$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/880E53BC852A11EE8B988A85C4F9AE02.roa File: 880E53BC852A11EE8B988A85C4F9AE02.roa (raw, json) Hash identifier: sIl0YZsX359p5eI9mAwbfYGQ+EtpoD/khF6JBQsi8XA= Subject key identifier: C8:19:8C:FA:AC:10:FD:90:1B:F1:13:04:09:31:B8:3E:AF:A8:6A:79 Certificate issuer: /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Certificate serial: 02 Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/880E53BC852A11EE8B988A85C4F9AE02.roa Signing time: Fri 17 Nov 2023 09:20:21 +0000 ROA not before: Fri 17 Nov 2023 09:20:21 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 45666 IP address blocks: 202.89.100.0/22 maxlen: 22 202.89.100.0/24 maxlen: 24 202.89.101.0/24 maxlen: 24 202.89.102.0/24 maxlen: 24 202.89.103.0/24 maxlen: 24 203.55.53.0/24 maxlen: 24 2407:8600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Validity Not Before: Nov 17 09:20:21 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65573055-ab59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ec:00:fc:ae:0c:5a:91:2e:5b:5a:28:ae:15: b9:22:18:67:0e:e6:98:40:19:15:40:66:0e:06:71: 57:ba:49:a3:27:87:ae:cb:4f:b2:15:6b:e0:d2:ed: 37:61:a4:22:60:f6:14:98:6e:d7:b6:5a:2b:43:17: 0b:ea:12:de:e3:a2:14:f1:71:e8:07:6d:75:4a:ab: f2:6e:41:73:e7:6e:cd:0b:5d:09:56:89:b6:0f:eb: fb:4e:2f:20:1b:30:c1:22:72:a3:8c:11:8e:c8:94: e8:5f:04:7e:a0:b9:59:25:7c:e3:d2:fc:ce:4e:a1: 97:00:a8:28:b1:e7:4a:cd:2e:d8:4f:0c:b4:63:4c: 59:74:af:1a:bc:e4:54:f9:77:68:0b:93:8e:87:86: 61:cc:91:91:45:50:79:2b:e5:35:2c:9e:a8:e4:42: c0:67:bf:65:64:fd:fd:84:05:a9:b0:02:52:ee:81: f8:1f:64:fe:29:e9:dc:ee:c9:36:ae:35:fd:1c:f4: 67:49:d7:f5:32:8e:5e:9d:50:01:20:9a:0e:e9:8e: 19:0f:e2:4b:ba:e0:c9:21:f8:c5:57:a9:d7:be:be: 02:5f:fc:22:d6:c6:a2:a5:76:77:8f:a4:95:22:c6: 06:fa:fe:ab:cf:a0:ff:f9:5c:2f:9c:02:95:48:97: fb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:19:8C:FA:AC:10:FD:90:1B:F1:13:04:09:31:B8:3E:AF:A8:6A:79 X509v3 Authority Key Identifier: keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/880E53BC852A11EE8B988A85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.89.100.0/22 203.55.53.0/24 IPv6: 2407:8600::/32 Signature Algorithm: sha256WithRSAEncryption b2:2d:4c:45:14:df:b2:35:63:b6:55:66:71:e2:5b:fd:99:e1: 9c:0f:45:0a:67:26:8a:30:cc:36:cc:d9:35:cd:d7:8c:39:9d: 78:51:86:53:a8:39:1d:2a:91:21:e2:3a:37:9a:e1:29:84:50: f1:24:9f:d2:27:94:4c:a8:e0:6e:b3:ef:b4:61:c6:13:bf:89: 2f:0a:21:55:d6:37:7b:60:6a:01:4f:1a:d4:ad:ac:ca:d5:c3: 95:79:88:fc:62:02:6c:ce:56:7f:d6:c7:35:58:da:8c:16:45: 85:e2:49:61:b7:86:44:5e:e1:4d:d5:05:b1:19:7c:ce:9d:c0: 03:bd:5d:e0:9d:9f:92:79:db:89:0d:b5:f2:87:b3:33:31:ac: 67:ed:c2:f5:8e:cf:d9:1a:98:ce:b1:dd:de:c3:ab:b1:af:9b: 09:9b:37:57:38:6c:34:15:e4:db:f5:4c:33:e5:32:5e:18:d2: 05:93:8a:52:a3:1b:bd:82:88:92:b6:90:e7:15:89:bf:22:2c: 35:9f:62:f5:aa:7c:a5:9b:7d:a3:0b:2a:d8:d7:3d:76:f7:29: 06:ea:0f:70:0b:9b:6a:71:55:a0:9b:55:63:33:db:68:90:9c: ad:41:83:10:fa:e9:92:04:b9:46:86:d5:4b:2c:55:b9:bc:cf: 72:fb:20:30 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REVEOTExMC8GA1UEBRMoRTE2RTRGNjVFMkUzOTdFOUZDRTA1Nzg1QTI2NUM2MTk3 QzgyMjBDOTAeFw0yMzExMTcwOTIwMjFaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NTczMDU1LWFiNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg7AD8rgxakS5bWiiuFbkiGGcO5phAGRVAZg4GcVe6SaMnh67LT7IVa+DS7Tdh pCJg9hSYbte2WitDFwvqEt7johTxcegHbXVKq/JuQXPnbs0LXQlWibYP6/tOLyAb MMEicqOMEY7IlOhfBH6guVklfOPS/M5OoZcAqCix50rNLthPDLRjTFl0rxq85FT5 d2gLk46HhmHMkZFFUHkr5TUsnqjkQsBnv2Vk/f2EBamwAlLugfgfZP4p6dzuyTau Nf0c9GdJ1/Uyjl6dUAEgmg7pjhkP4ku64Mkh+MVXqde+vgJf/CLWxqKldnePpJUi xgb6/qvPoP/5XC+cApVIl/tzAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUyBmM+qwQ /ZAb8RMECTG4Pq+oankwHwYDVR0jBBgwFoAU4W5PZeLjl+n84FeFomXGGXyCIMkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERUQ5L0RGMTVCM0I4ODUy OTExRUVBRkQwNEM4NEM0RjlBRTAyLzRXNVBaZUxqbC1uODRGZUZvbVhHR1h5Q0lN ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFc1UFplTGpsLW44NEZlRm9tWEdHWHlDSU1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REVEOS9ERjE1QjNCODg1MjkxMUVFQUZEMDRDODRDNEY5QUUwMi84ODBFNTNCQzg1 MkExMUVFOEI5ODhBODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAspZZAMEAMs3NTANBAIAAjAHAwUAJAeGADANBgkqhkiG9w0B AQsFAAOCAQEAsi1MRRTfsjVjtlVmceJb/ZnhnA9FCmcmijDMNszZNc3XjDmdeFGG U6g5HSqRIeI6N5rhKYRQ8SSf0ieUTKjgbrPvtGHGE7+JLwohVdY3e2BqAU8a1K2s ytXDlXmI/GICbM5Wf9bHNVjajBZFheJJYbeGRF7hTdUFsRl8zp3AA71d4J2fknnb iQ218oezMzGsZ+3C9Y7P2RqYzrHd3sOrsa+bCZs3VzhsNBXk2/VMM+UyXhjSBZOK UqMbvYKIkraQ5xWJvyIsNZ9i9ap8pZt9owsq2Nc9dvcpBuoPcAubanFVoJtVYzPb aJCcrUGDEPrpkgS5RobVSyxVubzPcvsgMA== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org