$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/EF40C4AC404611EFA2014651C4F9AE02.roa File: EF40C4AC404611EFA2014651C4F9AE02.roa (raw, json) Hash identifier: czaYuAZrmltxjeFq6mD06OZKMChDyKz2TsFDBFMIxYw= Subject key identifier: 87:E4:98:05:26:79:03:A9:B1:92:5C:AA:D8:D7:FC:BF:35:5C:BD:82 Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 07DF Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/EF40C4AC404611EFA2014651C4F9AE02.roa Signing time: Wed 16 Oct 2024 21:10:42 +0000 ROA not before: Wed 16 Oct 2024 21:10:42 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 24435 IP address blocks: 116.0.35.0/24 maxlen: 24 116.0.36.0/24 maxlen: 24 116.0.37.0/24 maxlen: 24 116.0.39.0/24 maxlen: 24 116.0.45.0/24 maxlen: 24 116.0.47.0/24 maxlen: 24 116.0.48.0/24 maxlen: 24 116.0.49.0/24 maxlen: 24 116.0.50.0/24 maxlen: 24 116.0.51.0/24 maxlen: 24 116.0.52.0/24 maxlen: 24 116.0.53.0/24 maxlen: 24 116.0.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2015 (0x7df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Oct 16 21:10:42 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67102bd2-457e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:f9:2e:9b:8b:46:b7:10:ae:1f:ad:cb:8f: 73:d7:ed:f9:e2:7b:46:a4:1e:49:ba:18:7b:6a:25: d1:d4:5b:15:3b:94:79:38:84:64:13:a8:f8:86:11: be:2e:0d:12:fd:a2:20:78:e5:d6:eb:61:96:e3:4e: cb:2c:16:f9:e8:cc:be:17:78:47:1d:64:52:94:a0: f1:78:22:66:93:ad:87:e9:d3:f2:72:bc:03:87:e1: a4:15:a4:bc:94:56:f3:82:6e:d4:49:8e:e6:6d:96: 6f:3f:38:89:f8:32:ca:ff:a4:4b:e4:6a:c1:0e:f3: d4:e6:ae:9a:c6:8c:63:80:3b:9f:aa:31:f0:f6:50: 67:63:6c:7a:3a:62:14:c7:ef:b8:a1:07:19:bd:fa: f3:92:65:fa:fb:6a:d2:cc:3d:3c:b5:04:68:ed:f1: 85:e3:d5:7e:61:f4:5d:85:a8:0c:91:a9:70:93:ea: e9:25:0e:ff:ca:7c:ec:eb:8a:a2:31:b5:50:bd:f0: f5:6d:26:c2:c1:20:03:e8:74:a0:78:62:40:a8:c6: 15:4c:19:4c:91:e4:be:d6:26:fe:36:bf:67:04:dd: 27:06:6e:8c:b9:4f:ac:e6:ca:df:b9:26:fc:e0:b1: 97:0c:54:11:8d:cf:4f:4f:fe:ef:1f:7d:5b:db:6e: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E4:98:05:26:79:03:A9:B1:92:5C:AA:D8:D7:FC:BF:35:5C:BD:82 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/EF40C4AC404611EFA2014651C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.0.35.0-116.0.37.255 116.0.39.0/24 116.0.45.0/24 116.0.47.0-116.0.54.255 Signature Algorithm: sha256WithRSAEncryption 9b:1b:a9:0d:f9:ae:2e:56:e6:2b:a5:23:40:95:63:4d:2e:9b: 74:85:ca:e1:36:d2:e2:32:10:54:1a:48:a7:a5:0c:0f:86:0e: 46:f4:f9:1e:d4:56:d2:84:ad:87:a5:2f:71:c3:e3:5b:3e:9a: 54:20:a2:80:46:06:9e:eb:e9:02:14:41:61:aa:72:1b:63:07: 22:95:76:9b:2d:ae:5b:10:93:5c:d9:28:48:8b:db:2a:9f:0e: 45:11:26:cc:a9:2b:f0:fe:d8:f8:73:77:32:06:d7:d5:79:40: fa:4a:fe:4e:8a:ce:0b:94:b4:73:d1:cb:73:27:38:8c:9e:c6: c6:60:d6:64:1b:97:d2:d5:77:45:7a:f5:94:60:ec:78:b0:d9: 5f:3f:c3:04:dd:22:ae:55:e9:38:80:e6:11:05:fd:fd:8a:3e: f9:60:68:d2:d7:03:5d:2a:93:86:9e:da:79:01:61:6a:cd:35: 6f:dd:15:2f:f4:e3:83:5d:69:e5:4d:0d:fa:a1:f3:28:e9:63: b4:23:c6:9e:52:69:6f:38:94:97:78:bf:28:87:95:cb:dd:5a: 97:6b:5d:72:8e:c6:5f:73:79:97:2d:5b:8c:e1:76:d9:fb:be: e7:e5:9b:42:e1:61:68:7f:50:7a:73:34:4c:9f:27:f7:e4:7f: 37:cf:89:28 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICB98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjQxMDE2MjExMDQyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwMmJkMi00NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApK35LpuLRrcQrh+ty49z1+354ntGpB5Juhh7aiXR1FsVO5R5OIRkE6j4hhG+ Lg0S/aIgeOXW62GW407LLBb56My+F3hHHWRSlKDxeCJmk62H6dPycrwDh+GkFaS8 lFbzgm7USY7mbZZvPziJ+DLK/6RL5GrBDvPU5q6axoxjgDufqjHw9lBnY2x6OmIU x++4oQcZvfrzkmX6+2rSzD08tQRo7fGF49V+YfRdhagMkalwk+rpJQ7/ynzs64qi MbVQvfD1bSbCwSAD6HSgeGJAqMYVTBlMkeS+1ib+Nr9nBN0nBm6MuU+s5srfuSb8 4LGXDFQRjc9PT/7vH31b226qfwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFIfkmAUm eQOpsZJcqtjX/L81XL2CMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2RDkvODBERkRFQzBFNUREMTFFQUIyNDY4RDY1QzRGOUFFMDIvRUY0MEM0QUM0 MDQ2MTFFRkEyMDE0NjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgwDAMEAHQAIwMEAXQAJAMEAHQAJwMEAHQALTAMAwQAdAAvAwQA dAA2MA0GCSqGSIb3DQEBCwUAA4IBAQCbG6kN+a4uVuYrpSNAlWNNLpt0hcrhNtLi MhBUGkinpQwPhg5G9Pke1FbShK2HpS9xw+NbPppUIKKARgae6+kCFEFhqnIbYwci lXabLa5bEJNc2ShIi9sqnw5FESbMqSvw/tj4c3cyBtfVeUD6Sv5Ois4LlLRz0ctz JziMnsbGYNZkG5fS1XdFevWUYOx4sNlfP8ME3SKuVek4gOYRBf39ij75YGjS1wNd KpOGntp5AWFqzTVv3RUv9OODXWnlTQ36ofMo6WO0I8aeUmlvOJSXeL8oh5XL3VqX a11yjsZfc3mXLVuM4XbZ+77n5ZtC4WFof1B6czRMnyf35H83z4ko -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org