$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54B0F400FE3911EA8CBCF925C4F9AE02.roa File: 54B0F400FE3911EA8CBCF925C4F9AE02.roa (raw, json) Hash identifier: ItfgoVpj68KhQljNRptWHY//n6CM+TTs2UDzoQB/Gz0= Subject key identifier: 4C:73:25:B6:A4:FC:54:7F:F9:89:3E:9E:55:41:C3:40:9D:6D:1A:7D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 886D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54B0F400FE3911EA8CBCF925C4F9AE02.roa Signing time: Thu 30 May 2024 15:54:29 +0000 ROA not before: Thu 30 May 2024 15:54:29 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132568 IP address blocks: 45.120.16.0/22 maxlen: 22 45.120.16.0/24 maxlen: 24 45.120.17.0/24 maxlen: 24 45.120.18.0/24 maxlen: 24 45.120.19.0/24 maxlen: 24 103.24.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34925 (0x886d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 15:54:29 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a135-ca74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:4d:09:13:06:5e:87:d0:bf:dc:05:5b:79: 0f:07:29:b6:9c:ce:04:9d:fe:4d:1e:73:6c:9d:37: c6:41:0a:8b:d9:cd:1c:3c:d4:78:11:7d:19:d3:c2: b8:11:d0:1a:d3:1d:35:70:ea:a3:5e:3a:32:bc:e7: 8d:40:fc:28:6c:74:7a:5a:e8:69:bd:70:c9:f4:f5: e4:4c:a1:6d:2b:b9:ab:22:6a:c8:0e:88:05:c5:9c: 57:7e:d7:57:2a:fb:5f:fc:05:f3:05:a5:63:5c:ef: 5f:99:c7:64:82:53:79:10:a9:0f:6d:a0:ff:14:0e: 57:e3:c4:ef:30:66:41:90:3e:d8:bb:07:a4:6a:7b: 93:bb:44:1f:88:19:f4:fa:d3:31:7f:27:4b:37:a3: 30:34:31:b9:4b:98:d5:e1:79:d4:d0:c8:da:57:95: 5e:8f:02:fd:85:e6:e4:c7:22:36:4b:7b:5a:8d:87: 29:34:ca:52:40:61:a3:8e:4d:5e:d0:82:3a:52:89: 69:53:fd:b9:50:53:78:c3:ff:ad:9b:fa:b0:08:40: e0:ab:d5:76:a1:41:56:08:13:93:95:5e:70:cc:a1: 93:aa:ba:c6:78:83:93:73:b5:97:b1:99:80:fa:2a: 5f:ef:a5:07:66:86:c9:8a:21:32:ba:7c:c5:3b:0e: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:25:B6:A4:FC:54:7F:F9:89:3E:9E:55:41:C3:40:9D:6D:1A:7D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/54B0F400FE3911EA8CBCF925C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.16.0/22 103.24.108.0/22 Signature Algorithm: sha256WithRSAEncryption 53:52:c8:aa:1c:fa:3a:8d:fe:f7:3a:e1:f3:9f:be:d6:e9:f5: d4:18:7b:ee:c8:a4:07:05:fe:d4:70:19:0b:08:7d:05:81:b9: 78:91:95:92:2b:4d:78:c0:2d:1e:32:72:64:63:c4:e2:a1:d6: b9:38:8c:45:78:25:af:52:ae:be:28:6d:f2:b8:77:28:16:51: 5f:13:68:4d:4a:e5:87:e9:a5:8f:b3:56:b8:06:24:65:3f:9e: 73:8f:47:db:fa:5a:d7:c5:8a:d0:02:9f:d0:16:c8:35:37:ec: 54:fe:30:1c:6a:d4:aa:38:36:7e:3b:87:5e:a8:6c:57:92:43: 86:f0:48:0d:6f:06:bd:3a:f9:20:51:53:00:2b:ec:9a:f4:59: 63:23:c8:57:06:8d:57:2a:be:f3:91:fb:23:ea:0a:05:0c:2e: 56:26:14:73:ff:a4:a4:ef:3d:70:d2:d4:3f:fa:09:46:c7:25: 9d:ae:be:c5:51:1f:5c:13:15:72:71:f1:f5:27:c5:0b:a7:04: a5:6d:eb:a9:6d:a7:aa:c7:a6:bd:fd:da:41:45:17:3c:dc:51: 9d:60:60:d0:ef:9b:3a:b3:2d:aa:ba:4d:3e:5a:96:6b:0a:66: c5:5a:29:f9:59:c8:11:81:f5:fb:41:90:17:e8:20:d0:be:0a: 19:56:80:e8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAIhtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTQyOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGExMzUtY2E3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1pTQkTBl6H0L/cBVt5DwcptpzOBJ3+TR5zbJ03xkEKi9nNHDzUeBF9GdPC uBHQGtMdNXDqo146MrznjUD8KGx0elroab1wyfT15EyhbSu5qyJqyA6IBcWcV37X Vyr7X/wF8wWlY1zvX5nHZIJTeRCpD22g/xQOV+PE7zBmQZA+2LsHpGp7k7tEH4gZ 9PrTMX8nSzejMDQxuUuY1eF51NDI2leVXo8C/YXm5MciNkt7Wo2HKTTKUkBho45N XtCCOlKJaVP9uVBTeMP/rZv6sAhA4KvVdqFBVggTk5VecMyhk6q6xniDk3O1l7GZ gPoqX++lB2aGyYohMrp8xTsOROMCAwEAAaOCApswggKXMB0GA1UdDgQWBBRMcyW2 pPxUf/mJPp5VQcNAnW0afTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU0QjBGNDAw RkUzOTExRUE4Q0JDRjkyNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCLXgQAwQCZxhsMA0GCSqGSIb3DQEBCwUAA4IBAQBTUsiq HPo6jf73OuHzn77W6fXUGHvuyKQHBf7UcBkLCH0Fgbl4kZWSK014wC0eMnJkY8Ti oda5OIxFeCWvUq6+KG3yuHcoFlFfE2hNSuWH6aWPs1a4BiRlP55zj0fb+lrXxYrQ Ap/QFsg1N+xU/jAcatSqODZ+O4deqGxXkkOG8EgNbwa9OvkgUVMAK+ya9FljI8hX Bo1XKr7zkfsj6goFDC5WJhRz/6Sk7z1w0tQ/+glGxyWdrr7FUR9cExVycfH1J8UL pwSlbeupbaeqx6a9/dpBRRc83FGdYGDQ75s6sy2quk0+WpZrCmbFWin5WcgRgfX7 QZAX6CDQvgoZVoDo -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:13 2024 by rpki-client on console-ams.rpki-client.org