$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/692291CA8D2111EFBB185E3DC4F9AE02.roa File: 692291CA8D2111EFBB185E3DC4F9AE02.roa (raw, json) Hash identifier: FXpji9Hi7AcmUDbv2EIFfiM1bpRv55YE0E+91g5QKX0= Subject key identifier: A1:C6:51:29:61:A2:96:9E:77:14:5C:D6:74:BE:8A:8B:D8:93:7F:E9 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 29BE Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/692291CA8D2111EFBB185E3DC4F9AE02.roa Signing time: Fri 18 Oct 2024 07:20:11 +0000 ROA not before: Fri 18 Oct 2024 07:20:11 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 4913 IP address blocks: 202.80.160.0/24 maxlen: 24 202.80.161.0/24 maxlen: 24 202.80.162.0/24 maxlen: 24 202.80.163.0/24 maxlen: 24 202.80.165.0/24 maxlen: 24 202.80.166.0/24 maxlen: 24 202.80.167.0/24 maxlen: 24 202.80.169.0/24 maxlen: 24 202.80.170.0/24 maxlen: 24 202.80.171.0/24 maxlen: 24 202.80.172.0/24 maxlen: 24 202.80.173.0/24 maxlen: 24 202.80.174.0/24 maxlen: 24 202.80.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10686 (0x29be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Oct 18 07:20:11 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=67120c2b-9c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:5f:46:0c:be:05:ab:b9:dd:b9:f7:34:44: 84:56:09:d6:ed:5e:71:0a:b8:91:c8:29:d6:6d:88: a7:40:a0:5b:a7:a4:6d:59:20:0f:ac:ab:55:92:0c: 14:97:a8:a9:b1:a1:fe:39:aa:ef:6e:e0:1b:46:27: 3b:51:f6:00:c8:be:b1:9e:bc:8c:97:8e:05:88:79: 7a:de:01:c6:b5:64:ae:34:98:e1:00:80:93:58:44: a2:54:59:5f:6f:17:1a:89:52:19:e1:6c:09:64:1a: 6a:9b:c2:dd:e8:4b:d9:d3:1b:98:6c:f5:19:05:18: 55:65:ee:f3:63:47:d4:ff:ed:bf:5b:b6:c9:a9:05: c7:88:9f:4c:a1:d1:76:f5:d8:8a:3c:ca:65:03:82: a9:65:16:0d:c1:de:bd:19:58:0f:4a:89:d5:ea:59: 51:2f:71:25:0e:bb:26:4c:dd:46:90:db:af:41:f7: 49:28:bd:f5:46:36:c4:95:d5:e1:96:d0:d2:54:52: e5:b6:40:55:0e:33:60:9b:43:52:bc:00:02:11:ec: 1c:ba:4b:d4:dd:ad:9c:58:1a:c1:4c:e6:b8:98:fe: 57:a3:4a:52:05:f7:48:ce:69:ab:d9:18:d2:10:9f: 3e:32:c8:8f:17:3a:42:12:99:b8:af:9e:d1:a5:f7: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C6:51:29:61:A2:96:9E:77:14:5C:D6:74:BE:8A:8B:D8:93:7F:E9 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/692291CA8D2111EFBB185E3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.80.160.0/22 202.80.165.0-202.80.167.255 202.80.169.0-202.80.175.255 Signature Algorithm: sha256WithRSAEncryption 49:84:d5:00:62:dc:60:8b:71:35:7f:b0:c1:c8:d3:3e:38:12: 1e:05:fe:c1:ef:8f:a8:9a:e4:2b:d9:ae:71:63:28:4a:f9:e4: 64:77:cd:8b:e2:22:77:af:a6:d6:d7:3e:17:11:e7:e5:96:94: 83:bf:70:9a:56:8b:b0:f3:c1:74:24:a2:bf:f6:15:01:28:cb: f8:84:18:32:62:13:cb:b2:d7:70:83:b4:9f:75:47:fc:fc:f5: be:a7:3b:b0:35:b0:aa:91:30:47:55:7b:66:65:7a:6f:c9:0e: 87:9f:f0:4c:23:cd:0d:23:0b:99:9d:07:7e:b0:b3:fb:01:c1: e4:8b:41:24:37:ce:e1:47:61:c9:aa:8c:38:45:32:50:3d:20: a2:19:48:d3:88:60:0a:28:6a:2b:71:b1:99:3a:25:07:2d:c7: b4:0d:cc:df:61:d3:b6:fc:26:dd:49:2d:7c:84:3f:c1:17:b5: 7f:58:f6:d3:27:7f:dd:ad:48:71:20:03:d3:eb:4c:bd:e0:80: ca:0b:f4:63:f0:ec:54:3b:b6:b6:1f:8d:46:e8:d5:d9:34:a7: 8d:0d:a0:dd:ad:d6:5a:38:cb:9b:d5:58:56:f2:db:21:02:e4: ca:87:5f:d5:89:f1:1b:61:10:fb:83:7f:be:9e:2b:54:18:3c: d8:d6:fe:d2 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICKb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjQxMDE4MDcyMDExWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEyMGMyYi05YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkVfRgy+Bau53bn3NESEVgnW7V5xCriRyCnWbYinQKBbp6RtWSAPrKtVkgwU l6ipsaH+OarvbuAbRic7UfYAyL6xnryMl44FiHl63gHGtWSuNJjhAICTWESiVFlf bxcaiVIZ4WwJZBpqm8Ld6EvZ0xuYbPUZBRhVZe7zY0fU/+2/W7bJqQXHiJ9ModF2 9diKPMplA4KpZRYNwd69GVgPSonV6llRL3ElDrsmTN1GkNuvQfdJKL31RjbEldXh ltDSVFLltkBVDjNgm0NSvAACEewcukvU3a2cWBrBTOa4mP5Xo0pSBfdIzmmr2RjS EJ8+MsiPFzpCEpm4r57Rpfe3NQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFKHGUSlh opaedxRc1nS+iovYk3/pMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjIwRUQvRTdFMjMxRTYzNzAwMTFFNEIzMkJEMDZCQzRGOUFFMDIvNjkyMjkxQ0E4 RDIxMTFFRkJCMTg1RTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMCgEAgABMCIDBALKUKAwDAMEAMpQpQMEA8pQoDAMAwQAylCpAwQEylCgMA0G CSqGSIb3DQEBCwUAA4IBAQBJhNUAYtxgi3E1f7DByNM+OBIeBf7B74+omuQr2a5x YyhK+eRkd82L4iJ3r6bW1z4XEefllpSDv3CaVouw88F0JKK/9hUBKMv4hBgyYhPL stdwg7SfdUf8/PW+pzuwNbCqkTBHVXtmZXpvyQ6Hn/BMI80NIwuZnQd+sLP7AcHk i0EkN87hR2HJqow4RTJQPSCiGUjTiGAKKGorcbGZOiUHLce0DczfYdO2/CbdSS18 hD/BF7V/WPbTJ3/drUhxIAPT60y94IDKC/Rj8OxUO7a2H41G6NXZNKeNDaDdrdZa OMub1VhW8tshAuTKh1/VifEbYRD7g3++nitUGDzY1v7S -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:14 2024 by rpki-client on console-ams.rpki-client.org