$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/121EADE62F7011EF82514126C4F9AE02.roa File: 121EADE62F7011EF82514126C4F9AE02.roa (raw, json) Hash identifier: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk= Subject key identifier: 12:8D:63:36:2A:4F:2D:83:0A:A0:AC:7B:8A:0F:58:DF:25:A1:6D:37 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0A8D Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/121EADE62F7011EF82514126C4F9AE02.roa Signing time: Tue 22 Oct 2024 19:59:01 +0000 ROA not before: Tue 22 Oct 2024 19:59:01 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 272151 IP address blocks: 223.119.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2701 (0xa8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Oct 22 19:59:01 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67180405-fd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:01:3e:7d:73:6d:84:f4:4d:03:53:ee:d4:c3: df:ef:44:2a:4b:29:61:86:59:71:bf:b6:2a:34:70: 06:b2:a9:03:ef:66:81:7e:a9:9e:2d:2b:22:7d:7d: 83:88:ab:3f:d4:12:fa:c0:c2:34:1a:ca:35:d7:66: 46:fa:44:7c:94:8a:dd:f0:7d:b7:59:fb:a0:55:2e: 34:1b:60:bf:a6:de:a9:26:99:07:81:02:26:ae:73: 56:2e:4b:7d:7b:73:ed:41:0c:b8:fd:a0:46:ad:01: 49:bc:47:86:75:33:52:b3:af:fe:20:b1:dd:5f:16: d8:75:40:09:8d:c2:51:09:65:85:a4:a5:be:4f:f4: f3:08:c5:ec:7f:8d:a3:42:cc:50:2d:24:d4:02:cc: 15:6d:4c:5a:10:a7:23:a0:5f:c7:ad:5e:0e:76:1f: 97:83:b5:30:9a:38:dc:0f:c8:6f:9c:6e:ce:a1:a6: b8:50:e5:7a:f9:d5:47:41:a7:c8:97:97:e4:9b:fd: 13:d7:4b:4f:23:b2:5b:de:6f:41:cb:e0:19:9a:ba: 4e:04:46:22:73:8e:bc:e3:79:0d:4a:27:c3:af:97: ec:a3:ad:6d:45:b0:6e:0c:8e:ab:4d:3d:81:0b:f5: ae:78:f6:f5:e5:52:4d:0a:6b:a7:71:f0:54:3c:f3: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:63:36:2A:4F:2D:83:0A:A0:AC:7B:8A:0F:58:DF:25:A1:6D:37 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/121EADE62F7011EF82514126C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.119.251.0/24 Signature Algorithm: sha256WithRSAEncryption 02:24:da:b4:80:d2:bd:c0:cc:78:b5:82:ad:8b:2f:d2:a0:3b: c7:2d:93:b7:7d:64:b7:35:91:e7:54:9b:cc:eb:87:e2:f3:3f: f5:e1:e4:ca:e3:27:f2:2c:22:61:5e:60:20:ab:c7:6b:a2:76: 8c:23:37:e2:68:2b:3e:6d:eb:aa:93:98:14:fc:06:bd:0f:ed: f3:91:a7:f6:7c:0d:4b:48:21:57:82:83:c1:35:6e:0c:d9:45: 42:f8:78:26:52:5e:d1:d2:0c:b6:f6:42:e4:af:8e:f6:b1:74: c0:02:a8:74:aa:85:ee:90:bd:c9:48:50:bf:d7:3b:bd:1d:bd: a7:a5:bd:59:30:52:82:38:63:b5:9e:4f:23:c6:7b:c4:37:54: 40:b2:1c:4d:1a:a8:7e:47:98:0b:d1:0c:90:8c:60:7a:ca:1f: af:54:9f:39:4b:fc:55:ec:c8:63:6d:21:d4:99:06:67:1f:d8: 9b:3d:fb:81:c8:1a:f3:82:c0:d3:77:e4:c4:b5:ef:c7:01:42: b5:ab:4a:01:0f:5a:97:43:dd:4b:41:e1:60:45:06:0b:f9:9e: 6a:cb:b0:74:c3:42:c2:92:de:57:54:2c:a5:6f:86:e8:5d:dd: 1a:9d:c5:1d:dd:92:80:17:41:d8:ee:82:85:d3:7e:1c:14:2d: 23:8e:d3:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjQxMDIyMTk1OTAxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE4MDQwNS1mZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gE+fXNthPRNA1Pu1MPf70QqSylhhllxv7YqNHAGsqkD72aBfqmeLSsifX2D iKs/1BL6wMI0Gso112ZG+kR8lIrd8H23WfugVS40G2C/pt6pJpkHgQImrnNWLkt9 e3PtQQy4/aBGrQFJvEeGdTNSs6/+ILHdXxbYdUAJjcJRCWWFpKW+T/TzCMXsf42j QsxQLSTUAswVbUxaEKcjoF/HrV4Odh+Xg7UwmjjcD8hvnG7Ooaa4UOV6+dVHQafI l5fkm/0T10tPI7Jb3m9By+AZmrpOBEYic46843kNSifDr5fso61tRbBuDI6rTT2B C/WuePb15VJNCmuncfBUPPMsfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBKNYzYq Ty2DCqCse4oPWN8loW03MB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVDQUYvRUVGREZFQTQ1RUE3MTFFQUE1RTgzMTg0QzRGOUFFMDIvMTIxRUFERTYy RjcwMTFFRjgyNTE0MTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADfd/swDQYJKoZIhvcNAQELBQADggEBAAIk2rSA0r3AzHi1 gq2LL9KgO8ctk7d9ZLc1kedUm8zrh+LzP/Xh5MrjJ/IsImFeYCCrx2uidowjN+Jo Kz5t66qTmBT8Br0P7fORp/Z8DUtIIVeCg8E1bgzZRUL4eCZSXtHSDLb2QuSvjvax dMACqHSqhe6QvclIUL/XO70dvaelvVkwUoI4Y7WeTyPGe8Q3VECyHE0aqH5HmAvR DJCMYHrKH69UnzlL/FXsyGNtIdSZBmcf2Js9+4HIGvOCwNN35MS178cBQrWrSgEP WpdD3UtB4WBFBgv5nmrLsHTDQsKS3ldULKVvhuhd3RqdxR3dkoAXQdjugoXTfhwU LSOO070= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:18 2024 by rpki-client on console-fra.rpki-client.org