$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa File: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (raw, json) Hash identifier: /8R9yMIrgSmNTRqSElE2IHMJCwjVti5BvqqcazLlcjk= Subject key identifier: 7B:52:48:0F:F4:E2:41:16:D0:EE:3B:05:B1:95:85:CA:89:FB:4C:5A Certificate issuer: /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Certificate serial: 05FF Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa Signing time: Mon 18 Nov 2024 21:44:23 +0000 ROA not before: Mon 18 Nov 2024 21:44:23 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 141749 IP address blocks: 203.24.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1535 (0x5ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Validity Not Before: Nov 18 21:44:23 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=673bb536-5db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:46:7d:10:a4:c2:da:2f:0c:61:d4:7a:f4: 96:e0:46:7a:8f:3a:c8:af:fe:28:b7:72:6e:23:86: e7:ce:74:65:29:6b:dc:bf:81:49:37:7a:74:a4:87: 33:54:e9:47:98:de:17:75:ad:10:74:de:3d:ac:2d: 38:e5:18:e1:df:45:56:42:05:ca:8a:64:ba:c6:31: 72:4a:57:e0:ee:5f:a3:cc:eb:d1:6d:7a:64:3f:21: 07:f4:28:0d:0f:d1:f2:07:f8:71:21:80:e0:88:cc: 27:f4:a8:d7:8d:93:27:a2:1a:46:31:56:9e:22:95: d9:1b:77:02:d9:ea:d3:08:07:39:1e:38:fc:be:6e: df:07:bb:1f:2b:9c:e3:6e:f0:46:17:a9:9b:e1:07: 43:26:57:fd:a3:e4:8d:ca:48:ac:65:3d:d4:5f:2d: d3:e3:09:c4:98:99:61:e1:17:90:90:7b:02:54:d7: 30:41:45:30:96:b5:b5:24:bc:32:db:4e:16:b4:e0: 94:68:49:ab:ff:98:bb:0e:8a:f3:02:19:47:81:5f: 8f:63:72:73:7a:a4:6d:fd:73:62:9c:be:61:4c:23: 91:c8:95:aa:a7:e2:08:6d:d2:13:e1:ec:1f:6a:a6: da:40:36:b1:97:e9:7e:f8:e0:36:3b:9a:6e:36:57: ef:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:52:48:0F:F4:E2:41:16:D0:EE:3B:05:B1:95:85:CA:89:FB:4C:5A X509v3 Authority Key Identifier: keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.24.48.0/24 Signature Algorithm: sha256WithRSAEncryption 37:d0:88:23:bd:84:b9:04:4b:8f:4f:cd:00:3c:ad:d3:e3:34: 64:2d:21:4e:95:99:af:87:3a:fa:f5:c8:23:aa:5e:16:58:d0: 6b:21:75:99:41:ec:b1:69:56:e4:fd:e2:27:dc:a1:8c:3d:2a: 1f:49:0d:fb:d5:0b:45:30:02:a7:72:70:3c:2b:c3:52:87:66: ae:43:2c:4d:34:9b:36:3a:91:22:e2:b2:17:13:63:30:09:c3: 87:74:f0:4a:d4:44:13:d7:9a:29:99:37:1b:47:fd:4d:86:9b: 49:17:d2:be:4f:ba:dd:e8:54:72:da:0f:9b:4b:c8:d1:da:d3: 6f:f7:b4:a0:88:a5:47:60:98:7a:74:38:f4:d1:d0:15:05:36: b7:17:b7:f0:91:c7:50:6a:50:cd:6a:bb:85:8d:0c:e8:e7:a3: 06:f0:e6:0a:a9:30:1f:74:3e:1f:01:06:83:cd:13:80:22:44: 7c:3e:3b:66:a2:1e:ae:79:c8:04:0f:52:85:39:d7:ca:d8:be: 63:44:56:4d:97:9e:44:c8:1b:a7:a5:3e:1f:c5:0c:bb:7d:4d: 81:5d:71:4a:26:e6:ef:9c:8b:9a:04:b1:f7:41:b3:89:85:d0: 5b:9b:e8:08:4a:dd:b3:59:76:43:d1:39:90:c7:80:65:0e:73: c3:69:40:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB MTU5MTI2RUUwHhcNMjQxMTE4MjE0NDIzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNiYjUzNi01ZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oBGfRCkwtovDGHUevSW4EZ6jzrIr/4ot3JuI4bnznRlKWvcv4FJN3p0pIcz VOlHmN4Xda0QdN49rC045Rjh30VWQgXKimS6xjFySlfg7l+jzOvRbXpkPyEH9CgN D9HyB/hxIYDgiMwn9KjXjZMnohpGMVaeIpXZG3cC2erTCAc5Hjj8vm7fB7sfK5zj bvBGF6mb4QdDJlf9o+SNykisZT3UXy3T4wnEmJlh4ReQkHsCVNcwQUUwlrW1JLwy 204WtOCUaEmr/5i7DorzAhlHgV+PY3JzeqRt/XNinL5hTCORyJWqp+IIbdIT4ewf aqbaQDaxl+l++OA2O5puNlfvFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHtSSA/0 4kEW0O47BbGVhcqJ+0xaMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM1M0QvODRCNThGNjY4Q0ZCMTFFQjlEQzYyQzNCQzRGOUFFMDIvNDVGRTk2RjZB NUY2MTFFRkExNkU0QjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLGDAwDQYJKoZIhvcNAQELBQADggEBADfQiCO9hLkES49P zQA8rdPjNGQtIU6Vma+HOvr1yCOqXhZY0GshdZlB7LFpVuT94ifcoYw9Kh9JDfvV C0UwAqdycDwrw1KHZq5DLE00mzY6kSLishcTYzAJw4d08ErURBPXmimZNxtH/U2G m0kX0r5Put3oVHLaD5tLyNHa02/3tKCIpUdgmHp0OPTR0BUFNrcXt/CRx1BqUM1q u4WNDOjnowbw5gqpMB90Ph8BBoPNE4AiRHw+O2aiHq55yAQPUoU518rYvmNEVk2X nkTIG6elPh/FDLt9TYFdcUom5u+ci5oEsfdBs4mF0Fub6AhK3bNZdkPROZDHgGUO c8NpQAU= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:22 2024 by rpki-client on console-fra.rpki-client.org