$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5B0AD104DBB711EE9697432FC4F9AE02.roa File: 5B0AD104DBB711EE9697432FC4F9AE02.roa (raw, json) Hash identifier: g+ycCMiu+pHanFJwxzpCQnzoTp1y8X2Vz0843GcFU+o= Subject key identifier: AB:99:13:9D:A4:F1:D6:1A:37:9D:B1:1D:70:3B:18:D1:1C:23:54:06 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0313 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5B0AD104DBB711EE9697432FC4F9AE02.roa Signing time: Wed 25 Sep 2024 09:37:44 +0000 ROA not before: Wed 25 Sep 2024 09:37:43 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150820 IP address blocks: 157.15.38.0/23 maxlen: 23 157.20.62.0/23 maxlen: 23 157.66.252.0/23 maxlen: 23 160.22.172.0/23 maxlen: 23 160.22.174.0/23 maxlen: 23 160.30.190.0/23 maxlen: 23 160.187.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Oct 2024 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Sep 25 09:37:43 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66f3d9e7-8b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:a0:bd:b6:a3:42:d8:48:b0:b5:22:40:b7: d7:5f:45:5f:8f:75:96:c5:c0:8f:01:10:9f:59:46: 25:51:9f:ae:12:ce:48:54:48:55:02:9f:2d:e6:a4: 49:fd:43:d3:14:c5:07:bc:20:09:3d:53:a5:82:0a: 24:52:d6:3c:16:14:e8:9b:93:41:43:6f:9f:5d:41: f3:9c:63:7b:61:d1:95:61:ca:a2:4c:f7:e3:2d:47: 26:b3:a0:b8:db:44:5c:95:0a:04:77:6e:de:c0:bf: 92:0e:e4:13:a0:8f:98:6c:3c:c5:21:99:e5:c3:90: 79:fd:00:d1:6f:63:6b:6e:07:f2:0a:45:ba:bd:45: e7:ed:15:9d:5e:f6:1a:90:ff:cc:83:6c:32:83:b5: 48:21:12:24:27:94:c5:74:76:85:62:58:8a:6a:58: 42:f1:48:d6:06:c1:31:0d:b7:8b:41:94:61:96:bf: 55:c2:a6:8b:b5:18:a7:08:d1:26:4c:76:ad:20:1c: cd:a5:db:2d:48:b2:62:e1:4f:4a:7d:66:40:90:91: fe:26:63:1c:ea:aa:59:e4:9b:14:ea:d4:4e:fb:69: 01:7c:7d:3f:94:5e:af:ab:7e:bc:ae:83:4e:91:a1: a3:18:ee:9e:1e:3f:f8:6e:cd:e7:7e:b9:5d:96:1f: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:13:9D:A4:F1:D6:1A:37:9D:B1:1D:70:3B:18:D1:1C:23:54:06 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5B0AD104DBB711EE9697432FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.38.0/23 157.20.62.0/23 157.66.252.0/23 160.22.172.0/22 160.30.190.0/23 160.187.120.0/23 Signature Algorithm: sha256WithRSAEncryption 84:9a:19:2f:d0:52:0b:38:6b:bd:f9:54:23:f5:f1:4f:88:80: 51:f8:1b:10:76:31:77:b8:f1:9e:cd:9d:03:9c:c5:22:92:67: fd:d2:5f:46:6a:2a:8a:4a:8a:6a:1a:70:29:30:f9:96:78:24: 86:b8:60:8e:cf:b7:f0:77:e1:f7:c2:1d:b6:bc:58:53:b9:62: 97:4c:94:a3:72:7f:3d:c8:7c:96:c6:d1:9c:6c:df:9a:ff:91: 2c:11:30:1b:a8:da:bd:b9:89:2e:e3:74:05:be:fc:02:54:70: 52:ed:f1:71:fa:c1:67:c5:e5:bd:07:87:38:b3:af:56:0f:27: 51:71:5e:a2:5b:e0:99:b9:c6:8f:06:39:03:bd:29:26:ac:f1: 06:52:49:6c:85:d9:04:fe:53:88:f6:86:59:9d:68:3d:1f:e6: f4:ed:61:57:50:6a:95:0e:01:e7:cc:7e:46:f0:3b:10:23:f6: 81:43:a7:7b:3d:da:75:79:a5:39:bd:47:c3:a5:6e:c7:f7:07: 23:a4:b5:cd:1b:10:ca:aa:05:43:b0:31:86:c4:01:88:70:c1: a9:8f:65:18:bb:9e:32:fe:85:6b:ad:49:a0:6e:71:2e:7e:88: a9:45:ab:e8:dd:2f:52:c3:a2:d7:82:4e:df:20:87:b5:d5:33: 5c:a8:90:66 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwOTI1MDkzNzQzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzZDllNy04YjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSigvbajQthIsLUiQLfXX0Vfj3WWxcCPARCfWUYlUZ+uEs5IVEhVAp8t5qRJ /UPTFMUHvCAJPVOlggokUtY8FhTom5NBQ2+fXUHznGN7YdGVYcqiTPfjLUcms6C4 20RclQoEd27ewL+SDuQToI+YbDzFIZnlw5B5/QDRb2NrbgfyCkW6vUXn7RWdXvYa kP/Mg2wyg7VIIRIkJ5TFdHaFYliKalhC8UjWBsExDbeLQZRhlr9VwqaLtRinCNEm THatIBzNpdstSLJi4U9KfWZAkJH+JmMc6qpZ5JsU6tRO+2kBfH0/lF6vq368roNO kaGjGO6eHj/4bs3nfrldlh/0VQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFKuZE52k 8dYaN52xHXA7GNEcI1QGMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNUIwQUQxMDRE QkI3MTFFRTk2OTc0MzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAGdDyYDBAGdFD4DBAGdQvwDBAKgFqwDBAGgHr4DBAGgu3gw DQYJKoZIhvcNAQELBQADggEBAISaGS/QUgs4a735VCP18U+IgFH4GxB2MXe48Z7N nQOcxSKSZ/3SX0ZqKopKimoacCkw+ZZ4JIa4YI7Pt/B34ffCHba8WFO5YpdMlKNy fz3IfJbG0Zxs35r/kSwRMBuo2r25iS7jdAW+/AJUcFLt8XH6wWfF5b0Hhzizr1YP J1FxXqJb4Jm5xo8GOQO9KSas8QZSSWyF2QT+U4j2hlmdaD0f5vTtYVdQapUOAefM fkbwOxAj9oFDp3s92nV5pTm9R8Olbsf3ByOktc0bEMqqBUOwMYbEAYhwwamPZRi7 njL+hWutSaBucS5+iKlFq+jdL1LDoteCTt8gh7XVM1yokGY= -----END CERTIFICATE-----Generated at Thu Sep 26 17:18:34 2024 by rpki-client on console-fra.rpki-client.org