$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8855006E717911EFBEA3FD86C4F9AE02.roa File: 8855006E717911EFBEA3FD86C4F9AE02.roa (raw, json) Hash identifier: RH95nc3u0mQ+G/b5KqxzBZT3We6GxsUNntqIQUbIYgo= Subject key identifier: 02:66:F9:A6:8F:C9:98:5B:78:AD:30:3F:7E:4B:11:B4:E6:3B:FA:4E Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 02DA Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8855006E717911EFBEA3FD86C4F9AE02.roa Signing time: Fri 13 Sep 2024 02:40:27 +0000 ROA not before: Fri 13 Sep 2024 02:40:27 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 152982 IP address blocks: 160.30.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Sep 13 02:40:27 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e3a61a-6e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:a4:39:00:57:c7:ed:0c:04:7d:73:09:02: b2:89:06:64:2d:c7:e4:4d:49:c4:97:d5:98:b6:93: 65:74:d8:f0:36:d2:47:51:6e:f7:ce:da:a0:e4:a8: de:12:cb:48:32:38:63:78:ea:a4:4b:8c:4a:f4:0e: e6:1a:70:a6:fb:b5:d3:9c:4e:38:ec:08:9e:f5:05: f1:32:bc:6c:ab:be:90:b7:3e:a6:67:eb:1a:53:11: 3a:22:3f:10:f5:f5:17:57:93:4c:7d:9c:13:91:fc: 95:d3:d8:7a:c8:0e:f8:d2:a9:44:08:ab:3f:da:c6: 48:de:cc:d1:cd:06:b3:77:62:78:d0:31:f7:36:92: aa:fc:eb:ed:09:c3:27:ff:1f:e9:8b:cc:de:6f:c5: 83:76:5e:75:04:12:73:a8:39:d9:99:40:3e:9b:78: d8:75:8d:84:26:40:5f:66:bd:ec:1c:05:06:b9:79: ea:5f:22:77:07:1a:7c:c8:98:34:60:ed:2a:3b:82: 72:4f:64:5d:28:d9:43:7e:0c:25:92:e7:52:8f:0b: 94:15:ca:29:31:e4:30:df:15:7a:e6:b7:64:60:d9: 24:d4:94:26:f9:20:bd:66:2f:97:74:98:f4:cd:c6: c3:88:fb:7e:68:02:ed:18:b2:6c:da:d5:0e:9a:ef: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:66:F9:A6:8F:C9:98:5B:78:AD:30:3F:7E:4B:11:B4:E6:3B:FA:4E X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8855006E717911EFBEA3FD86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.170.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:5b:dd:a6:be:8d:a7:07:bb:b4:a4:8e:f1:0a:f8:63:8f:50: cb:69:ad:d3:f5:8a:6a:39:60:8e:98:a1:c0:7d:35:ed:4f:0f: a5:e3:b0:4a:54:14:16:66:41:17:4d:8a:22:69:ae:bd:45:0d: 3e:2a:b9:81:f4:d6:55:81:10:e6:6c:ef:3c:41:48:37:3e:bf: 5b:1f:07:10:2b:55:71:82:3b:33:34:43:4b:4f:13:70:4e:a7: c1:c2:d1:49:be:ac:92:fb:d3:4e:53:5e:de:c8:9e:35:52:b1: c6:64:33:a7:54:b0:ec:07:61:65:71:19:fc:fa:2e:7c:6e:dc: 46:ed:d7:3a:89:23:fb:48:0d:fe:5f:f6:61:f2:48:ea:16:cd: 76:d8:9c:62:3c:ec:f2:f1:88:7a:6d:dd:5a:2b:89:ec:fe:3c: 85:b1:fd:e3:37:b2:79:9d:e2:1b:ae:b3:6e:2e:e5:4e:98:62: cf:e0:d6:4a:d4:70:25:d3:1d:f9:6f:32:a5:e3:5a:db:5a:86: 20:22:4b:f8:31:94:c7:b6:f3:ae:a5:e3:6b:76:51:bf:48:dc: 83:75:20:da:ab:82:cd:64:ab:23:4b:99:bf:fa:27:93:25:34: 7b:81:16:6d:98:cd:26:5f:a8:42:c2:a4:1d:26:b3:b7:bd:99: 2f:a9:3e:b0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwOTEzMDI0MDI3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUzYTYxYS02ZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEKkOQBXx+0MBH1zCQKyiQZkLcfkTUnEl9WYtpNldNjwNtJHUW73ztqg5Kje EstIMjhjeOqkS4xK9A7mGnCm+7XTnE447Aie9QXxMrxsq76Qtz6mZ+saUxE6Ij8Q 9fUXV5NMfZwTkfyV09h6yA740qlECKs/2sZI3szRzQazd2J40DH3NpKq/OvtCcMn /x/pi8zeb8WDdl51BBJzqDnZmUA+m3jYdY2EJkBfZr3sHAUGuXnqXyJ3Bxp8yJg0 YO0qO4JyT2RdKNlDfgwlkudSjwuUFcopMeQw3xV65rdkYNkk1JQm+SC9Zi+XdJj0 zcbDiPt+aALtGLJs2tUOmu9+wwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAJm+aaP yZhbeK0wP35LEbTmO/pOMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvODg1NTAwNkU3 MTc5MTFFRkJFQTNGRDg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgHqowDQYJKoZIhvcNAQELBQADggEBAD9b3aa+jacHu7Sk jvEK+GOPUMtprdP1imo5YI6YocB9Ne1PD6XjsEpUFBZmQRdNiiJprr1FDT4quYH0 1lWBEOZs7zxBSDc+v1sfBxArVXGCOzM0Q0tPE3BOp8HC0Um+rJL7005TXt7InjVS scZkM6dUsOwHYWVxGfz6Lnxu3Ebt1zqJI/tIDf5f9mHySOoWzXbYnGI87PLxiHpt 3Voriez+PIWx/eM3snmd4huus24u5U6YYs/g1krUcCXTHflvMqXjWttahiAiS/gx lMe2866l42t2Ub9I3IN1INqrgs1kqyNLmb/6J5MlNHuBFm2YzSZfqELCpB0ms7e9 mS+pPrA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:05:36 2024 by rpki-client on console-ams.rpki-client.org