$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/A59FFB3EB7D711EF9ED0C324C4F9AE02.roa File: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (raw, json) Hash identifier: ko6zibH/Gh8JhBqwZ3M7VGiDwD5udZ8uVAs4re/9Ths= Subject key identifier: 69:9A:7C:B0:30:8C:81:74:AC:7F:7B:66:75:7A:72:2B:2D:6D:87:F0 Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 07 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/A59FFB3EB7D711EF9ED0C324C4F9AE02.roa Signing time: Wed 11 Dec 2024 15:50:30 +0000 ROA not before: Wed 11 Dec 2024 15:50:30 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 40310 IP address blocks: 45.248.140.0/24 maxlen: 24 45.248.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485 Validity Not Before: Dec 11 15:50:30 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6759b4c5-d071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:7e:dc:71:d0:e5:53:49:ff:84:ea:d2:33: 07:ec:5b:71:c3:9f:09:a6:c5:e3:24:5e:16:e5:0d: c2:f0:87:4d:f8:f8:d3:88:d0:1c:9d:61:82:9c:bb: 7f:40:12:7e:41:98:3e:3c:d0:c4:8d:6c:02:e4:ff: 95:2c:28:cc:b8:20:93:d2:5b:71:9c:d1:ce:11:90: a7:3e:ed:29:77:dc:32:43:f0:a9:8b:78:9c:21:2c: 29:9b:84:44:41:90:7b:04:27:b9:b8:80:ce:45:f1: 8f:89:c8:4b:fd:77:87:35:5a:e1:f0:c6:cd:8c:1f: 6d:f5:88:e4:5f:ad:15:26:2b:47:9f:ec:7b:cf:12: 91:e8:08:f2:51:b3:5f:74:dd:36:2c:55:f8:81:b1: 06:99:67:0e:77:ac:4e:83:03:af:59:ba:17:31:37: 29:aa:27:25:93:14:a4:a0:7c:67:22:34:66:ab:b5: c4:d1:56:6a:01:d6:cc:7b:8d:4e:b8:15:98:5b:0e: f6:ec:7c:f2:47:27:d7:08:34:09:28:6b:9c:85:cf: 35:f6:2d:82:d6:38:35:68:75:64:3c:e6:93:36:7a: 5e:a5:0a:1c:81:ca:fc:30:e1:58:ac:f4:01:4c:6f: 31:88:6f:d5:cf:49:a4:75:da:5e:10:44:1c:e8:09: ec:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9A:7C:B0:30:8C:81:74:AC:7F:7B:66:75:7A:72:2B:2D:6D:87:F0 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/A59FFB3EB7D711EF9ED0C324C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.248.140.0/24 45.248.142.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:05:b4:f7:4e:a9:0b:bb:ae:d5:54:d3:a9:3f:59:b2:57:fa: 32:cf:35:72:85:c4:bb:fb:44:2f:7d:2a:ae:05:1b:a4:68:90: 14:62:3f:83:19:ce:40:28:47:64:d1:9c:b6:3f:b7:a5:ac:0a: 27:0d:17:33:a7:ec:70:0e:d5:3c:44:5c:3e:14:0b:d8:f2:5a: 77:c8:9a:9b:47:e3:50:67:1a:bb:fb:a9:2a:a1:e7:7c:43:52: 36:d9:eb:4b:e5:cb:82:0d:09:30:22:91:7e:ab:9b:d6:7d:c0: f7:bf:1a:bf:e1:4b:c4:39:33:ee:d0:ff:6c:7d:09:0b:cf:02: 6f:9b:04:fe:7a:39:37:a0:14:49:3e:dc:5e:48:87:05:b9:49: b8:fe:4c:9d:d7:af:e4:b8:8b:0d:37:58:5a:4a:d9:d6:18:5a: a8:7f:74:8d:47:95:04:17:11:8b:1a:04:f7:82:17:ce:69:a7: 10:60:ff:88:e4:5f:54:ae:4c:6e:fa:ce:be:97:e1:ab:f7:d5: b6:31:eb:74:75:83:ac:8b:70:63:8b:d7:71:09:1f:d4:5a:9b: 70:ab:c9:20:3e:88:2b:af:cf:79:68:74:93:ec:2f:a5:63:b7: f9:43:15:5c:ef:48:9f:48:fd:a2:bd:b3:9a:7d:d2:72:17:be: 1f:26:be:16 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNDEyMTExNTUwMzBaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NTliNGM1LWQwNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZj37ccdDlU0n/hOrSMwfsW3HDnwmmxeMkXhblDcLwh034+NOI0BydYYKcu39A En5BmD480MSNbALk/5UsKMy4IJPSW3Gc0c4RkKc+7Sl33DJD8KmLeJwhLCmbhERB kHsEJ7m4gM5F8Y+JyEv9d4c1WuHwxs2MH231iORfrRUmK0ef7HvPEpHoCPJRs190 3TYsVfiBsQaZZw53rE6DA69ZuhcxNymqJyWTFKSgfGciNGartcTRVmoB1sx7jU64 FZhbDvbsfPJHJ9cINAkoa5yFzzX2LYLWODVodWQ85pM2el6lChyByvww4Vis9AFM bzGIb9XPSaR12l4QRBzoCewZAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUaZp8sDCM gXSsf3tmdXpyKy1th/AwHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9BNTlGRkIzRUI3 RDcxMUVGOUVEMEMzMjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAC34jAMEAS34jjANBgkqhkiG9w0BAQsFAAOCAQEAPgW0906p C7uu1VTTqT9Zslf6Ms81coXEu/tEL30qrgUbpGiQFGI/gxnOQChHZNGctj+3pawK Jw0XM6fscA7VPERcPhQL2PJad8iam0fjUGcau/upKqHnfENSNtnrS+XLgg0JMCKR fqub1n3A978av+FLxDkz7tD/bH0JC88Cb5sE/no5N6AUST7cXkiHBblJuP5Mndev 5LiLDTdYWkrZ1hhaqH90jUeVBBcRixoE94IXzmmnEGD/iORfVK5MbvrOvpfhq/fV tjHrdHWDrItwY4vXcQkf1FqbcKvJID6IK6/PeWh0k+wvpWO3+UMVXO9In0j9or2z mn3Sche+Hya+Fg== -----END CERTIFICATE-----Generated at Sat Apr 5 02:20:44 2025 by rpki-client