$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/3B35E76EF2BE11EA8EE60873C4F9AE02.roa File: 3B35E76EF2BE11EA8EE60873C4F9AE02.roa (raw, json) Hash identifier: GJH2WwINecx3eMzpPy2EzUUBEFNPfZn4XRKOntnHX/A= Subject key identifier: 48:3B:6E:E2:3F:5A:0F:B8:C9:5E:78:76:6D:25:3D:52:5B:6F:2B:F9 Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0690 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/3B35E76EF2BE11EA8EE60873C4F9AE02.roa Signing time: Thu 22 Jun 2023 17:45:41 +0000 ROA not before: Thu 22 Jun 2023 17:45:41 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 58689 IP address blocks: 45.64.138.0/24 maxlen: 24 103.19.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Dec 2023 18:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Jun 22 17:45:41 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=649488c4-0b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:35:6c:89:3b:36:a6:cc:ae:96:44:16:76:9e: 63:a2:ab:5d:46:b8:f5:23:d8:e4:b5:d7:81:05:e2: 1d:a1:02:76:dd:6d:e7:5f:e5:e4:1a:55:68:58:af: 2a:ce:71:4e:77:28:03:ad:62:e7:d8:a8:1f:90:92: 42:a2:98:90:95:af:30:db:9e:d4:d7:90:a0:77:c5: c4:6d:91:fc:88:d0:a9:a4:83:3f:64:3e:52:2d:bc: 1f:db:82:12:e2:94:d8:83:5f:f4:31:ae:9d:6a:b9: 69:b6:a4:3f:09:0b:fe:a9:a2:90:29:b0:16:94:57: 7e:a1:47:a7:34:03:81:09:d4:d1:ea:da:5f:e6:12: 64:96:af:78:31:d4:77:ff:31:f6:c1:b7:13:75:b1: f7:96:33:83:0f:b5:44:8e:48:5a:93:10:9a:e2:3f: b6:f6:09:76:7e:eb:fc:47:9d:c1:30:d3:5b:fe:c0: 0a:dd:62:a8:35:79:b1:2f:83:c1:a3:51:85:68:3f: 5a:a5:33:cc:e5:c5:e9:c6:32:6c:2d:cb:31:8e:5d: 32:cc:fc:ef:ed:67:b2:96:ef:71:a1:8b:79:0b:db: b5:aa:e6:4d:ab:ad:0b:a4:72:42:d4:cd:91:54:24: 81:91:21:fe:b4:38:6e:b1:e2:1e:e1:61:96:59:12: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3B:6E:E2:3F:5A:0F:B8:C9:5E:78:76:6D:25:3D:52:5B:6F:2B:F9 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/3B35E76EF2BE11EA8EE60873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.138.0/24 103.19.254.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:1c:93:4c:3b:a1:78:f2:94:32:d4:25:8d:82:28:e7:4d:78: 8e:20:5e:0b:1a:70:bf:6e:f8:fa:b2:2e:5d:d2:af:48:53:c0: 93:e1:6c:f3:26:46:6b:8d:f2:7d:eb:7c:55:59:e5:16:83:fa: 65:f9:29:13:d8:4e:d4:ff:c9:58:61:43:a1:e9:fb:0f:5f:e9: 81:0e:26:4d:4f:dd:cf:71:53:36:19:32:08:18:ae:64:47:34: 22:8e:70:fa:33:5b:d1:1c:03:3b:20:63:32:a6:80:d6:72:df: 30:2b:7b:42:85:89:e2:e2:a5:97:ac:c5:30:7d:97:e2:5d:ec: 02:9d:ab:c2:56:f1:da:4c:12:c8:c7:70:16:6f:8c:2c:5c:e5: 6a:f1:3f:3d:41:9c:ca:cc:ed:fd:53:6a:9d:81:3f:21:c2:de: b4:21:29:03:6e:a4:58:9b:3e:46:4b:c9:e7:cb:b5:4f:eb:7b: 1e:06:0f:6c:b2:7e:c3:9b:c8:3b:58:73:f2:56:9e:84:d2:e9: 7f:b7:ae:f5:bd:2e:92:81:49:a0:1c:48:22:bd:d3:48:75:65: 37:99:5c:37:4a:30:4f:fa:ac:75:ba:8d:ef:d8:e5:24:a5:d8: a1:5f:8c:e0:ea:9e:0a:ca:9a:3f:66:43:a7:83:df:c6:a3:e5: 7c:17:66:e6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjMwNjIyMTc0NTQxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk0ODhjNC0wYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jVsiTs2psyulkQWdp5joqtdRrj1I9jktdeBBeIdoQJ23W3nX+XkGlVoWK8q znFOdygDrWLn2KgfkJJCopiQla8w257U15Cgd8XEbZH8iNCppIM/ZD5SLbwf24IS 4pTYg1/0Ma6darlptqQ/CQv+qaKQKbAWlFd+oUenNAOBCdTR6tpf5hJklq94MdR3 /zH2wbcTdbH3ljODD7VEjkhakxCa4j+29gl2fuv8R53BMNNb/sAK3WKoNXmxL4PB o1GFaD9apTPM5cXpxjJsLcsxjl0yzPzv7Weylu9xoYt5C9u1quZNq60LpHJC1M2R VCSBkSH+tDhuseIe4WGWWRJ0XQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEg7buI/ Wg+4yV54dm0lPVJbbyv5MB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvM0IzNUU3NkVG MkJFMTFFQThFRTYwODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAtQIoDBABnE/4wDQYJKoZIhvcNAQELBQADggEBADwck0w7 oXjylDLUJY2CKOdNeI4gXgsacL9u+PqyLl3Sr0hTwJPhbPMmRmuN8n3rfFVZ5RaD +mX5KRPYTtT/yVhhQ6Hp+w9f6YEOJk1P3c9xUzYZMggYrmRHNCKOcPozW9EcAzsg YzKmgNZy3zAre0KFieLipZesxTB9l+Jd7AKdq8JW8dpMEsjHcBZvjCxc5WrxPz1B nMrM7f1Tap2BPyHC3rQhKQNupFibPkZLyefLtU/rex4GD2yyfsObyDtYc/JWnoTS 6X+3rvW9LpKBSaAcSCK900h1ZTeZXDdKME/6rHW6je/Y5SSl2KFfjODqngrKmj9m Q6eD38aj5XwXZuY= -----END CERTIFICATE-----Generated at Sat Nov 25 19:35:28 2023 by rpki-client on console-ams.rpki-client.org