$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/046130D225FC11EC9D57EA7CC4F9AE02.roa File: 046130D225FC11EC9D57EA7CC4F9AE02.roa (raw, json) Hash identifier: XhE6x9E/aZ957HcPZHgLlj7Fv56GEXE7hy1IWMNgX6M= Subject key identifier: D2:7E:0F:A6:52:A4:A6:63:6E:D3:12:26:1E:A7:17:C4:D7:7F:7E:63 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 074B Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/046130D225FC11EC9D57EA7CC4F9AE02.roa Signing time: Wed 04 Sep 2024 22:41:25 +0000 ROA not before: Wed 04 Sep 2024 22:41:25 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 138424 IP address blocks: 110.93.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B Validity Not Before: Sep 4 22:41:25 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d8e214-4176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:c5:e4:83:92:84:dc:54:a7:c3:ee:d3:14: 4d:d1:02:b4:1f:65:4f:6d:ee:c7:c5:ba:68:20:46: 2c:21:2c:a7:d7:56:ad:a0:f4:65:ef:b0:e8:32:77: 1b:6a:6d:0f:0f:5a:a4:e7:15:7b:eb:76:6c:02:1c: c0:04:56:c6:b7:a5:f5:a8:82:57:a9:c7:88:1c:3e: 2b:43:05:10:06:ba:cb:ee:00:26:b6:73:03:2c:3e: 59:53:4a:5c:6c:b9:db:fa:be:dc:76:83:a3:cd:89: 63:48:11:50:a1:8b:92:7c:78:47:22:1e:27:9f:71: 50:86:c1:11:67:e5:2b:3f:5a:13:ee:fc:16:f5:8e: 12:d6:09:f9:50:67:f0:ea:90:01:2f:88:6f:9d:89: 02:f7:3a:d9:c6:5b:33:8b:88:5d:c7:73:cf:ba:b0: 7a:c3:2d:a0:84:83:95:24:29:d7:87:b9:16:98:fa: a5:b1:d1:d6:49:c8:2f:1d:d6:d5:9b:45:d5:0b:2e: d4:3a:c3:32:f0:fa:be:b5:8c:39:4c:81:2a:47:f1: 62:e8:16:aa:f3:4f:7f:46:9b:70:49:ff:ee:86:47: 7d:7e:08:19:b6:ec:e8:29:02:a1:ca:a6:f4:6b:cf: 46:e3:22:eb:b8:bf:ee:2e:d0:c8:39:aa:04:b5:32: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7E:0F:A6:52:A4:A6:63:6E:D3:12:26:1E:A7:17:C4:D7:7F:7E:63 X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/046130D225FC11EC9D57EA7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.93.242.0/24 Signature Algorithm: sha256WithRSAEncryption 37:2d:7c:55:8a:92:8f:ae:f2:6d:6b:70:60:e3:11:fc:f6:e7: a3:fc:22:d2:14:4d:c8:3a:b6:1f:4a:31:cb:5b:07:cc:6f:d9: 6a:19:77:a9:9d:83:fc:e4:19:f7:fb:c1:aa:01:23:e1:da:34: 8d:aa:1f:5e:df:23:10:c1:2f:54:d1:a2:3b:3f:2b:42:f5:c3: 6f:10:68:12:23:49:3f:a4:2e:d3:60:8e:8e:d2:0d:ac:6d:16: ed:97:a6:83:d2:33:32:2a:a7:01:41:35:10:10:a7:00:66:5b: 9e:fc:42:ef:f5:49:77:55:95:24:1b:d0:7e:3b:6e:6c:52:61: cf:a6:99:be:39:59:0d:cf:f6:05:02:d4:1f:e8:45:26:83:60: 41:a3:c8:d6:f0:a8:42:1b:50:12:47:3a:ce:23:9a:a8:11:77: 6c:27:c3:51:15:f2:4e:f1:e1:3b:f8:3a:68:86:59:6a:ed:eb: dd:5c:ae:1a:44:10:6d:cf:b7:2f:31:16:ab:d9:0e:ef:78:2d: 2b:af:23:e5:3e:1b:3d:87:7e:16:af:26:b2:75:e2:98:a6:8f: e8:45:78:da:16:74:45:b7:73:fd:7b:13:a5:42:01:98:ce:8a: 6c:44:34:d8:c0:9e:3a:00:e5:bb:8a:b3:ad:3f:a4:f8:a1:42: 5e:ec:d4:b9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjQwOTA0MjI0MTI1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4ZTIxNC00MTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKTF5IOShNxUp8Pu0xRN0QK0H2VPbe7HxbpoIEYsISyn11atoPRl77DoMncb am0PD1qk5xV763ZsAhzABFbGt6X1qIJXqceIHD4rQwUQBrrL7gAmtnMDLD5ZU0pc bLnb+r7cdoOjzYljSBFQoYuSfHhHIh4nn3FQhsERZ+UrP1oT7vwW9Y4S1gn5UGfw 6pABL4hvnYkC9zrZxlszi4hdx3PPurB6wy2ghIOVJCnXh7kWmPqlsdHWScgvHdbV m0XVCy7UOsMy8Pq+tYw5TIEqR/Fi6Baq809/RptwSf/uhkd9fggZtuzoKQKhyqb0 a89G4yLruL/uLtDIOaoEtTLHdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNJ+D6ZS pKZjbtMSJh6nF8TXf35jMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvMDQ2MTMwRDIy NUZDMTFFQzlENTdFQTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABuXfIwDQYJKoZIhvcNAQELBQADggEBADctfFWKko+u8m1r cGDjEfz256P8ItIUTcg6th9KMctbB8xv2WoZd6mdg/zkGff7waoBI+HaNI2qH17f IxDBL1TRojs/K0L1w28QaBIjST+kLtNgjo7SDaxtFu2XpoPSMzIqpwFBNRAQpwBm W578Qu/1SXdVlSQb0H47bmxSYc+mmb45WQ3P9gUC1B/oRSaDYEGjyNbwqEIbUBJH Os4jmqgRd2wnw1EV8k7x4Tv4OmiGWWrt691crhpEEG3Pty8xFqvZDu94LSuvI+U+ Gz2HfhavJrJ14pimj+hFeNoWdEW3c/17E6VCAZjOimxENNjAnjoA5buKs60/pPih Ql7s1Lk= -----END CERTIFICATE-----Generated at Mon Apr 7 01:44:51 2025 by rpki-client