$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/958B8F64721911EFA2635265C4F9AE02.roa File: 958B8F64721911EFA2635265C4F9AE02.roa (raw, json) Hash identifier: iyT1YYIe/+eYqSyPBf131z50PQBWN/EDZbKDWmIJzWg= Subject key identifier: 7C:9E:67:51:98:94:A1:5D:51:05:9D:22:DF:11:ED:F1:82:22:D7:E4 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 40 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/958B8F64721911EFA2635265C4F9AE02.roa Signing time: Fri 13 Sep 2024 21:46:08 +0000 ROA not before: Fri 13 Sep 2024 21:46:08 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 37992 IP address blocks: 202.28.88.0/24 maxlen: 24 202.28.89.0/24 maxlen: 24 202.28.90.0/24 maxlen: 24 202.28.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:46:08 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4b2a0-b9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:19:23:a3:d8:90:6a:2a:30:58:7e:4a:1d: 46:1e:19:98:0a:4f:9e:b4:e3:dd:e9:e8:de:8a:76: 8c:04:28:38:d1:0a:5b:f4:7f:50:5f:b9:77:24:78: 62:85:49:8a:ce:37:05:da:30:26:5f:4e:7f:cf:73: d6:50:af:f6:ad:7d:e9:d0:9e:e4:11:df:6e:7c:72: 35:64:ed:13:df:1c:ae:f1:cd:ad:60:b9:63:0c:ac: 5e:d5:f6:f1:ea:cf:2c:a1:a2:c1:1a:c8:6a:0c:8d: d5:44:cf:74:d3:d7:1f:9d:c0:f0:40:92:a6:5a:bc: 5b:30:e4:13:dc:9e:34:07:f1:25:fd:92:94:9d:ae: 93:4e:15:7c:45:a5:42:3d:2e:2d:84:f0:b7:ad:f9: ee:d8:2e:8f:60:8f:8b:a3:76:55:77:e1:62:c9:1a: 70:d5:fd:a5:3f:2a:56:90:fb:20:dc:25:78:4d:74: 08:5c:ac:1a:55:3e:7b:cb:ce:46:09:1f:fe:14:53: 4f:b4:4a:54:00:6d:53:99:83:72:13:1f:12:2e:48: 7d:36:0e:3f:48:c8:32:54:33:3a:ac:61:23:7a:fd: 0a:6e:67:e4:2f:1a:02:93:4f:6a:88:4a:84:ce:75: 7d:ae:92:3f:35:0e:08:38:0e:de:5e:e0:ef:da:90: ed:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9E:67:51:98:94:A1:5D:51:05:9D:22:DF:11:ED:F1:82:22:D7:E4 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/958B8F64721911EFA2635265C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.88.0/22 Signature Algorithm: sha256WithRSAEncryption 60:f3:41:90:81:7d:19:69:06:3d:40:0c:ea:e0:7d:64:16:52: f5:1d:32:29:0e:c6:0d:df:5b:bc:64:a1:62:f7:53:53:5d:54: 5f:48:23:40:36:31:2e:d1:6a:ee:d2:ab:f9:b2:b0:92:fd:60: 30:47:12:16:10:99:42:da:ce:97:f4:a3:a4:00:a6:a1:dc:5a: 43:82:86:27:74:0a:53:ad:e5:9f:05:a3:fb:66:30:f4:56:eb: 01:19:ee:fc:f3:6f:28:ce:05:4d:a1:87:87:82:de:50:5d:9f: ea:fc:34:fa:68:9b:f9:99:4c:16:6b:c1:2c:4b:52:9e:e9:05: 4f:0e:b4:df:6c:3d:19:3f:6d:c2:f7:4a:5b:30:0c:0d:89:a0: 29:a5:9d:e2:ad:ff:dc:24:49:d5:9c:e8:0c:e1:66:78:3a:31: a9:75:5d:90:c2:73:dd:f3:b8:c8:f5:51:5f:12:fb:e4:67:25: 4a:bc:52:50:88:a5:0b:ef:60:b8:33:9a:4a:8c:82:05:b6:9f: da:e5:f3:37:82:f1:ae:db:c7:0e:52:1b:f4:c8:f6:18:6b:ab: 82:4f:bc:89:b0:3b:26:1b:53:c9:c6:98:74:f0:f6:8e:63:e2: e9:67:5d:af:54:1e:dc:69:0e:da:e3:72:30:63:65:52:de:21: 7b:ea:51:01 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTQ2MDhaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRiMmEwLWI5ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEABkjo9iQaiowWH5KHUYeGZgKT560493p6N6KdowEKDjRClv0f1BfuXckeGKF SYrONwXaMCZfTn/Pc9ZQr/atfenQnuQR3258cjVk7RPfHK7xza1guWMMrF7V9vHq zyyhosEayGoMjdVEz3TT1x+dwPBAkqZavFsw5BPcnjQH8SX9kpSdrpNOFXxFpUI9 Li2E8Let+e7YLo9gj4ujdlV34WLJGnDV/aU/KlaQ+yDcJXhNdAhcrBpVPnvLzkYJ H/4UU0+0SlQAbVOZg3ITHxIuSH02Dj9IyDJUMzqsYSN6/QpuZ+QvGgKTT2qISoTO dX2ukj81Dgg4Dt5e4O/akO3DAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUfJ5nUZiU oV1RBZ0i3xHt8YIi1+QwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi85NThCOEY2NDcy MTkxMUVGQTI2MzUyNjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAsocWDANBgkqhkiG9w0BAQsFAAOCAQEAYPNBkIF9GWkGPUAM 6uB9ZBZS9R0yKQ7GDd9bvGShYvdTU11UX0gjQDYxLtFq7tKr+bKwkv1gMEcSFhCZ QtrOl/SjpACmodxaQ4KGJ3QKU63lnwWj+2Yw9FbrARnu/PNvKM4FTaGHh4LeUF2f 6vw0+mib+ZlMFmvBLEtSnukFTw6032w9GT9twvdKWzAMDYmgKaWd4q3/3CRJ1Zzo DOFmeDoxqXVdkMJz3fO4yPVRXxL75GclSrxSUIilC+9guDOaSoyCBbaf2uXzN4Lx rtvHDlIb9Mj2GGurgk+8ibA7JhtTycaYdPD2jmPi6Wddr1Qe3GkO2uNyMGNlUt4h e+pRAQ== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org