$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/C89FD6DA557611EBA04C290BC4F9AE02.roa File: C89FD6DA557611EBA04C290BC4F9AE02.roa (raw, json) Hash identifier: /NtTWdjr9LcEfZeZzwzUDEyqZqjWCjb59tYobseoHp4= Subject key identifier: 70:A8:24:8C:E4:8E:53:5A:AB:CB:48:2D:91:8D:BA:25:2B:79:AB:4C Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 19EB Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/C89FD6DA557611EBA04C290BC4F9AE02.roa Signing time: Thu 04 Apr 2024 14:50:46 +0000 ROA not before: Thu 04 Apr 2024 14:50:46 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 45794 IP address blocks: 58.65.13.0/24 maxlen: 24 116.51.15.0/24 maxlen: 24 116.51.32.0/24 maxlen: 24 202.136.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6635 (0x19eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Apr 4 14:50:46 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660ebe45-8cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:e4:7d:17:ef:94:8a:ae:15:ea:72:ee:01: 0e:55:ce:24:68:a5:ea:ed:2e:a5:2a:ee:b7:02:6c: 57:ce:58:69:c0:d5:16:3d:0c:6c:c3:d6:fc:e2:86: 4b:ae:70:2f:de:07:63:3e:bf:09:70:59:ba:ba:75: fa:ae:a4:18:75:c0:fc:56:76:3d:4b:ac:99:1f:98: 1d:0d:78:48:d0:b7:93:f6:35:18:ca:4c:ac:c3:71: 43:ab:7d:11:5c:cf:90:44:f2:1f:95:46:f1:1f:78: be:2b:74:d9:69:52:15:57:ed:f5:43:0f:31:86:02: f6:1b:1a:ab:c0:a2:0b:ee:e4:77:f6:25:aa:87:8e: e0:1d:a7:c6:03:f8:3e:16:fd:6a:6e:9e:03:f2:64: bb:35:32:2e:b1:87:f8:b2:1e:b6:83:3c:8d:51:e9: b0:ee:cf:b1:16:2e:87:f2:de:57:44:c5:8f:e7:de: 2b:3b:14:0b:d9:96:28:65:f5:6b:46:8d:05:d9:59: ba:bf:52:1e:c4:d7:88:ac:c3:cf:e6:59:f9:e1:4b: a2:16:5c:a8:1f:36:c8:2d:7a:fc:06:2c:8f:d3:04: 52:ff:0e:7a:a5:26:db:0f:06:e1:88:9c:cb:1d:5a: e9:f3:75:bf:8a:1b:3d:36:48:20:2c:1f:3e:31:72: 8a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A8:24:8C:E4:8E:53:5A:AB:CB:48:2D:91:8D:BA:25:2B:79:AB:4C X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/C89FD6DA557611EBA04C290BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.65.13.0/24 116.51.15.0/24 116.51.32.0/24 202.136.161.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:c0:5c:ea:1c:f7:ad:87:8e:20:34:a6:e0:9d:14:5f:c2:8e: 5d:a7:2c:56:62:bc:62:25:07:7b:f9:be:a5:18:f6:8d:1c:be: e5:e6:b5:65:84:6e:42:9e:17:9b:b4:ec:83:aa:13:7b:07:9d: cf:23:8b:bf:7e:a1:92:4d:0f:86:8e:de:e2:75:4d:94:31:59: f7:de:22:28:9b:55:24:bc:0e:ed:6c:ef:09:8b:c3:d3:b7:ac: f1:06:e9:c7:6f:78:40:7b:93:e0:04:23:ea:ad:48:f1:f2:01: 23:ae:2a:cf:b8:9d:4d:1e:5b:e9:66:9c:74:95:39:7d:b8:2c: 94:e3:e0:8d:1e:ee:a1:50:48:6c:ef:f8:09:df:1f:3e:72:67: c7:55:40:e9:7d:29:aa:3f:7f:f0:5e:54:3d:b8:4f:3a:ac:4e: 44:d6:42:7b:d3:8a:82:ca:3e:8c:39:6b:36:e0:d9:3d:06:c7: 26:87:05:9e:d9:79:a9:30:42:88:e6:85:8c:37:8f:54:35:19: 90:15:95:c2:5f:1b:78:0d:5f:0b:7f:d3:51:d1:16:fc:8c:a8: 63:5f:bf:3e:29:16:56:01:ca:a0:1e:70:a9:dd:43:c4:4c:68: 06:e9:f1:98:42:01:d6:21:db:dd:d4:aa:9c:2a:30:3a:29:e0: da:fa:d3:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICGeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjQwNDA0MTQ1MDQ2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlYmU0NS04Y2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJvkfRfvlIquFepy7gEOVc4kaKXq7S6lKu63AmxXzlhpwNUWPQxsw9b84oZL rnAv3gdjPr8JcFm6unX6rqQYdcD8VnY9S6yZH5gdDXhI0LeT9jUYykysw3FDq30R XM+QRPIflUbxH3i+K3TZaVIVV+31Qw8xhgL2GxqrwKIL7uR39iWqh47gHafGA/g+ Fv1qbp4D8mS7NTIusYf4sh62gzyNUemw7s+xFi6H8t5XRMWP594rOxQL2ZYoZfVr Ro0F2Vm6v1IexNeIrMPP5ln54UuiFlyoHzbILXr8BiyP0wRS/w56pSbbDwbhiJzL HVrp83W/ihs9NkggLB8+MXKK9QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFHCoJIzk jlNaq8tILZGNuiUreatMMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvQzg5RkQ2REE1 NTc2MTFFQkEwNEMyOTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAA6QQ0DBAB0Mw8DBAB0MyADBADKiKEwDQYJKoZIhvcNAQEL BQADggEBAF3AXOoc962HjiA0puCdFF/Cjl2nLFZivGIlB3v5vqUY9o0cvuXmtWWE bkKeF5u07IOqE3sHnc8ji79+oZJND4aO3uJ1TZQxWffeIiibVSS8Du1s7wmLw9O3 rPEG6cdveEB7k+AEI+qtSPHyASOuKs+4nU0eW+lmnHSVOX24LJTj4I0e7qFQSGzv +AnfHz5yZ8dVQOl9Kao/f/BeVD24TzqsTkTWQnvTioLKPow5azbg2T0GxyaHBZ7Z eakwQojmhYw3j1Q1GZAVlcJfG3gNXwt/01HRFvyMqGNfvz4pFlYByqAecKndQ8RM aAbp8ZhCAdYh293UqpwqMDop4Nr608g= -----END CERTIFICATE-----Generated at Sat May 4 15:55:04 2024 by rpki-client on console-ams.rpki-client.org