$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/59F7EF4E0A4611ECAE818D54C4F9AE02.roa File: 59F7EF4E0A4611ECAE818D54C4F9AE02.roa (raw, json) Hash identifier: zTUhKI/Umv9DnZwwhUUIlgq0Y79IbxqyExa7TOr+PSg= Subject key identifier: 9C:56:E8:63:B5:01:96:17:BC:92:C9:0A:DB:9D:B2:EF:E9:FE:9F:70 Certificate issuer: /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A Certificate serial: 074E Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/59F7EF4E0A4611ECAE818D54C4F9AE02.roa Signing time: Mon 16 Sep 2024 21:19:52 +0000 ROA not before: Mon 16 Sep 2024 21:19:52 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 4845 IP address blocks: 202.165.128.0/19 maxlen: 19 202.165.128.0/20 maxlen: 24 202.165.144.0/20 maxlen: 24 2400:7000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A Validity Not Before: Sep 16 21:19:52 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e8a0f8-7a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:2f:84:01:7b:c2:59:69:fb:b0:b3:8d:bf: 44:6c:3b:34:af:e3:a6:74:ba:08:c5:8e:43:f9:6d: 91:09:71:04:59:28:91:c0:24:5c:87:1d:e5:17:fb: 24:95:ae:67:33:b1:2d:d1:25:8e:16:e3:b1:9a:6b: 8a:29:e0:f1:2b:8c:c9:54:91:36:66:50:09:c0:fb: a7:8c:78:1d:74:09:42:02:74:77:4d:ac:66:33:a6: ec:58:90:f1:1e:e9:93:df:3c:13:89:9c:38:9f:ec: c5:c5:75:ee:ec:3b:df:f0:b3:8c:7f:56:f2:d0:95: fb:6d:f6:f9:f0:a6:10:b3:11:00:5d:a8:3d:23:47: 68:52:c6:ac:ef:97:43:62:b4:72:d2:c2:43:12:02: 67:19:56:7d:b9:ba:6b:6d:e1:ce:5f:fd:cd:8b:ff: b6:12:59:55:1a:82:1a:a5:4d:93:fa:68:9c:ef:15: 3d:65:ba:5c:94:2c:f1:fc:bd:a1:ff:6f:b1:24:7d: 9e:1f:8b:04:fe:78:89:ab:b5:e5:28:31:a1:80:7b: 00:67:54:8f:c1:d0:90:10:bd:ec:e7:a9:31:3c:82: 9d:ed:2d:8a:7c:4d:14:80:9f:93:c3:93:b1:19:fc: 14:5d:c1:c0:43:00:4a:3c:91:dc:6f:57:64:da:1c: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:E8:63:B5:01:96:17:BC:92:C9:0A:DB:9D:B2:EF:E9:FE:9F:70 X509v3 Authority Key Identifier: keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/59F7EF4E0A4611ECAE818D54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.165.128.0/19 IPv6: 2400:7000::/32 Signature Algorithm: sha256WithRSAEncryption 56:e4:7c:df:2a:41:23:82:7c:77:21:a5:a4:f2:4b:f7:bc:5b: 2f:e6:48:f6:21:b4:06:2b:51:a7:3a:5d:cf:36:7f:44:dd:24: 9b:a5:47:d2:9d:62:2d:38:de:a2:5a:05:dd:58:9d:32:ab:b1: b6:70:df:29:b2:95:93:9c:01:bc:fa:92:d5:95:76:95:5e:c5: 64:42:d2:af:bd:52:32:c5:48:5a:a1:7b:9b:61:b2:16:91:bb: 32:8b:87:74:d7:0e:04:4b:ba:fe:d2:f7:f8:de:62:d9:4f:0a: 45:13:2f:b1:ef:e1:90:53:cf:65:c9:e0:f4:bb:b0:88:dc:45: 31:31:38:8e:dc:ca:ce:18:00:dd:04:86:db:7f:e9:ed:2d:20: fc:d9:93:0d:44:0a:63:dd:8c:24:2e:dc:fc:f4:a8:ab:33:1e: 95:1f:d6:f5:a0:09:64:0c:fe:0f:08:8c:2e:c6:64:f1:05:37: 93:90:f1:40:29:ff:ca:5f:e6:43:46:9c:37:43:e3:e6:96:06: fa:ed:23:d8:24:53:b6:49:1d:fa:fa:c7:03:20:34:0f:9f:c9: 0f:fc:6a:eb:0f:b5:c2:22:39:be:69:fb:c7:19:95:15:a5:20: 22:f3:f2:25:cc:f2:2c:f1:fc:30:c4:55:61:32:bc:67:35:0f: 04:d3:4f:ee -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVGODIxMTAvBgNVBAUTKDc0NDdCMjgzNUVBQ0I4OEFDNDg3MjdDQjcyNkJCODdC OTdCQTc3OEEwHhcNMjQwOTE2MjExOTUyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU4YTBmOC03YTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0QvhAF7wllp+7Czjb9EbDs0r+OmdLoIxY5D+W2RCXEEWSiRwCRchx3lF/sk la5nM7Et0SWOFuOxmmuKKeDxK4zJVJE2ZlAJwPunjHgddAlCAnR3TaxmM6bsWJDx HumT3zwTiZw4n+zFxXXu7Dvf8LOMf1by0JX7bfb58KYQsxEAXag9I0doUsas75dD YrRy0sJDEgJnGVZ9ubprbeHOX/3Ni/+2EllVGoIapU2T+mic7xU9ZbpclCzx/L2h /2+xJH2eH4sE/niJq7XlKDGhgHsAZ1SPwdCQEL3s56kxPIKd7S2KfE0UgJ+Tw5Ox GfwUXcHAQwBKPJHcb1dk2hzzmQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJxW6GO1 AZYXvJLJCtudsu/p/p9wMB8GA1UdIwQYMBaAFHRHsoNerLiKxIcny3JruHuXuneK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUY4Mi8zMTA3QjNFQ0Y3 QzUxMUVBQkMzNDk1MEFDNEY5QUUwMi9kRWV5ZzE2c3VJckVoeWZMY211NGU1ZTZk NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZXlnMTZzdUlyRWh5ZkxjbXU0ZTVlNmQ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVGODIvMzEwN0IzRUNGN0M1MTFFQUJDMzQ5NTBBQzRGOUFFMDIvNTlGN0VGNEUw QTQ2MTFFQ0FFODE4RDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAXKpYAwDQQCAAIwBwMFACQAcAAwDQYJKoZIhvcNAQELBQAD ggEBAFbkfN8qQSOCfHchpaTyS/e8Wy/mSPYhtAYrUac6Xc82f0TdJJulR9KdYi04 3qJaBd1YnTKrsbZw3ymylZOcAbz6ktWVdpVexWRC0q+9UjLFSFqhe5thshaRuzKL h3TXDgRLuv7S9/jeYtlPCkUTL7Hv4ZBTz2XJ4PS7sIjcRTExOI7cys4YAN0Ehtt/ 6e0tIPzZkw1ECmPdjCQu3Pz0qKszHpUf1vWgCWQM/g8IjC7GZPEFN5OQ8UAp/8pf 5kNGnDdD4+aWBvrtI9gkU7ZJHfr6xwMgNA+fyQ/8ausPtcIiOb5p+8cZlRWlICLz 8iXM8izx/DDEVWEyvGc1DwTTT+4= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org