$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa File: C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa (raw, json) Hash identifier: y3aNVQlDQDP+RgTzSqQocLji50FI6RLxIfx8py2PzJQ= Subject key identifier: E1:FD:6E:94:AD:C4:4A:53:EA:06:F5:78:D8:1E:7E:73:70:87:4B:FF Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 466D Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:36:20 +0000 ROA not before: Thu 05 Sep 2024 03:36:20 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 55318 IP address blocks: 202.59.252.0/23 maxlen: 24 2001:df2:4080::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18029 (0x466d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:36:20 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92734-d404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:f1:3f:19:24:70:16:af:ab:df:f7:bd:8d: b6:ea:db:48:e2:25:3e:0c:eb:96:a5:9b:33:15:c9: ee:54:88:4f:a2:bd:bc:78:b8:a4:fb:6f:e6:0e:e0: 8c:86:1f:46:a5:bc:65:15:c8:a7:27:86:41:19:50: 50:4b:2e:69:a3:02:13:11:39:9a:f2:16:a5:36:36: 3e:fa:3f:06:41:a1:7d:fe:79:0a:b6:72:07:6c:eb: 80:b9:49:1e:5d:e9:c4:27:41:dc:b8:6a:4c:bb:62: 31:57:a6:78:f0:e7:c6:f4:ae:4f:83:99:93:ab:07: 0f:5d:f9:15:d1:71:74:3e:18:f4:c1:b1:02:f0:a6: 38:08:5c:ca:c5:72:bd:a1:6f:b3:39:9a:a0:76:57: a1:e7:ee:a1:23:5a:2a:63:a9:06:a4:d7:b1:13:a2: 3b:79:bf:98:33:31:1f:54:9d:72:22:5c:ca:31:77: d4:63:05:86:02:0e:44:73:7a:9b:a9:48:7c:5d:e2: 2c:d3:ad:8f:b4:95:d5:70:53:a5:78:6a:d2:ec:ad: 78:f2:6b:12:c8:d1:77:a4:21:6c:12:79:b4:db:d2: 0a:34:fa:ca:b0:34:f3:59:39:14:a3:e8:6c:25:d8: 71:cd:cf:44:f5:83:a0:94:77:91:d7:b5:f2:69:45: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FD:6E:94:AD:C4:4A:53:EA:06:F5:78:D8:1E:7E:73:70:87:4B:FF X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.59.252.0/23 IPv6: 2001:df2:4080::/47 Signature Algorithm: sha256WithRSAEncryption 88:f1:b5:cd:f0:5e:0b:60:e6:fd:fd:40:f3:b0:7b:37:14:70: 11:f3:26:5a:60:03:ae:53:30:fd:bb:b7:cb:2b:67:85:47:25: 56:9e:8f:ab:cb:76:b2:50:0c:4b:ed:cb:7e:ed:01:76:c2:c7: c1:a4:58:11:65:1f:8f:41:1a:86:17:79:79:e7:8b:5f:46:9b: 8d:cc:a5:ee:b2:8e:a4:49:c7:14:a0:08:f1:db:7c:a7:3d:af: cf:df:21:88:0d:95:b3:e5:e1:81:5e:71:0e:74:38:23:07:f0: ce:f0:48:62:66:7c:82:cd:11:d5:3a:ca:8c:a9:d0:83:20:d5: 28:83:b3:87:19:43:7c:58:c5:94:27:18:c8:66:1f:01:4f:64: d2:6b:53:cf:dc:72:32:c3:0f:79:6f:f1:ec:96:ab:2f:2e:d7: c7:17:56:4a:42:8a:f4:87:ac:f2:40:06:0b:34:d5:82:55:0b: d0:a3:0b:4e:25:c6:a4:45:0b:b4:d6:68:97:21:18:3a:c4:04: 77:6d:a7:93:49:cf:d4:80:80:f4:a4:8f:65:b6:74:e1:9e:4d: a9:ca:e6:ef:38:7f:3d:bd:71:a1:f2:3b:8b:f1:e6:51:dd:5a: fe:6f:18:e6:7f:5d:e1:bc:a9:c5:c9:9c:38:3c:38:39:3a:fa: 2c:d7:bf:8b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNjIwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjczNC1kNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8TxPxkkcBavq9/3vY226ttI4iU+DOuWpZszFcnuVIhPor28eLik+2/mDuCM hh9GpbxlFcinJ4ZBGVBQSy5powITETma8halNjY++j8GQaF9/nkKtnIHbOuAuUke XenEJ0HcuGpMu2IxV6Z48OfG9K5Pg5mTqwcPXfkV0XF0Phj0wbEC8KY4CFzKxXK9 oW+zOZqgdleh5+6hI1oqY6kGpNexE6I7eb+YMzEfVJ1yIlzKMXfUYwWGAg5Ec3qb qUh8XeIs062PtJXVcFOleGrS7K148msSyNF3pCFsEnm029IKNPrKsDTzWTkUo+hs Jdhxzc9E9YOglHeR17XyaUW+DQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOH9bpSt xEpT6gb1eNgefnNwh0v/MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzBDRDVEM0NF NkQ1MTFFQzhFODVFQjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKO/wwDwQCAAIwCQMHASABDfJAgDANBgkqhkiG9w0BAQsF AAOCAQEAiPG1zfBeC2Dm/f1A87B7NxRwEfMmWmADrlMw/bu3yytnhUclVp6Pq8t2 slAMS+3Lfu0BdsLHwaRYEWUfj0Eahhd5eeeLX0abjcyl7rKOpEnHFKAI8dt8pz2v z98hiA2Vs+XhgV5xDnQ4IwfwzvBIYmZ8gs0R1TrKjKnQgyDVKIOzhxlDfFjFlCcY yGYfAU9k0mtTz9xyMsMPeW/x7JarLy7XxxdWSkKK9Ies8kAGCzTVglUL0KMLTiXG pEULtNZolyEYOsQEd22nk0nP1ICA9KSPZbZ04Z5Nqcrm7zh/Pb1xofI7i/HmUd1a /m8Y5n9d4bypxcmcODw4OTr6LNe/iw== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org