$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/1A8D09D6DF3211EC97567B3EC4F9AE02.roa File: 1A8D09D6DF3211EC97567B3EC4F9AE02.roa (raw, json) Hash identifier: qwYEF/EaRRrOYyEUPPMKYxdD7QMVhE8hbQvYQGDcuZQ= Subject key identifier: D5:A9:D8:46:82:14:69:54:BE:11:11:B1:EE:A9:BE:91:64:4E:64:B3 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 052D Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/1A8D09D6DF3211EC97567B3EC4F9AE02.roa Signing time: Wed 31 Jul 2024 02:34:08 +0000 ROA not before: Wed 31 Jul 2024 02:34:08 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 7630 IP address blocks: 58.137.161.0/24 maxlen: 24 203.146.18.0/24 maxlen: 24 203.146.224.0/24 maxlen: 24 203.146.225.0/24 maxlen: 24 210.1.2.0/24 maxlen: 24 210.1.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Jul 31 02:34:08 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a9a2a0-0e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:4d:90:07:8e:ec:ed:c5:df:6a:2f:b2:45: 48:5c:68:90:d5:85:56:84:b5:0e:b4:3f:f0:79:52: 84:d1:9f:e4:b6:b8:e1:aa:03:34:65:97:87:c5:1e: c1:f3:4b:99:03:9e:35:d3:c4:24:2f:bf:cf:d7:01: 41:94:2c:12:fc:0a:1f:e6:19:56:c0:e2:b9:0b:7e: fe:b8:63:88:57:20:2e:a9:7e:95:c6:a8:bf:45:21: 1a:3c:17:b0:35:b5:0c:d3:24:25:76:a6:b4:cf:8d: cf:26:dd:af:81:d8:f5:de:47:77:4e:52:32:95:57: 0c:11:7c:16:65:45:0a:93:64:3d:60:ff:93:b2:51: 7c:80:67:bf:e3:d6:5a:ce:50:5e:45:0b:86:55:56: 64:6b:5f:29:67:b6:09:09:4d:3a:da:48:98:be:21: d6:60:b6:d4:c2:20:dd:5c:84:cd:d6:07:d9:94:50: ea:d8:93:7e:94:b6:29:42:2e:15:43:bc:63:3d:16: 63:b8:b7:37:d3:b6:a6:12:d2:91:54:a4:f2:fe:de: bb:7c:56:7d:ee:c7:47:63:77:ee:27:17:b4:86:1e: b6:f3:3b:4a:ff:99:ed:ce:61:86:d1:61:96:50:e2: bb:70:31:a8:57:7d:00:ca:43:5d:e0:95:8e:05:aa: 74:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A9:D8:46:82:14:69:54:BE:11:11:B1:EE:A9:BE:91:64:4E:64:B3 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/1A8D09D6DF3211EC97567B3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.137.161.0/24 203.146.18.0/24 203.146.224.0/23 210.1.2.0/24 210.1.22.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:62:67:3e:24:39:e3:94:dd:4b:47:dd:1e:db:e1:e9:cc:c9: 13:30:fb:5c:86:a6:61:1d:c6:66:4e:10:9c:db:19:32:d7:36: ab:3e:73:90:bb:ba:a7:9f:45:bb:48:cb:8d:4c:9d:c4:9e:fb: 22:79:37:98:30:18:8d:1b:18:3f:f7:9e:51:1b:0d:8a:86:cd: a3:0e:3c:6f:b3:f2:59:d6:30:73:15:bf:7b:a0:fb:1f:48:e0: 8a:4b:22:d2:35:48:74:c1:5c:95:ec:4d:08:a0:4f:e1:1c:15: 34:76:97:69:ca:28:b5:ba:08:d5:0a:92:81:94:f5:57:62:fa: d6:91:8a:7f:dd:21:0e:92:b5:9d:5c:e9:c9:b8:93:43:a2:ff: 0f:d3:04:1e:28:5f:2f:0b:bc:1b:d4:87:c7:60:e5:89:83:32: 42:20:4a:98:40:c6:2e:27:f4:90:8b:3d:6a:f6:31:fd:3f:de: 5f:1e:b4:f0:64:03:0e:cc:93:8b:75:48:0a:eb:91:67:f2:95: 20:c1:9a:7d:81:8a:09:a3:14:5f:20:6f:90:0d:d2:5d:28:61: 25:76:a0:63:b4:6f:2d:91:09:69:2c:97:ad:65:fc:1b:fa:e2: 1d:c0:cc:be:ff:9a:68:16:5e:71:36:88:d3:05:2d:98:e3:97: ee:9f:fe:67 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjQwNzMxMDIzNDA4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5YTJhMC0wZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrxNkAeO7O3F32ovskVIXGiQ1YVWhLUOtD/weVKE0Z/ktrjhqgM0ZZeHxR7B 80uZA54108QkL7/P1wFBlCwS/Aof5hlWwOK5C37+uGOIVyAuqX6Vxqi/RSEaPBew NbUM0yQldqa0z43PJt2vgdj13kd3TlIylVcMEXwWZUUKk2Q9YP+TslF8gGe/49Za zlBeRQuGVVZka18pZ7YJCU062kiYviHWYLbUwiDdXITN1gfZlFDq2JN+lLYpQi4V Q7xjPRZjuLc307amEtKRVKTy/t67fFZ97sdHY3fuJxe0hh628ztK/5ntzmGG0WGW UOK7cDGoV30AykNd4JWOBap0EwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNWp2EaC FGlUvhERse6pvpFkTmSzMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMUE4RDA5RDZE RjMyMTFFQzk3NTY3QjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAA6iaEDBADLkhIDBAHLkuADBADSAQIDBADSARYwDQYJKoZI hvcNAQELBQADggEBAB5iZz4kOeOU3UtH3R7b4enMyRMw+1yGpmEdxmZOEJzbGTLX Nqs+c5C7uqefRbtIy41MncSe+yJ5N5gwGI0bGD/3nlEbDYqGzaMOPG+z8lnWMHMV v3ug+x9I4IpLItI1SHTBXJXsTQigT+EcFTR2l2nKKLW6CNUKkoGU9Vdi+taRin/d IQ6StZ1c6cm4k0Oi/w/TBB4oXy8LvBvUh8dg5YmDMkIgSphAxi4n9JCLPWr2Mf0/ 3l8etPBkAw7Mk4t1SArrkWfylSDBmn2BigmjFF8gb5AN0l0oYSV2oGO0by2RCWks l61l/Bv64h3AzL7/mmgWXnE2iNMFLZjjl+6f/mc= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org