$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa File: 89A5C6C67C5511EDA0D2C06CC4F9AE02.roa (raw, json) Hash identifier: P/tAdlp2N7ZrGlpdCEQfZrgBVZ/+k7m7uSwHSMf0WL0= Subject key identifier: 79:9C:C4:15:B8:07:27:66:E7:2F:DF:37:34:77:95:37:50:07:4C:E4 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4567 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:32 +0000 ROA not before: Thu 05 Sep 2024 03:32:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135920 IP address blocks: 45.123.96.0/22 maxlen: 24 103.63.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17767 (0x4567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:32 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9264f-2dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:12:1b:b5:f0:2a:2e:44:da:c1:21:72:7d: 70:e8:df:ee:82:43:cc:28:4b:b3:4a:01:0d:44:4d: 11:82:d0:99:fd:88:ba:d8:64:05:5e:e2:d6:8d:45: 34:89:a6:c0:55:11:16:aa:70:a9:fe:91:6c:f5:d2: fd:40:8e:68:e9:a8:a0:49:fa:b4:3a:b2:02:b8:8c: 01:c1:3b:5e:4d:06:3d:4b:45:12:d8:9c:72:6c:bb: 28:51:2e:e6:a9:1e:09:be:fc:af:7b:ee:ca:d1:ef: fe:e4:9c:d2:9f:64:15:18:00:a8:d1:b7:0b:f8:56: e6:6e:08:f5:82:04:e2:4a:bd:8f:76:4f:e6:08:dc: 50:8a:66:63:67:a0:dc:07:20:8a:79:0a:dd:65:b1: 9e:15:7f:d8:86:8a:a7:4c:5d:85:c3:8c:ff:31:36: 4f:94:e6:69:b2:b8:d7:c1:9d:f4:e9:9b:bd:eb:0b: a7:4c:e9:87:5a:b4:48:e2:37:d7:a9:38:9f:0c:d7: 35:ad:0f:f8:62:b5:1c:12:ea:58:82:49:40:aa:82: 74:3e:7b:0a:e9:c9:9b:ad:db:24:a5:79:c4:18:d5: 62:0f:7a:16:77:97:6a:a0:cf:73:40:44:22:1f:39: 14:66:a0:f6:90:4a:f8:c0:68:4b:05:6c:16:a4:0b: b6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9C:C4:15:B8:07:27:66:E7:2F:DF:37:34:77:95:37:50:07:4C:E4 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.96.0/22 103.63.212.0/22 Signature Algorithm: sha256WithRSAEncryption 03:d2:40:28:47:46:24:af:cb:a6:af:70:b4:7a:95:af:c8:0e: 84:2a:cc:25:9e:ae:bb:1a:e9:c4:98:d3:14:48:f3:e6:a5:14: 7f:17:d3:08:3e:48:30:c9:55:5e:00:cc:6f:30:9f:7a:2f:a9: f3:bf:e9:10:bc:b0:fa:f9:d1:d5:65:93:59:82:b8:d2:a6:ab: e2:68:3f:49:9c:b7:7f:91:8c:1c:d6:a5:c9:41:a4:e2:70:bc: 0f:87:d3:23:3e:b7:0c:f7:a2:7a:34:ac:82:26:c5:64:2b:f8: e3:fe:3c:90:9f:df:52:eb:84:9a:d5:90:96:ab:66:6e:56:1a: c2:c8:52:59:52:7b:24:99:d9:e9:d1:ea:e1:14:e6:88:57:ee: 3f:d0:cf:20:aa:89:bb:b5:a8:06:49:c4:b2:aa:94:5e:de:60: dd:78:ec:3a:64:03:2e:6d:a3:d6:0b:83:ad:b3:03:0e:70:34: a6:7a:a8:e2:bc:16:dd:46:d4:69:84:c9:21:e3:ac:d5:de:dd: c8:74:97:8a:82:bb:b5:19:99:1f:d4:fb:c4:be:88:ec:0a:b8: 8a:bb:5c:41:5e:8b:8a:dc:34:ea:56:4b:79:5a:99:33:01:2e: 7b:35:23:d6:50:48:c5:d7:36:48:b9:a0:05:43:f8:84:8c:dd: 9f:79:91:0a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICRWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY0Zi0yZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4kSG7XwKi5E2sEhcn1w6N/ugkPMKEuzSgENRE0RgtCZ/Yi62GQFXuLWjUU0 iabAVREWqnCp/pFs9dL9QI5o6aigSfq0OrICuIwBwTteTQY9S0US2JxybLsoUS7m qR4Jvvyve+7K0e/+5JzSn2QVGACo0bcL+Fbmbgj1ggTiSr2Pdk/mCNxQimZjZ6Dc ByCKeQrdZbGeFX/YhoqnTF2Fw4z/MTZPlOZpsrjXwZ306Zu96wunTOmHWrRI4jfX qTifDNc1rQ/4YrUcEupYgklAqoJ0PnsK6cmbrdskpXnEGNViD3oWd5dqoM9zQEQi HzkUZqD2kEr4wGhLBWwWpAu2tQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHmcxBW4 Bydm5y/fNzR3lTdQB0zkMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODlBNUM2QzY3 QzU1MTFFREEwRDJDMDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIte2ADBAJnP9QwDQYJKoZIhvcNAQELBQADggEBAAPSQChH RiSvy6avcLR6la/IDoQqzCWerrsa6cSY0xRI8+alFH8X0wg+SDDJVV4AzG8wn3ov qfO/6RC8sPr50dVlk1mCuNKmq+JoP0mct3+RjBzWpclBpOJwvA+H0yM+twz3ono0 rIImxWQr+OP+PJCf31LrhJrVkJarZm5WGsLIUllSeySZ2enR6uEU5ohX7j/QzyCq ibu1qAZJxLKqlF7eYN147DpkAy5to9YLg62zAw5wNKZ6qOK8Ft1G1GmEySHjrNXe 3ch0l4qCu7UZmR/U+8S+iOwKuIq7XEFei4rcNOpWS3lamTMBLns1I9ZQSMXXNki5 oAVD+ISM3Z95kQo= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org