$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/08FA5F2C23D511EF8868CA4EC4F9AE02.roa File: 08FA5F2C23D511EF8868CA4EC4F9AE02.roa (raw, json) Hash identifier: DIDHt3NrTIOh7WovjdNM2y6KpG6dfiHMENqMfl7Ce7c= Subject key identifier: 83:27:41:F2:CC:8F:3C:DF:CB:D0:5E:FD:D3:F3:7A:A6:30:1A:57:2E Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0299 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/08FA5F2C23D511EF8868CA4EC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:31:11 +0000 ROA not before: Thu 05 Sep 2024 03:31:11 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151938 IP address blocks: 160.19.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Sep 5 03:31:11 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d925ff-91d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:9d:3f:8c:39:9b:c4:6d:39:b3:20:71:f1: c8:82:fe:bc:57:51:cc:a7:24:2a:e9:5e:27:6f:0c: ee:e4:6f:3f:c8:67:cd:20:05:dd:76:81:75:fa:57: d7:31:be:3e:dc:75:34:38:8a:e1:99:52:79:36:5c: 20:b8:b3:c7:73:06:b5:27:67:d9:4f:b5:ba:5b:62: d9:97:1f:4b:dc:b2:dd:c0:8d:7f:de:25:33:5a:b8: 84:53:2c:f6:99:3d:cf:4f:f9:e3:32:90:32:82:fa: 9f:92:81:2f:28:5a:eb:5d:4e:1c:81:5b:3c:9a:1c: de:15:91:ea:25:cd:79:9c:12:9e:74:3e:bf:dc:4d: 49:38:65:de:05:6a:df:be:87:42:6c:92:28:c8:5c: f8:e3:d0:e6:14:70:8f:9e:0a:69:93:9d:5a:70:98: 9c:d8:b6:77:99:c8:97:a6:0c:ff:20:f9:14:9a:b3: 78:f7:aa:6c:62:e7:14:33:f0:cc:aa:5a:59:5b:c3: 2d:d1:5a:49:33:ef:12:f6:e4:a5:88:66:5f:4e:73: 78:22:ff:fd:e6:e1:77:85:29:4e:41:d5:a7:8a:52: 21:5b:e1:13:1c:ea:d6:ee:ae:cd:62:ed:4e:c0:51: 58:c6:d7:cd:70:3a:33:51:98:3e:0e:3a:cd:28:60: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:27:41:F2:CC:8F:3C:DF:CB:D0:5E:FD:D3:F3:7A:A6:30:1A:57:2E X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/08FA5F2C23D511EF8868CA4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.19.204.0/23 Signature Algorithm: sha256WithRSAEncryption 02:76:f7:7c:f0:da:92:3c:3f:53:b5:f9:40:53:e2:30:4c:c0: dd:30:18:35:ab:eb:c0:dd:1e:9e:e8:71:45:54:2f:3a:cb:c7: e5:2c:bc:99:f4:de:98:f5:ce:95:e3:33:ea:9a:26:04:aa:e0: c4:a2:77:f0:36:31:c6:c0:2e:74:37:2e:d3:0d:d7:90:cf:37: bd:17:4d:13:19:74:de:9e:f6:59:c2:93:54:19:54:9a:8d:da: e1:bd:32:51:f1:ec:f6:62:6e:c6:68:7d:0a:64:b1:a2:23:d8: a5:b1:ee:c1:fd:fe:a9:a4:b7:e8:c6:bf:3e:93:c7:17:30:87: d8:10:cb:ad:e0:b2:87:57:52:79:6b:5e:00:a8:e6:fa:a4:d7: 0e:60:f5:21:d2:cb:2e:2d:68:27:75:2a:a1:5a:f6:26:05:ec: 3e:27:ad:7d:2c:b1:75:fa:05:37:c7:51:96:28:86:d5:82:d2: d5:54:05:e5:7b:1d:fe:60:2a:20:41:1c:e6:ee:ef:9a:e1:50: 94:70:73:5a:ce:83:7c:8c:5a:c5:0f:cb:0f:36:de:a0:e9:07: 95:0a:65:87:71:d4:09:b3:6d:e9:29:e2:7b:a1:59:95:f9:49: 44:44:92:e9:ff:93:ef:f1:df:66:3f:03:36:b2:f1:c1:b5:c8: ab:54:a8:af -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwOTA1MDMzMTExWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjVmZi05MWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaadP4w5m8RtObMgcfHIgv68V1HMpyQq6V4nbwzu5G8/yGfNIAXddoF1+lfX Mb4+3HU0OIrhmVJ5NlwguLPHcwa1J2fZT7W6W2LZlx9L3LLdwI1/3iUzWriEUyz2 mT3PT/njMpAygvqfkoEvKFrrXU4cgVs8mhzeFZHqJc15nBKedD6/3E1JOGXeBWrf vodCbJIoyFz449DmFHCPngppk51acJic2LZ3mciXpgz/IPkUmrN496psYucUM/DM qlpZW8Mt0VpJM+8S9uSliGZfTnN4Iv/95uF3hSlOQdWnilIhW+ETHOrW7q7NYu1O wFFYxtfNcDozUZg+DjrNKGBlUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIMnQfLM jzzfy9Be/dPzeqYwGlcuMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMDhGQTVGMkMy M0Q1MTFFRjg4NjhDQTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgE8wwDQYJKoZIhvcNAQELBQADggEBAAJ293zw2pI8P1O1 +UBT4jBMwN0wGDWr68DdHp7ocUVULzrLx+UsvJn03pj1zpXjM+qaJgSq4MSid/A2 McbALnQ3LtMN15DPN70XTRMZdN6e9lnCk1QZVJqN2uG9MlHx7PZibsZofQpksaIj 2KWx7sH9/qmkt+jGvz6Txxcwh9gQy63gsodXUnlrXgCo5vqk1w5g9SHSyy4taCd1 KqFa9iYF7D4nrX0ssXX6BTfHUZYohtWC0tVUBeV7Hf5gKiBBHObu75rhUJRwc1rO g3yMWsUPyw823qDpB5UKZYdx1Amzbekp4nuhWZX5SUREkun/k+/x32Y/Azay8cG1 yKtUqK8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:05:36 2024 by rpki-client on console-ams.rpki-client.org