$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa File: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (raw, json) Hash identifier: +6Qn9fMMN2JTLH3JCNnMkYnKTJVe5wXPrggbGe55SKw= Subject key identifier: FF:4F:C5:8B:95:3B:D8:75:04:10:8D:0B:96:D8:D3:EA:16:63:54:5E Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 02A8 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa Signing time: Thu 01 Aug 2024 04:30:45 +0000 ROA not before: Thu 01 Aug 2024 04:30:45 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 7545 IP address blocks: 202.12.90.0/24 maxlen: 24 203.14.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Aug 1 04:30:45 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66ab0f75-1aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:99:b9:12:65:55:9a:18:45:81:f8:b1:e5: 4e:ca:40:ca:58:d9:ee:b7:fc:e0:05:f1:f0:a3:85: 73:11:19:ed:a4:27:45:13:4f:78:82:ee:3a:94:85: cf:fe:9d:2d:16:c3:32:41:4f:f9:82:82:e0:28:74: 3f:97:f5:7c:2c:e7:73:2d:c6:79:27:54:ae:ca:7e: 7c:a1:38:59:ba:ec:f4:99:96:e7:e9:2a:a5:01:70: 1c:20:0f:a0:b2:40:06:38:60:23:97:7f:dc:92:ca: 43:ff:d4:53:f6:ce:e5:c4:23:b2:37:0c:6b:4a:5f: e4:6f:db:d6:e0:b4:f0:16:fb:a4:ad:1e:35:98:8d: 7f:8b:43:a9:cc:9a:42:17:3a:dc:cb:2a:00:d7:69: f0:4d:fd:83:13:2a:87:98:30:35:b3:c3:ff:bb:99: 08:19:fa:5e:a9:a9:9b:04:12:bd:f9:48:b8:ff:55: 85:23:c7:93:8d:37:67:03:5f:a0:1e:39:3f:44:d6: 7f:4e:31:27:f6:d6:0a:2b:59:81:4e:55:6a:d3:d7: b2:81:73:b2:63:2d:79:ae:30:2d:d7:e8:d0:9c:fd: e9:fb:d3:27:7e:f8:56:ea:2d:50:6a:7a:d7:95:7e: 55:da:66:80:86:ca:4c:0e:55:08:63:5b:2d:1c:8c: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:C5:8B:95:3B:D8:75:04:10:8D:0B:96:D8:D3:EA:16:63:54:5E X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.90.0/24 203.14.156.0/23 Signature Algorithm: sha256WithRSAEncryption 33:6c:69:30:d7:aa:2c:a5:a1:19:6c:3f:5d:66:73:76:c9:0b: 3b:92:e9:7a:31:cd:57:a7:3e:55:e7:97:be:ae:8d:9a:13:4a: b2:24:54:d0:07:49:b4:6c:ff:02:aa:bd:61:a1:f9:f3:48:77: c9:6f:0d:9f:2d:93:95:4f:b8:f1:61:f3:12:74:58:88:61:7d: b3:97:02:5c:3b:aa:d9:2b:1f:26:ff:a8:be:f9:6c:47:2b:41: 50:84:cf:f4:ea:d4:cb:84:a0:50:ac:de:85:d9:94:c4:94:34: 32:74:6b:83:56:2f:3c:0a:8d:ad:bf:89:57:e4:ef:18:12:61: 72:63:27:82:83:1a:6b:f9:d1:48:7c:f6:be:fe:b8:02:bd:aa: 5d:f9:0c:23:58:b1:71:fe:7b:e4:1d:58:d8:c0:22:c9:fd:e3: 1e:43:8b:c2:f8:b3:a4:49:f3:64:f4:9a:0a:8e:ea:a5:0a:1d: 87:6b:19:3a:f5:dc:a5:94:0b:4e:07:5e:c3:22:50:fe:82:c9: eb:09:c0:d2:1a:b7:ad:21:47:6c:9b:56:a5:14:10:58:d7:1e: 3c:74:46:7a:c3:3d:a0:7f:06:c2:65:3d:b4:35:cf:17:bb:41: 89:08:32:10:b1:a1:57:6b:8f:8e:02:af:02:da:c2:d5:f1:d3: 9d:c7:fc:92 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjQwODAxMDQzMDQ1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFiMGY3NS0xYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAaZuRJlVZoYRYH4seVOykDKWNnut/zgBfHwo4VzERntpCdFE094gu46lIXP /p0tFsMyQU/5goLgKHQ/l/V8LOdzLcZ5J1Suyn58oThZuuz0mZbn6SqlAXAcIA+g skAGOGAjl3/ckspD/9RT9s7lxCOyNwxrSl/kb9vW4LTwFvukrR41mI1/i0OpzJpC FzrcyyoA12nwTf2DEyqHmDA1s8P/u5kIGfpeqambBBK9+Ui4/1WFI8eTjTdnA1+g Hjk/RNZ/TjEn9tYKK1mBTlVq09eygXOyYy15rjAt1+jQnP3p+9MnfvhW6i1QanrX lX5V2maAhspMDlUIY1stHIxr1QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP9PxYuV O9h1BBCNC5bY0+oWY1ReMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvRDFBNENGQkE0 RkJFMTFFRjk3ODEyQjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKDFoDBAHLDpwwDQYJKoZIhvcNAQELBQADggEBADNsaTDX qiyloRlsP11mc3bJCzuS6XoxzVenPlXnl76ujZoTSrIkVNAHSbRs/wKqvWGh+fNI d8lvDZ8tk5VPuPFh8xJ0WIhhfbOXAlw7qtkrHyb/qL75bEcrQVCEz/Tq1MuEoFCs 3oXZlMSUNDJ0a4NWLzwKja2/iVfk7xgSYXJjJ4KDGmv50Uh89r7+uAK9ql35DCNY sXH+e+QdWNjAIsn94x5Di8L4s6RJ82T0mgqO6qUKHYdrGTr13KWUC04HXsMiUP6C yesJwNIat60hR2ybVqUUEFjXHjx0RnrDPaB/BsJlPbQ1zxe7QYkIMhCxoVdrj44C rwLawtXx053H/JI= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:53 2024 by rpki-client on console-ams.rpki-client.org