$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/35D16082404911EFBC4C610EC4F9AE02.roa File: 35D16082404911EFBC4C610EC4F9AE02.roa (raw, json) Hash identifier: CZyYnpg8fZRv7/01XkAyfUiNYVCaEIGt11t+Ww7CLyk= Subject key identifier: 14:22:D5:70:8F:D8:9B:28:12:42:F2:3E:D2:E8:9C:73:A4:80:79:1F Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 07DE Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/35D16082404911EFBC4C610EC4F9AE02.roa Signing time: Wed 16 Oct 2024 21:10:41 +0000 ROA not before: Wed 16 Oct 2024 21:10:41 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 206283 IP address blocks: 116.0.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Oct 16 21:10:41 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67102bd1-4a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:7d:36:13:cb:2e:a2:d5:5d:41:1b:e4:23: 2e:7a:45:d7:84:a6:25:97:25:9a:59:0f:97:38:64: f0:db:9a:e9:9f:f7:c1:d8:0e:63:31:0e:c0:8f:b2: 7f:4d:b3:6d:2b:74:95:3d:ed:3c:96:4a:f4:65:22: 60:c5:d1:d0:1b:c6:fe:cb:38:57:fb:fa:1d:a2:b4: f5:87:27:a1:a9:6d:a4:4f:55:f8:7f:9c:eb:79:b5: 2e:0c:2c:36:13:e8:bc:79:60:dd:b3:1f:b5:4f:a0: da:d2:8b:3f:8b:5d:ea:ac:e3:2d:c5:cd:8f:37:b9: d3:65:38:43:a7:27:ce:b4:46:a2:fe:b4:9f:99:25: 9b:c0:4c:df:4b:27:6a:b0:ba:37:1b:20:46:7a:f7: a7:8f:b5:af:14:e8:5a:03:7b:59:62:8a:2b:ae:3d: cb:10:08:3a:3e:27:45:47:33:09:98:59:85:64:53: a7:eb:62:a8:ca:60:e0:b7:a6:11:fb:ea:eb:6b:6d: 68:37:08:1d:4d:8d:88:0a:83:52:22:0e:2f:b9:77: 92:91:45:4e:ef:ea:c7:54:c3:2e:37:9e:d4:e6:47: 72:f4:34:66:a8:1a:ff:84:28:1e:3d:a5:dd:a8:bd: 9e:43:39:59:d1:e0:d8:af:9d:cd:03:d3:f4:e4:ba: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:22:D5:70:8F:D8:9B:28:12:42:F2:3E:D2:E8:9C:73:A4:80:79:1F X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/35D16082404911EFBC4C610EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.0.38.0/24 Signature Algorithm: sha256WithRSAEncryption ac:68:48:2d:06:c0:b3:7c:c2:b9:a1:2c:c9:f4:4e:c8:a8:62: 3c:40:9d:f5:f4:55:d0:f3:35:61:cc:29:ba:f9:b3:db:60:48: 74:9a:70:31:38:00:5e:ca:aa:3f:d9:dc:6e:41:3e:47:c3:7f: 82:bd:5a:17:29:61:1d:56:7d:04:6a:ea:3c:f3:36:77:ee:90: 46:c4:22:2d:f7:5a:80:02:fe:81:d8:01:cb:8a:b6:b7:91:9c: 4b:d9:fa:2e:c3:ef:35:c1:bb:34:9e:30:55:2c:d1:57:64:b7: 44:17:5b:54:21:cd:d8:90:aa:9b:97:25:d6:1f:90:40:e2:10: 5d:e6:ba:90:63:ab:b5:ba:81:22:14:de:fe:5e:95:d4:e4:1b: 92:ae:01:45:af:b9:66:5a:83:df:91:d7:71:64:05:65:c7:b6: 92:e7:e3:21:4e:f6:5d:35:cb:0d:97:13:8c:bb:29:e2:e6:3b: d6:9f:cc:38:35:42:60:43:c0:c0:a5:6c:f1:5e:8c:4e:3d:94: 86:bb:f0:80:8b:2c:44:89:72:0c:96:7b:ec:86:2e:14:ae:8e: 79:85:be:18:73:e2:67:28:f5:c3:b8:27:4c:ce:ec:96:20:88: 68:20:fe:ea:9f:9a:06:9d:0a:45:0b:e8:1f:2e:7f:50:5d:ba: 91:3a:c6:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjQxMDE2MjExMDQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwMmJkMS00YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3N99NhPLLqLVXUEb5CMuekXXhKYllyWaWQ+XOGTw25rpn/fB2A5jMQ7Aj7J/ TbNtK3SVPe08lkr0ZSJgxdHQG8b+yzhX+/odorT1hyehqW2kT1X4f5zrebUuDCw2 E+i8eWDdsx+1T6Da0os/i13qrOMtxc2PN7nTZThDpyfOtEai/rSfmSWbwEzfSydq sLo3GyBGevenj7WvFOhaA3tZYoorrj3LEAg6PidFRzMJmFmFZFOn62KoymDgt6YR ++rra21oNwgdTY2ICoNSIg4vuXeSkUVO7+rHVMMuN57U5kdy9DRmqBr/hCgePaXd qL2eQzlZ0eDYr53NA9P05Loh/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBQi1XCP 2JsoEkLyPtLonHOkgHkfMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2RDkvODBERkRFQzBFNUREMTFFQUIyNDY4RDY1QzRGOUFFMDIvMzVEMTYwODI0 MDQ5MTFFRkJDNEM2MTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB0ACYwDQYJKoZIhvcNAQELBQADggEBAKxoSC0GwLN8wrmh LMn0TsioYjxAnfX0VdDzNWHMKbr5s9tgSHSacDE4AF7Kqj/Z3G5BPkfDf4K9Whcp YR1WfQRq6jzzNnfukEbEIi33WoAC/oHYAcuKtreRnEvZ+i7D7zXBuzSeMFUs0Vdk t0QXW1QhzdiQqpuXJdYfkEDiEF3mupBjq7W6gSIU3v5eldTkG5KuAUWvuWZag9+R 13FkBWXHtpLn4yFO9l01yw2XE4y7KeLmO9afzDg1QmBDwMClbPFejE49lIa78ICL LESJcgyWe+yGLhSujnmFvhhz4mco9cO4J0zO7JYgiGgg/uqfmgadCkUL6B8uf1Bd upE6xik= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:48 2024 by rpki-client on console-fra.rpki-client.org