$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91A151AA4EB711ECB3446372C4F9AE02.roa File: 91A151AA4EB711ECB3446372C4F9AE02.roa (raw, json) Hash identifier: aV3SWAP1odDDYBEMaGvr/xjXShee1y0K3p4Uqicd5/M= Subject key identifier: C7:11:FD:E5:7E:65:92:A4:A5:33:72:C9:74:55:69:A1:D3:E0:64:4C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8A39 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91A151AA4EB711ECB3446372C4F9AE02.roa Signing time: Thu 30 May 2024 16:02:06 +0000 ROA not before: Thu 30 May 2024 16:02:06 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135256 IP address blocks: 45.248.188.0/22 maxlen: 24 103.217.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35385 (0x8a39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:02:06 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a2fe-faf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d7:db:2f:bc:47:da:e4:d5:67:20:4b:62:14: 5c:b1:46:5e:71:c9:85:74:15:04:a9:87:2e:91:52: 3e:2c:11:1f:9e:7c:ce:39:fe:9d:ea:cd:e7:63:d6: 80:3f:4e:da:d4:63:96:f0:68:6b:eb:ed:dc:42:56: 0d:23:ef:73:f5:b3:eb:a4:55:b9:a0:22:b6:12:7e: 3e:d4:22:af:f1:04:55:c2:ba:1d:e6:78:6e:e4:86: e2:75:92:d3:0d:f3:eb:22:f9:de:ed:ee:68:be:8a: 85:a8:00:73:20:b7:9c:71:3e:86:4f:83:fa:7c:6c: 7b:9d:b2:48:7c:6b:85:96:7b:c6:cb:9e:60:0f:4d: c1:4c:5a:71:bd:42:fb:31:98:c9:ad:fc:f5:12:f7: 96:ab:8a:d4:19:25:b2:25:f0:f8:eb:db:72:ac:65: da:c1:ce:e3:d2:20:92:e0:79:9f:ed:32:eb:e3:43: 83:d9:c8:8a:f2:20:27:7c:a9:bd:5e:ba:e5:b4:b9: 2a:71:b9:c5:cc:1c:40:c1:7d:38:10:20:e4:6b:60: 91:4e:9e:42:65:ee:fc:4e:bb:56:82:85:b7:b8:85: 95:07:d0:6d:50:0b:6f:12:35:6d:84:0e:1b:bf:64: 94:0a:2a:4a:9d:8b:51:85:05:76:5c:cd:d2:6f:e8: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:11:FD:E5:7E:65:92:A4:A5:33:72:C9:74:55:69:A1:D3:E0:64:4C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91A151AA4EB711ECB3446372C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.248.188.0/22 103.217.148.0/22 Signature Algorithm: sha256WithRSAEncryption 80:af:ce:da:20:3d:74:7f:fe:f6:74:10:4c:78:2d:97:9c:15: 09:bb:8e:a9:d0:e0:bd:d7:cd:c0:cf:4a:3a:89:57:e2:0c:8f: 5c:73:c5:96:d7:bd:4a:81:1a:81:1e:24:cf:eb:34:2f:96:7a: 12:72:f4:ec:f2:c8:4c:33:ff:81:79:4f:5c:d1:45:35:58:4d: a8:c9:9a:ce:b5:23:87:5c:b3:7e:9b:58:3e:c1:9f:d5:f3:fc: 98:e9:42:27:f7:54:33:db:4e:7e:67:8f:8f:8c:c2:28:7b:3f: 04:b3:9d:d2:35:46:12:fd:be:84:ad:9a:c2:2d:b8:39:8b:10: 64:d1:48:75:78:77:d6:e1:76:35:ec:d5:5d:dc:aa:de:8f:01: b4:43:1a:32:f6:73:b8:0d:5d:a4:ca:e0:ad:86:83:f2:62:1b: 07:4f:ee:36:9d:98:6b:c4:41:e8:00:2a:d8:6e:ca:3d:34:d4: 64:9a:cc:c9:0f:74:36:64:8a:50:5a:79:f8:63:4c:b2:9b:88: 4d:da:10:e3:e8:05:00:c3:77:34:73:45:c7:92:94:68:d5:00: 63:b7:a3:1c:23:ee:9d:8c:3a:64:6f:6c:12:7d:62:99:b5:0e: 8f:ba:a6:11:b7:0c:99:bc:1d:40:a3:e3:ca:01:87:7a:65:7e: c3:72:15:ae -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAIo5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDIwNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyZmUtZmFmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObX2y+8R9rk1WcgS2IUXLFGXnHJhXQVBKmHLpFSPiwRH558zjn+nerN52PW gD9O2tRjlvBoa+vt3EJWDSPvc/Wz66RVuaAithJ+PtQir/EEVcK6HeZ4buSG4nWS 0w3z6yL53u3uaL6KhagAcyC3nHE+hk+D+nxse52ySHxrhZZ7xsueYA9NwUxacb1C +zGYya389RL3lquK1BklsiXw+Ovbcqxl2sHO49IgkuB5n+0y6+NDg9nIivIgJ3yp vV665bS5KnG5xcwcQMF9OBAg5GtgkU6eQmXu/E67VoKFt7iFlQfQbVALbxI1bYQO G79klAoqSp2LUYUFdlzN0m/oT+cCAwEAAaOCApswggKXMB0GA1UdDgQWBBTHEf3l fmWSpKUzcsl0VWmh0+BkTDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkxQTE1MUFB NEVCNzExRUNCMzQ0NjM3MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCLfi8AwQCZ9mUMA0GCSqGSIb3DQEBCwUAA4IBAQCAr87a ID10f/72dBBMeC2XnBUJu46p0OC9183Az0o6iVfiDI9cc8WW171KgRqBHiTP6zQv lnoScvTs8shMM/+BeU9c0UU1WE2oyZrOtSOHXLN+m1g+wZ/V8/yY6UIn91Qz205+ Z4+PjMIoez8Es53SNUYS/b6ErZrCLbg5ixBk0Uh1eHfW4XY17NVd3KrejwG0Qxoy 9nO4DV2kyuCthoPyYhsHT+42nZhrxEHoACrYbso9NNRkmszJD3Q2ZIpQWnn4Y0yy m4hN2hDj6AUAw3c0c0XHkpRo1QBjt6McI+6djDpkb2wSfWKZtQ6PuqYRtwyZvB1A o+PKAYd6ZX7DchWu -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:46 2024 by rpki-client on console-fra.rpki-client.org