$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/794E571008B611EDACE57065C4F9AE02.roa File: 794E571008B611EDACE57065C4F9AE02.roa (raw, json) Hash identifier: 9Mc26lTV0bSayljeK2Ebdpo5R6WrAbLKm+9rLdLYds4= Subject key identifier: CD:51:A5:79:13:35:2B:7C:A1:6F:DF:05:BA:BC:22:6F:9D:5A:9C:76 Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 057D Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/794E571008B611EDACE57065C4F9AE02.roa Signing time: Mon 14 Oct 2024 05:32:11 +0000 ROA not before: Mon 14 Oct 2024 05:32:11 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 55808 IP address blocks: 110.164.135.0/24 maxlen: 24 110.164.146.0/24 maxlen: 24 110.164.184.0/24 maxlen: 24 110.164.185.0/24 maxlen: 24 110.164.186.0/24 maxlen: 24 110.164.187.0/24 maxlen: 24 110.164.203.0/24 maxlen: 24 110.164.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Oct 14 05:32:11 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=670cacdb-b619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5e:8a:95:03:f3:f8:7e:10:56:e5:1e:ac:7d: c1:bc:3f:16:4a:2f:ca:96:3b:a8:16:75:ef:21:bd: 35:e6:73:df:9c:7a:90:24:0c:50:8a:36:b0:2d:47: d8:cb:60:8b:a3:ba:37:18:f9:54:33:f7:da:81:3f: be:17:a9:bc:f0:fe:05:00:ca:5a:16:71:30:ea:e9: 79:ef:cb:81:b3:c1:f3:91:f5:87:e8:4e:36:ea:f0: 57:eb:0d:90:83:77:5b:20:c9:8c:12:26:8d:ed:87: a6:aa:44:40:8e:3b:6c:b2:b9:64:8c:b0:b8:70:41: 74:5c:ce:0c:2f:ac:d2:ce:ad:57:be:af:38:4e:cc: a4:26:f2:c0:de:82:62:09:ed:30:f3:50:e3:e8:a8: d5:e2:0c:e9:e3:ff:f1:8a:d7:f0:49:83:1e:76:59: 96:76:66:04:23:77:c9:c4:54:15:94:f6:6b:3f:df: 40:89:a4:dd:8b:f2:08:99:9a:7d:76:de:31:50:d1: 70:bc:a8:5c:41:40:f1:fc:d7:57:87:1a:10:03:21: ec:5f:ff:d8:32:25:28:06:80:28:7f:e0:90:dc:a1: 04:20:cb:75:ca:12:79:91:ae:a4:f0:27:01:cb:10: ff:97:de:41:e0:0b:d3:8d:bf:9f:f6:16:9e:bf:ab: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:51:A5:79:13:35:2B:7C:A1:6F:DF:05:BA:BC:22:6F:9D:5A:9C:76 X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/794E571008B611EDACE57065C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.164.135.0/24 110.164.146.0/24 110.164.184.0/22 110.164.203.0/24 110.164.236.0/24 Signature Algorithm: sha256WithRSAEncryption 74:be:d1:19:ee:bf:e3:be:a3:af:25:3f:05:ee:62:f9:96:e8: 1f:58:77:ea:d9:97:5e:b4:ca:8d:9e:2e:c6:eb:fe:1b:3b:4c: 52:06:5f:c0:bc:f8:2a:49:ac:17:ec:72:73:04:75:d5:65:a7: f9:4c:e3:be:e5:7d:f1:e7:fb:0b:86:14:88:b3:2a:e0:69:da: 1f:89:e1:38:35:05:26:c7:ae:1d:3f:20:d9:93:9c:5c:bd:fa: 54:84:80:5e:c2:83:72:95:3f:10:94:c1:95:94:d4:f2:6c:2b: 48:43:3f:66:84:44:81:c7:77:e5:0b:f4:03:90:3a:ee:80:b7: e2:bb:36:7c:10:52:52:81:65:1d:ee:79:dd:af:20:25:e5:1b: 79:ab:97:11:c5:5b:9d:a3:47:a7:2c:ee:35:a0:23:78:99:2e: f8:5b:88:0d:22:9d:1d:6e:a1:97:30:59:7f:de:b1:8c:9d:1a: 05:70:5f:12:e7:cf:c9:40:8f:cb:db:cc:a2:83:e8:ee:c7:7c: 66:9f:e5:84:33:fa:07:7f:0d:f4:ec:e1:00:38:ca:f1:c1:f8: 8d:fb:af:23:ac:29:e7:d7:21:20:c4:ac:27:12:cb:fd:a3:6b: da:ee:fa:fb:9b:80:71:29:d1:ac:33:55:19:98:fc:09:6c:f7: 7f:bd:a8:10 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjQxMDE0MDUzMjExWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBjYWNkYi1iNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4V6KlQPz+H4QVuUerH3BvD8WSi/KljuoFnXvIb015nPfnHqQJAxQijawLUfY y2CLo7o3GPlUM/fagT++F6m88P4FAMpaFnEw6ul578uBs8HzkfWH6E426vBX6w2Q g3dbIMmMEiaN7YemqkRAjjtssrlkjLC4cEF0XM4ML6zSzq1Xvq84TsykJvLA3oJi Ce0w81Dj6KjV4gzp4//xitfwSYMedlmWdmYEI3fJxFQVlPZrP99AiaTdi/IImZp9 dt4xUNFwvKhcQUDx/NdXhxoQAyHsX//YMiUoBoAof+CQ3KEEIMt1yhJ5ka6k8CcB yxD/l95B4AvTjb+f9haev6vD4QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFM1RpXkT NSt8oW/fBbq8Im+dWpx2MB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvNzk0RTU3MTAw OEI2MTFFREFDRTU3MDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBABupIcDBABupJIDBAJupLgDBABupMsDBABupOwwDQYJKoZI hvcNAQELBQADggEBAHS+0Rnuv+O+o68lPwXuYvmW6B9Yd+rZl160yo2eLsbr/hs7 TFIGX8C8+CpJrBfscnMEddVlp/lM477lffHn+wuGFIizKuBp2h+J4Tg1BSbHrh0/ INmTnFy9+lSEgF7Cg3KVPxCUwZWU1PJsK0hDP2aERIHHd+UL9AOQOu6At+K7NnwQ UlKBZR3ued2vICXlG3mrlxHFW52jR6cs7jWgI3iZLvhbiA0inR1uoZcwWX/esYyd GgVwXxLnz8lAj8vbzKKD6O7HfGaf5YQz+gd/DfTs4QA4yvHB+I37ryOsKefXISDE rCcSy/2ja9ru+vubgHEp0awzVRmY/Als93+9qBA= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org