$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa File: 589FBEDC860311EBAFE18309C4F9AE02.roa (raw, json) Hash identifier: 60iJClNHfCYL5vJ0EICnhz/EaXVeffgn8z0vbfJvk+4= Subject key identifier: F6:FF:D5:50:CC:A4:80:EE:23:97:0D:86:14:29:F7:14:B2:8A:1C:B9 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 05B4 Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa Signing time: Fri 05 Jul 2024 00:02:08 +0000 ROA not before: Fri 05 Jul 2024 00:02:08 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 55555 IP address blocks: 43.245.28.0/22 maxlen: 24 103.246.96.0/22 maxlen: 24 180.200.244.0/22 maxlen: 24 2400:b100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Jul 5 00:02:08 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66873800-4919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:37:c9:40:f9:2e:b2:15:84:e6:6b:cf:81:a0: be:ad:2f:76:0c:41:cd:da:21:fa:f6:e5:e0:e5:84: b8:93:e8:e4:1c:69:3f:53:15:c7:6d:a7:93:ef:32: 1e:78:b3:bc:8f:13:dc:cb:ea:d0:bf:de:c6:d6:fc: f7:a0:09:25:22:2f:3f:70:9b:98:8b:77:cc:03:dd: 39:14:72:b1:84:13:72:9d:44:3a:67:a7:86:57:13: 28:4c:9d:e1:8d:01:dd:5e:97:7a:0f:df:6c:94:74: 0a:05:e5:06:5c:24:c0:88:da:8e:cc:90:83:9a:a8: 72:79:96:4e:bc:13:94:f7:db:c0:4a:a7:88:95:47: 28:0a:9b:ca:d9:db:2f:a0:61:a3:54:aa:92:5f:d7: 36:ef:30:dc:3c:0d:a6:e9:a9:a5:5e:f1:a0:8a:e5: 19:60:7b:ad:3e:9a:60:52:64:32:df:69:5f:be:fa: 60:4e:0b:89:11:08:78:59:64:be:af:fe:7a:eb:30: dc:ce:40:c6:19:a8:1c:60:1b:28:6e:7d:5b:33:12: 16:b7:b4:14:fe:1f:bc:0e:67:27:b7:41:94:27:d7: 38:82:10:8a:5b:4d:5c:d8:28:cb:f9:24:c1:dc:7a: 4d:a2:d7:e3:d4:d0:f7:ed:b7:5b:b6:0e:32:6e:53: db:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FF:D5:50:CC:A4:80:EE:23:97:0D:86:14:29:F7:14:B2:8A:1C:B9 X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.28.0/22 103.246.96.0/22 180.200.244.0/22 IPv6: 2400:b100::/32 Signature Algorithm: sha256WithRSAEncryption 0d:00:8b:3a:ca:a2:5d:81:7d:ae:28:2b:81:0b:8a:13:5a:e8: 85:79:83:64:aa:61:c7:46:af:e5:38:67:f7:c8:0b:f7:87:01: 7c:8a:dc:41:0f:3a:9b:bb:21:db:bd:a4:45:17:3c:87:64:9e: f3:a2:3a:ca:23:8a:ea:cc:2f:fd:22:de:47:c5:ed:58:3b:79: be:19:28:6e:ca:67:20:0a:63:e6:eb:be:e5:45:f5:fc:20:45: aa:b6:a8:6f:1a:06:e2:8a:7e:70:d9:50:87:6a:65:2d:0b:f7: 92:7c:f8:6c:9d:ac:59:f8:33:6b:55:57:4f:53:43:2e:15:62: 99:c3:f9:8c:c9:87:a8:ca:f7:ed:d1:4a:1f:a0:1d:4f:b0:88: 92:f1:d7:4b:42:41:53:62:ac:64:db:f6:1a:ef:27:bb:2b:3f: d8:cf:f5:6e:4b:72:d5:0f:44:aa:fc:da:16:7f:41:0d:ff:7b: 81:cc:41:77:d6:e6:80:4e:e6:f8:7a:34:00:8b:4e:1d:c3:56: 35:82:7f:72:f5:48:75:cf:a2:30:da:52:ab:d9:dc:ae:6d:37: 27:99:cc:9b:56:a6:d2:94:45:d3:ad:c0:f4:ad:49:e1:f7:57: 18:c7:77:0e:20:1d:f4:49:75:2d:81:d8:ac:31:99:53:17:83: 0e:c5:eb:2a -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjQwNzA1MDAwMjA4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg3MzgwMC00OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jfJQPkushWE5mvPgaC+rS92DEHN2iH69uXg5YS4k+jkHGk/UxXHbaeT7zIe eLO8jxPcy+rQv97G1vz3oAklIi8/cJuYi3fMA905FHKxhBNynUQ6Z6eGVxMoTJ3h jQHdXpd6D99slHQKBeUGXCTAiNqOzJCDmqhyeZZOvBOU99vASqeIlUcoCpvK2dsv oGGjVKqSX9c27zDcPA2m6amlXvGgiuUZYHutPppgUmQy32lfvvpgTguJEQh4WWS+ r/566zDczkDGGagcYBsobn1bMxIWt7QU/h+8Dmcnt0GUJ9c4ghCKW01c2CjL+STB 3HpNotfj1ND37bdbtg4yblPbCQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPb/1VDM pIDuI5cNhhQp9xSyihy5MB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMzNEQvMjdFODYxRDg4NUY3MTFFQjkyMDgxNzExQzRGOUFFMDIvNTg5RkJFREM4 NjAzMTFFQkFGRTE4MzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr9RwDBAJn9mADBAK0yPQwDQQCAAIwBwMFACQAsQAwDQYJ KoZIhvcNAQELBQADggEBAA0AizrKol2Bfa4oK4ELihNa6IV5g2SqYcdGr+U4Z/fI C/eHAXyK3EEPOpu7Idu9pEUXPIdknvOiOsojiurML/0i3kfF7Vg7eb4ZKG7KZyAK Y+brvuVF9fwgRaq2qG8aBuKKfnDZUIdqZS0L95J8+GydrFn4M2tVV09TQy4VYpnD +YzJh6jK9+3RSh+gHU+wiJLx10tCQVNirGTb9hrvJ7srP9jP9W5LctUPRKr82hZ/ QQ3/e4HMQXfW5oBO5vh6NACLTh3DVjWCf3L1SHXPojDaUqvZ3K5tNyeZzJtWptKU RdOtwPStSeH3VxjHdw4gHfRJdS2B2KwxmVMXgw7F6yo= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:48 2024 by rpki-client on console-ams.rpki-client.org