$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1A54CB6451011EB98A5D431C4F9AE02.roa File: F1A54CB6451011EB98A5D431C4F9AE02.roa (raw, json) Hash identifier: hRAeeil+bnQkDpyKvFJX7mGXDCuZQOmy9ym7LmwEreM= Subject key identifier: D5:AA:4C:36:D8:B0:A0:C0:A6:23:6B:2B:8E:D9:B4:DE:F9:F7:01:21 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8AB3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1A54CB6451011EB98A5D431C4F9AE02.roa Signing time: Thu 30 May 2024 16:04:06 +0000 ROA not before: Thu 30 May 2024 16:04:06 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135846 IP address blocks: 45.124.140.0/24 maxlen: 24 45.124.141.0/24 maxlen: 24 45.124.142.0/24 maxlen: 24 45.124.143.0/24 maxlen: 24 103.51.136.0/24 maxlen: 24 103.51.137.0/24 maxlen: 24 103.51.139.0/24 maxlen: 24 103.217.131.0/24 maxlen: 24 2001:df5:d280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35507 (0x8ab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:04:06 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a376-8303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:33:f4:1a:39:f1:9a:ba:fe:7b:1b:a1:72: 06:2a:f4:82:fb:e1:20:0d:70:93:0b:15:f9:0a:0e: ac:59:2f:6d:b9:fc:26:ea:79:df:8b:ad:66:bd:d1: 06:76:42:b2:bf:1c:a6:50:47:1b:8c:30:e6:ec:d7: d3:43:c2:7a:e5:15:76:27:e0:55:34:13:da:fc:c1: 30:2f:0a:5e:19:bd:f9:21:f0:4c:a6:42:47:3f:0a: 41:8f:78:56:fd:5c:c2:ac:c4:66:1d:c1:42:00:09: 42:2c:43:3b:fe:c1:1e:d8:7a:4f:65:17:4b:df:74: 30:30:66:d5:19:63:a6:05:cf:07:7e:af:d0:1e:20: ba:0e:6e:68:2f:25:90:2d:f3:90:a8:cb:f6:24:97: 53:44:77:80:b1:06:7e:9d:6f:19:5e:21:10:c3:ef: ce:f2:4a:8b:da:56:19:3f:aa:1b:dd:15:cc:17:71: 0b:7c:45:2e:ab:f1:f6:01:eb:0e:6b:6d:50:5e:8b: 92:9c:67:89:2f:76:d5:09:95:d2:9a:cb:86:39:c0: 40:95:13:4f:78:78:b1:c6:04:ec:08:61:dc:e4:13: 35:5f:64:73:f4:fa:35:a3:f1:2f:dd:c6:85:47:45: fa:46:5c:d3:65:c3:71:36:0a:cd:40:2c:38:d7:d7: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AA:4C:36:D8:B0:A0:C0:A6:23:6B:2B:8E:D9:B4:DE:F9:F7:01:21 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1A54CB6451011EB98A5D431C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.124.140.0/22 103.51.136.0/23 103.51.139.0/24 103.217.131.0/24 IPv6: 2001:df5:d280::/48 Signature Algorithm: sha256WithRSAEncryption 32:46:0f:92:28:4c:e8:fe:f2:2f:12:af:57:96:40:5b:f8:22: b9:32:a9:69:4d:29:ea:b9:ce:f9:0e:33:b2:02:a6:21:45:de: 49:f1:14:dd:29:81:11:06:33:f2:ce:94:cc:31:de:49:92:09: 3a:a3:dd:9e:ca:26:8d:23:9c:ad:9d:5e:98:24:bc:40:9c:83: a9:bd:67:5c:a4:7e:ff:9e:df:d7:03:bc:17:d8:ee:d9:08:0a: 2c:40:0a:a7:5f:f5:82:d9:4d:eb:a3:10:f7:56:9f:9b:22:ad: a0:be:32:62:8a:6f:3e:62:dd:30:0e:41:2b:2b:31:75:bb:cb: a5:f5:31:0e:f3:d0:57:8d:ec:ae:a2:f7:9f:a1:58:85:49:ba: b2:e9:71:1c:6a:98:f0:4a:b7:58:72:82:35:57:e1:ce:3e:49: 5c:95:13:31:8b:8d:e7:83:66:9b:b7:67:b8:b8:41:6b:c3:cf: 83:52:88:c5:eb:ce:92:b8:c2:60:eb:25:30:02:73:20:e5:5b: da:18:01:c8:10:da:32:98:79:d9:99:82:48:c6:5a:54:3c:d0: 1b:ba:a0:e8:ad:7e:02:e0:05:56:93:37:23:a4:33:57:fb:f5: c9:6e:1c:e1:3c:78:20:be:32:c8:d4:50:57:0a:99:e9:34:b1: d7:17:d6:55 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIDAIqzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDQwNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzNzYtODMwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALA4M/QaOfGauv57G6FyBir0gvvhIA1wkwsV+QoOrFkvbbn8Jup534utZr3R BnZCsr8cplBHG4ww5uzX00PCeuUVdifgVTQT2vzBMC8KXhm9+SHwTKZCRz8KQY94 Vv1cwqzEZh3BQgAJQixDO/7BHth6T2UXS990MDBm1RljpgXPB36v0B4gug5uaC8l kC3zkKjL9iSXU0R3gLEGfp1vGV4hEMPvzvJKi9pWGT+qG90VzBdxC3xFLqvx9gHr DmttUF6LkpxniS921QmV0prLhjnAQJUTT3h4scYE7Ahh3OQTNV9kc/T6NaPxL93G hUdF+kZc02XDcTYKzUAsONfX7nECAwEAAaOCArgwggK0MB0GA1UdDgQWBBTVqkw2 2LCgwKYjayuO2bTe+fcBITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YxQTU0Q0I2 NDUxMDExRUI5OEE1RDQzMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEIGCCsGAQUFBwEHAQH/ BDMwMTAeBAIAATAYAwQCLXyMAwQBZzOIAwQAZzOLAwQAZ9mDMA8EAgACMAkDBwAg AQ310oAwDQYJKoZIhvcNAQELBQADggEBADJGD5IoTOj+8i8Sr1eWQFv4IrkyqWlN Keq5zvkOM7ICpiFF3knxFN0pgREGM/LOlMwx3kmSCTqj3Z7KJo0jnK2dXpgkvECc g6m9Z1ykfv+e39cDvBfY7tkICixACqdf9YLZTeujEPdWn5siraC+MmKKbz5i3TAO QSsrMXW7y6X1MQ7z0FeN7K6i95+hWIVJurLpcRxqmPBKt1hygjVX4c4+SVyVEzGL jeeDZpu3Z7i4QWvDz4NSiMXrzpK4wmDrJTACcyDlW9oYAcgQ2jKYedmZgkjGWlQ8 0Bu6oOitfgLgBVaTNyOkM1f79cluHOE8eCC+MsjUUFcKmek0sdcX1lU= -----END CERTIFICATE-----Generated at Fri Nov 22 11:48:05 2024 by rpki-client on console-ams.rpki-client.org