$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa File: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (raw, json) Hash identifier: xHonn85fL1ePNoNo4tJFzqut+1Hyt850Shi9NOhDxqM= Subject key identifier: 1F:71:B1:3C:FD:74:31:98:20:A7:89:3E:77:99:C2:F9:0D:68:EB:DC Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 27FB Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa Signing time: Tue 24 Sep 2024 07:36:45 +0000 ROA not before: Tue 24 Sep 2024 07:36:45 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 141718 IP address blocks: 43.250.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10235 (0x27fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Sep 24 07:36:45 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66f26c0d-ea07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e3:4c:f8:3b:81:99:6d:59:a7:48:b1:b9:7d: 2f:24:1f:1a:79:26:0b:7c:5a:92:f0:95:64:31:a2: d3:fa:b1:da:8a:46:5e:01:2d:8f:e8:11:f7:0d:2f: 62:0c:a5:82:49:f5:1c:e9:2b:64:16:44:44:c4:87: 5e:20:4b:bd:d8:ed:fa:b6:0d:45:b7:1f:54:1a:7f: 6b:9a:8e:30:68:e8:ec:4d:75:ee:f7:4a:a8:c8:a7: cb:3f:29:f0:d9:c2:84:ec:8b:6c:3e:ba:0a:1b:79: e2:7c:40:e8:51:81:fc:53:4e:bf:70:19:ef:d4:fb: 5a:ed:62:ef:e5:fb:2f:18:f6:2e:96:bb:3a:dc:61: 20:ee:bb:f0:6c:08:f2:aa:ab:42:a9:b1:f0:60:6e: 76:1a:55:92:37:1b:58:2f:3f:fa:9c:36:61:51:15: c4:ef:e4:3d:d7:5a:b4:e2:fb:76:d3:ce:71:18:80: 11:60:d8:ed:21:4c:01:4b:c5:78:8b:ff:ef:d9:a2: 28:96:44:d3:bd:8a:b9:08:6d:26:ca:4c:69:39:b4: db:01:6b:bd:a8:fc:85:cd:2a:00:31:98:5a:0a:0c: 9d:b8:5c:3b:7e:af:53:93:f0:47:c1:88:fb:ad:d8: a4:3f:68:85:c7:19:c1:83:d7:72:9a:8d:0d:02:e1: 65:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:71:B1:3C:FD:74:31:98:20:A7:89:3E:77:99:C2:F9:0D:68:EB:DC X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.124.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:63:86:22:80:8c:01:62:9c:30:66:f9:56:83:d0:24:c9:b4: 37:d0:73:cf:16:71:bf:00:61:77:74:5f:cc:13:05:bc:dc:09: cf:ba:6c:a7:18:f4:f3:a7:41:31:c5:2d:96:f6:17:74:e8:de: f6:52:f8:a4:ec:d6:78:15:3c:8d:2f:8f:7d:04:a2:9a:9e:37: af:a2:e6:1e:6e:d1:a4:61:9e:06:3c:0a:89:1d:1a:44:3f:7f: 24:ab:55:7a:85:e4:11:24:fa:98:17:5b:bb:9e:a4:a1:4f:df: 60:1f:f7:42:b0:e7:5f:0b:de:18:5e:6f:0f:f3:06:1c:70:5b: b6:1e:2f:41:11:9f:a5:4c:0a:23:4f:de:54:78:30:0d:43:08: 2b:2b:db:ab:9e:a6:49:70:ac:54:89:be:19:f4:cf:e5:ad:ea: d1:bb:96:ab:c5:3a:e0:57:95:72:0b:26:8f:0c:b2:08:b1:42: 23:87:96:a8:77:17:74:d7:01:86:59:91:6b:70:79:b9:1f:f3: 54:f3:5a:9f:b0:0d:b5:d0:c6:78:49:1b:d1:a4:69:27:23:cf: d1:9b:92:7a:03:fb:65:52:5a:5c:08:ab:59:51:42:7d:dd:c6: 9f:e2:14:35:6b:77:81:53:22:bb:5e:09:a1:e7:ab:82:79:6c: 5d:3f:a6:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJ/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjQwOTI0MDczNjQ1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYyNmMwZC1lYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ONM+DuBmW1Zp0ixuX0vJB8aeSYLfFqS8JVkMaLT+rHaikZeAS2P6BH3DS9i DKWCSfUc6StkFkRExIdeIEu92O36tg1Ftx9UGn9rmo4waOjsTXXu90qoyKfLPynw 2cKE7ItsProKG3nifEDoUYH8U06/cBnv1Pta7WLv5fsvGPYulrs63GEg7rvwbAjy qqtCqbHwYG52GlWSNxtYLz/6nDZhURXE7+Q911q04vt2085xGIARYNjtIUwBS8V4 i//v2aIolkTTvYq5CG0mykxpObTbAWu9qPyFzSoAMZhaCgyduFw7fq9Tk/BHwYj7 rdikP2iFxxnBg9dymo0NAuFlQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB9xsTz9 dDGYIKeJPneZwvkNaOvcMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvQkY5QzY1NUU3 QTQ3MTFFRjlDN0EwRTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr+nwwDQYJKoZIhvcNAQELBQADggEBAItjhiKAjAFinDBm +VaD0CTJtDfQc88Wcb8AYXd0X8wTBbzcCc+6bKcY9POnQTHFLZb2F3To3vZS+KTs 1ngVPI0vj30EopqeN6+i5h5u0aRhngY8CokdGkQ/fySrVXqF5BEk+pgXW7uepKFP 32Af90Kw518L3hhebw/zBhxwW7YeL0ERn6VMCiNP3lR4MA1DCCsr26uepklwrFSJ vhn0z+Wt6tG7lqvFOuBXlXILJo8MsgixQiOHlqh3F3TXAYZZkWtwebkf81TzWp+w DbXQxnhJG9GkaScjz9GbknoD+2VSWlwIq1lRQn3dxp/iFDVrd4FTIrteCaHnq4J5 bF0/poU= -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:08 2024 by rpki-client on console-fra.rpki-client.org