$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/69A97060686311EFA2F9C627C4F9AE02.roa File: 69A97060686311EFA2F9C627C4F9AE02.roa (raw, json) Hash identifier: G3Pb4rVR0rs53hFNL7WW3cyVBpoHaUbTKaSC6NX0kDA= Subject key identifier: 5D:1B:41:00:6F:38:3F:FA:C8:59:33:24:5C:5F:9C:3C:7A:18:F4:00 Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: FE Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/69A97060686311EFA2F9C627C4F9AE02.roa Signing time: Sun 01 Sep 2024 13:09:26 +0000 ROA not before: Sun 01 Sep 2024 13:09:26 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 17828 IP address blocks: 202.58.128.0/22 maxlen: 22 202.58.131.0/24 maxlen: 24 202.165.192.0/20 maxlen: 24 2001:c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Sep 2024 13:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Sep 1 13:09:26 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66d46785-cfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:5e:35:5d:8a:d2:6f:70:84:43:18:12:da: 48:b1:24:4b:cd:8c:a8:59:99:ff:58:e6:4c:28:50: b6:56:e5:31:48:fa:c6:b1:41:67:2c:d1:d1:d5:1b: 9e:c9:dc:b1:49:bf:38:b5:c9:3a:33:34:46:c3:b2: e3:a1:15:59:7c:6d:78:81:0c:33:37:28:c0:da:a0: e4:ba:9e:35:2f:e4:45:f2:7a:08:fc:df:6c:10:26: ff:77:f2:31:06:da:97:04:d4:38:f0:d1:0b:ac:24: a9:f0:90:7d:68:4a:e1:b8:f7:e8:aa:ff:4d:0b:ee: 66:30:ea:b9:70:88:8f:2f:4f:43:28:8d:e4:ce:79: d1:b1:0d:3a:af:55:60:d7:a9:f3:b7:5e:be:b9:38: 77:b3:6f:be:c5:e9:27:71:4f:87:9e:f1:79:65:44: 14:d6:4e:ae:cf:d9:34:d6:90:b9:a0:b4:a6:f5:28: 01:48:c2:c6:37:35:1e:dd:43:b8:5c:e2:42:c8:5f: bb:7a:8f:a7:bb:cb:c3:15:53:07:f2:ad:57:48:cb: 41:5a:86:04:a9:5f:18:b1:ef:be:7b:01:7e:b1:25: 56:3b:55:3a:bb:c5:5e:c7:f7:c0:63:da:8e:ff:01: 94:1f:03:ce:52:27:78:20:ca:89:2a:25:bd:42:75: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1B:41:00:6F:38:3F:FA:C8:59:33:24:5C:5F:9C:3C:7A:18:F4:00 X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/69A97060686311EFA2F9C627C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.128.0/22 202.165.192.0/20 IPv6: 2001:c60::/32 Signature Algorithm: sha256WithRSAEncryption 96:73:f0:b6:5f:d1:d0:51:75:af:dd:9e:63:02:2e:f5:2c:24: e3:f4:86:4b:91:b4:8f:74:38:b2:ee:5e:0a:6f:b4:cc:9f:be: 53:e2:81:4d:aa:0e:50:f5:13:7b:80:e2:d1:bd:c5:3a:4d:10: fc:a9:cb:4a:0f:58:2e:fd:97:dd:2d:1e:a3:ce:81:12:49:1d: 87:18:b5:c6:03:51:bc:fe:65:f5:06:2b:d6:a6:25:00:bb:94: 21:0a:e6:82:34:46:4c:48:f0:83:48:29:c3:b9:ff:ed:ef:6c: 2c:e1:d4:8d:bb:20:40:d0:af:17:c8:02:71:fc:03:1c:3e:8b: e3:3c:76:c6:f9:6d:f3:e7:d7:52:3a:2a:1b:37:7d:c7:35:f3: 52:b4:41:d3:12:a9:76:b6:f3:39:3a:d7:7a:71:95:b5:77:53: 93:a5:a6:9b:96:6f:3a:bc:db:29:fb:4d:a0:e9:70:ff:70:94: a3:f5:07:93:fa:d6:0e:a0:45:15:75:70:b1:7a:4a:c5:af:60: 3e:37:e4:2b:74:45:43:f4:b8:30:57:62:d3:08:14:1f:97:c3: 9b:e0:d3:96:b7:7d:71:0f:49:b9:40:8a:84:6c:6e:e4:c8:84: c6:22:a4:dd:ae:a7:e4:79:a3:0a:75:c8:c5:57:c9:0f:d3:4b: 56:1f:47:2f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjQwOTAxMTMwOTI2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ0Njc4NS1jZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDFeNV2K0m9whEMYEtpIsSRLzYyoWZn/WOZMKFC2VuUxSPrGsUFnLNHR1Rue ydyxSb84tck6MzRGw7LjoRVZfG14gQwzNyjA2qDkup41L+RF8noI/N9sECb/d/Ix BtqXBNQ48NELrCSp8JB9aErhuPfoqv9NC+5mMOq5cIiPL09DKI3kznnRsQ06r1Vg 16nzt16+uTh3s2++xekncU+HnvF5ZUQU1k6uz9k01pC5oLSm9SgBSMLGNzUe3UO4 XOJCyF+7eo+nu8vDFVMH8q1XSMtBWoYEqV8Yse++ewF+sSVWO1U6u8Vex/fAY9qO /wGUHwPOUid4IMqJKiW9QnVCqwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFF0bQQBv OD/6yFkzJFxfnDx6GPQAMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEwQUEvODJCQkI1NTIwMDNEMTFFRTk2MDhGMTQ3QzRGOUFFMDIvNjlBOTcwNjA2 ODYzMTFFRkEyRjlDNjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBALKOoADBATKpcAwDQQCAAIwBwMFACABDGAwDQYJKoZIhvcN AQELBQADggEBAJZz8LZf0dBRda/dnmMCLvUsJOP0hkuRtI90OLLuXgpvtMyfvlPi gU2qDlD1E3uA4tG9xTpNEPypy0oPWC79l90tHqPOgRJJHYcYtcYDUbz+ZfUGK9am JQC7lCEK5oI0RkxI8INIKcO5/+3vbCzh1I27IEDQrxfIAnH8Axw+i+M8dsb5bfPn 11I6Khs3fcc181K0QdMSqXa28zk613pxlbV3U5OlppuWbzq82yn7TaDpcP9wlKP1 B5P61g6gRRV1cLF6SsWvYD435Ct0RUP0uDBXYtMIFB+Xw5vg05a3fXEPSblAioRs buTIhMYipN2up+R5owp1yMVXyQ/TS1YfRy8= -----END CERTIFICATE-----Generated at Sun Sep 1 16:36:49 2024 by rpki-client on console.sobornost.net