$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/64651972014011EF8E97EF5DC4F9AE02.roa File: 64651972014011EF8E97EF5DC4F9AE02.roa (raw, json) Hash identifier: 9TUH1XYRPPEfy8sf73FPCzOj0SahDNR9vyOty5/FxV8= Subject key identifier: B0:98:BE:C9:4B:65:3D:75:36:25:F1:53:31:0A:71:F9:75:20:67:92 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: DB Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/64651972014011EF8E97EF5DC4F9AE02.roa Signing time: Tue 23 Apr 2024 07:09:15 +0000 ROA not before: Tue 23 Apr 2024 07:09:15 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 151921 IP address blocks: 157.66.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Apr 23 07:09:15 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=66275e9a-8c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:a9:75:f0:5c:40:7f:c1:0c:4c:0c:c5:45: 3f:8c:65:fc:f5:f8:e7:c9:2f:fb:29:dd:eb:ba:cb: b8:b9:42:c6:a8:86:c1:80:5a:9f:c9:22:9a:ba:a2: 2d:65:58:36:f7:fd:4c:d4:a4:25:90:35:e1:1a:06: 19:06:86:f9:28:d8:00:c1:20:ab:77:35:60:ac:01: 98:2e:e2:3d:c4:46:7b:18:27:3b:91:0c:54:46:54: 08:48:6b:43:e7:7f:a7:33:64:82:f1:0d:56:83:95: 72:e1:b8:76:23:4f:19:49:f4:77:d3:72:3c:b9:b8: 4f:c3:f8:3d:61:fc:59:f1:05:bf:eb:85:b4:3b:de: 24:68:d3:dd:aa:20:83:46:a6:21:c6:ff:e3:fe:7c: 4b:58:1d:4b:ab:39:0d:5f:2b:b4:32:ad:5b:3f:75: f7:ef:da:c4:f7:95:43:eb:13:34:6c:be:c5:75:2e: ce:cc:da:b1:38:cb:db:47:8b:55:06:23:cb:b3:23: ac:e0:d6:a5:5f:78:80:0a:c9:47:d8:93:2b:ee:a5: a6:79:ce:fe:d3:a5:f8:8a:3f:48:e6:1b:da:5f:12: 4e:f0:c9:5f:de:6c:3d:8b:db:78:3a:6a:ce:cf:ef: 28:94:b9:b7:ee:3a:fe:d0:11:af:e3:43:c9:e7:b2: 71:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:98:BE:C9:4B:65:3D:75:36:25:F1:53:31:0A:71:F9:75:20:67:92 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/64651972014011EF8E97EF5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.100.0/23 Signature Algorithm: sha256WithRSAEncryption 01:9f:c6:2e:fc:f4:06:7c:83:a4:ce:ed:54:69:68:0b:d9:c1: 39:bb:30:96:e3:05:32:93:60:3a:9f:a3:36:75:c5:ab:ff:2e: 47:d4:f4:19:12:67:9b:3b:ed:ff:a4:67:86:a6:f0:1e:f0:d1: 13:9b:e9:66:eb:cd:35:2b:af:b9:1a:09:53:7b:7f:77:9f:9c: e7:08:95:05:07:1e:8d:f6:d0:ae:9e:0d:73:bc:cd:a0:17:b2: d2:c6:5d:4d:12:fc:36:32:f3:26:a6:54:1d:02:3e:f1:94:2a: ff:7c:29:a1:89:bb:ec:ae:0d:c5:9e:5c:89:08:cb:4f:bc:6d: 82:d4:e8:8b:2d:53:03:7b:bf:0e:9f:53:9f:2e:5d:1c:3a:76: e2:dc:b8:12:bb:c7:16:51:9e:c3:0a:ee:a1:8d:f5:49:7e:66: c9:6e:c3:4b:01:d3:d2:97:a5:8e:38:84:7a:0f:37:58:fd:cc: 02:73:10:12:58:79:3c:3e:2c:f5:f8:74:76:c1:a9:a3:d6:15: 07:9c:b2:02:78:0c:26:83:85:8d:1b:82:0d:d1:21:7c:08:bc: 84:7c:fa:f5:d6:eb:4c:0c:6f:be:2d:b4:22:f9:8f:ac:c6:64: 3d:21:73:70:e9:e4:31:82:b9:54:87:93:9a:11:a9:f4:d5:67: b1:b1:3d:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwNDIzMDcwOTE1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI3NWU5YS04YzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeqpdfBcQH/BDEwMxUU/jGX89fjnyS/7Kd3rusu4uULGqIbBgFqfySKauqIt ZVg29/1M1KQlkDXhGgYZBob5KNgAwSCrdzVgrAGYLuI9xEZ7GCc7kQxURlQISGtD 53+nM2SC8Q1Wg5Vy4bh2I08ZSfR303I8ubhPw/g9YfxZ8QW/64W0O94kaNPdqiCD RqYhxv/j/nxLWB1LqzkNXyu0Mq1bP3X379rE95VD6xM0bL7FdS7OzNqxOMvbR4tV BiPLsyOs4NalX3iACslH2JMr7qWmec7+06X4ij9I5hvaXxJO8Mlf3mw9i9t4OmrO z+8olLm37jr+0BGv40PJ57JxoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLCYvslL ZT11NiXxUzEKcfl1IGeSMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNjQ2NTE5NzIw MTQwMTFFRjhFOTdFRjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQmQwDQYJKoZIhvcNAQELBQADggEBAAGfxi789AZ8g6TO 7VRpaAvZwTm7MJbjBTKTYDqfozZ1xav/LkfU9BkSZ5s77f+kZ4am8B7w0ROb6Wbr zTUrr7kaCVN7f3efnOcIlQUHHo320K6eDXO8zaAXstLGXU0S/DYy8yamVB0CPvGU Kv98KaGJu+yuDcWeXIkIy0+8bYLU6IstUwN7vw6fU58uXRw6duLcuBK7xxZRnsMK 7qGN9Ul+Zsluw0sB09KXpY44hHoPN1j9zAJzEBJYeTw+LPX4dHbBqaPWFQecsgJ4 DCaDhY0bgg3RIXwIvIR8+vXW60wMb74ttCL5j6zGZD0hc3Dp5DGCuVSHk5oRqfTV Z7GxPcg= -----END CERTIFICATE-----Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org