$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C855FB2A798D11EF982C765CC4F9AE02.roa File: C855FB2A798D11EF982C765CC4F9AE02.roa (raw, json) Hash identifier: 4JXr4fPhxp9J2PX9bLqaox8tHlRobEyRZtuh96i+h/c= Subject key identifier: 94:1F:21:46:11:16:5E:28:DD:A7:11:25:3D:02:E0:28:7C:4C:81:E0 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0307 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C855FB2A798D11EF982C765CC4F9AE02.roa Signing time: Mon 23 Sep 2024 09:25:33 +0000 ROA not before: Mon 23 Sep 2024 09:25:33 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 63760 IP address blocks: 157.10.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 775 (0x307) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Sep 23 09:25:33 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66f1340d-ec02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:0c:87:13:30:5e:79:97:31:a9:28:b2:06: d2:d0:28:78:ef:a5:08:9d:3e:51:bc:db:24:b2:f9: a3:12:83:02:7a:72:ea:01:07:bc:a6:88:a0:b5:48: 98:aa:9b:4e:ad:14:6a:54:00:11:07:54:f5:b1:c8: d5:18:5a:d6:02:bd:42:46:ce:38:63:14:d3:31:36: 98:21:b1:d5:4b:d2:e0:ba:13:d5:73:2d:c7:b0:ef: 6e:be:77:a1:9e:48:cc:43:51:f4:18:a0:75:e9:9b: c8:ba:57:55:4d:91:8a:13:c0:20:df:46:33:1e:9e: 40:77:8a:68:af:35:db:51:30:ed:62:56:14:db:57: bb:20:d2:80:e0:04:9b:33:ee:5e:02:9f:cf:bf:c1: 07:93:15:44:e9:22:dc:e9:2f:03:8a:af:3e:96:0e: 85:d2:09:62:e8:6b:33:45:5c:e8:b5:4a:9e:47:89: 79:0e:45:ba:76:58:a1:b2:63:61:c4:af:1f:de:3b: f2:fe:ed:0b:c9:ea:c7:40:fd:6d:ee:d1:74:31:b0: 70:b5:ee:68:3e:60:89:08:e9:b7:0f:f8:41:bd:8e: 45:a8:bd:ce:f2:cf:58:ad:c4:d3:af:9d:82:14:21: 08:ed:69:e1:e1:0b:47:ea:4a:13:fb:2c:80:8f:a7: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1F:21:46:11:16:5E:28:DD:A7:11:25:3D:02:E0:28:7C:4C:81:E0 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C855FB2A798D11EF982C765CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.200.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:6d:c9:18:6d:99:b9:dc:b9:c0:5d:ab:a4:ea:32:50:f0:18: 26:8c:0b:17:78:3d:f4:2f:0b:70:18:e9:d1:a4:d3:65:a3:1a: 5a:21:8a:22:35:36:16:b2:a0:75:a8:31:36:b1:54:31:f8:16: 4d:e9:14:b9:d8:57:e9:54:4d:8b:22:e0:6d:2f:40:b1:75:54: 12:89:86:ec:5a:a9:26:a7:30:5e:15:c4:0c:52:08:7d:35:b6: 63:1e:27:a9:fb:dd:b7:5d:71:b8:4b:d9:45:d1:fd:95:3c:ab: d5:fa:fe:17:02:e7:6d:88:9c:41:32:c6:42:c4:53:31:0d:1c: d7:cd:6f:db:cf:2e:52:96:67:7a:02:10:14:6c:35:67:7e:c2: 92:5d:99:ee:7f:5a:65:13:92:8e:0a:ca:e8:22:11:92:ed:f0: 54:ee:17:5c:6f:c0:a3:f7:cc:08:a5:11:ba:2a:5b:79:32:f4: 15:9d:cd:83:d5:dd:41:03:35:dc:0a:1b:0d:23:34:f1:4a:c8: a4:8e:5f:20:d7:98:d7:9b:f6:87:9d:6f:35:06:73:2e:f6:01: a9:c9:1e:35:e4:f2:be:7e:63:2e:78:99:af:09:85:d2:74:b5: 05:6c:6c:ce:f6:71:50:d8:40:77:39:d0:3f:16:f3:a0:1b:ba: 77:82:d7:86 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwOTIzMDkyNTMzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYxMzQwZC1lYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZgMhxMwXnmXMakosgbS0Ch476UInT5RvNsksvmjEoMCenLqAQe8poigtUiY qptOrRRqVAARB1T1scjVGFrWAr1CRs44YxTTMTaYIbHVS9LguhPVcy3HsO9uvneh nkjMQ1H0GKB16ZvIuldVTZGKE8Ag30YzHp5Ad4porzXbUTDtYlYU21e7INKA4ASb M+5eAp/Pv8EHkxVE6SLc6S8Diq8+lg6F0gli6GszRVzotUqeR4l5DkW6dlihsmNh xK8f3jvy/u0LyerHQP1t7tF0MbBwte5oPmCJCOm3D/hBvY5FqL3O8s9YrcTTr52C FCEI7Wnh4QtH6koT+yyAj6eoCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJQfIUYR Fl4o3acRJT0C4Ch8TIHgMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQzg1NUZCMkE3 OThEMTFFRjk4MkM3NjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCsgwDQYJKoZIhvcNAQELBQADggEBAA1tyRhtmbncucBd q6TqMlDwGCaMCxd4PfQvC3AY6dGk02WjGlohiiI1NhayoHWoMTaxVDH4Fk3pFLnY V+lUTYsi4G0vQLF1VBKJhuxaqSanMF4VxAxSCH01tmMeJ6n73bddcbhL2UXR/ZU8 q9X6/hcC522InEEyxkLEUzENHNfNb9vPLlKWZ3oCEBRsNWd+wpJdme5/WmUTko4K yugiEZLt8FTuF1xvwKP3zAilEboqW3ky9BWdzYPV3UEDNdwKGw0jNPFKyKSOXyDX mNeb9oedbzUGcy72AanJHjXk8r5+Yy54ma8JhdJ0tQVsbM72cVDYQHc50D8W86Ab uneC14Y= -----END CERTIFICATE-----Generated at Fri Nov 22 03:53:02 2024 by rpki-client on console-fra.rpki-client.org