$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/651072686CBB11EA95256D30C4F9AE02.roa File: 651072686CBB11EA95256D30C4F9AE02.roa (raw, json) Hash identifier: RbBtMUxEM5O1piu47myWbtaMm/ZIwxdcYTXVUwgD12E= Subject key identifier: 9C:7D:7A:46:99:16:02:51:0D:C6:52:FE:F1:D4:BA:85:57:1D:EA:83 Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Certificate serial: 09B7 Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/651072686CBB11EA95256D30C4F9AE02.roa Signing time: Sat 28 Sep 2024 20:09:54 +0000 ROA not before: Sat 28 Sep 2024 20:09:54 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 38004 IP address blocks: 202.89.24.0/21 maxlen: 21 202.89.24.0/25 maxlen: 25 202.89.24.128/25 maxlen: 25 202.89.25.0/24 maxlen: 25 202.89.26.0/24 maxlen: 24 202.89.29.0/24 maxlen: 24 2401:5f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Validity Not Before: Sep 28 20:09:54 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f86291-d23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:90:8d:0c:9f:e2:50:b5:11:5e:a3:4c:ea: 93:24:97:a2:4f:2b:da:fd:b0:aa:04:ed:d6:d4:5f: d4:74:b7:e3:04:ba:99:96:4d:30:7d:73:12:e2:7b: 71:6b:1a:4a:64:03:5c:7f:29:23:02:bc:68:c5:ce: 6d:95:bf:a4:15:36:34:0c:a0:45:24:34:47:84:56: 17:03:17:02:12:a4:f3:6d:3f:02:44:31:bf:11:45: e3:1c:62:56:bd:3c:6c:3d:75:87:50:c9:11:d3:26: 10:7a:96:ed:01:37:ef:af:0f:e5:d6:01:0a:a5:05: 41:32:9f:9e:98:19:ea:d8:6b:57:f8:a9:1a:8e:3b: aa:9f:58:83:3d:10:91:72:6a:f2:b1:eb:bf:b2:66: 46:50:fa:a1:34:35:b3:3e:bd:ae:67:3b:c7:5d:70: 5d:db:49:a9:e1:ee:f8:40:99:b1:2c:a4:ed:3a:3b: 57:e9:74:d0:c7:77:3e:f5:bf:82:e4:c0:43:1a:e0: 85:ac:0c:16:f3:47:cb:00:7f:3c:52:55:a3:fa:f9: e3:81:ae:8b:8c:1b:b6:e5:44:9e:ad:47:11:1a:68: 2a:e5:48:c9:8d:7e:f4:e1:f2:14:14:3e:ce:bb:1a: 16:e2:49:52:e9:78:12:a9:13:e0:64:ae:af:d9:7a: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7D:7A:46:99:16:02:51:0D:C6:52:FE:F1:D4:BA:85:57:1D:EA:83 X509v3 Authority Key Identifier: keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/651072686CBB11EA95256D30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.89.24.0/21 IPv6: 2401:5f40::/32 Signature Algorithm: sha256WithRSAEncryption 09:4c:78:95:73:1d:29:87:48:6a:fb:51:14:6f:dd:1a:38:be: fb:95:ee:be:7b:66:76:0c:dd:9f:61:fc:92:d9:4f:f7:fa:7a: d3:b0:4d:89:6c:10:83:c1:6f:cc:10:2c:29:94:9d:da:cb:21: aa:b4:58:73:f2:f7:09:6b:9b:cf:77:bc:61:90:59:51:ee:b9: 54:3a:ae:7a:8d:fc:37:d2:23:ba:42:cb:99:24:2a:8e:7b:83: e0:d2:ec:a6:1c:55:db:91:ba:c4:cf:26:7e:cb:4e:d2:4e:29: 49:70:e6:86:74:2d:c1:d5:ea:2b:79:62:09:a2:0d:18:f1:e7: 06:0c:d4:3a:cc:4d:aa:f4:00:53:89:0b:8d:9d:59:74:20:9e: 0a:eb:90:52:b6:1f:46:2a:db:0d:ca:4d:ea:0d:2e:dc:91:ad: f4:57:32:c6:5d:cf:53:5e:f5:53:c1:0e:b2:be:76:12:31:b9: bf:62:07:44:b5:0d:b7:86:5c:c7:7a:fa:18:00:ff:88:a5:ca: 32:64:e4:78:92:19:bd:09:58:2d:74:20:99:6c:f6:19:cc:e7: 20:f7:8c:9c:2b:13:66:e2:ed:69:de:45:5c:a9:59:78:16:5e: f3:77:fa:e1:d3:ac:5f:5d:76:fb:67:df:e1:95:ac:1c:c1:a1: 85:a4:b7:78 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCRDcxMTAvBgNVBAUTKEE5QkIwREZCNkQ0RkY2M0I3Mjg4MzNCRTBBRDY2MjM3 OTZFQzhBMTkwHhcNMjQwOTI4MjAwOTU0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4NjI5MS1kMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnuQjQyf4lC1EV6jTOqTJJeiTyva/bCqBO3W1F/UdLfjBLqZlk0wfXMS4ntx axpKZANcfykjArxoxc5tlb+kFTY0DKBFJDRHhFYXAxcCEqTzbT8CRDG/EUXjHGJW vTxsPXWHUMkR0yYQepbtATfvrw/l1gEKpQVBMp+emBnq2GtX+Kkajjuqn1iDPRCR cmryseu/smZGUPqhNDWzPr2uZzvHXXBd20mp4e74QJmxLKTtOjtX6XTQx3c+9b+C 5MBDGuCFrAwW80fLAH88UlWj+vnjga6LjBu25USerUcRGmgq5UjJjX704fIUFD7O uxoW4klS6XgSqRPgZK6v2XpsjQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJx9ekaZ FgJRDcZS/vHUuoVXHeqDMB8GA1UdIwQYMBaAFKm7DfttT/Y7cogzvgrWYjeW7IoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJENy9GOTMyMTkxMjZD QjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlqdHlpRE8tQ3RaaU41YnNp aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fic04tMjFQOWp0eWlETy1DdFppTjVic2loay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCRDcvRjkzMjE5MTI2Q0I5MTFFQTgwODMyRTJFQzRGOUFFMDIvNjUxMDcyNjg2 Q0JCMTFFQTk1MjU2RDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAPKWRgwDQQCAAIwBwMFACQBX0AwDQYJKoZIhvcNAQELBQAD ggEBAAlMeJVzHSmHSGr7URRv3Ro4vvuV7r57ZnYM3Z9h/JLZT/f6etOwTYlsEIPB b8wQLCmUndrLIaq0WHPy9wlrm893vGGQWVHuuVQ6rnqN/DfSI7pCy5kkKo57g+DS 7KYcVduRusTPJn7LTtJOKUlw5oZ0LcHV6it5YgmiDRjx5wYM1DrMTar0AFOJC42d WXQgngrrkFK2H0Yq2w3KTeoNLtyRrfRXMsZdz1Ne9VPBDrK+dhIxub9iB0S1DbeG XMd6+hgA/4ilyjJk5HiSGb0JWC10IJls9hnM5yD3jJwrE2bi7WneRVypWXgWXvN3 +uHTrF9ddvtn3+GVrBzBoYWkt3g= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org