$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa File: 53CAA3B2023811EBA421D755C4F9AE02.roa (raw, json) Hash identifier: gjOpVTIrCg/GRDI2g0j816CEONXvKaN06KAW+xe46vM= Subject key identifier: 9B:A5:68:1E:5C:59:1E:6B:29:3B:11:0D:24:F2:41:B4:91:E3:A2:4C Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0A90 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa Signing time: Tue 22 Oct 2024 19:59:06 +0000 ROA not before: Tue 22 Oct 2024 19:59:06 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 58807 IP address blocks: 223.118.32.0/24 maxlen: 24 223.119.8.0/21 maxlen: 21 223.119.10.0/24 maxlen: 24 223.119.26.0/23 maxlen: 24 223.119.28.0/23 maxlen: 24 223.119.32.0/24 maxlen: 24 223.119.34.0/24 maxlen: 24 223.119.35.0/24 maxlen: 24 223.119.36.0/24 maxlen: 24 223.119.37.0/24 maxlen: 24 223.119.74.0/23 maxlen: 24 223.119.88.0/23 maxlen: 24 223.119.100.0/24 maxlen: 24 223.119.192.0/24 maxlen: 24 223.119.253.0/24 maxlen: 24 2402:4f00:f000::/36 maxlen: 36 2402:4f00:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2704 (0xa90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Oct 22 19:59:06 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67180409-2559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:e1:90:e8:4f:f8:eb:ff:e5:0f:fe:3d:26: b8:db:02:89:c4:f5:5a:a3:96:0f:08:2a:07:b3:4c: 7b:88:b1:fd:3b:7d:08:b3:02:d8:25:92:c8:1e:68: ad:a1:1e:5a:32:c4:e7:00:43:41:35:98:fe:a9:9c: 4b:44:9d:29:fd:f6:7b:27:eb:54:bd:2f:8b:83:bb: 2b:b0:9a:1d:5e:d3:05:cc:89:5c:2a:33:ba:66:0f: ba:37:e2:b5:c0:d3:97:cf:31:18:0e:18:9c:2d:ff: f5:15:fb:55:41:06:cc:25:a8:48:00:82:97:ff:72: a5:fa:9b:d1:2d:0a:ea:b6:32:0d:52:02:11:49:9e: 36:44:14:63:ea:91:0c:5e:6e:36:1a:da:fd:97:07: 91:03:bb:4e:34:08:4b:66:07:d1:0d:85:8c:62:77: a0:19:ca:3a:53:bb:0a:0e:ac:4a:f5:01:04:65:34: a4:f1:ae:f7:d5:7e:31:a8:4f:94:a6:6c:a8:1d:c5: e8:dc:9d:20:dd:eb:d0:c6:fd:08:05:98:a4:c1:4c: 3c:2a:19:d4:3a:69:45:35:d1:01:fa:e1:28:7a:cd: 20:de:4a:75:b1:39:be:fd:35:21:dd:dd:7a:98:c3: 53:6b:94:52:36:d9:c2:1e:2f:54:0d:2d:b7:bf:12: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A5:68:1E:5C:59:1E:6B:29:3B:11:0D:24:F2:41:B4:91:E3:A2:4C X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.118.32.0/24 223.119.8.0/21 223.119.26.0-223.119.29.255 223.119.32.0/24 223.119.34.0-223.119.37.255 223.119.74.0/23 223.119.88.0/23 223.119.100.0/24 