$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa File: 89A5C6C67C5511EDA0D2C06CC4F9AE02.roa (raw, json) Hash identifier: MzKd1BK3Uwngk/TjzhcDdRIERUQ0rWYStsysLtQqL7U= Subject key identifier: 86:01:09:F9:E6:C7:C8:61:CF:4C:AD:C2:F7:C2:E9:90:9F:96:53:6C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3E6B Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa Signing time: Tue 12 Sep 2023 02:41:24 +0000 ROA not before: Tue 12 Sep 2023 02:41:24 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 135920 IP address blocks: 45.123.96.0/22 maxlen: 24 103.63.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 14:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15979 (0x3e6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:41:24 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffcfd4-4b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:b0:3c:3d:3f:cb:79:38:1d:e0:d6:f6:48: cb:c5:26:02:c8:e2:51:20:57:54:21:39:55:67:b1: 89:d9:d0:f9:7d:95:33:0b:db:d5:9e:6f:85:35:16: 31:5c:aa:13:08:49:cf:97:7f:bc:2d:37:05:1e:e7: d7:4b:e9:9b:c9:fd:83:9f:94:c6:48:fa:5d:f9:a1: 87:01:6b:93:a6:81:c9:0e:dc:5f:04:40:b7:09:8d: ff:fb:15:41:0e:66:19:a0:7a:64:f8:b4:d4:0d:21: 09:b8:b3:e6:ad:c1:98:5f:29:d6:f9:bf:de:ad:fc: a5:47:64:5d:49:3a:ae:d1:eb:24:f8:d2:74:6e:ce: 6c:4d:4e:45:67:f6:1c:65:a4:d8:7f:32:b9:ba:32: f0:62:71:37:58:6a:ad:f3:5b:f1:28:dc:ac:ec:59: 34:02:0d:8d:7b:00:9f:c7:71:2b:7c:ee:b0:b6:46: d6:cb:f9:f5:ed:ab:c1:1c:61:5b:90:09:5a:23:21: 3a:81:4f:14:84:e9:27:90:b8:67:4c:ba:76:28:63: ae:b7:9e:c9:7c:41:3f:19:59:56:b8:72:c4:e5:50: ad:55:bb:68:54:fd:93:4e:7a:f4:dc:f1:52:08:55: 88:bf:55:0d:4b:c9:9f:e8:17:56:32:e5:46:78:52: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:01:09:F9:E6:C7:C8:61:CF:4C:AD:C2:F7:C2:E9:90:9F:96:53:6C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.96.0/22 103.63.212.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:5a:de:15:cf:6f:90:de:0b:6a:3f:f0:e9:71:b5:de:85:3f: 83:03:41:0b:5b:d7:f7:e0:e5:77:2a:a8:7e:87:9d:e6:48:22: 34:93:e9:23:2e:a1:63:a3:41:08:a9:3d:88:e8:2a:14:1e:74: 88:0e:d9:90:fa:20:e7:f1:38:df:97:90:cf:a8:14:f3:45:7f: 85:02:b9:4b:c4:ea:fc:45:9d:81:23:a1:f4:f8:44:d5:2f:66: 95:79:12:5a:9d:22:ba:b3:8d:0a:49:10:9a:5e:66:99:d9:a7: 53:94:e6:83:3a:32:b1:67:70:f5:37:c6:fe:d4:2c:6e:d6:65: 03:1a:82:54:8c:7c:ee:69:64:97:a9:8e:3f:c1:99:39:9a:82: 19:87:60:27:d5:3e:48:83:61:6a:dc:0c:c4:fe:62:98:a0:d5: 94:a7:a7:95:63:00:3a:67:8e:d8:5f:61:85:63:62:e2:36:31: 6c:a1:ec:bd:89:12:3f:89:1a:26:66:f5:92:26:1a:71:4b:05: 0e:5f:b6:fa:b0:5a:e3:98:5c:f4:99:d2:8e:e1:c3:39:98:89: c9:49:9f:e2:5b:2d:01:8a:64:65:1b:91:87:57:b5:f4:1d:30: ea:fb:36:c3:33:d2:3e:b1:db:e1:b3:9b:4d:e6:c3:5e:af:cd: cb:45:16:bf -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICPmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MTI0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmY2ZkNC00YjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIGwPD0/y3k4HeDW9kjLxSYCyOJRIFdUITlVZ7GJ2dD5fZUzC9vVnm+FNRYx XKoTCEnPl3+8LTcFHufXS+mbyf2Dn5TGSPpd+aGHAWuTpoHJDtxfBEC3CY3/+xVB DmYZoHpk+LTUDSEJuLPmrcGYXynW+b/erfylR2RdSTqu0esk+NJ0bs5sTU5FZ/Yc ZaTYfzK5ujLwYnE3WGqt81vxKNys7Fk0Ag2NewCfx3ErfO6wtkbWy/n17avBHGFb kAlaIyE6gU8UhOknkLhnTLp2KGOut57JfEE/GVlWuHLE5VCtVbtoVP2TTnr03PFS CFWIv1UNS8mf6BdWMuVGeFJ1PQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIYBCfnm x8hhz0ytwvfC6ZCfllNsMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODlBNUM2QzY3 QzU1MTFFREEwRDJDMDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIte2ADBAJnP9QwDQYJKoZIhvcNAQELBQADggEBABta3hXP b5DeC2o/8Olxtd6FP4MDQQtb1/fg5XcqqH6HneZIIjST6SMuoWOjQQipPYjoKhQe dIgO2ZD6IOfxON+XkM+oFPNFf4UCuUvE6vxFnYEjofT4RNUvZpV5ElqdIrqzjQpJ EJpeZpnZp1OU5oM6MrFncPU3xv7ULG7WZQMaglSMfO5pZJepjj/BmTmaghmHYCfV PkiDYWrcDMT+Ypig1ZSnp5VjADpnjthfYYVjYuI2MWyh7L2JEj+JGiZm9ZImGnFL BQ5ftvqwWuOYXPSZ0o7hwzmYiclJn+JbLQGKZGUbkYdXtfQdMOr7NsMz0j6x2+Gz m03mw16vzctFFr8= -----END CERTIFICATE-----Generated at Fri Jun 14 16:49:41 2024 by rpki-client on console-fra.rpki-client.org