$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D630A6B206D511EFB6CFDF2DC4F9AE02.roa File: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (raw, json) Hash identifier: nHTus73euTqxT5RvtosJR4Pw5H5OHEAC/IbU5xCv1VI= Subject key identifier: A5:E7:22:8E:A1:84:51:18:4C:3E:6C:37:8B:04:85:11:99:79:45:D4 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 3577 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D630A6B206D511EFB6CFDF2DC4F9AE02.roa Signing time: Mon 04 Nov 2024 12:32:15 +0000 ROA not before: Mon 04 Nov 2024 12:32:15 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 151636 IP address blocks: 116.90.116.0/23 maxlen: 23 116.90.116.0/24 maxlen: 24 116.90.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13687 (0x3577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Nov 4 12:32:15 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6728becf-d8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:e4:56:a3:ea:ab:fb:57:2e:7b:2b:b5:41: 00:20:d3:f6:60:88:76:a6:62:aa:a3:26:26:25:6e: 0b:7c:ea:0c:9a:60:db:f8:df:73:45:e0:0b:3d:af: 78:c6:17:a7:1e:52:82:90:68:a3:28:b3:b0:06:51: 02:d6:43:b8:bc:e2:19:92:98:f9:0e:e0:cf:28:16: fc:77:74:9c:98:f7:c5:31:c2:22:1c:46:71:15:88: 9a:a9:28:fd:ad:08:c3:fb:49:d6:c5:8b:83:72:b4: 07:25:cb:06:d4:c5:38:ec:41:d5:32:00:e0:d7:90: 92:bd:57:f8:b4:12:96:b2:72:b5:4b:53:dd:64:88: bd:cd:96:b4:fe:94:10:61:02:dc:ad:7f:cc:15:80: 6c:4e:7d:4c:9e:39:40:36:57:1e:4c:50:fa:3f:8f: b5:db:7f:b2:06:59:c6:59:56:19:45:2c:f6:87:00: d7:c9:28:93:07:0c:99:f7:46:31:a0:b2:d3:ae:f5: d3:09:5f:65:f7:d6:4d:f1:ec:9b:cd:fc:e1:af:10: 9c:4d:26:3d:b2:a1:37:e7:18:ee:19:2a:fe:0d:c7: 3c:8f:00:11:f0:a0:53:cc:97:6a:dc:e3:18:04:a2: d8:06:2b:60:33:a2:3d:fe:ac:0c:2a:59:e2:54:24: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E7:22:8E:A1:84:51:18:4C:3E:6C:37:8B:04:85:11:99:79:45:D4 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D630A6B206D511EFB6CFDF2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.90.116.0/23 Signature Algorithm: sha256WithRSAEncryption 10:66:a9:40:ac:4c:65:8c:27:67:d7:73:70:a0:c8:db:c3:62: 98:98:54:8d:a7:7e:b8:83:ab:f4:a8:d0:69:0a:6a:b9:55:67: 42:e9:b6:45:aa:eb:76:cd:fe:b0:8f:71:ef:0a:c8:75:dc:47: 84:ab:1d:bf:37:cc:71:06:e6:5d:c1:cc:3a:97:e3:25:e3:97: 57:1b:56:ea:69:cc:e6:5a:41:50:9b:85:56:1b:55:de:71:eb: 6e:b3:5c:4d:50:46:08:e2:1c:bd:65:86:9e:ee:cd:a2:b4:62: 34:a7:b9:7d:19:99:d3:85:b8:d1:94:16:f3:03:d4:03:d8:5f: 01:41:c9:dc:d8:df:78:cb:67:8e:ba:29:cb:b9:15:df:0d:dc: 64:08:61:9a:1c:59:d2:70:15:9f:e3:02:e1:08:92:04:6c:9a: 24:f4:4b:20:4e:4b:2a:fd:62:2f:c2:5c:4c:c5:b5:06:a2:43: c7:b1:12:3c:05:c2:0b:bb:ff:54:65:64:72:9b:53:99:43:b3: e9:a5:b3:62:6b:05:5f:0f:05:8c:e6:14:84:96:79:34:c0:66: 93:a1:53:d6:c7:7b:ad:44:25:0b:e6:b9:4d:cb:dc:ec:c5:3d: 01:81:0e:94:c7:a3:09:65:0e:ac:50:8e:4f:26:eb:52:93:37: 61:e9:f5:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjQxMTA0MTIzMjE1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI4YmVjZi1kOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3TkVqPqq/tXLnsrtUEAINP2YIh2pmKqoyYmJW4LfOoMmmDb+N9zReALPa94 xhenHlKCkGijKLOwBlEC1kO4vOIZkpj5DuDPKBb8d3ScmPfFMcIiHEZxFYiaqSj9 rQjD+0nWxYuDcrQHJcsG1MU47EHVMgDg15CSvVf4tBKWsnK1S1PdZIi9zZa0/pQQ YQLcrX/MFYBsTn1MnjlANlceTFD6P4+123+yBlnGWVYZRSz2hwDXySiTBwyZ90Yx oLLTrvXTCV9l99ZN8eybzfzhrxCcTSY9sqE35xjuGSr+Dcc8jwAR8KBTzJdq3OMY BKLYBitgM6I9/qwMKlniVCSfzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKXnIo6h hFEYTD5sN4sEhRGZeUXUMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvRDYzMEE2QjIw NkQ1MTFFRkI2Q0ZERjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF0WnQwDQYJKoZIhvcNAQELBQADggEBABBmqUCsTGWMJ2fX c3CgyNvDYpiYVI2nfriDq/So0GkKarlVZ0LptkWq63bN/rCPce8KyHXcR4SrHb83 zHEG5l3BzDqX4yXjl1cbVuppzOZaQVCbhVYbVd5x626zXE1QRgjiHL1lhp7uzaK0 YjSnuX0ZmdOFuNGUFvMD1APYXwFBydzY33jLZ466Kcu5Fd8N3GQIYZocWdJwFZ/j AuEIkgRsmiT0SyBOSyr9Yi/CXEzFtQaiQ8exEjwFwgu7/1RlZHKbU5lDs+mls2Jr BV8PBYzmFISWeTTAZpOhU9bHe61EJQvmuU3L3OzFPQGBDpTHowllDqxQjk8m61KT N2Hp9Ts= -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:43 2024 by rpki-client on console-fra.rpki-client.org