223.119.192.0/24 223.119.253.0/24 IPv6: 2402:4f00:f000::/36 Signature Algorithm: sha256WithRSAEncryption 04:66:57:98:d8:3d:04:cf:fa:3b:84:72:b9:df:a6:da:52:3d: 22:48:d7:f0:70:ab:c9:ba:9e:93:be:98:42:c3:fa:7a:6e:ca: 51:a5:de:07:bb:a2:6f:79:b7:da:50:b1:33:6c:5e:ef:b8:bd: c2:54:a0:a4:fd:6b:cd:f0:fc:40:c8:43:b0:63:7b:2f:28:cb: 5a:9b:ec:ae:65:d5:a1:be:cf:a4:67:01:59:13:af:3d:9e:33: 67:78:f8:c0:c9:3f:05:14:ca:f0:0b:f6:86:4f:0c:48:e9:c8: 12:44:08:4d:c4:fe:49:15:5c:84:78:1c:69:4c:f9:af:51:79: fe:54:8d:c5:74:17:f1:df:81:4e:2b:b4:da:c7:bf:4e:89:e6: e1:06:6b:17:88:76:4d:18:4e:32:95:28:dd:46:90:4e:5b:51: e7:f7:b5:41:7b:ca:95:27:8c:01:e4:03:bf:f8:c1:74:8d:b9: 5d:c8:20:91:6e:d3:69:db:db:18:b0:5b:ea:b1:6f:8b:c4:18: 19:a3:9d:3b:12:04:00:ae:a7:e8:21:75:e3:3e:cd:b4:fd:0b: eb:55:00:a8:85:04:5f:f9:d9:14:f9:d0:e7:fb:58:fb:cc:a4: 6d:a3:46:a6:07:18:2a:9a:18:bb:e7:66:84:16:77:c4:16:d7: b1:35:e4:a7 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjQxMDIyMTk1OTA2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE4MDQwOS0yNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6zhkOhP+Ov/5Q/+PSa42wKJxPVao5YPCCoHs0x7iLH9O30IswLYJZLIHmit oR5aMsTnAENBNZj+qZxLRJ0p/fZ7J+tUvS+Lg7srsJodXtMFzIlcKjO6Zg+6N+K1 wNOXzzEYDhicLf/1FftVQQbMJahIAIKX/3Kl+pvRLQrqtjINUgIRSZ42RBRj6pEM Xm42Gtr9lweRA7tONAhLZgfRDYWMYnegGco6U7sKDqxK9QEEZTSk8a731X4xqE+U pmyoHcXo3J0g3evQxv0IBZikwUw8KhnUOmlFNdEB+uEoes0g3kp1sTm+/TUh3d16 mMNTa5RSNtnCHi9UDS23vxIrMwIDAQABo4IC6zCCAucwHQYDVR0OBBYEFJulaB5c WR5rKTsRDSTyQbSR46JMMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVDQUYvRUVGREZFQTQ1RUE3MTFFQUE1RTgzMTg0QzRGOUFFMDIvNTNDQUEzQjIw MjM4MTFFQkE0MjFENzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdQYIKwYBBQUHAQcBAf8E ZjBkMFIEAgABMEwDBADfdiADBAPfdwgwDAMEAd93GgMEAd93HAMEAN93IDAMAwQB 33ciAwQB33ckAwQB33dKAwQB33dYAwQA33dkAwQA33fAAwQA33f9MA4EAgACMAgD BgQkAk8A8DANBgkqhkiG9w0BAQsFAAOCAQEABGZXmNg9BM/6O4Ryud+m2lI9IkjX 8HCrybqek76YQsP6em7KUaXeB7uib3m32lCxM2xe77i9wlSgpP1rzfD8QMhDsGN7 LyjLWpvsrmXVob7PpGcBWROvPZ4zZ3j4wMk/BRTK8Av2hk8MSOnIEkQITcT+SRVc hHgcaUz5r1F5/lSNxXQX8d+BTiu02se/Tonm4QZrF4h2TRhOMpUo3UaQTltR5/e1 QXvKlSeMAeQDv/jBdI25XcggkW7TadvbGLBb6rFvi8QYGaOdOxIEAK6n6CF14z7N tP0L61UAqIUEX/nZFPnQ5/tY+8ykbaNGpgcYKpoYu+dmhBZ3xBbXsTXkpw== -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:18 2024 by rpki-client on console-fra.rpki-client.org