$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa File: B70AE7D20C6B11EC82638A40C4F9AE02.roa (raw, json) Hash identifier: gTG9NiD62jvO4mx9eBXXwEWd8K9Md5xXTHjfxxr4LDI= Subject key identifier: 90:CD:78:A8:08:C9:D6:FC:03:9A:E7:1E:AC:29:81:42:EF:72:8C:93 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 26C0 Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa Signing time: Sat 28 Oct 2023 16:02:26 +0000 ROA not before: Sat 28 Oct 2023 16:02:26 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 132447 IP address blocks: 45.121.88.0/22 maxlen: 22 45.121.88.0/24 maxlen: 24 45.121.89.0/24 maxlen: 24 45.121.90.0/24 maxlen: 24 45.121.91.0/24 maxlen: 24 103.21.164.0/22 maxlen: 22 103.21.164.0/24 maxlen: 24 103.21.165.0/24 maxlen: 24 103.21.166.0/24 maxlen: 24 103.21.167.0/24 maxlen: 24 2405:6b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9920 (0x26c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Oct 28 16:02:26 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=653d3092-0198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1e:ed:ed:88:37:b9:98:56:ee:75:40:a6:14: 51:1d:5c:aa:14:b1:95:f6:2b:1b:c1:89:ae:be:08: b1:86:6f:1f:28:9c:17:e0:9d:4c:ab:ce:be:4a:76: cb:0f:cf:aa:36:69:42:8d:65:d5:d3:31:40:0d:bb: ce:15:05:82:75:8b:04:6d:a8:86:64:8c:89:a3:9b: 0e:2f:df:4a:66:cd:3a:04:97:f3:1e:d6:e6:27:ee: d2:8d:4c:96:09:42:11:e1:81:d9:04:cf:74:b4:aa: 1f:44:b1:53:22:06:cb:f4:a2:3e:4b:ec:b4:ce:b4: 87:52:ff:f0:e8:68:8c:6c:60:ab:3e:42:61:c7:c5: 79:2a:fa:cb:72:5d:4e:53:b5:50:c7:51:7a:26:ea: 00:29:6a:0a:0a:01:4b:5a:58:2f:53:c7:0a:a5:0b: 1c:8d:33:6e:2a:f2:82:d5:3a:b3:9e:27:94:61:a7: a4:63:9a:11:01:44:90:22:cc:0c:c5:f3:ca:5e:a5: 0d:dd:70:3e:52:04:05:55:53:20:8e:09:6f:94:05: dd:71:86:87:2e:d4:a6:6b:fa:05:bd:e9:dd:4d:42: f3:3a:f1:3d:6d:3a:d9:cb:61:b0:c0:f1:64:96:a7: be:b7:9f:35:65:ae:e7:16:1d:47:13:d1:1f:a9:04: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CD:78:A8:08:C9:D6:FC:03:9A:E7:1E:AC:29:81:42:EF:72:8C:93 X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.88.0/22 103.21.164.0/22 IPv6: 2405:6b00::/48 Signature Algorithm: sha256WithRSAEncryption 75:e8:9e:52:dd:fe:48:c8:a4:ec:c2:21:05:76:a5:71:91:71: f7:c7:0d:b7:3b:52:9b:5b:b9:0f:3c:db:ce:a5:8c:5f:a1:eb: f0:85:4b:18:ec:f3:f4:c7:08:f0:03:7e:31:1c:26:c0:06:ad: 7d:ef:8f:92:60:f2:1b:39:9f:91:60:67:66:3a:8d:f4:dc:2d: 1f:0a:f7:b0:68:1a:d5:74:aa:c1:e1:a7:93:9f:90:59:e0:30: 12:ab:5c:ae:be:b5:ec:f0:b3:b7:12:97:0f:6e:14:ac:79:03: 8e:bf:5a:9b:9d:f5:2d:3a:ad:b9:bc:d7:c8:d3:90:0d:28:e2: 7d:e1:11:a5:77:ef:f5:d0:13:02:36:44:28:82:73:62:dc:71: b5:a1:d7:48:6c:d2:85:6f:30:e8:5e:e4:cf:cd:c2:04:d3:73: cb:e8:19:3a:03:f4:58:25:55:9d:21:b2:0b:44:59:b6:a1:1f: cc:31:33:c1:09:1c:9c:64:fa:18:db:49:58:1a:96:8d:5d:44: e8:3f:33:97:d2:6c:57:f5:ff:db:72:7e:30:b7:08:01:42:d7: 31:04:7c:29:76:fd:a0:26:b5:ca:8c:da:b0:9b:96:60:05:a5: 5b:f4:d7:7c:ed:54:2a:1d:7f:a8:59:f7:a9:07:d2:4b:fb:ab: 26:eb:72:a0 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICJsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjMxMDI4MTYwMjI2WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNkMzA5Mi0wMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1R7t7Yg3uZhW7nVAphRRHVyqFLGV9isbwYmuvgixhm8fKJwX4J1Mq86+SnbL D8+qNmlCjWXV0zFADbvOFQWCdYsEbaiGZIyJo5sOL99KZs06BJfzHtbmJ+7SjUyW CUIR4YHZBM90tKofRLFTIgbL9KI+S+y0zrSHUv/w6GiMbGCrPkJhx8V5KvrLcl1O U7VQx1F6JuoAKWoKCgFLWlgvU8cKpQscjTNuKvKC1TqznieUYaekY5oRAUSQIswM xfPKXqUN3XA+UgQFVVMgjglvlAXdcYaHLtSma/oFvendTULzOvE9bTrZy2GwwPFk lqe+t581Za7nFh1HE9EfqQSvYQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJDNeKgI ydb8A5rnHqwpgULvcoyTMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNkIvNzUyNDRCNjJBMTYzMTFFNEI5NjZERDBGQzRGOUFFMDIvQjcwQUU3RDIw QzZCMTFFQzgyNjM4QTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIteVgDBAJnFaQwDwQCAAIwCQMHACQFawAAADANBgkqhkiG 9w0BAQsFAAOCAQEAdeieUt3+SMik7MIhBXalcZFx98cNtztSm1u5DzzbzqWMX6Hr 8IVLGOzz9McI8AN+MRwmwAatfe+PkmDyGzmfkWBnZjqN9NwtHwr3sGga1XSqweGn k5+QWeAwEqtcrr617PCztxKXD24UrHkDjr9am531LTqtubzXyNOQDSjifeERpXfv 9dATAjZEKIJzYtxxtaHXSGzShW8w6F7kz83CBNNzy+gZOgP0WCVVnSGyC0RZtqEf zDEzwQkcnGT6GNtJWBqWjV1E6D8zl9JsV/X/23J+MLcIAULXMQR8KXb9oCa1yoza sJuWYAWlW/TXfO1UKh1/qFn3qQfSS/urJutyoA== -----END CERTIFICATE-----Generated at Fri May 31 17:44:24 2024 by rpki-client on console-fra.rpki-client.org