$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/A89EDBE29D2011EF85C22562C4F9AE02.roa File: A89EDBE29D2011EF85C22562C4F9AE02.roa (raw, json) Hash identifier: PFCVOq6hCEE/LkUTzAqv0G5xeWtP3Mtqim+Dj4TAYwg= Subject key identifier: 98:62:DD:8E:53:83:D1:37:97:2D:8B:13:A1:D9:58:4C:C0:17:FB:19 Certificate issuer: /CN=A91972DF/serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Certificate serial: 08 Authority key identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/A89EDBE29D2011EF85C22562C4F9AE02.roa Signing time: Thu 07 Nov 2024 15:55:06 +0000 ROA not before: Thu 07 Nov 2024 15:55:06 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 7540 IP address blocks: 160.191.154.0/24 maxlen: 24 160.191.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972DF/serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Validity Not Before: Nov 7 15:55:06 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672ce2da-dc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:8a:1d:c6:7b:61:4b:14:72:0e:45:00:f4: 1b:97:3c:54:46:33:94:38:3f:a1:c3:d8:b7:41:54: e1:dc:e7:a4:5a:a9:f8:bc:07:89:05:e2:41:bd:a6: f7:95:26:48:31:f5:8c:74:e7:df:ae:ed:04:b5:ef: 8b:c5:20:16:4e:fa:ba:16:c1:e5:38:4b:f5:e6:cc: 30:fe:c9:d7:3b:46:0d:34:d6:5f:cd:c0:88:83:84: 5d:d8:62:08:da:0b:4b:72:a0:dc:58:95:10:13:1b: 14:b9:80:91:6c:dd:91:df:76:0f:0b:6c:12:1d:38: e6:c4:90:72:cc:7d:c6:3a:b2:54:fb:4f:dc:bc:8c: 7c:12:57:3d:4f:82:ab:b9:ea:39:cb:84:e0:1b:83: dc:7e:3b:a0:4e:6f:e8:7e:66:f3:58:ae:32:d2:8b: 34:0f:da:95:51:b5:ff:b6:ed:b5:9e:bb:64:d8:d3: 41:1a:33:4e:12:78:48:b2:59:8e:c6:91:5f:0d:7a: e3:f7:b6:ca:19:5a:ef:0c:80:1c:b2:95:a4:4a:86: 42:90:43:dd:b8:5d:63:6d:b6:e2:fe:dd:6b:81:20: 79:d8:85:41:12:56:2f:4b:bc:b5:e6:a3:7f:27:30: 28:77:7b:49:d5:e7:54:2a:56:75:fd:4d:5b:7e:f9: 92:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:62:DD:8E:53:83:D1:37:97:2D:8B:13:A1:D9:58:4C:C0:17:FB:19 X509v3 Authority Key Identifier: keyid:47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/A89EDBE29D2011EF85C22562C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.154.0/23 Signature Algorithm: sha256WithRSAEncryption 73:02:ac:9b:d4:43:dc:8b:61:85:04:39:e6:cf:40:b2:34:e0: 09:a3:aa:e7:a2:85:6b:f0:a7:14:65:ba:5f:b6:e9:51:ad:d5: 35:8a:4c:6f:f6:30:4a:8c:cd:0d:c8:5b:8a:d2:dc:23:60:f9: 0b:4f:a4:fe:50:b2:78:bc:8b:00:5c:c2:91:18:24:86:9c:b6: 9b:19:96:d0:4a:54:33:95:af:cd:a8:7d:e7:b0:4f:2a:1d:19: 6c:46:1c:35:85:b7:14:15:62:be:5b:d2:8a:36:2e:2b:2a:75: 42:81:b1:7c:b7:3e:57:c4:55:16:b4:f7:24:ae:e6:23:b2:6e: 79:31:37:41:fd:7d:11:e7:fb:ce:bb:7d:34:85:df:5b:82:da: 91:69:41:8f:5a:25:7f:c0:05:bc:31:b5:9a:89:ad:af:a4:b1: e9:85:74:77:ea:7e:11:32:38:c6:f5:ef:f4:0f:2c:da:0f:c7: 0c:f0:6a:4e:29:ab:94:5a:d2:a6:32:b8:53:f6:d8:4a:b0:3c: 34:3d:c0:4e:e4:1e:97:09:ca:ad:8d:b1:11:90:29:7b:b2:f7: f5:62:98:e2:c3:75:5a:ea:0b:7f:c3:86:4b:ab:87:7a:e6:bc: f7:8b:f7:6a:56:54:6c:c2:9f:f7:6d:ed:06:95:f0:3b:bf:b6: ed:58:a5:f9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzJERjExMC8GA1UEBRMoNDcyMEEyQjc4Qzc4MjM5OTI2RkRFRTczNDRBMzY4MERB MEQ4MDcxRDAeFw0yNDExMDcxNTU1MDZaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmNlMmRhLWRjNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDHIodxnthSxRyDkUA9BuXPFRGM5Q4P6HD2LdBVOHc56Raqfi8B4kF4kG9pveV Jkgx9Yx059+u7QS174vFIBZO+roWweU4S/XmzDD+ydc7Rg001l/NwIiDhF3YYgja C0tyoNxYlRATGxS5gJFs3ZHfdg8LbBIdOObEkHLMfcY6slT7T9y8jHwSVz1Pgqu5 6jnLhOAbg9x+O6BOb+h+ZvNYrjLSizQP2pVRtf+27bWeu2TY00EaM04SeEiyWY7G kV8NeuP3tsoZWu8MgByylaRKhkKQQ924XWNttuL+3WuBIHnYhUESVi9LvLXmo38n MCh3e0nV51QqVnX9TVt++ZI7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmGLdjlOD 0TeXLYsTodlYTMAX+xkwHwYDVR0jBBgwFoAURyCit4x4I5km/e5zRKNoDaDYBx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3MkRGLzI3RTNFREE0OTgz MzExRUY4MzE4OUE1N0M0RjlBRTAyL1J5Q2l0NHg0STVrbV9lNXpSS05vRGFEWUJ4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUnlDaXQ0eDRJNWttX2U1elJLTm9EYURZQngwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJERi8yN0UzRURBNDk4MzMxMUVGODMxODlBNTdDNEY5QUUwMi9BODlFREJFMjlE MjAxMUVGODVDMjI1NjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/mjANBgkqhkiG9w0BAQsFAAOCAQEAcwKsm9RD3IthhQQ5 5s9AsjTgCaOq56KFa/CnFGW6X7bpUa3VNYpMb/YwSozNDchbitLcI2D5C0+k/lCy eLyLAFzCkRgkhpy2mxmW0EpUM5Wvzah957BPKh0ZbEYcNYW3FBVivlvSijYuKyp1 QoGxfLc+V8RVFrT3JK7mI7JueTE3Qf19Eef7zrt9NIXfW4LakWlBj1olf8AFvDG1 momtr6Sx6YV0d+p+ETI4xvXv9A8s2g/HDPBqTimrlFrSpjK4U/bYSrA8ND3ATuQe lwnKrY2xEZApe7L39WKY4sN1WuoLf8OGS6uHeua894v3alZUbMKf923tBpXwO7+2 7Vil+Q== -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:46 2024 by rpki-client on console-fra.rpki-client.org