: 81:20:fa:35:84:8b:d4:24:d6:d3:03:68:15:a9:9c: fb:24:ec:b3:fe:7d:75:b8:2e:8d:a3:9f:f4:a9:d1: 86:7c:c9:fc:2f:bf:4c:ec:c8:2e:b2:46:3d:b0:d7: 6c:d4:5b:70:b2:c4:a2:d2:2d:df:3d:c3:cd:5e:66: b4:8b:1f:64:11:9f:1d:e4:13:4c:40:77:6e:04:4e: ce:be:63:98:c4:82:63:3a:5f:98:47:ee:1d:77:7b: 99:d7:5f:72:40:1d:03:f5:4f:9e:5c:ea:2e:f5:9e: 94:5a:51:4d:62:11:05:35:32:5d:81:72:6a:4e:4e: a5:83:52:b7:91:54:94:f5:cd:b8:89:be:80:d7:16: c4:ed:fc:0a:94:44:4a:40:85:53:1b:9c:44:ce:0c: b7:e9:9d:f2:dd:9f:12:a3:89:e3:71:20:41:82:5d: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:10:E5:D6:93:1A:C2:3B:FA:98:CB:EC:73:D2:A9:15:A6:8B:3A:E5 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.121.247.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:ae:23:63:b4:ab:3c:ca:9d:b0:ee:ba:b8:5b:5e:79:d5:ea: db:9f:cb:65:22:02:4d:42:ae:7a:25:6f:26:31:61:2d:e9:12: d9:d9:7e:a3:a8:36:f2:9f:5d:a0:c7:f9:b7:45:14:a0:e3:9a: 97:22:19:68:b3:c3:af:6e:01:9d:27:82:b8:c8:08:16:10:56: 2d:ee:59:dd:0c:aa:e5:48:54:7d:27:8d:0b:7d:85:f8:dc:88: 15:0b:5c:26:0c:3e:45:4c:4c:7f:f9:70:21:44:67:8b:e4:46: 89:be:4d:c7:aa:89:28:a2:4e:86:94:d9:99:4a:68:e0:2e:de: 17:9e:26:2d:a1:9e:82:f5:77:a1:25:01:cc:74:f7:18:c6:21: 6a:cc:24:62:cd:a3:0c:76:05:d9:9c:1b:96:50:81:30:8d:e3: 47:30:45:77:bc:49:7e:c8:4c:b2:6d:27:77:ff:03:f1:5f:98: 89:ce:73:80:9a:32:df:2b:c8:2f:d2:f1:0b:9e:76:76:a9:83: 99:69:62:50:40:f5:71:ee:29:a9:05:63:df:69:4e:69:80:94: 8b:b2:c8:21:64:41:07:f3:c8:6b:15:8d:95:88:2b:fb:b8:29: 44:21:6d:19:0d:38:05:cc:64:e1:6d:f8:4a:38:30:2a:46:8f: 93:ae:ef:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjQwOTE2MTQ1MDU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU4NDVkMi1kYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpHjehhANR4YNvdRc2GpvoRb99DLRpZEPWs4+wG/uq7uHKJj7WclZnpLsj8g Dltga11pcQZk2WQBW3kB5UidiMvnsMSTAn376OGYBLxJ9zd5DdFsVfEWUYqBIPo1 hIvUJNbTA2gVqZz7JOyz/n11uC6No5/0qdGGfMn8L79M7MguskY9sNds1FtwssSi 0i3fPcPNXma0ix9kEZ8d5BNMQHduBE7OvmOYxIJjOl+YR+4dd3uZ119yQB0D9U+e XOou9Z6UWlFNYhEFNTJdgXJqTk6lg1K3kVSU9c24ib6A1xbE7fwKlERKQIVTG5xE zgy36Z3y3Z8So4njcSBBgl1iHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMsQ5daT GsI7+pjL7HPSqRWmizrlMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvRUY3MDZBQzQ1 QzczMTFFRjlDQzQ3MjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB1efcwDQYJKoZIhvcNAQELBQADggEBAGyuI2O0qzzKnbDu urhbXnnV6tufy2UiAk1CrnolbyYxYS3pEtnZfqOoNvKfXaDH+bdFFKDjmpciGWiz w69uAZ0ngrjICBYQVi3uWd0MquVIVH0njQt9hfjciBULXCYMPkVMTH/5cCFEZ4vk Rom+TceqiSiiToaU2ZlKaOAu3heeJi2hnoL1d6ElAcx09xjGIWrMJGLNowx2Bdmc G5ZQgTCN40cwRXe8SX7ITLJtJ3f/A/FfmInOc4CaMt8ryC/S8Quednapg5lpYlBA 9XHuKakFY99pTmmAlIuyyCFkQQfzyGsVjZWIK/u4KUQhbRkNOAXMZOFt+Eo4MCpG j5Ou7wE= -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:19 2024 by rpki-client on console-ams.rpki-client.org