$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/97F4229AB69211EEA0BCFC4CC4F9AE02.roa File: 97F4229AB69211EEA0BCFC4CC4F9AE02.roa (raw, json) Hash identifier: iFg7eCIDvU4bFa2k2bo7QEfFwFbDmEVuH5IAk0jdLzc= Subject key identifier: 16:BF:E9:C5:05:DC:7F:C3:EB:C0:2C:5D:4D:32:C8:F4:D5:C9:6E:6C Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 028F Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/97F4229AB69211EEA0BCFC4CC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:31:00 +0000 ROA not before: Thu 05 Sep 2024 03:31:00 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151893 IP address blocks: 157.10.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Sep 5 03:31:00 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d925f4-c6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:82:bc:ac:55:9b:61:28:7f:c6:6e:06:ed: 35:28:c1:65:57:16:57:ec:09:06:dc:80:84:a7:43: 0d:10:19:bb:ed:d7:8b:85:51:e9:21:81:57:9e:d7: a5:9f:60:94:e1:3a:b7:99:18:fa:51:1c:19:58:25: 03:fb:76:4a:30:10:ab:ac:38:6b:21:32:22:2e:c9: f5:50:2e:c3:02:6e:6e:e7:41:59:cb:2b:b2:95:72: f1:de:39:65:d2:b8:06:5d:45:68:95:d9:06:20:fe: 4a:38:e7:45:3b:f3:ec:07:22:9f:21:bc:2b:84:2e: 97:f5:09:7d:69:5d:36:7e:29:f1:61:a8:b9:21:dd: 6f:12:b8:de:2b:c7:01:f7:b6:32:a0:93:4f:8a:75: f8:ba:b0:bc:ed:7a:b5:1e:b9:ab:38:aa:e6:94:47: 0e:a1:ff:6e:89:e8:f9:1c:fe:b8:68:df:54:71:6d: 20:56:fd:50:7d:89:c6:d3:20:ad:87:93:1f:f7:7a: 26:ba:14:42:10:d8:56:27:f1:de:c5:4d:9f:df:42: d7:88:6a:dc:99:d4:33:e2:fa:12:87:6b:3e:0e:ff: 5b:af:09:68:aa:1e:55:a4:98:b6:81:27:b0:2e:c4: b1:94:91:fc:69:ff:29:1f:cb:6e:3e:e4:ef:ed:20: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BF:E9:C5:05:DC:7F:C3:EB:C0:2C:5D:4D:32:C8:F4:D5:C9:6E:6C X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/97F4229AB69211EEA0BCFC4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.52.0/23 Signature Algorithm: sha256WithRSAEncryption 87:36:a8:1a:c4:d9:50:f7:58:96:78:f9:22:ed:45:0b:57:50: 6c:d8:74:e8:8f:a2:6e:6a:4c:58:3e:b7:7e:fa:a2:ab:53:eb: 75:9e:9c:04:3c:28:17:d6:75:74:5e:a1:be:6e:68:f9:7f:36: a5:8e:5f:2a:4b:7a:a0:db:8b:46:0a:0e:b5:82:d3:02:ad:ed: 27:55:70:77:30:f1:42:74:83:ad:91:34:49:90:54:17:85:8d: 00:05:6c:ef:06:c4:ae:71:83:89:07:59:5c:61:e0:10:88:20: 0a:8e:ab:6b:63:4a:c3:ec:23:7b:74:0c:99:04:2b:5e:90:c8: 0c:37:7e:36:d0:b9:7d:9d:db:55:df:17:74:d7:ea:23:c2:65: 13:21:7a:18:c0:d8:28:04:6b:fa:c9:be:a0:3e:d2:13:54:b1: 7a:57:b5:ca:82:df:a3:91:1e:7a:15:37:16:b4:ff:77:6d:db: ee:1d:f4:f9:d6:17:e7:50:9a:9e:97:0b:95:8f:73:67:1b:00: 0d:80:96:4e:5b:24:ed:08:86:0b:e5:bc:b3:07:72:30:d9:90: 13:24:dd:d1:27:2b:94:db:4c:5d:f4:c8:16:38:fd:c6:4d:2d: ac:b6:31:3f:2e:ef:57:d7:9a:19:33:bd:80:73:c7:9c:6f:1e: 47:32:ac:17 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwOTA1MDMzMTAwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjVmNC1jNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzuCvKxVm2Eof8ZuBu01KMFlVxZX7AkG3ICEp0MNEBm77deLhVHpIYFXntel n2CU4Tq3mRj6URwZWCUD+3ZKMBCrrDhrITIiLsn1UC7DAm5u50FZyyuylXLx3jll 0rgGXUVoldkGIP5KOOdFO/PsByKfIbwrhC6X9Ql9aV02finxYai5Id1vErjeK8cB 97YyoJNPinX4urC87Xq1HrmrOKrmlEcOof9uiej5HP64aN9UcW0gVv1QfYnG0yCt h5Mf93omuhRCENhWJ/HexU2f30LXiGrcmdQz4voSh2s+Dv9brwloqh5VpJi2gSew LsSxlJH8af8pH8tuPuTv7SC1mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBa/6cUF 3H/D68AsXU0yyPTVyW5sMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOTdGNDIyOUFC NjkyMTFFRUEwQkNGQzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCjQwDQYJKoZIhvcNAQELBQADggEBAIc2qBrE2VD3WJZ4 +SLtRQtXUGzYdOiPom5qTFg+t376oqtT63WenAQ8KBfWdXReob5uaPl/NqWOXypL eqDbi0YKDrWC0wKt7SdVcHcw8UJ0g62RNEmQVBeFjQAFbO8GxK5xg4kHWVxh4BCI IAqOq2tjSsPsI3t0DJkEK16QyAw3fjbQuX2d21XfF3TX6iPCZRMhehjA2CgEa/rJ vqA+0hNUsXpXtcqC36ORHnoVNxa0/3dt2+4d9PnWF+dQmp6XC5WPc2cbAA2Alk5b JO0IhgvlvLMHcjDZkBMk3dEnK5TbTF30yBY4/cZNLay2MT8u71fXmhkzvYBzx5xv HkcyrBc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:05:36 2024 by rpki-client on console-ams.rpki-client.org