$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa File: 5B196FD80A4611ECAE818D54C4F9AE02.roa (raw, json) Hash identifier: 81w6uEIlXcEUdPQfo2vbY8z/AyDWyyCFh1+WTuNWnEo= Subject key identifier: 12:4B:70:BD:F0:23:AC:49:3D:F7:A1:05:50:EE:D6:89:A8:D6:77:C5 Certificate issuer: /CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A Certificate serial: 074F Authority key identifier: 74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa Signing time: Mon 16 Sep 2024 21:19:53 +0000 ROA not before: Mon 16 Sep 2024 21:19:53 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 7473 IP address blocks: 202.165.128.0/19 maxlen: 19 202.165.128.0/20 maxlen: 24 202.165.144.0/20 maxlen: 24 2400:7000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5F82/serialNumber=7447B2835EACB88AC48727CB726BB87B97BA778A Validity Not Before: Sep 16 21:19:53 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e8a0f9-0051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:a3:7a:45:6f:06:29:b4:fb:c2:79:a8:f9: 64:b0:ff:98:54:d5:86:bc:d6:a1:4b:23:99:e5:bf: 9b:78:4c:98:30:99:96:18:7c:8a:b1:40:a9:50:8e: 5e:c3:c0:6b:ac:a6:10:8c:cb:9f:b0:1d:95:00:9f: 58:01:7b:88:04:cf:19:04:1f:71:39:c0:a9:ad:68: cd:d3:13:62:28:b2:2a:ce:b5:db:b8:e5:fe:3c:e9: a2:e1:1a:2a:4e:bf:27:8b:a7:8d:ee:01:66:70:4a: f7:d3:f8:0c:58:c4:0f:93:5a:e2:2c:02:5b:51:a9: de:16:04:5e:1e:fa:cd:03:e7:bb:3e:64:56:2e:44: 39:68:d6:3b:d1:fb:3a:1d:cd:92:e3:73:0f:b4:74: 4e:9c:2f:c3:27:8f:7c:d4:f4:bf:a7:ba:15:2a:36: f5:04:00:3c:d9:7a:9c:d3:ed:46:67:5d:b2:37:89: 78:73:4d:d5:52:ce:95:9c:19:e7:c3:95:53:4b:af: 66:be:f5:20:d8:02:4f:bb:88:9e:57:aa:8f:41:49: 7e:91:da:78:68:fd:6b:c6:ce:8b:07:8f:8f:66:66: 1c:ce:86:dc:31:d2:93:a6:f1:6b:67:2e:3d:63:34: e2:b0:39:76:26:13:ed:7c:77:09:5c:41:7c:31:f7: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4B:70:BD:F0:23:AC:49:3D:F7:A1:05:50:EE:D6:89:A8:D6:77:C5 X509v3 Authority Key Identifier: keyid:74:47:B2:83:5E:AC:B8:8A:C4:87:27:CB:72:6B:B8:7B:97:BA:77:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/dEeyg16suIrEhyfLcmu4e5e6d4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEeyg16suIrEhyfLcmu4e5e6d4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5F82/3107B3ECF7C511EABC34950AC4F9AE02/5B196FD80A4611ECAE818D54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.165.128.0/19 IPv6: 2400:7000::/32 Signature Algorithm: sha256WithRSAEncryption 90:e0:03:ad:b1:ca:a2:ce:48:df:9d:d8:46:e6:7b:da:90:51: d6:a7:f3:a0:c9:f9:6e:d2:62:10:e0:88:20:a5:97:46:54:af: b7:8f:1c:16:90:91:a5:92:38:70:a5:8c:e0:60:0d:85:91:04: 68:ce:f4:4c:03:dd:92:e6:cf:08:10:be:96:1d:2c:cf:93:97: 3d:94:2c:55:ec:12:02:31:c8:12:72:58:5d:03:0d:f7:03:f6: 9b:d4:cf:11:0c:cd:3c:0d:d3:61:46:c7:77:7b:8d:f4:30:48: 87:49:bd:f3:e8:26:75:21:12:29:47:88:86:68:c3:4d:78:25: ef:50:fc:94:a9:33:3b:d8:c0:d3:5f:84:7f:7d:c9:d1:58:ea: 87:41:e8:fa:70:e5:e4:28:47:51:ee:7a:dc:0e:7e:24:46:b4: e3:ca:75:1d:38:66:00:88:c9:e1:cd:d7:6a:c5:ad:de:7c:bc: a2:1c:71:b1:54:22:52:44:bf:1b:52:f8:c1:34:c9:46:7f:e7: 9d:f4:df:06:2c:ef:9d:b2:a2:a0:f2:e6:a0:2e:18:3d:54:a2: f3:05:ca:06:b4:d6:dc:93:ec:29:c4:08:06:bc:24:97:6c:29: 5f:d7:20:9f:77:58:a3:c1:43:e4:fd:f3:b0:44:9a:82:4a:2e: 43:d3:5b:b0 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVGODIxMTAvBgNVBAUTKDc0NDdCMjgzNUVBQ0I4OEFDNDg3MjdDQjcyNkJCODdC OTdCQTc3OEEwHhcNMjQwOTE2MjExOTUzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU4YTBmOS0wMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXSjekVvBim0+8J5qPlksP+YVNWGvNahSyOZ5b+beEyYMJmWGHyKsUCpUI5e w8BrrKYQjMufsB2VAJ9YAXuIBM8ZBB9xOcCprWjN0xNiKLIqzrXbuOX+POmi4Roq Tr8ni6eN7gFmcEr30/gMWMQPk1riLAJbUaneFgReHvrNA+e7PmRWLkQ5aNY70fs6 Hc2S43MPtHROnC/DJ4981PS/p7oVKjb1BAA82Xqc0+1GZ12yN4l4c03VUs6VnBnn w5VTS69mvvUg2AJPu4ieV6qPQUl+kdp4aP1rxs6LB4+PZmYczobcMdKTpvFrZy49 YzTisDl2JhPtfHcJXEF8MffjNwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBJLcL3w I6xJPfehBVDu1omo1nfFMB8GA1UdIwQYMBaAFHRHsoNerLiKxIcny3JruHuXuneK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUY4Mi8zMTA3QjNFQ0Y3 QzUxMUVBQkMzNDk1MEFDNEY5QUUwMi9kRWV5ZzE2c3VJckVoeWZMY211NGU1ZTZk NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZXlnMTZzdUlyRWh5ZkxjbXU0ZTVlNmQ0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVGODIvMzEwN0IzRUNGN0M1MTFFQUJDMzQ5NTBBQzRGOUFFMDIvNUIxOTZGRDgw QTQ2MTFFQ0FFODE4RDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAXKpYAwDQQCAAIwBwMFACQAcAAwDQYJKoZIhvcNAQELBQAD ggEBAJDgA62xyqLOSN+d2Ebme9qQUdan86DJ+W7SYhDgiCCll0ZUr7ePHBaQkaWS OHCljOBgDYWRBGjO9EwD3ZLmzwgQvpYdLM+Tlz2ULFXsEgIxyBJyWF0DDfcD9pvU zxEMzTwN02FGx3d7jfQwSIdJvfPoJnUhEilHiIZow014Je9Q/JSpMzvYwNNfhH99 ydFY6odB6Ppw5eQoR1HuetwOfiRGtOPKdR04ZgCIyeHN12rFrd58vKIccbFUIlJE vxtS+ME0yUZ/55303wYs752yoqDy5qAuGD1UovMFyga01tyT7CnECAa8JJdsKV/X IJ93WKPBQ+T987BEmoJKLkPTW7A= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org