$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa File: B8DEDE725E0911EFA6193958C4F9AE02.roa (raw, json) Hash identifier: hITJIokXYelzomZTiCY0n9reo2jKJDJrPF8YbeBXVZ8= Subject key identifier: 4D:16:2A:CD:8B:70:0C:19:6D:E5:B4:F8:B8:F5:F7:13:97:09:84:2F Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 027F Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:30:46 +0000 ROA not before: Thu 05 Sep 2024 03:30:46 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135967 IP address blocks: 160.30.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Sep 5 03:30:46 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d925e6-04b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:79:94:ad:cb:a5:cd:be:e3:6b:49:a8:19: 7e:4a:67:8b:79:5f:52:70:b0:87:67:82:b5:b6:67: 25:e9:11:a1:9c:99:2c:ff:9f:84:23:e0:3d:da:6d: e0:26:6d:4c:e6:19:81:87:eb:0e:18:21:a2:05:22: 29:79:f2:b2:1d:f3:b3:1f:ad:d0:4a:30:b3:30:f3: 95:35:df:21:00:87:ff:79:5b:d5:0a:57:75:b5:f0: 29:5b:78:e0:86:f7:28:38:fb:5c:8e:f3:b7:ab:3e: 2a:ee:81:d7:5c:a5:8d:0a:28:80:c6:6a:55:d7:4f: e7:d7:fb:12:c5:86:58:53:b1:af:ac:f7:5e:35:ab: f9:c4:b3:03:53:3a:3d:d1:61:6d:d5:81:70:3e:44: e8:f9:be:8d:11:08:2c:35:4d:40:90:71:64:61:7d: 29:93:4f:de:3d:bc:dd:f8:76:55:ed:0d:4a:4b:a0: 02:c5:43:e7:f3:e5:5e:7b:9c:19:a4:e9:a2:b4:53: a5:5c:23:54:d7:eb:bd:d5:11:69:ed:ef:29:e9:f7: 81:e4:e1:33:e9:c1:d2:6e:9d:bd:c9:12:d1:35:62: 0a:d4:ae:77:0e:4f:c7:6e:57:b3:6b:51:1e:c8:9c: 90:0e:89:f0:40:1b:fc:7a:4f:ca:ac:a2:70:60:32: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:16:2A:CD:8B:70:0C:19:6D:E5:B4:F8:B8:F5:F7:13:97:09:84:2F X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.86.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:df:e6:84:81:3a:b0:8c:a6:17:e7:94:48:2e:82:93:c0:6f: cc:64:0b:df:9e:7e:65:df:0c:0c:b0:09:d5:96:0f:b4:8d:57: 35:0f:b4:6d:20:bc:23:37:20:85:25:3c:1d:e0:2b:6b:19:0e: e7:89:90:24:b6:e7:d6:11:47:0c:d0:8d:b0:23:79:9b:e0:80: 37:6f:8c:87:14:49:0e:4f:97:a6:72:3c:10:9c:96:34:c9:d6: 42:37:c8:59:4c:4b:24:36:e4:62:cd:13:b8:03:ab:9d:3e:28: 81:f5:30:e8:fe:5d:22:f8:b6:ca:ab:2a:f3:ef:1b:bb:8f:46: 1a:46:57:2c:80:44:da:d0:30:6c:63:0e:af:5a:3f:8b:e5:f1: 00:59:b2:2f:f6:58:b7:bc:ac:f2:3e:d1:62:d2:c5:94:f5:24: aa:fd:d4:e0:44:65:b6:5c:c4:e8:28:20:fa:e7:ea:2c:38:2c: e5:63:ff:45:11:e4:bb:20:36:1b:af:8b:25:35:fc:c6:e8:59: df:b1:11:be:1e:71:9f:ea:5d:61:46:7f:36:ee:f3:94:ac:51: d2:c4:fe:bd:bf:c0:9d:dc:10:3d:3b:39:b1:40:34:3a:7b:a5: a3:93:21:a8:12:7f:7f:0a:f1:06:bf:2a:f2:a7:d8:86:1a:7e: 26:3a:f5:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwOTA1MDMzMDQ2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjVlNi0wNGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZZ5lK3Lpc2+42tJqBl+SmeLeV9ScLCHZ4K1tmcl6RGhnJks/5+EI+A92m3g Jm1M5hmBh+sOGCGiBSIpefKyHfOzH63QSjCzMPOVNd8hAIf/eVvVCld1tfApW3jg hvcoOPtcjvO3qz4q7oHXXKWNCiiAxmpV10/n1/sSxYZYU7GvrPdeNav5xLMDUzo9 0WFt1YFwPkTo+b6NEQgsNU1AkHFkYX0pk0/ePbzd+HZV7Q1KS6ACxUPn8+Vee5wZ pOmitFOlXCNU1+u91RFp7e8p6feB5OEz6cHSbp29yRLRNWIK1K53Dk/Hbleza1Ee yJyQDonwQBv8ek/KrKJwYDIDOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE0WKs2L cAwZbeW0+Lj19xOXCYQvMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQjhERURFNzI1 RTA5MTFFRkE2MTkzOTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgHlYwDQYJKoZIhvcNAQELBQADggEBAA3f5oSBOrCMphfn lEgugpPAb8xkC9+efmXfDAywCdWWD7SNVzUPtG0gvCM3IIUlPB3gK2sZDueJkCS2 59YRRwzQjbAjeZvggDdvjIcUSQ5Pl6ZyPBCcljTJ1kI3yFlMSyQ25GLNE7gDq50+ KIH1MOj+XSL4tsqrKvPvG7uPRhpGVyyARNrQMGxjDq9aP4vl8QBZsi/2WLe8rPI+ 0WLSxZT1JKr91OBEZbZcxOgoIPrn6iw4LOVj/0UR5LsgNhuviyU1/MboWd+xEb4e cZ/qXWFGfzbu85SsUdLE/r2/wJ3cED07ObFANDp7paOTIagSf38K8Qa/KvKn2IYa fiY69TY= -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:18 2024 by rpki-client on console-ams.rpki-client.org