$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/24F4E436A10211EABCED8740C4F9AE02.roa File: 24F4E436A10211EABCED8740C4F9AE02.roa (raw, json) Hash identifier: j8mK/suJ/TUYMAqiiAozAOPU1XUKmajmZ+Hv6gWzSHM= Subject key identifier: E7:82:3F:C3:B0:34:BD:32:5B:56:7A:0C:02:E6:0F:B5:92:91:AB:DE Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 08DE Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/24F4E436A10211EABCED8740C4F9AE02.roa Signing time: Wed 20 Dec 2023 16:43:33 +0000 ROA not before: Wed 20 Dec 2023 16:43:33 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 9988 IP address blocks: 45.41.100.0/22 maxlen: 24 45.41.104.0/21 maxlen: 24 45.41.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Dec 20 16:43:33 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658319b5-de34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:e8:53:2a:25:c4:a5:71:f5:11:fe:94:15: 59:7c:00:34:04:d5:c6:bd:15:cb:f1:93:1b:aa:8d: 30:10:82:12:a5:9f:18:74:9a:0d:e9:3d:a0:21:56: a6:4f:61:00:84:8e:4a:0a:44:62:47:7d:7f:ec:a0: 46:78:ae:4d:dd:93:07:c8:b2:09:88:71:0c:7b:f5: 68:5c:66:65:75:23:1a:54:4c:02:1b:78:9a:c1:4e: 42:45:fc:af:2d:0a:25:ef:c4:b4:5f:3d:77:34:6f: 46:a6:82:7c:23:b0:ae:1f:ce:f0:12:0f:9c:9c:17: 8c:c0:17:57:74:de:2b:aa:f3:a7:44:9b:ef:7e:ea: 5d:e2:03:e5:a6:bb:d1:30:94:5b:f2:57:3c:c0:66: 52:95:89:29:7c:35:6a:c2:6c:19:5f:e8:87:07:1d: 63:d3:5d:95:08:d5:b7:0c:04:a0:86:6d:f3:80:4d: f4:fd:73:e3:53:6e:af:e9:30:c5:5c:0c:e6:37:07: 7d:db:ea:0c:fe:92:6f:d3:1d:30:59:dd:91:ca:5e: b6:f0:e3:71:37:64:75:a5:f1:1b:0a:13:31:f5:dc: 84:05:ab:60:44:54:c5:ac:20:2a:19:73:2c:24:d3: e7:ec:d1:18:ce:49:a5:b0:0a:48:9b:c9:6d:d0:9a: 50:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:82:3F:C3:B0:34:BD:32:5B:56:7A:0C:02:E6:0F:B5:92:91:AB:DE X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/24F4E436A10211EABCED8740C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.41.100.0-45.41.127.255 Signature Algorithm: sha256WithRSAEncryption 82:c0:12:f6:1b:8c:67:da:27:b1:c5:a4:f2:93:58:c0:41:25: 1b:4e:37:bf:95:0d:06:b7:c7:1b:1a:81:9a:e7:c7:cb:7b:49: 01:16:32:f2:9d:3d:0b:35:fd:f9:5c:47:eb:d5:f9:1e:42:56: 6d:e0:cf:28:33:61:e1:c2:54:ee:6a:4d:b1:18:16:2c:96:bb: bb:39:dc:72:00:17:34:02:5b:ca:8f:fd:50:82:3e:38:5b:2c: 78:04:85:e1:df:29:39:41:6e:24:e1:4e:3d:77:f4:10:84:14: d1:ac:80:ee:57:1b:4a:25:95:bd:e0:85:6b:01:ee:00:49:9e: cc:15:bf:0b:d6:d8:36:30:dc:d4:d9:35:36:47:13:d1:6c:d9: 16:6b:a2:2e:78:cf:88:9a:1b:87:1b:33:0b:96:1c:8a:88:b9: 26:e5:93:64:67:a6:2d:83:2c:f3:bf:7e:c2:b6:c7:f4:e8:74: b2:a5:5b:f5:c6:24:43:f2:2c:f3:8d:e0:3b:c4:a2:2e:98:65: 57:1f:f2:76:22:a1:eb:16:60:a1:d6:6d:10:a7:cf:a1:9b:e9: ff:df:0f:44:22:86:89:81:ce:c3:a8:d0:41:11:30:65:c2:46: df:0c:d5:19:fb:87:8d:71:8f:e6:50:ad:8e:4c:f7:e1:56:ff: 24:d0:a8:e7 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjMxMjIwMTY0MzMzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgzMTliNS1kZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00foUyolxKVx9RH+lBVZfAA0BNXGvRXL8ZMbqo0wEIISpZ8YdJoN6T2gIVam T2EAhI5KCkRiR31/7KBGeK5N3ZMHyLIJiHEMe/VoXGZldSMaVEwCG3iawU5CRfyv LQol78S0Xz13NG9GpoJ8I7CuH87wEg+cnBeMwBdXdN4rqvOnRJvvfupd4gPlprvR MJRb8lc8wGZSlYkpfDVqwmwZX+iHBx1j012VCNW3DASghm3zgE30/XPjU26v6TDF XAzmNwd92+oM/pJv0x0wWd2Ryl628ONxN2R1pfEbChMx9dyEBatgRFTFrCAqGXMs JNPn7NEYzkmlsApIm8lt0JpQZwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFOeCP8Ow NL0yW1Z6DALmD7WSkaveMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODFFQUEvMDc3RkNEQjQ3RUQyMTFFQTlFQjhENTc5QzRGOUFFMDIvMjRGNEU0MzZB MTAyMTFFQUJDRUQ4NzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAi0pZAMEBy0pADANBgkqhkiG9w0BAQsFAAOCAQEAgsAS 9huMZ9onscWk8pNYwEElG043v5UNBrfHGxqBmufHy3tJARYy8p09CzX9+VxH69X5 HkJWbeDPKDNh4cJU7mpNsRgWLJa7uznccgAXNAJbyo/9UII+OFsseASF4d8pOUFu JOFOPXf0EIQU0ayA7lcbSiWVveCFawHuAEmezBW/C9bYNjDc1Nk1NkcT0WzZFmui LnjPiJobhxszC5Ycioi5JuWTZGemLYMs879+wrbH9Oh0sqVb9cYkQ/Is843gO8Si LphlVx/ydiKh6xZgodZtEKfPoZvp/98PRCKGiYHOw6jQQREwZcJG3wzVGfuHjXGP 5lCtjkz34Vb/JNCo5w== -----END CERTIFICATE-----Generated at Fri May 31 17:44:25 2024 by rpki-client on console-fra.rpki-client.org