$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/EC1B43EA393111EAA1873746C4F9AE02.roa File: EC1B43EA393111EAA1873746C4F9AE02.roa (raw, json) Hash identifier: Y0EM4nVx89ALOhivHGftrwgrUhr1wVTyBxxxQkHeseM= Subject key identifier: 27:7A:5A:D5:32:8A:4D:74:FB:41:BA:CF:DC:26:15:3E:3C:FA:21:70 Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Certificate serial: 1BEC Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/EC1B43EA393111EAA1873746C4F9AE02.roa Signing time: Thu 31 Oct 2024 16:23:41 +0000 ROA not before: Thu 31 Oct 2024 16:23:41 +0000 ROA not after: Sat 01 Mar 2025 00:00:00 +0000 asID: 45773 IP address blocks: 45.64.24.0/22 maxlen: 24 103.4.92.0/22 maxlen: 24 111.68.96.0/20 maxlen: 24 121.52.144.0/20 maxlen: 24 2400:fc00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7148 (0x1bec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Validity Not Before: Oct 31 16:23:41 2024 GMT Not After : Mar 1 00:00:00 2025 GMT Subject: CN=6723af0d-2d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b7:64:7b:8f:1a:ac:56:7d:f4:e1:48:49:97: d5:6b:98:49:3b:f9:06:32:2d:7c:d0:5a:7b:b2:f5: 3f:70:71:6d:1a:a6:36:6f:88:50:69:33:bb:0f:d6: 0f:24:82:98:f2:2b:62:b3:4d:2b:d5:63:8e:a8:3b: 6e:c3:c1:6a:e2:b0:99:b7:0e:27:54:65:e2:67:71: c5:d4:23:5c:f4:2b:81:46:25:82:52:e0:a6:fa:e9: 3d:2b:3f:1f:00:d8:8b:74:84:0b:ee:17:75:b0:bb: 27:c8:bd:9c:8b:92:69:c5:2f:34:d7:a0:a5:c9:f2: ae:8c:d2:52:dd:2d:b8:60:d8:dd:44:3d:15:e0:f7: df:77:41:6a:6f:6d:3d:3c:f0:eb:0c:81:cb:11:72: 7a:83:04:d1:ee:59:cc:81:e0:dd:aa:f1:e5:ff:85: 59:35:b1:f8:3d:29:85:45:5a:d1:a7:46:6d:89:62: 6c:68:36:f7:e1:50:4c:83:ec:88:be:18:7d:63:82: a8:ad:0d:1f:e2:12:88:17:2d:9b:6e:65:fd:9b:c4: de:f5:28:80:15:51:cd:90:99:f5:13:36:fc:c3:64: 6d:69:a9:58:e1:fa:2a:21:57:db:83:b5:50:5f:a0: 09:09:d1:df:bf:d6:64:9a:3a:da:8c:8a:f0:f3:ea: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7A:5A:D5:32:8A:4D:74:FB:41:BA:CF:DC:26:15:3E:3C:FA:21:70 X509v3 Authority Key Identifier: keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/EC1B43EA393111EAA1873746C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.24.0/22 103.4.92.0/22 111.68.96.0/20 121.52.144.0/20 IPv6: 2400:fc00::/32 Signature Algorithm: sha256WithRSAEncryption 76:ce:f8:af:40:a2:f0:50:88:fe:a3:21:63:fc:b9:b0:f5:a3: 58:bc:c7:c9:0f:e8:c6:27:69:b3:49:18:cc:90:46:81:e6:d2: 3f:42:60:fb:64:45:4c:62:2a:e7:9d:ca:a2:a5:09:f6:44:d8: 5c:cd:d7:f6:75:8d:d4:61:2b:d6:da:d3:ff:03:b3:79:04:4b: e8:09:fb:0b:e7:63:38:b4:24:42:76:8c:c7:e3:9a:3a:3a:70: c9:2b:31:57:19:77:dc:03:bf:18:85:cd:10:25:78:64:0b:b0: d2:e8:7d:64:d7:5d:a6:73:99:d6:eb:a4:56:ce:6e:58:13:9d: 63:85:2b:19:18:ce:f4:42:64:e9:89:39:11:34:e4:47:a0:25: c4:5e:31:b1:0b:81:61:87:7c:7a:f0:ed:f6:c3:14:00:92:2f: fe:97:d1:54:b0:19:2f:6c:eb:9d:95:b3:21:97:02:78:1c:13: 3b:80:dd:84:8f:ef:02:d0:49:48:c6:97:50:83:38:32:c4:21: 12:51:d9:a8:b9:00:08:29:3e:26:8e:3f:73:a8:44:dd:97:56: c3:fe:3e:f2:14:14:09:52:fc:4a:15:c0:54:2d:fe:4c:f0:e4: cf:61:1d:9e:c7:b0:1d:89:a1:4d:11:39:5c:6c:d0:08:7c:c5: 22:fa:ba:ed -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICG+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcwRkExMTAvBgNVBAUTKDM2Mzk1MkI3RjQxNzgyMDYwOTMwMEFFODkxNDgxMjE4 NEI4RkMzREMwHhcNMjQxMDMxMTYyMzQxWhcNMjUwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIzYWYwZC0yZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Ldke48arFZ99OFISZfVa5hJO/kGMi180Fp7svU/cHFtGqY2b4hQaTO7D9YP JIKY8itis00r1WOOqDtuw8Fq4rCZtw4nVGXiZ3HF1CNc9CuBRiWCUuCm+uk9Kz8f ANiLdIQL7hd1sLsnyL2ci5JpxS8016ClyfKujNJS3S24YNjdRD0V4Pffd0Fqb209 PPDrDIHLEXJ6gwTR7lnMgeDdqvHl/4VZNbH4PSmFRVrRp0ZtiWJsaDb34VBMg+yI vhh9Y4KorQ0f4hKIFy2bbmX9m8Te9SiAFVHNkJn1Ezb8w2RtaalY4foqIVfbg7VQ X6AJCdHfv9ZkmjrajIrw8+rafwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFCd6WtUy ik10+0G6z9wmFT48+iFwMB8GA1UdIwQYMBaAFDY5Urf0F4IGCTAK6JFIEhhLj8Pc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzBGQS82NEZCN0UxQ0Uz QTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdnWUpNQXJva1VnU0dFdVB3 OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05qbFN0X1FYZ2dZSk1Bcm9rVWdTR0V1UHc5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcwRkEvNjRGQjdFMUNFM0E3MTFFNkE1QjIwMTc4QzRGOUFFMDIvRUMxQjQzRUEz OTMxMTFFQUExODczNzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAItQBgDBAJnBFwDBARvRGADBAR5NJAwDQQCAAIwBwMFACQA /AAwDQYJKoZIhvcNAQELBQADggEBAHbO+K9AovBQiP6jIWP8ubD1o1i8x8kP6MYn abNJGMyQRoHm0j9CYPtkRUxiKuedyqKlCfZE2FzN1/Z1jdRhK9ba0/8Ds3kES+gJ +wvnYzi0JEJ2jMfjmjo6cMkrMVcZd9wDvxiFzRAleGQLsNLofWTXXaZzmdbrpFbO blgTnWOFKxkYzvRCZOmJORE05EegJcReMbELgWGHfHrw7fbDFACSL/6X0VSwGS9s 652VsyGXAngcEzuA3YSP7wLQSUjGl1CDODLEIRJR2ai5AAgpPiaOP3OoRN2XVsP+ PvIUFAlS/EoVwFQt/kzw5M9hHZ7HsB2JoU0ROVxs0Ah8xSL6uu0= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org