$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A95180F2D7DA11ECB3D1AF67C4F9AE02.roa File: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (raw, json) Hash identifier: Q72iVEgncsp2lLSVgYTmWchv3C8JihagPip5Niim/gg= Subject key identifier: 0D:E3:78:77:AA:54:AB:02:AC:9E:0F:84:2F:14:38:06:B7:98:36:36 Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Certificate serial: 062E Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A95180F2D7DA11ECB3D1AF67C4F9AE02.roa Signing time: Wed 24 Jul 2024 23:41:45 +0000 ROA not before: Wed 24 Jul 2024 23:41:45 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 63593 IP address blocks: 129.227.17.0/24 maxlen: 24 129.227.18.0/24 maxlen: 24 129.227.19.0/24 maxlen: 24 129.227.29.0/24 maxlen: 24 129.227.30.0/24 maxlen: 24 129.227.31.0/24 maxlen: 24 129.227.192.0/24 maxlen: 24 129.227.193.0/24 maxlen: 24 129.227.194.0/23 maxlen: 24 156.59.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Validity Not Before: Jul 24 23:41:45 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a19139-ff30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:ae:c8:83:e1:7f:96:d3:79:17:db:dc:25: f6:c2:11:df:44:fd:09:50:27:87:1a:7f:48:5e:8a: a3:62:77:7d:2c:97:e6:9a:37:79:76:7b:d4:82:49: d2:ba:28:b5:04:4c:73:65:f2:57:90:42:ba:28:bd: ee:2d:70:34:1e:69:d7:41:8b:c7:98:bc:dd:49:36: 89:0f:2d:52:fa:37:97:86:1b:eb:f4:a7:b0:19:2c: 56:ee:fd:bf:60:5c:bc:9f:03:7b:78:04:d0:0e:c3: e9:c6:00:3a:de:a8:70:6a:7f:4c:dc:77:04:35:b4: dd:66:18:51:37:81:e0:a1:86:86:99:76:d1:c7:25: 0c:fe:fa:bc:a0:44:f4:30:0b:fe:a1:12:01:ee:88: fd:d6:45:06:b9:a9:9b:21:bb:6d:8b:13:a3:7e:0c: 5d:2e:ff:71:a4:4b:27:f9:fe:dc:c0:c0:9d:27:e2: e1:d0:99:35:af:2d:51:c7:3b:05:e3:ef:49:f4:d1: c1:c5:19:02:17:65:8c:7e:9e:03:34:02:89:a7:20: 08:95:e3:cb:e7:70:34:c9:9a:7e:ac:75:36:df:32: 0e:53:82:d2:b5:db:9e:c4:46:6e:ee:1a:f4:1a:67: 36:80:e9:10:42:d2:34:21:1b:a4:9b:73:c3:dc:61: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E3:78:77:AA:54:AB:02:AC:9E:0F:84:2F:14:38:06:B7:98:36:36 X509v3 Authority Key Identifier: keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A95180F2D7DA11ECB3D1AF67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 129.227.17.0-129.227.19.255 129.227.29.0-129.227.31.255 129.227.192.0/22 156.59.216.0/24 Signature Algorithm: sha256WithRSAEncryption 07:59:66:d4:bc:b3:8a:51:02:b7:99:ba:f8:02:98:0f:fa:22: 50:b0:46:f6:3d:78:ac:6b:e3:b4:9c:1c:4c:e3:b0:87:cd:16: 1e:0d:ae:e4:77:53:ae:4d:d4:6f:a2:9d:80:e5:0e:00:90:97: 69:1c:b7:81:04:22:1f:40:b5:22:c0:71:bc:1e:21:32:df:74: a8:fc:33:1a:90:c7:ee:1b:c1:92:e2:8b:0e:3b:5b:f6:b5:ea: d1:e6:31:4c:6b:23:1c:2d:c7:51:1e:5d:1a:ff:aa:2e:c3:33: 40:67:83:9b:c5:39:79:62:4f:f8:2b:4c:36:b1:7b:f2:78:1f: 1c:57:39:ea:58:45:ab:b7:a3:8d:f5:7c:64:41:1c:ee:89:c2: c7:25:c5:a2:fe:c6:38:90:b5:3b:b4:7c:69:ee:13:d9:a8:54: a0:85:3c:00:5a:56:d4:5e:16:d1:f4:80:aa:53:cd:ec:06:11: 4b:4a:b4:5a:04:47:40:a2:58:54:63:a3:9b:88:47:c6:ee:71: 6e:3d:f1:5e:36:07:a3:0c:e7:05:3d:f7:71:30:24:bc:87:8f: cb:ee:b6:b8:b4:67:8c:83:02:6c:2e:0a:5f:0c:f1:c7:e7:6a: ae:0b:07:57:ae:fb:2d:ca:f6:9e:74:e5:44:6e:bd:78:ce:7b: 39:1a:d0:8a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE RTA3MkI3RjMwHhcNMjQwNzI0MjM0MTQ1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmExOTEzOS1mZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdKuyIPhf5bTeRfb3CX2whHfRP0JUCeHGn9IXoqjYnd9LJfmmjd5dnvUgknS uii1BExzZfJXkEK6KL3uLXA0HmnXQYvHmLzdSTaJDy1S+jeXhhvr9KewGSxW7v2/ YFy8nwN7eATQDsPpxgA63qhwan9M3HcENbTdZhhRN4HgoYaGmXbRxyUM/vq8oET0 MAv+oRIB7oj91kUGuambIbttixOjfgxdLv9xpEsn+f7cwMCdJ+Lh0Jk1ry1RxzsF 4+9J9NHBxRkCF2WMfp4DNAKJpyAIlePL53A0yZp+rHU23zIOU4LStduexEZu7hr0 Gmc2gOkQQtI0IRukm3PD3GGTxwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFA3jeHeq VKsCrJ4PhC8UOAa3mDY2MB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0 X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNERFNjM1RTA3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvQTk1MTgwRjJE N0RBMTFFQ0IzRDFBRjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgwDAMEAIHjEQMEAoHjEDAMAwQAgeMdAwQFgeMAAwQCgePAAwQA nDvYMA0GCSqGSIb3DQEBCwUAA4IBAQAHWWbUvLOKUQK3mbr4ApgP+iJQsEb2PXis a+O0nBxM47CHzRYeDa7kd1OuTdRvop2A5Q4AkJdpHLeBBCIfQLUiwHG8HiEy33So /DMakMfuG8GS4osOO1v2terR5jFMayMcLcdRHl0a/6ouwzNAZ4ObxTl5Yk/4K0w2 sXvyeB8cVznqWEWrt6ON9XxkQRzuicLHJcWi/sY4kLU7tHxp7hPZqFSghTwAWlbU XhbR9ICqU83sBhFLSrRaBEdAolhUY6ObiEfG7nFuPfFeNgejDOcFPfdxMCS8h4/L 7ra4tGeMgwJsLgpfDPHH52quCwdXrvstyvaedOVEbr14zns5GtCK -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:50 2024 by rpki-client on console-fra.rpki-client.org