$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89287E32057311EC988EF77BC4F9AE02.roa File: 89287E32057311EC988EF77BC4F9AE02.roa (raw, json) Hash identifier: zTNiCIvWsq8TxEiIoUE06CTyftFQpT5GJVzVu9a6f+k= Subject key identifier: 88:88:E9:B4:05:9B:7F:30:15:13:25:8F:14:9C:F0:C0:8D:F4:7B:EE Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 463F Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89287E32057311EC988EF77BC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:35:39 +0000 ROA not before: Thu 05 Sep 2024 03:35:39 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24088 IP address blocks: 14.0.16.0/20 maxlen: 24 103.19.220.0/22 maxlen: 24 103.71.104.0/23 maxlen: 24 103.88.112.0/22 maxlen: 24 103.88.116.0/22 maxlen: 24 103.130.208.0/22 maxlen: 24 103.235.212.0/22 maxlen: 24 103.238.68.0/22 maxlen: 24 103.238.72.0/22 maxlen: 24 103.244.136.0/22 maxlen: 24 202.60.104.0/21 maxlen: 24 202.93.156.0/22 maxlen: 24 203.128.240.0/21 maxlen: 24 203.209.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17983 (0x463f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:35:39 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9270b-70c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:98:cb:e3:15:8f:26:d6:86:4e:26:e9:38: a7:eb:83:2f:47:c4:c5:81:aa:88:49:e1:25:ce:12: 69:be:bd:58:17:c7:21:eb:e6:95:b0:ee:a1:a4:2c: c9:36:98:08:4e:c5:67:0c:b0:f0:d9:c3:2c:08:7b: c0:fa:c6:cb:4e:05:d5:97:2d:9e:7e:72:1c:4c:ce: df:c8:07:17:8b:f2:0b:15:6b:57:54:9e:f7:bc:61: 9c:d0:41:25:84:80:6e:f2:4b:8e:15:51:5b:9c:02: fe:92:cf:83:68:43:43:cd:27:c0:02:ee:d3:24:17: 10:f8:c8:e1:8e:fc:70:60:6d:5d:be:60:17:00:26: f4:bd:63:90:cf:de:1e:d2:22:46:1a:89:a5:4a:fd: 27:d0:13:bb:6c:60:eb:5a:f2:ee:a4:a4:39:2c:b3: 08:14:9e:2b:bb:64:64:ab:83:ca:4e:f4:30:e1:f3: 77:d2:d0:ee:56:7a:94:24:bf:d1:58:10:0c:be:33: ce:74:14:47:40:0d:6d:30:c9:d1:a7:e2:22:13:97: 35:cd:64:37:1c:a1:9a:c4:c7:ce:30:8f:c5:b3:76: 5e:f5:90:72:52:33:4d:53:22:e6:45:a5:70:ea:18: 62:8a:75:58:42:86:f7:a1:e4:d7:6b:ba:73:b2:c3: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:88:E9:B4:05:9B:7F:30:15:13:25:8F:14:9C:F0:C0:8D:F4:7B:EE X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89287E32057311EC988EF77BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.0.16.0/20 103.19.220.0/22 103.71.104.0/23 103.88.112.0/21 103.130.208.0/22 103.235.212.0/22 103.238.68.0-103.238.75.255 103.244.136.0/22 202.60.104.0/21 202.93.156.0/22 203.128.240.0/21 203.209.180.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:ad:63:6a:d9:a0:ee:2a:7e:bd:61:3c:85:f1:86:65:2c:0d: 36:bd:ed:7d:86:eb:09:86:34:30:b0:a4:10:15:e8:90:75:e6: 5c:c6:89:e3:99:16:ac:a3:70:7a:74:f1:87:1a:01:9c:be:4c: 87:47:da:ac:27:12:51:75:50:e7:ba:02:e1:18:a8:ea:e1:5a: 60:f5:02:7d:ec:ac:5f:8e:45:74:cc:31:9c:c7:2e:5a:24:0e: 89:46:d4:2c:34:34:ac:af:f1:af:5f:9d:47:86:29:fd:b1:e1: 00:38:42:8f:bc:1d:b0:c1:8a:8d:80:83:46:d0:e8:c1:d5:73: 2a:49:80:10:b9:75:f7:d3:a5:c9:5c:b3:f6:9d:92:8e:d1:9c: bb:7a:0a:e1:f6:72:42:54:95:73:f8:c4:91:14:b7:34:2f:a7: f5:09:a8:2b:bb:52:d9:5b:d7:9a:ac:8b:44:cf:bc:1f:da:ca: 9d:04:bb:54:9e:f0:3f:35:70:61:50:8d:73:8d:8a:9d:de:85: b2:54:e0:7f:63:10:99:8a:4c:87:db:84:02:6a:b3:23:e6:50: 1b:32:94:b7:50:fd:29:53:52:6c:73:f3:24:0c:5f:e0:35:4f: e1:b8:ff:97:00:2d:99:11:90:44:0b:43:42:a0:d6:f4:ee:db: 65:e3:53:a3 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICRj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTM5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjcwYi03MGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsruYy+MVjybWhk4m6Tin64MvR8TFgaqISeElzhJpvr1YF8ch6+aVsO6hpCzJ NpgITsVnDLDw2cMsCHvA+sbLTgXVly2efnIcTM7fyAcXi/ILFWtXVJ73vGGc0EEl hIBu8kuOFVFbnAL+ks+DaENDzSfAAu7TJBcQ+MjhjvxwYG1dvmAXACb0vWOQz94e 0iJGGomlSv0n0BO7bGDrWvLupKQ5LLMIFJ4ru2Rkq4PKTvQw4fN30tDuVnqUJL/R WBAMvjPOdBRHQA1tMMnRp+IiE5c1zWQ3HKGaxMfOMI/Fs3Ze9ZByUjNNUyLmRaVw 6hhiinVYQob3oeTXa7pzssOusQIDAQABo4IC3zCCAtswHQYDVR0OBBYEFIiI6bQF m38wFRMljxSc8MCN9HvuMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODkyODdFMzIw NTczMTFFQzk4OEVGNzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaQYIKwYBBQUHAQcBAf8E WjBYMFYEAgABMFADBAQOABADBAJnE9wDBAFnR2gDBANnWHADBAJngtADBAJn69Qw DAMEAmfuRAMEAmfuSAMEAmf0iAMEA8o8aAMEAspdnAMEA8uA8AMEAsvRtDANBgkq hkiG9w0BAQsFAAOCAQEAH61jatmg7ip+vWE8hfGGZSwNNr3tfYbrCYY0MLCkEBXo kHXmXMaJ45kWrKNwenTxhxoBnL5Mh0farCcSUXVQ57oC4Rio6uFaYPUCfeysX45F dMwxnMcuWiQOiUbULDQ0rK/xr1+dR4Yp/bHhADhCj7wdsMGKjYCDRtDowdVzKkmA ELl199OlyVyz9p2SjtGcu3oK4fZyQlSVc/jEkRS3NC+n9QmoK7tS2VvXmqyLRM+8 H9rKnQS7VJ7wPzVwYVCNc42Knd6FslTgf2MQmYpMh9uEAmqzI+ZQGzKUt1D9KVNS bHPzJAxf4DVP4bj/lwAtmRGQRAtDQqDW9O7bZeNTow== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org