$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0F85AB663E011ECB11B2C79C4F9AE02.roa File: F0F85AB663E011ECB11B2C79C4F9AE02.roa (raw, json) Hash identifier: B3L9BZggPs6yypN7i/VG+e15LvCUhUuKbw6feY0/iE8= Subject key identifier: 44:DA:98:FA:6F:44:78:B5:2A:B2:9D:AC:21:3D:36:0E:B0:C5:45:4B Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4551 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0F85AB663E011ECB11B2C79C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:13 +0000 ROA not before: Thu 05 Sep 2024 03:32:13 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131415 IP address blocks: 203.119.64.0/22 maxlen: 24 2001:dc8:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17745 (0x4551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:13 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9263d-61fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:e9:e1:ea:e7:2d:25:1d:54:84:8c:f9:54: 6d:27:56:c8:b8:df:ad:4a:35:1a:e0:82:63:90:2f: ae:69:ff:cd:f3:a5:f3:64:fc:33:af:5d:cb:2d:a3: 9d:25:7b:c8:a1:a2:48:19:1f:a6:14:34:fc:15:70: 99:0e:52:3f:4f:0c:8b:56:b1:89:9d:40:6b:37:4f: 6b:aa:f3:b0:96:ee:f5:70:2a:6f:b1:c4:3d:6c:0c: 77:13:d5:97:3f:b3:bd:e1:21:3a:ff:af:af:63:3a: 47:1c:ac:4c:b2:68:3f:6b:6d:7c:fb:56:83:da:b8: 4f:e2:62:60:99:2e:d8:12:dc:38:52:ce:05:0e:d1: b0:fc:fb:a5:c1:a8:47:22:b3:ac:0d:95:0f:03:2b: a6:c7:fb:b7:44:a0:60:f5:54:84:ce:a6:83:5b:d0: ae:4a:fc:c6:f1:10:00:6a:14:0c:8c:14:b6:d5:4b: 62:e9:b7:50:78:89:7a:7d:52:46:be:dd:f1:b7:5f: 97:65:d2:32:69:7c:17:e2:8d:84:5b:43:7d:20:15: 68:97:54:28:c3:37:ca:a6:ce:6f:39:85:98:06:45: cd:42:02:7e:8d:c8:3d:e9:00:2e:c0:9f:be:2b:63: be:07:52:aa:e3:59:fb:8e:2b:a0:11:12:d6:15:a7: ba:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DA:98:FA:6F:44:78:B5:2A:B2:9D:AC:21:3D:36:0E:B0:C5:45:4B X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0F85AB663E011ECB11B2C79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.119.64.0/22 IPv6: 2001:dc8:9000::/48 Signature Algorithm: sha256WithRSAEncryption 2a:99:58:bf:96:b7:03:0e:a9:e0:6d:6d:82:e9:27:8d:ac:34: e2:41:9b:9e:a6:06:35:f8:2e:1b:7b:0d:bc:c5:6f:89:a1:e5: 1f:97:e3:fd:3d:25:1f:fd:ae:6b:ae:26:57:6b:70:d8:5f:68: 79:77:f9:8d:9f:68:10:cc:9a:6e:19:ee:fb:98:38:eb:58:ce: f0:26:25:2b:16:a0:2a:20:ff:82:14:b6:2a:cd:45:1e:82:fc: de:b4:ee:cb:71:57:cf:59:34:d2:92:15:57:6b:03:2b:0c:87: bd:2d:dc:9e:77:d1:25:fe:77:21:34:9a:34:54:4e:96:fd:4d: 5a:6e:f4:94:b5:bc:01:76:dc:28:de:57:1b:0a:5f:b6:41:6a: 51:53:ea:a4:48:25:7a:ca:23:7d:f0:47:50:b6:47:09:7d:e4: e8:bf:5a:75:9c:23:cc:37:5e:69:c3:74:2b:58:71:cd:14:e2: b7:02:7c:bf:24:ec:d8:fe:a7:c5:d5:08:19:49:c7:fc:25:5b: 6f:3b:d8:8a:e9:ae:17:83:ed:d9:55:9c:a1:66:a9:84:11:bd: dc:97:b1:0d:92:d3:a6:44:32:4f:3c:1f:55:a9:93:68:8e:7c: 20:7b:26:ef:92:d2:96:30:25:99:ea:ef:73:7e:64:51:f7:5a: b3:0d:a5:e6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjEzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYzZC02MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVPp4ernLSUdVISM+VRtJ1bIuN+tSjUa4IJjkC+uaf/N86XzZPwzr13LLaOd JXvIoaJIGR+mFDT8FXCZDlI/TwyLVrGJnUBrN09rqvOwlu71cCpvscQ9bAx3E9WX P7O94SE6/6+vYzpHHKxMsmg/a218+1aD2rhP4mJgmS7YEtw4Us4FDtGw/PulwahH IrOsDZUPAyumx/u3RKBg9VSEzqaDW9CuSvzG8RAAahQMjBS21Uti6bdQeIl6fVJG vt3xt1+XZdIyaXwX4o2EW0N9IBVol1QowzfKps5vOYWYBkXNQgJ+jcg96QAuwJ++ K2O+B1Kq41n7jiugERLWFae6IwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFETamPpv RHi1KrKdrCE9Ng6wxUVLMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRjBGODVBQjY2 M0UwMTFFQ0IxMUIyQzc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBALLd0AwDwQCAAIwCQMHACABDciQADANBgkqhkiG9w0BAQsF AAOCAQEAKplYv5a3Aw6p4G1tguknjaw04kGbnqYGNfguG3sNvMVviaHlH5fj/T0l H/2ua64mV2tw2F9oeXf5jZ9oEMyabhnu+5g461jO8CYlKxagKiD/ghS2Ks1FHoL8 3rTuy3FXz1k00pIVV2sDKwyHvS3cnnfRJf53ITSaNFROlv1NWm70lLW8AXbcKN5X GwpftkFqUVPqpEglesojffBHULZHCX3k6L9adZwjzDdeacN0K1hxzRTitwJ8vyTs 2P6nxdUIGUnH/CVbbzvYiumuF4Pt2VWcoWaphBG93JexDZLTpkQyTzwfVamTaI58 IHsm75LSljAlmervc35kUfdasw2l5g== -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org