$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6427B5882C7D11EFBD8C926BC4F9AE02.roa File: 6427B5882C7D11EFBD8C926BC4F9AE02.roa (raw, json) Hash identifier: srgCw9zpCQK6ODxZ6LJ7nwIDM9hkyCLiLjDLn4c8fPA= Subject key identifier: 69:1B:3F:71:36:D4:81:C6:55:48:AC:1B:03:13:7B:2B:73:26:E1:E6 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0424 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6427B5882C7D11EFBD8C926BC4F9AE02.roa Signing time: Fri 22 Nov 2024 02:16:36 +0000 ROA not before: Fri 22 Nov 2024 02:16:36 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 149107 IP address blocks: 157.66.24.0/23 maxlen: 23 157.66.26.0/23 maxlen: 23 160.30.18.0/23 maxlen: 23 160.191.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1060 (0x424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Nov 22 02:16:36 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=673fe984-406e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:3b:56:17:e6:27:5d:36:f4:1b:17:aa:c5: a0:96:02:9c:1a:9e:06:ec:d5:28:f5:94:78:49:fd: 5f:67:e2:89:0f:a5:4e:6e:a2:07:e4:e8:3c:94:aa: 68:91:43:03:0c:96:53:c4:f5:40:28:6a:9d:53:d6: c9:91:08:d3:b4:fc:68:a0:c5:08:36:0f:a5:9e:f9: a4:18:cc:03:ed:39:10:87:bb:0f:22:43:38:f3:af: a3:5f:1d:3f:8e:b9:89:bf:49:fe:3e:58:06:1e:77: 7c:4e:e0:08:75:a2:40:d7:27:5e:8e:74:40:f6:f7: d4:9d:34:42:84:95:46:74:f6:ea:1b:15:ee:98:0a: 44:6c:c7:4a:92:21:3a:d3:f4:37:81:45:40:a8:20: 1a:6f:19:04:c3:49:a6:d4:76:5a:d9:20:39:91:69: b9:92:ad:98:47:71:f3:d9:04:c0:86:b7:bf:bd:d5: 7c:b1:56:11:4c:c0:29:9a:b0:41:1e:4e:f3:07:ac: 6c:fb:3d:28:37:06:ab:bd:fc:71:7e:e7:a2:ac:eb: 57:b8:f6:d4:48:6f:3b:2c:5b:cb:2b:1b:63:7a:96: 22:93:18:27:d4:0e:dc:db:d8:39:d6:ef:ce:a9:b9: 2b:6d:45:b9:65:80:16:65:c2:ea:36:53:d2:94:c0: 50:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1B:3F:71:36:D4:81:C6:55:48:AC:1B:03:13:7B:2B:73:26:E1:E6 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6427B5882C7D11EFBD8C926BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.24.0/22 160.30.18.0/23 160.191.164.0/23 Signature Algorithm: sha256WithRSAEncryption 85:28:13:73:41:be:fa:d9:c2:28:42:53:db:24:40:b1:6d:ea: 7a:79:d0:3c:1d:99:2e:2e:53:9a:8a:e4:e0:c7:97:ac:84:c6: 9e:c1:f1:ad:a4:d3:7f:b5:e1:87:e8:30:99:c5:b4:90:2c:03: a5:27:a1:75:75:85:15:06:cb:6e:35:dd:3c:3c:d6:38:eb:a6: 81:e5:38:00:b8:19:89:b1:c9:5c:c4:fa:cd:bc:aa:c9:4f:94: 65:b4:6c:f5:d8:8b:31:5c:a1:cb:ee:10:2c:a0:8f:c8:5c:d1: 0f:cb:4a:71:64:8a:99:6d:ca:c3:7f:23:f4:b4:59:e7:9c:67: 57:71:21:df:64:c4:5c:5a:31:5c:91:81:c4:58:8b:54:d3:92: d5:50:a9:32:69:a2:49:b0:1f:95:c3:2b:bb:af:e4:84:14:64: 3a:7f:aa:c0:04:f4:53:10:33:d5:c6:c2:91:dd:a0:eb:c3:0d: 8a:1a:54:d0:12:28:ac:6c:54:01:b0:12:11:d8:13:be:2e:92: 22:7d:ed:95:ac:e3:97:3f:c8:5a:1a:91:19:a6:ea:93:82:15: 52:c3:5a:e5:8b:7e:c5:e4:0c:cb:03:6b:fd:15:48:a8:97:eb: 5c:8b:5a:46:19:87:54:c5:08:b7:da:c1:57:fe:fc:5a:20:70: 1c:bc:ae:6d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQxMTIyMDIxNjM2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNmZTk4NC00MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRE7VhfmJ1029BsXqsWglgKcGp4G7NUo9ZR4Sf1fZ+KJD6VObqIH5Og8lKpo kUMDDJZTxPVAKGqdU9bJkQjTtPxooMUINg+lnvmkGMwD7TkQh7sPIkM486+jXx0/ jrmJv0n+PlgGHnd8TuAIdaJA1ydejnRA9vfUnTRChJVGdPbqGxXumApEbMdKkiE6 0/Q3gUVAqCAabxkEw0mm1HZa2SA5kWm5kq2YR3Hz2QTAhre/vdV8sVYRTMApmrBB Hk7zB6xs+z0oNwarvfxxfueirOtXuPbUSG87LFvLKxtjepYikxgn1A7c29g51u/O qbkrbUW5ZYAWZcLqNlPSlMBQCQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGkbP3E2 1IHGVUisGwMTeytzJuHmMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNjQyN0I1ODgy QzdEMTFFRkJEOEM5MjZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAKdQhgDBAGgHhIDBAGgv6QwDQYJKoZIhvcNAQELBQADggEB AIUoE3NBvvrZwihCU9skQLFt6np50DwdmS4uU5qK5ODHl6yExp7B8a2k03+14Yfo MJnFtJAsA6UnoXV1hRUGy2413Tw81jjrpoHlOAC4GYmxyVzE+s28qslPlGW0bPXY izFcocvuECygj8hc0Q/LSnFkipltysN/I/S0WeecZ1dxId9kxFxaMVyRgcRYi1TT ktVQqTJpokmwH5XDK7uv5IQUZDp/qsAE9FMQM9XGwpHdoOvDDYoaVNASKKxsVAGw EhHYE74ukiJ97ZWs45c/yFoakRmm6pOCFVLDWuWLfsXkDMsDa/0VSKiX61yLWkYZ h1TFCLfawVf+/FogcBy8rm0= -----END CERTIFICATE-----Generated at Fri Nov 22 03:53:02 2024 by rpki-client on console-fra.rpki-client.org