$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/3BE0E862F2BE11EA8EE60873C4F9AE02.roa File: 3BE0E862F2BE11EA8EE60873C4F9AE02.roa (raw, json) Hash identifier: QrjYTKMs8CFOQGsPbC7v3LRbtHY0j7JqWEqGRTX7P18= Subject key identifier: BC:E8:2B:4C:81:81:C6:7C:C3:95:98:D2:96:E2:8A:F3:30:28:4C:C7 Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0691 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/3BE0E862F2BE11EA8EE60873C4F9AE02.roa Signing time: Thu 22 Jun 2023 17:45:42 +0000 ROA not before: Thu 22 Jun 2023 17:45:42 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 58715 IP address blocks: 45.64.138.0/24 maxlen: 24 103.19.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Dec 2023 19:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Jun 22 17:45:42 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=649488c6-c8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1f:b0:cc:a7:60:99:73:15:12:35:8f:6d:63: 53:99:0a:cc:41:5e:bb:58:29:84:ef:7e:60:f5:c6: 9b:b7:66:e8:09:df:36:d7:1b:36:d2:d2:06:ca:87: 26:e7:21:0d:98:83:67:9d:a9:86:ce:40:36:c1:63: 87:98:e6:8d:b9:73:e7:5c:6a:8c:d7:57:66:c2:f3: 93:1d:8a:38:df:b9:a4:27:5e:a7:84:8e:b9:6d:50: 7e:06:e6:51:90:50:81:7e:29:3b:75:30:d7:41:b5: be:00:8e:6a:85:4b:99:1a:b7:4b:8f:fb:39:ed:02: 5b:f4:0f:54:5e:d5:7c:20:ba:4a:c1:22:77:9b:7c: b5:d3:6c:96:b7:24:8e:44:7a:8b:f4:a0:00:34:b6: ba:fc:f2:55:90:3b:93:8d:81:9e:80:75:8b:45:a9: b4:0c:51:53:44:f3:a6:a9:52:07:e3:71:40:92:0e: a6:ad:a4:81:51:0a:9b:fc:df:7e:e6:f4:a4:03:90: d3:56:e3:e9:61:e1:54:b1:53:5f:04:21:01:5b:6f: 0b:37:07:f5:99:74:2a:2f:71:dc:e2:eb:39:20:8c: 82:75:92:7f:7d:2f:d7:3c:ba:e4:34:25:1e:99:ea: 5c:6c:8b:7e:e6:e1:a5:10:51:c3:84:93:1d:ed:5d: 1e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E8:2B:4C:81:81:C6:7C:C3:95:98:D2:96:E2:8A:F3:30:28:4C:C7 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/3BE0E862F2BE11EA8EE60873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.138.0/24 103.19.254.0/24 Signature Algorithm: sha256WithRSAEncryption 72:92:28:b3:a5:e2:cc:5e:f9:66:6d:10:a1:6b:48:2f:3f:7f: d5:03:f8:1b:e2:6b:e0:9e:2a:6f:78:8d:db:b4:1f:90:71:e3: 92:a4:b1:be:49:d1:68:13:0a:a7:ea:1c:a8:ad:27:10:39:1d: f6:5a:45:65:04:00:51:c8:9b:d8:33:29:61:b6:08:24:5f:cd: 73:68:4a:d8:54:fc:f6:49:f4:85:f7:c0:cc:30:33:19:76:62: 3f:04:bd:a1:97:36:ab:bc:f1:56:1b:00:29:6b:23:f1:c5:d2: ec:79:41:57:ca:f1:aa:bc:19:c2:bd:68:2f:57:eb:8a:8c:3e: 71:f7:92:30:89:e3:ea:e3:1d:b9:54:ca:c0:8a:29:7e:aa:33: 0c:7b:65:2e:ea:15:4d:0c:47:32:b5:30:03:3c:05:f5:4b:36: 22:32:0c:0f:09:31:5c:0d:40:d0:21:7a:eb:18:b7:20:70:b1: 4b:46:14:ba:8e:ef:9f:8a:b8:c3:6f:64:81:0e:52:24:53:72: 0b:19:d2:d4:c2:22:e1:eb:b5:fb:27:8e:d8:70:90:b0:3c:40: c3:aa:52:d7:fd:bc:f4:8c:e0:17:f1:2c:25:cc:3b:d7:ba:92: f7:56:55:bb:fe:43:a4:9c:11:46:22:9d:1b:b0:a4:fc:33:89: 43:8c:a3:4d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjMwNjIyMTc0NTQyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk0ODhjNi1jOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2B+wzKdgmXMVEjWPbWNTmQrMQV67WCmE735g9cabt2boCd821xs20tIGyocm 5yENmINnnamGzkA2wWOHmOaNuXPnXGqM11dmwvOTHYo437mkJ16nhI65bVB+BuZR kFCBfik7dTDXQbW+AI5qhUuZGrdLj/s57QJb9A9UXtV8ILpKwSJ3m3y102yWtySO RHqL9KAANLa6/PJVkDuTjYGegHWLRam0DFFTRPOmqVIH43FAkg6mraSBUQqb/N9+ 5vSkA5DTVuPpYeFUsVNfBCEBW28LNwf1mXQqL3Hc4us5IIyCdZJ/fS/XPLrkNCUe mepcbIt+5uGlEFHDhJMd7V0eKwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLzoK0yB gcZ8w5WY0pbiivMwKEzHMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvM0JFMEU4NjJG MkJFMTFFQThFRTYwODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAtQIoDBABnE/4wDQYJKoZIhvcNAQELBQADggEBAHKSKLOl 4sxe+WZtEKFrSC8/f9UD+Bvia+CeKm94jdu0H5Bx45Kksb5J0WgTCqfqHKitJxA5 HfZaRWUEAFHIm9gzKWG2CCRfzXNoSthU/PZJ9IX3wMwwMxl2Yj8EvaGXNqu88VYb AClrI/HF0ux5QVfK8aq8GcK9aC9X64qMPnH3kjCJ4+rjHblUysCKKX6qMwx7ZS7q FU0MRzK1MAM8BfVLNiIyDA8JMVwNQNAheusYtyBwsUtGFLqO75+KuMNvZIEOUiRT cgsZ0tTCIuHrtfsnjthwkLA8QMOqUtf9vPSM4BfxLCXMO9e6kvdWVbv+Q6ScEUYi nRuwpPwziUOMo00= -----END CERTIFICATE-----Generated at Sat Nov 25 19:49:29 2023 by rpki-client on console-fra.rpki-client.org