$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/651072686CBB11EA95256D30C4F9AE02.roa File: 651072686CBB11EA95256D30C4F9AE02.roa (raw, json) Hash identifier: nJS/y/XuThPiPVOQl0kW5TPZfhPfqDNIwVRLES/rfFo= Subject key identifier: C7:D6:8F:4F:86:FB:DC:0E:38:E9:BE:AF:BE:E8:C8:BA:C4:DA:B7:CE Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Certificate serial: 08F2 Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/651072686CBB11EA95256D30C4F9AE02.roa Signing time: Tue 12 Sep 2023 20:38:04 +0000 ROA not before: Tue 12 Sep 2023 20:38:04 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 38004 IP address blocks: 202.89.24.0/21 maxlen: 21 202.89.24.0/25 maxlen: 25 202.89.24.128/25 maxlen: 25 202.89.25.0/24 maxlen: 25 202.89.26.0/24 maxlen: 24 202.89.29.0/24 maxlen: 24 2401:5f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 21:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Validity Not Before: Sep 12 20:38:04 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6500cc2c-a3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:83:70:ca:11:33:11:62:42:83:95:bd:2b:74: ce:f8:c1:4b:ff:b1:5a:87:ec:7b:1e:d8:72:fd:ab: a0:35:81:4d:84:5c:69:90:48:8b:d8:e2:10:a0:dc: 0d:91:da:d4:4b:6e:d1:a1:b2:5f:39:dc:ac:61:50: 78:3d:ba:69:88:68:b9:57:75:dc:4c:45:7b:8e:b8: 14:97:9c:f7:8a:ab:ae:b2:1f:4f:ed:44:d5:6e:9b: 29:20:f3:af:3e:e9:1f:b2:9f:6b:8a:c2:26:39:8e: 41:86:a0:98:59:8a:20:e3:b3:33:6b:5b:be:a3:88: a3:48:e6:2a:2d:a5:93:85:1d:31:75:c0:6a:53:89: c5:b7:1f:c5:f2:7b:ef:13:f4:1f:d8:06:d3:8b:1a: c2:4b:8e:e4:80:e5:36:0e:23:b4:cc:f7:67:bd:15: a0:be:29:84:d8:77:a3:71:4d:d1:6c:f5:9f:87:7f: 5a:45:b9:ff:81:0f:7f:93:f4:8c:d0:4b:ab:63:90: ff:0d:80:91:5b:8b:c8:35:07:9a:1a:8f:0f:20:f8: 6f:37:e4:ea:b8:c6:70:7a:98:b0:4a:f0:fb:4f:ef: dc:41:42:13:48:d6:19:b7:e5:f5:8b:59:99:ff:1b: a7:f4:54:9a:4c:2a:ef:b9:52:98:4d:16:80:c1:4a: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D6:8F:4F:86:FB:DC:0E:38:E9:BE:AF:BE:E8:C8:BA:C4:DA:B7:CE X509v3 Authority Key Identifier: keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/651072686CBB11EA95256D30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.89.24.0/21 IPv6: 2401:5f40::/32 Signature Algorithm: sha256WithRSAEncryption 3f:6a:0f:83:92:54:77:30:f4:d0:8a:90:22:56:d7:39:9f:28: 48:c6:8e:d9:c2:91:61:36:67:9b:58:87:71:63:3e:27:e7:18: c2:c2:56:12:5f:59:bc:04:87:7a:db:b4:87:58:3d:03:62:75: 14:c6:4a:9c:3e:4d:05:ca:f6:c2:dd:2a:0c:42:54:36:96:7e: 2c:09:2b:55:de:a3:fe:81:53:64:23:a4:7c:cb:22:33:f6:88: 15:73:d4:fd:ab:4e:39:f7:88:75:be:e1:fd:0e:76:67:eb:53: ea:d5:cc:ce:82:68:59:fd:51:54:71:57:95:38:0b:7a:2c:3f: 26:55:92:43:75:4e:45:4c:8f:ed:38:bb:35:cb:fa:1e:4c:81: 1e:1a:c0:b3:9b:d5:4b:eb:ee:e0:90:6d:d8:64:7d:8f:e7:14: b0:b3:fa:de:01:fa:c6:9b:64:15:8a:aa:3c:5e:f7:67:07:26: de:43:77:a8:de:16:51:45:21:73:96:63:91:d3:f7:bb:e2:46: 9b:bf:38:2e:c7:fa:dc:1f:cc:3b:6c:0e:88:2d:e0:87:11:09: 64:03:5d:d8:10:5b:86:67:7e:75:c4:c8:e4:ab:ec:ba:25:9a: 20:c8:c7:36:ab:5b:8b:0d:39:8e:8d:78:ce:36:93:26:44:0f: 51:5e:f0:e4 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCRDcxMTAvBgNVBAUTKEE5QkIwREZCNkQ0RkY2M0I3Mjg4MzNCRTBBRDY2MjM3 OTZFQzhBMTkwHhcNMjMwOTEyMjAzODA0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAwY2MyYy1hM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3INwyhEzEWJCg5W9K3TO+MFL/7Fah+x7Hthy/augNYFNhFxpkEiL2OIQoNwN kdrUS27RobJfOdysYVB4PbppiGi5V3XcTEV7jrgUl5z3iquush9P7UTVbpspIPOv Pukfsp9risImOY5BhqCYWYog47Mza1u+o4ijSOYqLaWThR0xdcBqU4nFtx/F8nvv E/Qf2AbTixrCS47kgOU2DiO0zPdnvRWgvimE2HejcU3RbPWfh39aRbn/gQ9/k/SM 0EurY5D/DYCRW4vINQeaGo8PIPhvN+TquMZwepiwSvD7T+/cQUITSNYZt+X1i1mZ /xun9FSaTCrvuVKYTRaAwUqCbQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMfWj0+G +9wOOOm+r77oyLrE2rfOMB8GA1UdIwQYMBaAFKm7DfttT/Y7cogzvgrWYjeW7IoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJENy9GOTMyMTkxMjZD QjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlqdHlpRE8tQ3RaaU41YnNp aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fic04tMjFQOWp0eWlETy1DdFppTjVic2loay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCRDcvRjkzMjE5MTI2Q0I5MTFFQTgwODMyRTJFQzRGOUFFMDIvNjUxMDcyNjg2 Q0JCMTFFQTk1MjU2RDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAPKWRgwDQQCAAIwBwMFACQBX0AwDQYJKoZIhvcNAQELBQAD ggEBAD9qD4OSVHcw9NCKkCJW1zmfKEjGjtnCkWE2Z5tYh3FjPifnGMLCVhJfWbwE h3rbtIdYPQNidRTGSpw+TQXK9sLdKgxCVDaWfiwJK1Xeo/6BU2QjpHzLIjP2iBVz 1P2rTjn3iHW+4f0OdmfrU+rVzM6CaFn9UVRxV5U4C3osPyZVkkN1TkVMj+04uzXL +h5MgR4awLOb1Uvr7uCQbdhkfY/nFLCz+t4B+sabZBWKqjxe92cHJt5Dd6jeFlFF IXOWY5HT97viRpu/OC7H+twfzDtsDogt4IcRCWQDXdgQW4ZnfnXEyOSr7LolmiDI xzarW4sNOY6NeM42kyZED1Fe8OQ= -----END CERTIFICATE-----Generated at Sat May 25 01:00:23 2024 by rpki-client on console-ams.rpki-client.org