$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/E7F141609E9911EBB4117632C4F9AE02.roa File: E7F141609E9911EBB4117632C4F9AE02.roa (raw, json) Hash identifier: bPG+JKz2c8qz67QLcdFAZ1OKHiVMuC03ojwfXNaj3R8= Subject key identifier: 25:5C:36:3B:F1:60:A2:2A:1C:BA:44:B2:37:D8:F9:21:14:3E:C8:AB Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Certificate serial: 08B5 Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/E7F141609E9911EBB4117632C4F9AE02.roa Signing time: Thu 30 May 2024 22:19:00 +0000 ROA not before: Thu 30 May 2024 22:19:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 17720 IP address blocks: 203.26.6.0/24 maxlen: 24 203.29.96.0/24 maxlen: 24 2001:df1:be00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Validity Not Before: May 30 22:19:00 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6658fb54-d754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:38:75:cd:2a:47:40:6a:bb:57:c3:76:18: d7:fd:c0:23:6e:66:37:c0:6e:83:54:96:c5:2a:77: 07:e6:4b:e0:b4:53:48:0a:54:23:69:4c:e5:c9:68: a2:00:20:a4:96:ab:fd:b9:7d:5b:a9:94:bd:a1:8b: c9:20:55:3e:74:d1:d3:8c:af:e8:1d:79:dc:76:56: b5:3c:95:51:15:04:7d:d8:c9:4d:44:95:f3:20:71: 7d:55:5a:d6:a6:4c:b8:89:58:00:eb:49:fb:32:b2: fe:ce:8f:d4:97:41:90:3e:d5:85:03:06:ca:71:d2: 6f:7d:37:0b:e4:25:d4:00:73:85:82:01:b1:9c:d0: 01:0b:89:1f:f4:85:19:2a:24:ec:fa:06:50:89:54: 09:ed:46:8c:86:57:c0:e8:94:0a:71:df:be:fb:72: 61:ee:2d:6f:18:37:4c:09:0f:ba:c9:98:cb:85:17: c1:e8:bd:ab:de:46:83:0d:52:fe:f0:fb:5e:ea:94: a2:bb:b6:fa:95:a8:dc:4a:c1:65:f5:fb:da:ea:c3: 91:75:3b:b9:9f:96:a9:b5:27:53:4b:6a:35:ce:22: c2:96:c9:f3:2f:81:f4:ac:8c:91:37:51:aa:2b:35: eb:fb:e7:ff:02:31:87:f8:b8:42:88:4a:cd:b9:f9: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5C:36:3B:F1:60:A2:2A:1C:BA:44:B2:37:D8:F9:21:14:3E:C8:AB X509v3 Authority Key Identifier: keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/E7F141609E9911EBB4117632C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.26.6.0/24 203.29.96.0/24 IPv6: 2001:df1:be00::/48 Signature Algorithm: sha256WithRSAEncryption a2:32:e6:ce:fc:93:46:d0:1e:7e:c9:3e:c4:72:90:ac:e3:52: d6:d3:7f:47:da:e3:22:54:64:45:51:31:de:fe:c2:2a:12:26: 5a:a4:18:f5:17:3a:c4:18:92:17:04:4e:59:c1:14:25:d8:cb: 78:43:17:fc:a2:09:96:f4:9b:3c:d3:40:e4:f6:5f:db:b6:64: 59:ec:9c:56:55:db:46:31:56:04:90:0c:98:17:7d:9b:e8:6d: db:30:72:a5:12:82:5b:db:71:43:43:b1:b3:eb:85:f4:7e:f8: da:01:4e:d8:13:fe:b9:8c:71:73:ac:4b:bc:31:8e:97:6d:c1: 5f:8e:ba:42:7c:2b:95:e7:ce:51:dc:bd:01:d9:14:00:0f:69: ad:f7:b8:0f:29:5a:e1:ef:d4:f9:b7:a6:08:d6:e4:56:35:f2: b7:97:19:d8:32:df:25:30:e0:c2:2f:49:3a:bb:ff:e8:30:6f: c3:ed:58:87:59:8f:93:f4:51:cb:d9:b9:18:7f:40:0d:27:a7: 4d:92:e3:6d:2e:15:b5:65:0b:a8:51:e2:88:2c:42:c5:9d:2d: 8c:8e:8c:85:c0:ad:d2:10:78:47:2a:a6:cf:37:f4:db:67:75: 55:34:5c:b5:da:11:f2:21:f6:6a:c1:aa:13:f5:57:bd:21:b3: 86:ff:37:9d -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0 RDgzQ0M4RjUwHhcNMjQwNTMwMjIxOTAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4ZmI1NC1kNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuck4dc0qR0Bqu1fDdhjX/cAjbmY3wG6DVJbFKncH5kvgtFNIClQjaUzlyWii ACCklqv9uX1bqZS9oYvJIFU+dNHTjK/oHXncdla1PJVRFQR92MlNRJXzIHF9VVrW pky4iVgA60n7MrL+zo/Ul0GQPtWFAwbKcdJvfTcL5CXUAHOFggGxnNABC4kf9IUZ KiTs+gZQiVQJ7UaMhlfA6JQKcd+++3Jh7i1vGDdMCQ+6yZjLhRfB6L2r3kaDDVL+ 8Pte6pSiu7b6lajcSsFl9fva6sORdTu5n5aptSdTS2o1ziLClsnzL4H0rIyRN1Gq KzXr++f/AjGH+LhCiErNufmd/QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFCVcNjvx YKIqHLpEsjfY+SEUPsirMB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0 QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUU3MzUvRThFNjY3Q0E5NEJFMTFFQTk4NEZBRDU4QzRGOUFFMDIvRTdGMTQxNjA5 RTk5MTFFQkI0MTE3NjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBADLGgYDBADLHWAwDwQCAAIwCQMHACABDfG+ADANBgkqhkiG 9w0BAQsFAAOCAQEAojLmzvyTRtAefsk+xHKQrONS1tN/R9rjIlRkRVEx3v7CKhIm WqQY9Rc6xBiSFwROWcEUJdjLeEMX/KIJlvSbPNNA5PZf27ZkWeycVlXbRjFWBJAM mBd9m+ht2zBypRKCW9txQ0Oxs+uF9H742gFO2BP+uYxxc6xLvDGOl23BX466Qnwr lefOUdy9AdkUAA9prfe4Dyla4e/U+bemCNbkVjXyt5cZ2DLfJTDgwi9JOrv/6DBv w+1Yh1mPk/RRy9m5GH9ADSenTZLjbS4VtWULqFHiiCxCxZ0tjI6MhcCt0hB4Ryqm zzf022d1VTRctdoR8iH2asGqE/VXvSGzhv83nQ== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org