$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/68DED416DF1911EC8F85991EC4F9AE02.roa File: 68DED416DF1911EC8F85991EC4F9AE02.roa (raw, json) Hash identifier: 8jruqr+86GOd29uPmAqpKSRu7SLBbPX44rbXAB69l9w= Subject key identifier: E1:2C:83:21:8D:94:4F:8C:82:E7:8A:EE:10:80:C9:4A:21:1E:34:71 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 0524 Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/68DED416DF1911EC8F85991EC4F9AE02.roa Signing time: Wed 31 Jul 2024 02:33:59 +0000 ROA not before: Wed 31 Jul 2024 02:33:59 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 55916 IP address blocks: 58.137.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Jul 31 02:33:59 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a9a297-53c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c2:e0:8c:7e:8d:ab:f3:23:b3:dc:3f:4c:ee: 0f:f9:41:1b:ba:5f:ef:32:1c:ad:0e:2d:29:83:55: 66:3b:3e:bd:5f:86:14:1a:7a:d7:8d:d6:ea:31:9f: 8e:d3:a4:a0:ae:e6:76:57:e0:d7:fc:d8:76:da:b3: 7b:d2:50:68:33:1c:a2:3c:83:57:e2:17:44:e3:41: 8d:47:47:d7:c1:ee:9b:f1:1b:78:c6:9f:b9:b3:f1: d5:2e:50:56:35:d6:c6:67:8a:ff:26:0c:fc:75:ed: 16:4d:b1:1f:a6:ea:bd:f1:a7:08:cd:f5:36:d5:43: c6:08:3a:06:38:74:b4:aa:2a:05:98:58:ec:0b:4d: f4:94:4e:af:42:cf:10:10:75:37:e6:b4:a2:76:f0: 04:94:52:5e:0e:26:50:59:53:35:ac:b8:be:47:d1: bd:ae:59:ee:c6:01:1c:c2:5e:da:36:f8:9a:b9:a1: ce:cb:9d:4f:03:90:55:5b:cd:5d:2f:23:eb:01:fd: fa:bf:6b:02:c6:1e:11:40:7a:82:49:be:5b:c6:21: 6f:ca:d7:e1:68:52:76:4f:70:19:5a:84:98:e3:70: 97:20:f0:5f:22:77:b1:88:b6:f0:a8:49:04:a1:45: e5:fd:a8:53:b2:0f:70:a4:ec:f2:75:06:82:63:ad: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2C:83:21:8D:94:4F:8C:82:E7:8A:EE:10:80:C9:4A:21:1E:34:71 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/68DED416DF1911EC8F85991EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.137.199.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d1:a1:d6:44:74:bf:de:f1:ee:33:50:a9:08:65:e9:71:e9: 5a:4b:bc:d5:09:8b:43:d9:72:95:6f:46:be:e3:e5:b8:1e:cb: 97:5a:f0:97:e5:73:91:21:a7:7d:10:76:55:01:6c:3e:45:f3: b0:95:66:11:ad:fd:f1:54:4d:d4:59:33:ed:e2:b4:ae:77:16: e3:bb:b3:28:13:f3:2d:8a:95:19:94:1e:4c:45:cd:0e:40:e6: ea:4e:f0:07:72:db:7e:f4:68:c4:0c:34:3b:95:a5:42:43:41: 53:31:2a:6a:82:5e:c5:35:7b:dc:d6:d2:5a:39:03:a7:1f:e6: 36:7d:aa:44:4d:83:93:04:e3:20:49:a9:46:c8:eb:86:be:24: 8e:8e:09:56:db:55:ec:d3:8a:5c:a7:0e:8d:1a:1e:8a:07:cd: 78:f4:40:d3:a5:16:9b:69:9f:4f:76:99:47:03:57:1c:f5:e8: e7:3e:0a:dc:ba:06:27:38:35:35:e3:44:e2:98:7a:27:55:61: 2a:e0:9a:1c:b3:9f:b0:9b:ca:91:b9:6d:75:89:98:68:f7:b0: a6:65:2a:2f:c5:3b:9d:67:5e:a2:4b:b0:ec:a7:66:26:1a:85: 2f:c9:86:c2:38:ae:a9:cd:d1:37:ce:4e:73:f4:22:a5:c4:a5: 8d:8f:91:34 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjQwNzMxMDIzMzU5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5YTI5Ny01M2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MLgjH6Nq/Mjs9w/TO4P+UEbul/vMhytDi0pg1VmOz69X4YUGnrXjdbqMZ+O 06SgruZ2V+DX/Nh22rN70lBoMxyiPINX4hdE40GNR0fXwe6b8Rt4xp+5s/HVLlBW NdbGZ4r/Jgz8de0WTbEfpuq98acIzfU21UPGCDoGOHS0qioFmFjsC030lE6vQs8Q EHU35rSidvAElFJeDiZQWVM1rLi+R9G9rlnuxgEcwl7aNviauaHOy51PA5BVW81d LyPrAf36v2sCxh4RQHqCSb5bxiFvytfhaFJ2T3AZWoSY43CXIPBfInexiLbwqEkE oUXl/ahTsg9wpOzydQaCY62LWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOEsgyGN lE+MgueK7hCAyUohHjRxMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNjhERUQ0MTZE RjE5MTFFQzhGODU5OTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6iccwDQYJKoZIhvcNAQELBQADggEBAEDRodZEdL/e8e4z UKkIZelx6VpLvNUJi0PZcpVvRr7j5bgey5da8Jflc5Ehp30QdlUBbD5F87CVZhGt /fFUTdRZM+3itK53FuO7sygT8y2KlRmUHkxFzQ5A5upO8Ady2370aMQMNDuVpUJD QVMxKmqCXsU1e9zW0lo5A6cf5jZ9qkRNg5ME4yBJqUbI64a+JI6OCVbbVezTilyn Do0aHooHzXj0QNOlFptpn092mUcDVxz16Oc+Cty6Bic4NTXjROKYeidVYSrgmhyz n7CbypG5bXWJmGj3sKZlKi/FO51nXqJLsOynZiYahS/JhsI4rqnN0TfOTnP0IqXE pY2PkTQ= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org