$ rpki-client -vvf rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/4C89E536DC6311EA8C998087C4F9AE02.roa File: 4C89E536DC6311EA8C998087C4F9AE02.roa (raw, json) Hash identifier: YKIQMLZ3tLnmlGKnXmNNQEY+DpZ472mwzMIx+1V0BW8= Subject key identifier: D2:D6:A7:E3:1F:B5:22:E6:43:22:F0:18:F5:3D:BF:30:6F:00:C0:9F Certificate issuer: /CN=A917F5F0/serialNumber=93FAD588F39EA58C6588DDFA17BD0D6FCE7A606A Certificate serial: 076B Authority key identifier: 93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/4C89E536DC6311EA8C998087C4F9AE02.roa Signing time: Thu 18 Jul 2024 21:59:31 +0000 ROA not before: Thu 18 Jul 2024 21:59:31 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132901 IP address blocks: 59.153.26.0/23 maxlen: 24 103.27.204.0/23 maxlen: 23 103.27.204.0/23 maxlen: 24 103.198.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.crl rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1899 (0x76b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F5F0/serialNumber=93FAD588F39EA58C6588DDFA17BD0D6FCE7A606A Validity Not Before: Jul 18 21:59:31 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66999042-a257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:a6:5b:27:9c:47:41:e9:ae:2b:90:92:c0: 8e:d2:c8:49:a6:fb:be:2e:f9:bb:d5:e8:46:bc:93: d0:fb:56:d9:92:25:5d:0e:ec:9d:63:2f:b6:28:d6: bd:aa:47:7c:41:b8:b5:81:94:e5:74:05:58:0d:72: 1c:34:f4:89:54:50:11:4a:fe:e7:e8:e6:f3:67:db: a0:fa:24:35:f8:e2:96:3a:76:80:c0:15:11:2e:dc: c7:4e:7c:48:58:53:f5:e8:0d:35:43:6c:cb:aa:ca: 10:60:a1:1c:1f:f4:6b:24:2c:25:47:24:1f:16:93: 7a:dc:dd:27:bf:0e:93:7a:50:18:6a:13:9c:94:91: 83:3d:0a:4d:2e:39:77:b2:3d:d3:f4:97:11:89:22: 85:3c:87:7a:6b:97:c4:77:1f:04:5b:57:1c:6a:5f: 12:66:5a:e3:eb:28:c2:e6:59:50:82:da:55:21:76: 7e:7b:4b:be:3e:1d:cf:a8:98:19:df:50:59:76:52: ee:ce:3a:88:32:51:15:07:91:84:14:38:9a:be:6c: 93:91:21:11:30:81:ef:af:c2:38:88:5d:15:63:b3: 53:77:ce:49:06:cb:b1:eb:de:60:fd:0b:7b:d7:10: be:dd:ca:9d:eb:48:6d:b4:54:78:4b:c1:c5:1f:a5: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D6:A7:E3:1F:B5:22:E6:43:22:F0:18:F5:3D:BF:30:6F:00:C0:9F X509v3 Authority Key Identifier: keyid:93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/4C89E536DC6311EA8C998087C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.26.0/23 103.27.204.0/23 103.198.16.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:5f:66:76:6d:37:eb:e4:e8:03:6c:93:7c:15:b5:1a:2e:93: 9f:27:22:fd:b7:71:fc:c0:3d:e9:26:e8:43:1d:2a:37:44:e0: b2:33:9d:ee:fb:08:af:47:b0:19:e2:b4:56:92:b2:6a:e3:62: d9:38:fc:b1:50:b0:9f:1d:58:bf:a7:8d:1c:81:d9:71:c6:e7: 28:44:c0:bc:24:e6:9d:3e:8b:5e:4a:c3:ba:99:a1:ea:cd:2e: 75:17:4e:f4:e2:4d:85:35:31:82:78:ad:79:3c:8f:76:b4:7b: f2:d3:ee:05:5e:f6:d5:da:ff:fe:44:a7:55:4a:98:48:9d:ff: e1:17:7f:9a:3b:22:78:58:9c:6c:49:6f:b8:6a:a4:de:80:19: d0:0e:cc:ee:4e:d3:d1:d6:8b:13:40:ae:79:f9:54:69:03:26: 31:0f:fe:d0:66:8a:3d:ad:f9:1a:a3:6e:7c:9a:1c:95:de:d9: 23:9d:ca:6a:3a:a0:e5:f5:70:f5:a0:01:0d:ee:d0:ad:7f:ef: ef:55:9b:06:fc:5a:0c:d0:76:ad:26:43:7a:68:80:89:3b:70: 16:cf:33:9a:f9:75:b1:4c:22:41:91:0f:13:1e:c6:b6:df:1f: ee:69:e1:82:01:3e:e4:de:65:41:96:d8:dd:f9:0a:72:00:a8: bb:d6:98:c8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y1RjAxMTAvBgNVBAUTKDkzRkFENTg4RjM5RUE1OEM2NTg4RERGQTE3QkQwRDZG Q0U3QTYwNkEwHhcNMjQwNzE4MjE1OTMxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk5OTA0Mi1hMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru2mWyecR0HpriuQksCO0shJpvu+Lvm71ehGvJPQ+1bZkiVdDuydYy+2KNa9 qkd8Qbi1gZTldAVYDXIcNPSJVFARSv7n6ObzZ9ug+iQ1+OKWOnaAwBURLtzHTnxI WFP16A01Q2zLqsoQYKEcH/RrJCwlRyQfFpN63N0nvw6TelAYahOclJGDPQpNLjl3 sj3T9JcRiSKFPId6a5fEdx8EW1ccal8SZlrj6yjC5llQgtpVIXZ+e0u+Ph3PqJgZ 31BZdlLuzjqIMlEVB5GEFDiavmyTkSERMIHvr8I4iF0VY7NTd85JBsux695g/Qt7 1xC+3cqd60httFR4S8HFH6WnowIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNLWp+Mf tSLmQyLwGPU9vzBvAMCfMB8GA1UdIwQYMBaAFJP61YjznqWMZYjd+he9DW/OemBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjVGMC83MDlGOTdBNkRD NjExMUVBQkNBNENBODRDNEY5QUUwMi9rX3JWaVBPZXBZeGxpTjM2RjcwTmI4NTZZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfclZpUE9lcFl4bGlOMzZGNzBOYjg1NllHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y1RjAvNzA5Rjk3QTZEQzYxMTFFQUJDQTRDQTg0QzRGOUFFMDIvNEM4OUU1MzZE QzYzMTFFQThDOTk4MDg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAE7mRoDBAFnG8wDBAFnxhAwDQYJKoZIhvcNAQELBQADggEB AAtfZnZtN+vk6ANsk3wVtRouk58nIv23cfzAPekm6EMdKjdE4LIzne77CK9HsBni tFaSsmrjYtk4/LFQsJ8dWL+njRyB2XHG5yhEwLwk5p0+i15Kw7qZoerNLnUXTvTi TYU1MYJ4rXk8j3a0e/LT7gVe9tXa//5Ep1VKmEid/+EXf5o7InhYnGxJb7hqpN6A GdAOzO5O09HWixNArnn5VGkDJjEP/tBmij2t+RqjbnyaHJXe2SOdymo6oOX1cPWg AQ3u0K1/7+9Vmwb8WgzQdq0mQ3pogIk7cBbPM5r5dbFMIkGRDxMexrbfH+5p4YIB PuTeZUGW2N35CnIAqLvWmMg= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:32 2024 by rpki-client on console-ams.rpki-client.org