$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/CB9407D62F6F11EF9E2E8C25C4F9AE02.roa File: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (raw, json) Hash identifier: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4= Subject key identifier: EE:51:37:89:D0:D0:D6:F5:0C:B7:D7:21:1A:26:8D:70:FC:E5:D3:04 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0A8C Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/CB9407D62F6F11EF9E2E8C25C4F9AE02.roa Signing time: Tue 22 Oct 2024 19:59:01 +0000 ROA not before: Tue 22 Oct 2024 19:59:01 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 270215 IP address blocks: 223.119.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Oct 22 19:59:01 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67180404-5c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:55:9a:3b:07:55:f2:5b:42:05:3c:98:09: 08:11:7c:6e:cb:79:a8:56:0c:ff:c6:ab:91:7c:d5: b7:e8:f6:58:58:5d:8a:d2:d4:8a:a1:67:78:07:af: 88:cb:79:0c:bf:aa:4a:69:61:b2:6c:bf:2a:b7:e4: 94:43:07:ad:7c:de:9c:66:e7:48:6c:62:53:7c:50: 44:c0:98:1a:31:9a:39:4e:27:60:da:85:77:76:9b: 75:cf:7b:e0:03:1d:4a:11:21:73:7a:77:5a:45:cd: da:91:d0:b4:89:7b:25:f9:91:be:0a:69:04:7b:0d: 27:78:61:75:d3:ef:03:47:16:a3:c2:43:76:bd:93: aa:5d:12:ef:46:30:72:9b:0a:12:bd:73:f8:14:1a: eb:c7:f1:8e:e6:fb:3f:14:5e:5f:c2:10:ff:1b:61: b4:49:d6:eb:f6:c9:92:23:24:4c:cb:bb:8e:b4:b3: 58:cb:71:51:0b:6e:6e:3d:8c:88:32:bf:9d:2b:ac: 74:8f:39:29:79:62:3a:ff:1e:45:0f:a2:67:cd:f1: d4:ab:9a:fc:60:6b:e4:0d:e9:6d:f3:0c:78:4e:17: db:ac:6c:6b:4a:89:3f:b7:ce:74:15:78:9c:e7:18: 44:c1:86:f1:f0:18:b3:18:ac:ad:66:f6:36:5b:01: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:51:37:89:D0:D0:D6:F5:0C:B7:D7:21:1A:26:8D:70:FC:E5:D3:04 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/CB9407D62F6F11EF9E2E8C25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.119.251.0/24 Signature Algorithm: sha256WithRSAEncryption 29:c0:c2:97:7f:21:c7:26:eb:d7:6d:c4:b2:a4:7c:f0:04:7f: 9a:91:1a:00:b1:b5:e0:93:b2:21:97:6a:bf:ad:58:c7:8c:10: f9:59:28:b3:6e:a8:8d:ac:fc:33:32:3c:e2:70:c3:e6:e6:e3: ca:8b:db:d0:5e:ee:73:7a:a6:24:f6:d1:db:25:1e:51:95:ee: 36:75:bf:e1:42:0e:ad:15:7b:2d:ca:fc:06:58:ab:c8:52:c5: aa:9b:99:95:57:2f:28:06:c0:7b:15:e9:b2:68:c4:dd:eb:fd: 26:b3:9b:c1:18:6d:d1:35:3b:6d:86:ac:ed:36:d8:b1:e8:37: aa:7a:dc:60:bc:d4:08:d4:e2:15:fe:1e:32:d7:7b:c6:40:7a: c8:82:95:86:74:87:f2:28:16:bf:73:c3:f4:de:48:92:13:46: 96:47:3d:86:a6:d0:60:2f:8e:ed:8f:5f:ac:0d:2a:f4:ec:95: 1f:17:b2:a5:93:34:7d:e6:9a:d0:43:92:f9:fd:9d:1f:0e:08: 20:09:40:55:1f:09:f1:32:72:8f:02:d6:54:26:76:51:7b:f4: a7:a9:d9:78:ee:cc:d1:ea:9a:d5:9a:f7:95:c9:ce:1b:68:15: fe:12:ca:f4:b0:1c:b1:9b:c6:91:9f:c2:7b:07:48:fe:66:21: 6e:ca:ed:dd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjQxMDIyMTk1OTAxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE4MDQwNC01YzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA5VmjsHVfJbQgU8mAkIEXxuy3moVgz/xquRfNW36PZYWF2K0tSKoWd4B6+I y3kMv6pKaWGybL8qt+SUQwetfN6cZudIbGJTfFBEwJgaMZo5Tidg2oV3dpt1z3vg Ax1KESFzendaRc3akdC0iXsl+ZG+CmkEew0neGF10+8DRxajwkN2vZOqXRLvRjBy mwoSvXP4FBrrx/GO5vs/FF5fwhD/G2G0Sdbr9smSIyRMy7uOtLNYy3FRC25uPYyI Mr+dK6x0jzkpeWI6/x5FD6JnzfHUq5r8YGvkDelt8wx4ThfbrGxrSok/t850FXic 5xhEwYbx8BizGKytZvY2WwHcxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO5RN4nQ 0Nb1DLfXIRomjXD85dMEMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVDQUYvRUVGREZFQTQ1RUE3MTFFQUE1RTgzMTg0QzRGOUFFMDIvQ0I5NDA3RDYy RjZGMTFFRjlFMkU4QzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADfd/swDQYJKoZIhvcNAQELBQADggEBACnAwpd/Iccm69dt xLKkfPAEf5qRGgCxteCTsiGXar+tWMeMEPlZKLNuqI2s/DMyPOJww+bm48qL29Be 7nN6piT20dslHlGV7jZ1v+FCDq0Vey3K/AZYq8hSxaqbmZVXLygGwHsV6bJoxN3r /Sazm8EYbdE1O22GrO022LHoN6p63GC81AjU4hX+HjLXe8ZAesiClYZ0h/IoFr9z w/TeSJITRpZHPYam0GAvju2PX6wNKvTslR8XsqWTNH3mmtBDkvn9nR8OCCAJQFUf CfEyco8C1lQmdlF79Kep2XjuzNHqmtWa95XJzhtoFf4SyvSwHLGbxpGfwnsHSP5m IW7K7d0= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:48 2024 by rpki-client on console-fra.rpki-client.org