$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8538D01023ED11EF9D9A2135C4F9AE02.roa File: 8538D01023ED11EF9D9A2135C4F9AE02.roa (raw, json) Hash identifier: p6bpZQncGpiwsXQJBD+FV1s0G4cnmHkxtH1iPkjKOqU= Subject key identifier: F5:26:0E:B7:83:9B:37:F2:56:DB:92:CC:AF:5F:1F:72:1E:6C:45:BF Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 029A Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8538D01023ED11EF9D9A2135C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:31:12 +0000 ROA not before: Thu 05 Sep 2024 03:31:12 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151941 IP address blocks: 157.66.216.0/24 maxlen: 24 157.66.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Sep 5 03:31:12 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92600-007a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:d7:14:a1:78:c6:9d:8f:a0:fd:1b:c4:02: 26:34:7e:b5:21:3b:02:f5:2a:ca:a8:41:b1:c2:7b: c8:f1:0d:eb:f2:a0:35:a0:5c:c2:8b:74:39:f2:39: bf:e4:f6:cf:2a:d6:b4:c9:08:e2:59:bc:ae:66:bb: 12:3c:08:a9:3f:35:31:b0:d9:1b:27:9c:75:04:2c: f2:ee:06:7c:9e:c4:af:b6:4f:28:95:db:3b:f1:00: 23:c9:70:e5:42:c2:c9:d6:d9:0b:87:89:a4:da:77: 9a:df:dc:6f:a4:d4:17:a5:db:6e:d3:77:db:76:b7: 88:d6:97:35:cd:98:a5:18:6a:74:30:32:56:f2:d1: 5f:b1:20:f0:44:53:f3:49:33:85:32:00:31:2c:9d: c0:fb:ee:b6:fc:e2:ea:0b:a7:97:21:0e:69:da:1a: 84:72:0b:e2:b2:d9:ec:e8:e1:0c:92:06:32:8f:5b: be:d9:b3:8d:f8:58:5d:ad:38:d6:c1:1b:b8:b7:ab: 9e:2d:03:17:f3:21:e5:ef:37:f9:53:9f:4c:15:32: aa:18:f3:4d:a5:e1:7b:34:7e:dc:f6:af:27:04:6b: 7f:70:65:42:df:60:e3:13:6e:82:c5:cb:28:b6:52: e4:4b:42:0f:0e:2e:22:c5:f4:3d:cb:8a:42:16:4d: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:26:0E:B7:83:9B:37:F2:56:DB:92:CC:AF:5F:1F:72:1E:6C:45:BF X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8538D01023ED11EF9D9A2135C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.216.0/23 Signature Algorithm: sha256WithRSAEncryption 08:a0:a7:8c:d4:ff:46:64:0a:70:71:b6:10:32:0e:27:9a:e8: 86:13:6c:d6:8e:62:ca:e6:eb:a2:e6:e3:66:3b:8d:5b:3c:e0: 16:ab:03:76:94:98:89:f7:d7:b5:e7:12:59:bf:5f:f6:1f:43: c0:8c:49:51:0f:c7:0f:8f:0c:0f:b0:7e:25:fd:d2:6d:61:cc: 46:77:7d:5c:36:11:3d:86:4b:49:2c:aa:af:f2:04:c4:7a:76: db:d6:a9:e7:e6:0d:40:f5:2b:40:31:53:dc:99:b8:36:8b:dc: 0f:2b:ef:c2:c7:c5:46:24:83:d1:c9:e4:fc:be:aa:aa:cf:bd: bb:cf:22:46:91:e6:4e:7a:7d:8b:ef:3e:76:c7:34:67:aa:b6: a0:b1:4c:8b:fc:2c:03:7b:85:df:ab:65:6b:7f:2d:74:89:c6: 81:9f:ef:59:63:e7:79:6a:9b:3b:f8:dd:ed:38:8a:7c:8d:c2: c6:48:b6:56:a8:36:de:e2:4a:c6:0d:2b:ac:06:8c:fc:48:da: 7c:37:02:44:0e:ae:3d:c6:df:b9:95:bc:f9:fd:19:6d:4f:be: 39:f1:20:0e:32:92:7c:3e:df:42:0b:a0:35:cf:47:a6:d1:e7: d1:22:dc:74:66:84:50:e2:27:9d:6c:65:98:85:4b:e1:f3:aa: 66:60:ce:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwOTA1MDMzMTEyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYwMC0wMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJzXFKF4xp2PoP0bxAImNH61ITsC9SrKqEGxwnvI8Q3r8qA1oFzCi3Q58jm/ 5PbPKta0yQjiWbyuZrsSPAipPzUxsNkbJ5x1BCzy7gZ8nsSvtk8olds78QAjyXDl QsLJ1tkLh4mk2nea39xvpNQXpdtu03fbdreI1pc1zZilGGp0MDJW8tFfsSDwRFPz STOFMgAxLJ3A++62/OLqC6eXIQ5p2hqEcgvistns6OEMkgYyj1u+2bON+FhdrTjW wRu4t6ueLQMX8yHl7zf5U59MFTKqGPNNpeF7NH7c9q8nBGt/cGVC32DjE26Cxcso tlLkS0IPDi4ixfQ9y4pCFk1AnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPUmDreD mzfyVtuSzK9fH3IebEW/MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvODUzOEQwMTAy M0VEMTFFRjlEOUEyMTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQtgwDQYJKoZIhvcNAQELBQADggEBAAigp4zU/0ZkCnBx thAyDiea6IYTbNaOYsrm66Lm42Y7jVs84BarA3aUmIn317XnElm/X/YfQ8CMSVEP xw+PDA+wfiX90m1hzEZ3fVw2ET2GS0ksqq/yBMR6dtvWqefmDUD1K0AxU9yZuDaL 3A8r78LHxUYkg9HJ5Py+qqrPvbvPIkaR5k56fYvvPnbHNGeqtqCxTIv8LAN7hd+r ZWt/LXSJxoGf71lj53lqmzv43e04inyNwsZItlaoNt7iSsYNK6wGjPxI2nw3AkQO rj3G37mVvPn9GW1PvjnxIA4yknw+30ILoDXPR6bR59Ei3HRmhFDiJ51sZZiFS+Hz qmZgzrc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:05:36 2024 by rpki-client on console-ams.rpki-client.org