$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa File: A87BC510622E11EC92E1870CC4F9AE02.roa (raw, json) Hash identifier: 7MtcxTQ2rMr9wRU4t+OZ5IgSjQo76u9up+VI67f9CpM= Subject key identifier: FD:38:93:36:D2:C4:39:5A:1C:E3:B4:49:1A:93:ED:76:0B:A3:B7:23 Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 03A9 Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa Signing time: Tue 03 Sep 2024 02:14:40 +0000 ROA not before: Tue 03 Sep 2024 02:14:40 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 38259 IP address blocks: 122.248.0.0/20 maxlen: 20 122.248.0.0/24 maxlen: 24 122.248.1.0/24 maxlen: 24 202.84.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Sep 3 02:14:40 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66d6710f-d888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:53:35:59:7c:3b:f2:2f:bc:5a:c7:2b:37:bd: 27:a2:81:c3:ec:89:63:1e:4a:37:16:4e:38:c8:06: d0:0c:c1:86:0b:7b:48:bf:f9:9f:03:32:14:95:64: d2:b2:7d:d5:4f:08:71:6c:5f:df:95:b2:aa:1d:e6: 99:2c:59:2b:fb:81:87:34:74:87:08:a3:91:1c:b0: 35:f5:28:54:76:9f:03:3f:76:e0:dc:c0:df:58:02: 9d:6f:e2:37:b2:35:b5:c4:65:bb:ff:9c:f5:59:0c: 88:2b:c1:88:82:6d:5f:c5:0b:60:42:d0:0f:ea:be: 95:bc:a2:e6:75:ee:5f:55:91:de:d7:c6:12:18:35: ea:88:97:d8:e8:e8:a0:37:8f:43:c0:09:9d:9f:be: 46:58:8b:89:ce:79:7f:03:aa:1f:6e:92:20:21:44: 88:d9:9f:be:86:1e:7a:f0:ab:10:69:2f:be:2c:73: 14:cc:05:db:3a:3d:73:eb:df:80:8b:e8:c9:9d:19: b5:72:0c:11:a4:34:df:51:6f:15:44:0c:ab:6e:36: 35:81:87:7d:e4:65:6c:71:44:da:f7:b7:02:b4:1d: 0d:25:b7:03:d1:26:f4:7a:ee:8b:44:ea:2b:58:ff: 02:03:59:7c:04:c9:90:68:bf:33:54:61:01:3f:02: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:38:93:36:D2:C4:39:5A:1C:E3:B4:49:1A:93:ED:76:0B:A3:B7:23 X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.248.0.0/20 202.84.64.0/21 Signature Algorithm: sha256WithRSAEncryption a2:f4:13:f8:ee:b5:96:e1:3d:de:6e:46:e1:f1:ba:48:31:9d: 32:df:c9:6b:0a:ac:53:d0:b4:d1:7f:b9:cd:a9:47:f7:2f:20: c1:c8:33:cf:02:e1:fb:9a:48:a5:c2:71:07:8f:9e:00:34:45: 0c:47:aa:9a:03:0f:32:ae:1f:d9:9a:fa:52:01:d0:4f:7c:ff: 3b:65:57:3a:07:54:b7:de:dd:0b:d1:18:5c:83:98:04:7b:55: d8:5e:3e:29:d3:4f:2a:65:3e:76:c6:84:7a:e8:09:eb:ed:c8: 8a:6a:13:e1:bc:df:5d:26:67:15:3a:51:de:2d:4e:27:8d:17: 03:aa:5b:a0:82:fd:3d:dd:4b:8b:46:4e:a0:22:7b:08:87:86: 0e:87:1a:bc:c7:57:f7:6e:cd:ea:dd:10:8f:95:b0:23:13:65: f6:d1:c3:e8:ac:dc:c1:99:00:b3:39:62:7e:b8:a6:f0:81:34: a3:16:1c:65:42:3e:1e:cd:74:a2:4e:9f:60:fe:fd:20:18:41: 7a:e9:6d:02:c2:7c:21:12:ff:b1:46:12:ca:a9:26:0c:71:6f: db:37:2a:8b:76:60:20:54:f9:4c:3e:3e:fe:9a:9f:65:98:1f: 82:be:87:33:fa:e9:ad:64:e8:8c:b5:df:92:d4:68:c7:f2:b9: 5d:94:0e:6f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjQwOTAzMDIxNDQwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NzEwZi1kODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lM1WXw78i+8WscrN70nooHD7IljHko3Fk44yAbQDMGGC3tIv/mfAzIUlWTS sn3VTwhxbF/flbKqHeaZLFkr+4GHNHSHCKORHLA19ShUdp8DP3bg3MDfWAKdb+I3 sjW1xGW7/5z1WQyIK8GIgm1fxQtgQtAP6r6VvKLmde5fVZHe18YSGDXqiJfY6Oig N49DwAmdn75GWIuJznl/A6ofbpIgIUSI2Z++hh568KsQaS++LHMUzAXbOj1z69+A i+jJnRm1cgwRpDTfUW8VRAyrbjY1gYd95GVscUTa97cCtB0NJbcD0Sb0eu6LROor WP8CA1l8BMmQaL8zVGEBPwKsPwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP04kzbS xDlaHOO0SRqT7XYLo7cjMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVCMzAvOURDRUI2Mzg2MjJDMTFFQzgxOEVBMDBCQzRGOUFFMDIvQTg3QkM1MTA2 MjJFMTFFQzkyRTE4NzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAR6+AADBAPKVEAwDQYJKoZIhvcNAQELBQADggEBAKL0E/ju tZbhPd5uRuHxukgxnTLfyWsKrFPQtNF/uc2pR/cvIMHIM88C4fuaSKXCcQePngA0 RQxHqpoDDzKuH9ma+lIB0E98/ztlVzoHVLfe3QvRGFyDmAR7VdhePinTTyplPnbG hHroCevtyIpqE+G8310mZxU6Ud4tTieNFwOqW6CC/T3dS4tGTqAiewiHhg6HGrzH V/duzerdEI+VsCMTZfbRw+is3MGZALM5Yn64pvCBNKMWHGVCPh7NdKJOn2D+/SAY QXrpbQLCfCES/7FGEsqpJgxxb9s3Kot2YCBU+Uw+Pv6an2WYH4K+hzP66a1k6Iy1 35LUaMfyuV2UDm8= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org