$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa File: 583C1F6854F611E79DF7E643C4F9AE02.roa (raw, json) Hash identifier: J9SJ4DIJ/7Jqarub1sf8j6PHgZAGlGGdRbRsMiv9apI= Subject key identifier: 5B:D1:B4:65:9F:D9:B6:A3:F5:00:1D:5E:88:A9:71:03:1D:29:2C:9D Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 2FCE Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa Signing time: Thu 12 Sep 2024 15:52:10 +0000 ROA not before: Thu 12 Sep 2024 15:52:10 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 187 IP address blocks: 203.119.88.0/23 maxlen: 24 2001:dd8:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12238 (0x2fce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Sep 12 15:52:10 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e30e29-7bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:60:93:dc:8d:68:9b:cc:b7:fe:fd:61:47: a9:d9:4e:4e:3b:48:15:ad:67:51:61:4f:83:21:a3: e4:7f:91:30:05:34:9a:14:ef:a5:93:7c:59:2d:b2: d8:41:57:95:f0:29:ff:dd:8d:ac:08:69:b1:64:50: d4:a3:68:c4:80:93:b7:22:4f:e2:a3:0f:29:d3:cf: 08:e1:d6:24:13:34:f9:1a:cd:f4:47:90:62:2f:42: da:72:99:d8:d7:0e:45:99:90:eb:c7:b1:46:17:ce: 59:c9:3a:a4:85:4e:ec:29:49:15:34:df:ce:5f:e8: da:61:ae:dd:4b:3f:2a:b2:e7:3a:e7:f8:e0:ec:68: 64:6a:10:91:75:54:40:80:17:35:73:c8:38:9e:da: 49:b1:47:6c:79:4d:18:ea:ac:43:2f:66:57:14:fe: 46:3a:b1:09:0e:70:40:46:5c:4e:99:e3:76:fd:4c: 83:2b:5d:1b:05:96:ff:89:ab:88:46:db:14:97:f8: 5d:2a:2f:ea:e3:68:a8:84:c8:5c:fa:89:56:99:0a: 0e:4e:02:38:9e:94:e2:50:d7:41:71:22:47:39:0e: 2f:78:6e:52:99:b8:03:e1:d9:a8:b7:b3:52:79:34: d0:23:cf:ca:47:89:ae:fe:a4:6c:28:c2:ed:c6:c5: 06:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:B4:65:9F:D9:B6:A3:F5:00:1D:5E:88:A9:71:03:1D:29:2C:9D X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.119.88.0/23 IPv6: 2001:dd8:7::/48 Signature Algorithm: sha256WithRSAEncryption 93:40:ec:6f:f1:7f:18:3c:43:e7:51:62:49:7e:55:b4:1e:7e: 8b:c4:9c:08:95:5d:e6:f1:fa:11:e1:55:52:fd:30:33:5e:65: 4e:64:f7:76:a9:66:f3:2e:6e:40:4c:7c:d8:ec:7e:7a:84:bf: e1:52:0b:91:85:97:89:e3:17:a2:b9:00:41:a9:d1:ac:a0:3d: 58:75:3d:6e:13:df:67:ac:83:3f:1f:e1:cd:c2:71:72:cd:47: a6:00:ed:b8:77:c2:dd:56:55:3d:db:bf:7e:4c:f8:ad:d4:42: 43:d8:33:83:d8:a9:53:b7:6f:9b:50:d0:a6:ec:97:62:04:c0: 6b:7a:60:57:3c:2d:04:82:4a:91:d3:b1:76:7e:a2:cc:d1:b5: a7:5b:37:da:04:a8:ee:83:3f:0b:aa:6c:7d:9b:7e:3f:c0:d1: ef:f8:5f:25:10:02:9d:e6:06:98:45:bc:b5:91:ae:5e:f2:a9: 45:c9:42:20:90:e3:0f:0c:ee:fc:12:b8:01:41:ac:82:a1:f0: f7:8d:19:cd:b0:fd:8e:84:ed:93:06:78:5f:f7:74:b5:3a:f2: 7c:f9:03:58:55:47:fb:b8:9b:45:f3:f6:ec:9a:e5:2a:d5:21: e9:5d:02:33:2c:c7:83:3b:02:04:69:2e:bf:63:33:78:72:52: c4:33:41:6f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICL84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjQwOTEyMTU1MjEwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUzMGUyOS03YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIxgk9yNaJvMt/79YUep2U5OO0gVrWdRYU+DIaPkf5EwBTSaFO+lk3xZLbLY QVeV8Cn/3Y2sCGmxZFDUo2jEgJO3Ik/iow8p088I4dYkEzT5Gs30R5BiL0LacpnY 1w5FmZDrx7FGF85ZyTqkhU7sKUkVNN/OX+jaYa7dSz8qsuc65/jg7GhkahCRdVRA gBc1c8g4ntpJsUdseU0Y6qxDL2ZXFP5GOrEJDnBARlxOmeN2/UyDK10bBZb/iauI RtsUl/hdKi/q42iohMhc+olWmQoOTgI4npTiUNdBcSJHOQ4veG5SmbgD4dmot7NS eTTQI8/KR4mu/qRsKMLtxsUGDQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFvRtGWf 2baj9QAdXoipcQMdKSydMB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwQkQvQjVBNjM2RDhGRTVDMTFFMkFFQzA0MjUwNTkxMUVBMzIvNTgzQzFGNjg1 NEY2MTFFNzlERjdFNjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHLd1gwDwQCAAIwCQMHACABDdgABzANBgkqhkiG9w0BAQsF AAOCAQEAk0Dsb/F/GDxD51FiSX5VtB5+i8ScCJVd5vH6EeFVUv0wM15lTmT3dqlm 8y5uQEx82Ox+eoS/4VILkYWXieMXorkAQanRrKA9WHU9bhPfZ6yDPx/hzcJxcs1H pgDtuHfC3VZVPdu/fkz4rdRCQ9gzg9ipU7dvm1DQpuyXYgTAa3pgVzwtBIJKkdOx dn6izNG1p1s32gSo7oM/C6psfZt+P8DR7/hfJRACneYGmEW8tZGuXvKpRclCIJDj Dwzu/BK4AUGsgqHw940ZzbD9joTtkwZ4X/d0tTryfPkDWFVH+7ibRfP27JrlKtUh 6V0CMyzHgzsCBGkuv2MzeHJSxDNBbw== -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:51 2024 by rpki-client on console-fra.rpki-client.org