$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0C1B9792FE6511EEB708BA39C4F9AE02.roa File: 0C1B9792FE6511EEB708BA39C4F9AE02.roa (raw, json) Hash identifier: 1hXRzwJxrsKOQmY7c4RvVKfuNI+zCq91nD7DeOZNPOM= Subject key identifier: FA:74:04:01:E0:F5:BF:CA:49:77:8F:83:A5:BB:91:69:6E:11:B9:C1 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4641 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0C1B9792FE6511EEB708BA39C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:35:41 +0000 ROA not before: Thu 05 Sep 2024 03:35:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24173 IP address blocks: 101.53.0.0/18 maxlen: 24 101.96.64.0/18 maxlen: 24 119.15.160.0/20 maxlen: 24 119.15.176.0/20 maxlen: 24 119.17.192.0/19 maxlen: 24 119.17.224.0/19 maxlen: 24 202.151.160.0/21 maxlen: 24 202.151.168.0/21 maxlen: 24 210.86.224.0/21 maxlen: 24 210.86.232.0/21 maxlen: 24 2401:e800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17985 (0x4641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:35:41 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9270c-8d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:f2:af:2f:5f:fd:8a:c0:0c:16:e4:3a:37: 77:8b:df:7e:8a:c7:41:24:73:8a:37:8d:21:f2:25: d7:07:5b:6e:a5:1f:57:ee:aa:46:b3:1c:15:4a:f5: 29:23:72:39:55:ad:1b:9f:a1:5a:06:09:67:f2:49: 80:6a:19:31:a6:ef:44:a9:fd:7d:6f:36:03:ce:e2: 96:dd:2e:7a:2d:f3:95:3c:cf:c8:d0:8a:a5:bc:23: 22:10:7d:7a:10:2e:cd:76:69:b7:f6:af:96:38:00: 4e:d8:25:da:a5:0f:01:fa:52:84:3b:a1:81:26:4d: 46:24:aa:fc:42:3a:99:e3:01:21:47:8d:9b:54:8f: 18:f6:92:f6:97:a7:b1:5c:ce:14:e4:d7:53:b9:43: 4f:48:9a:6e:f4:0f:77:74:ae:a1:9c:d6:ef:cb:9b: 2b:95:cf:18:ae:a1:d3:4e:8a:10:7a:51:ef:d7:1f: 93:e4:97:f0:37:e5:d9:6f:1f:94:b6:d7:d5:0b:43: 41:4b:17:6e:5d:91:f2:4f:0a:d8:bc:0c:b3:77:59: d6:00:6f:da:e6:80:ae:70:38:e4:34:f3:1f:55:1f: 27:74:12:ef:f1:d0:82:34:1e:3b:70:43:9a:53:37: dc:46:26:c9:fa:8c:0e:71:4c:e2:d4:16:d1:b7:59: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:74:04:01:E0:F5:BF:CA:49:77:8F:83:A5:BB:91:69:6E:11:B9:C1 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0C1B9792FE6511EEB708BA39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.53.0.0/18 101.96.64.0/18 119.15.160.0/19 119.17.192.0/18 202.151.160.0/20 210.86.224.0/20 IPv6: 2401:e800::/32 Signature Algorithm: sha256WithRSAEncryption 31:19:f6:7d:c8:c7:19:5a:fd:c0:63:4b:9b:dd:53:3a:3a:95: 48:6a:02:64:01:2d:75:08:d8:5c:71:17:f7:5f:df:62:d1:2c: cb:4a:6b:4f:39:1b:e7:66:d3:62:42:80:c9:6c:8f:40:77:ab: 41:0e:e0:c0:e5:b4:43:44:59:d9:5b:d7:59:3d:a0:77:1f:1c: 1e:76:74:30:20:e2:31:6e:cf:93:76:75:bb:69:c9:66:4d:64: c6:c0:0d:91:41:ee:25:1c:c8:b2:a5:98:49:48:cd:86:91:46: 11:53:12:97:5a:a3:59:a8:a6:e5:aa:8b:99:98:8d:86:62:ac: 3a:d4:ad:5e:f4:bb:f5:bb:cc:2c:bf:0b:82:1d:b0:0f:4a:1c: 1c:7d:3c:7e:a6:07:36:e9:6a:a7:0a:61:22:99:06:12:55:8f: f3:b8:6f:c1:b3:38:6c:b2:99:cd:7e:89:30:4a:a2:7b:5e:cb: 1a:c8:14:00:a0:4b:86:f8:bc:3f:bc:60:a7:59:18:5f:99:14: b4:80:63:1d:f3:e3:73:36:e5:68:f5:4a:d7:e4:fc:a3:53:e9: 0a:54:b2:70:05:74:4f:b8:af:9f:cd:64:7f:e2:6d:1c:ec:c2: 35:69:31:d8:cb:40:74:54:af:3b:12:ad:8b:3d:e0:4e:d8:4e: 9c:a8:2d:84 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICRkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjcwYy04ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvezyry9f/YrADBbkOjd3i99+isdBJHOKN40h8iXXB1tupR9X7qpGsxwVSvUp I3I5Va0bn6FaBgln8kmAahkxpu9Eqf19bzYDzuKW3S56LfOVPM/I0IqlvCMiEH16 EC7Ndmm39q+WOABO2CXapQ8B+lKEO6GBJk1GJKr8QjqZ4wEhR42bVI8Y9pL2l6ex XM4U5NdTuUNPSJpu9A93dK6hnNbvy5srlc8YrqHTTooQelHv1x+T5JfwN+XZbx+U ttfVC0NBSxduXZHyTwrYvAyzd1nWAG/a5oCucDjkNPMfVR8ndBLv8dCCNB47cEOa UzfcRibJ+owOcUzi1BbRt1nuEQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFPp0BAHg 9b/KSXePg6W7kWluEbnBMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMEMxQjk3OTJG RTY1MTFFRUI3MDhCQTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAZlNQADBAZlYEADBAV3D6ADBAZ3EcADBATKl6ADBATSVuAw DQQCAAIwBwMFACQB6AAwDQYJKoZIhvcNAQELBQADggEBADEZ9n3Ixxla/cBjS5vd Uzo6lUhqAmQBLXUI2FxxF/df32LRLMtKa085G+dm02JCgMlsj0B3q0EO4MDltENE Wdlb11k9oHcfHB52dDAg4jFuz5N2dbtpyWZNZMbADZFB7iUcyLKlmElIzYaRRhFT Epdao1mopuWqi5mYjYZirDrUrV70u/W7zCy/C4IdsA9KHBx9PH6mBzbpaqcKYSKZ BhJVj/O4b8GzOGyymc1+iTBKonteyxrIFACgS4b4vD+8YKdZGF+ZFLSAYx3z43M2 5Wj1Stfk/KNT6QpUsnAFdE+4r5/NZH/ibRzswjVpMdjLQHRUrzsSrYs94E7YTpyo LYQ= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:31 2024 by rpki-client on console-ams.rpki-client.org