$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C89AC2A0A4B211EF9FF62E86C4F9AE02.roa File: C89AC2A0A4B211EF9FF62E86C4F9AE02.roa (raw, json) Hash identifier: 8PXJVRiniSVe9p4ya9uyu85mww20ol2xvDWw6TIPMkc= Subject key identifier: 92:56:1F:EA:E5:63:CA:CB:30:F3:31:97:F2:CB:37:57:F4:FD:67:B1 Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5 Certificate serial: 0534 Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C89AC2A0A4B211EF9FF62E86C4F9AE02.roa Signing time: Sun 17 Nov 2024 07:10:12 +0000 ROA not before: Sun 17 Nov 2024 07:10:12 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138997 IP address blocks: 103.172.134.0/23 maxlen: 23 103.172.134.0/24 maxlen: 24 2407:d340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5 Validity Not Before: Nov 17 07:10:12 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=673996d4-295c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:64:30:e2:c2:5e:94:85:52:34:03:68:57: dd:63:9f:4a:3c:69:e2:b1:c4:da:5d:eb:7e:64:55: 8e:be:c9:f6:2f:fc:4c:28:63:b0:93:8a:1f:86:2e: f1:60:98:67:4e:45:74:90:b5:77:61:88:7a:9d:25: 86:2e:77:88:83:8c:e1:bd:8b:7e:90:0d:41:52:fe: 12:59:b2:8f:15:61:2e:45:21:de:21:72:a7:df:57: fb:50:e4:8b:f5:3f:94:2e:2b:da:eb:7b:fc:fa:a3: 0d:13:34:89:86:c5:fc:e9:70:b8:70:8f:16:57:24: 4d:56:79:68:e1:e1:12:46:69:ce:c4:e6:d3:2f:88: 72:8d:00:44:2b:8f:15:61:54:cb:30:4a:8b:32:94: 22:86:2b:9d:ef:07:94:9c:bc:d5:f2:f4:2c:92:21: a1:f0:3e:dd:54:7f:b1:bf:b5:c0:f9:00:0e:b4:37: 99:2e:35:bb:f4:ee:b2:90:3a:9e:4f:ad:46:81:81: 91:6b:f2:f1:44:54:fb:36:c3:c7:af:78:df:8e:20: cd:f1:84:0f:90:02:98:0e:1f:4e:f6:54:0a:67:32: b0:84:12:40:be:1d:82:f5:de:a5:87:d9:f5:0d:47: 85:d4:7f:57:e6:ee:6d:ef:d1:f9:19:d9:45:b0:42: ed:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:56:1F:EA:E5:63:CA:CB:30:F3:31:97:F2:CB:37:57:F4:FD:67:B1 X509v3 Authority Key Identifier: keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/C89AC2A0A4B211EF9FF62E86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.134.0/23 IPv6: 2407:d340::/32 Signature Algorithm: sha256WithRSAEncryption 8e:34:60:4a:e0:ee:99:8a:a3:b5:ad:05:52:3a:b6:20:d4:a2: 29:b5:ff:21:4a:be:e3:0e:84:91:14:6c:03:d7:78:d8:a8:99: f5:44:2f:e6:d8:36:d3:7d:15:f2:0f:82:27:44:9f:3f:e2:76: 7b:d3:30:3c:73:c4:e2:78:fb:a5:44:75:28:57:0c:fc:21:b3: 9a:c0:15:b9:e0:72:5c:56:33:4d:2e:15:91:3e:8a:c7:b1:a6: 67:fe:f9:9a:51:9a:2c:5a:25:1e:fa:c5:dd:62:9f:45:ca:b0: 02:8f:04:fe:48:c4:79:e8:c5:62:56:c8:dd:ae:8f:43:e6:5f: 14:5a:83:d1:0e:c9:16:72:a4:17:0e:2a:1c:e6:27:ff:fa:84: 77:83:16:fc:b1:65:83:52:3c:30:4c:cf:99:00:59:4c:bf:13: fd:8e:a2:d9:c0:52:5c:4d:bb:71:68:49:e3:c9:e7:a8:c3:c7: 06:51:47:8b:4e:78:b5:46:2d:a9:58:81:4d:3b:fb:a2:23:7d: 2d:06:a5:0f:33:76:52:36:1d:4d:ef:1a:de:31:0b:d8:99:ff: fb:0b:41:a4:57:7d:d2:1c:63:fe:8e:2f:ab:53:96:a9:6c:0c: 09:d5:e0:24:21:a9:8d:0d:2c:08:ef:9f:a1:fa:d5:39:d8:fb: ef:53:e5:74 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2 QzY2MkFGRDUwHhcNMjQxMTE3MDcxMDEyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM5OTZkNC0yOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFZkMOLCXpSFUjQDaFfdY59KPGniscTaXet+ZFWOvsn2L/xMKGOwk4ofhi7x YJhnTkV0kLV3YYh6nSWGLneIg4zhvYt+kA1BUv4SWbKPFWEuRSHeIXKn31f7UOSL 9T+ULiva63v8+qMNEzSJhsX86XC4cI8WVyRNVnlo4eESRmnOxObTL4hyjQBEK48V YVTLMEqLMpQihiud7weUnLzV8vQskiGh8D7dVH+xv7XA+QAOtDeZLjW79O6ykDqe T61GgYGRa/LxRFT7NsPHr3jfjiDN8YQPkAKYDh9O9lQKZzKwhBJAvh2C9d6lh9n1 DUeF1H9X5u5t79H5GdlFsELtJwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJJWH+rl Y8rLMPMxl/LLN1f0/WexMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvQzg5QUMyQTBB NEIyMTFFRjlGRjYyRTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrIYwDQQCAAIwBwMFACQH00AwDQYJKoZIhvcNAQELBQAD ggEBAI40YErg7pmKo7WtBVI6tiDUoim1/yFKvuMOhJEUbAPXeNiomfVEL+bYNtN9 FfIPgidEnz/idnvTMDxzxOJ4+6VEdShXDPwhs5rAFbngclxWM00uFZE+isexpmf+ +ZpRmixaJR76xd1in0XKsAKPBP5IxHnoxWJWyN2uj0PmXxRag9EOyRZypBcOKhzm J//6hHeDFvyxZYNSPDBMz5kAWUy/E/2OotnAUlxNu3FoSePJ56jDxwZRR4tOeLVG LalYgU07+6IjfS0GpQ8zdlI2HU3vGt4xC9iZ//sLQaRXfdIcY/6OL6tTlqlsDAnV 4CQhqY0NLAjvn6H61TnY++9T5XQ= -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:00 2024 by rpki-client on console-ams.rpki-client.org