$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/3CE5C23A550611ED96C8F350C4F9AE02.roa File: 3CE5C23A550611ED96C8F350C4F9AE02.roa (raw, json) Hash identifier: tljXT8G1BNgl+pD66knbjuh1b8kVzEqRHqexSVNncjs= Subject key identifier: 6D:ED:9E:36:50:27:D9:E5:72:09:F8:18:2A:DC:B9:B3:87:8A:09:A7 Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Certificate serial: 0188 Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/3CE5C23A550611ED96C8F350C4F9AE02.roa Signing time: Thu 07 Nov 2024 02:15:31 +0000 ROA not before: Thu 07 Nov 2024 02:15:31 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38327 IP address blocks: 158.89.0.0/16 maxlen: 16 158.89.0.0/17 maxlen: 17 158.89.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Validity Not Before: Nov 7 02:15:31 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672c22c2-fada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:c6:a0:a4:87:8b:a9:a2:d5:c3:7f:0d:19: f9:5e:76:03:c1:f0:aa:d9:ce:1c:6b:42:34:ec:ee: 0f:54:37:4b:40:aa:9c:20:25:c1:a6:f0:1e:8e:78: 8a:95:40:6e:f8:94:11:b0:68:cc:91:a4:8a:d9:f5: 28:78:41:73:70:0d:85:4e:4b:1b:88:d8:ae:63:03: ad:e3:f8:bc:ec:6f:3b:5f:e8:fa:fb:55:33:ed:ac: 86:87:0f:08:4e:85:51:34:8d:2b:c2:be:de:b1:ba: b8:af:0e:b9:af:ad:2c:82:74:ab:d8:35:6e:7a:c3: e1:83:10:09:ba:8c:ca:23:8e:79:52:f8:99:c1:fb: a4:fc:87:2a:1b:1e:0d:0c:6e:e7:4d:b6:f6:85:39: 79:8c:3c:49:39:61:18:3f:24:75:e7:99:44:f7:28: ba:4b:c8:6c:eb:7a:90:14:4f:96:76:fd:fe:8b:8c: 28:e3:be:2d:79:40:e5:03:5a:45:81:cc:0c:f7:57: 20:66:34:ee:80:3d:87:5b:24:c8:61:da:0b:1d:58: a6:0d:4d:f9:28:bc:22:a9:3c:a7:3b:c1:1c:07:57: a1:e0:98:4d:20:87:a8:1f:a4:f1:85:a9:45:f9:5d: a8:11:00:bc:fc:09:11:f2:09:06:c6:5a:2b:41:d4: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:ED:9E:36:50:27:D9:E5:72:09:F8:18:2A:DC:B9:B3:87:8A:09:A7 X509v3 Authority Key Identifier: keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/3CE5C23A550611ED96C8F350C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1a:f2:63:b1:fe:04:8f:7e:ca:47:b7:dd:6c:28:12:e9:0b:13: d9:e6:73:5a:61:be:e3:8f:06:a6:2c:f9:39:74:93:94:38:7a: b4:25:14:92:24:2e:43:7c:ba:ae:78:63:cf:d8:18:62:ba:f5: 22:94:30:1d:a4:52:79:1f:82:c2:6c:1e:09:d7:6f:20:64:4f: 45:b4:6f:2f:67:b4:13:27:3a:5b:bc:b0:38:d4:a9:da:11:a8: 08:38:f5:8d:f9:00:5e:d0:44:27:c8:9d:f8:43:45:62:69:9f: 81:55:b2:f2:ea:14:05:d2:c4:4a:f1:37:47:19:00:a5:23:a4: 49:b3:8b:3b:c5:b5:03:01:4c:60:62:b0:11:c2:b0:e4:6e:1c: 03:33:6a:48:59:14:4b:02:22:6e:ab:29:60:46:48:fc:10:f9: 5e:d4:40:f0:e6:e7:7f:4e:f3:bc:ae:44:31:87:22:7a:60:ce: 95:80:af:b4:96:8f:60:82:17:96:a9:b8:37:a0:36:a6:7b:e4: ec:7c:d0:27:cc:d9:f8:cd:1d:2c:63:ac:72:9a:70:31:22:57: 29:5c:e3:5e:dc:10:93:6a:de:2d:d7:91:fd:87:58:36:53:7b: 1a:53:a0:dc:6a:34:b1:35:5d:79:5c:17:0c:97:42:a3:e4:ea: 64:fe:21:20 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDU5NEY3QTBCQTlCRDFDMTM4Njg0N0NFODk2Mzk2M0ZF NEU3MTYzNkMwHhcNMjQxMTA3MDIxNTMxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJjMjJjMi1mYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZLGoKSHi6mi1cN/DRn5XnYDwfCq2c4ca0I07O4PVDdLQKqcICXBpvAejniK lUBu+JQRsGjMkaSK2fUoeEFzcA2FTksbiNiuYwOt4/i87G87X+j6+1Uz7ayGhw8I ToVRNI0rwr7esbq4rw65r60sgnSr2DVuesPhgxAJuozKI455UviZwfuk/IcqGx4N DG7nTbb2hTl5jDxJOWEYPyR155lE9yi6S8hs63qQFE+Wdv3+i4wo474teUDlA1pF gcwM91cgZjTugD2HWyTIYdoLHVimDU35KLwiqTynO8EcB1eh4JhNIIeoH6TxhalF +V2oEQC8/AkR8gkGxlorQdTF7wIDAQABo4IClDCCApAwHQYDVR0OBBYEFG3tnjZQ J9nlcgn4GCrcubOHigmnMB8GA1UdIwQYMBaAFFlPegupvRwThoR86JY5Y/5OcWNs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zNEQ1RDdFNjU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhCT0doSHpvbGpsal9rNXhZ MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dVOTZDNm05SEJPR2hIem9samxqX2s1eFkydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkZFREIvMzRENUQ3RTY1NTAyMTFFRDk2NEI3QTRBQzRGOUFFMDIvM0NFNUMyM0E1 NTA2MTFFRDk2QzhGMzUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCeWTANBgkqhkiG9w0BAQsFAAOCAQEAGvJjsf4Ej37KR7fd bCgS6QsT2eZzWmG+448Gpiz5OXSTlDh6tCUUkiQuQ3y6rnhjz9gYYrr1IpQwHaRS eR+CwmweCddvIGRPRbRvL2e0Eyc6W7ywONSp2hGoCDj1jfkAXtBEJ8id+ENFYmmf gVWy8uoUBdLESvE3RxkApSOkSbOLO8W1AwFMYGKwEcKw5G4cAzNqSFkUSwIibqsp YEZI/BD5XtRA8Obnf07zvK5EMYciemDOlYCvtJaPYIIXlqm4N6A2pnvk7HzQJ8zZ +M0dLGOscppwMSJXKVzjXtwQk2reLdeR/YdYNlN7GlOg3Go0sTVdeVwXDJdCo+Tq ZP4hIA== -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:09 2024 by rpki-client on console-fra.rpki-client.org