$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/1445557CC6C011EC9D09EF1DC4F9AE02.roa File: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (raw, json) Hash identifier: JL3deikXqirsZKv5Pglr4MkJVud4y4Ww4HTgjluu/lA= Subject key identifier: 32:FF:05:EA:F1:0A:42:E2:87:B1:D8:78:5E:82:90:3E:9E:DD:E9:02 Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Certificate serial: 02A4 Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/1445557CC6C011EC9D09EF1DC4F9AE02.roa Signing time: Sat 31 Aug 2024 03:35:03 +0000 ROA not before: Sat 31 Aug 2024 03:35:03 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 132742 IP address blocks: 45.122.132.0/22 maxlen: 24 103.63.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Oct 2024 01:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF Validity Not Before: Aug 31 03:35:03 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d28f67-a022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:3c:dc:58:70:cd:d5:0e:62:da:80:fb:49: 34:21:25:89:c6:66:44:fc:45:0e:8f:be:c4:18:dc: 7f:1f:50:0a:c2:30:a8:86:20:28:fd:61:1e:03:81: 59:b2:4b:8b:cc:33:86:ee:31:54:7e:82:22:22:70: d9:04:ab:de:a4:4a:d0:73:6b:fb:83:98:6d:b8:16: c7:c8:4c:b6:dc:7d:77:27:a6:57:60:b0:14:22:f6: 24:0e:24:04:42:94:aa:df:2d:bb:2f:e2:ca:87:03: 87:bd:33:cd:86:97:87:0f:a7:39:1f:55:e6:c2:ea: 53:91:96:47:44:e5:96:e6:8b:b6:03:ff:c0:f1:21: a9:f3:3b:b0:be:19:c4:d0:46:7c:ec:28:30:e5:14: 31:c3:3b:87:78:b2:93:6e:c5:e3:dc:7b:40:6c:fe: e5:ba:c6:b0:48:c2:03:1b:00:67:67:63:48:8a:51: df:06:64:15:eb:a3:fd:ba:ef:d1:1e:65:da:d5:f2: fa:ae:53:59:af:06:68:76:c0:d1:9b:bc:3d:a2:5c: 84:21:ee:03:0a:06:17:6d:13:f0:c9:93:2c:93:eb: bd:80:8f:54:b0:81:1f:6f:fb:32:97:54:37:b8:d7: 40:46:bf:e9:52:81:7e:74:5a:55:10:9b:9a:d1:da: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:05:EA:F1:0A:42:E2:87:B1:D8:78:5E:82:90:3E:9E:DD:E9:02 X509v3 Authority Key Identifier: keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/1445557CC6C011EC9D09EF1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.122.132.0/22 103.63.0.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:8c:52:2d:e4:42:62:3a:8b:fb:20:8d:0d:e1:dc:8f:c6:ae: e9:de:81:dd:26:8e:10:23:2d:98:f5:d2:2c:88:2f:ca:48:55: cf:70:23:59:09:a6:47:2e:bd:75:7b:45:94:75:80:e4:e9:f0: 55:72:4a:36:a0:3a:e9:3c:ba:68:cc:c4:df:c6:f4:90:4f:13: 5d:a4:d1:c5:11:7c:6b:63:12:58:ac:5b:b0:5b:f1:49:77:aa: c7:d5:95:ec:a0:10:e0:30:5b:dd:d3:7d:e6:af:a7:1a:e5:63: 51:df:cf:b3:28:df:41:46:95:06:f1:e5:86:98:e3:5c:90:a8: e7:59:0c:5a:f8:c8:71:7a:b1:78:a1:ed:2f:f0:26:b5:7e:33: 7c:0c:ec:e5:2c:2f:48:d6:26:12:04:49:86:af:5a:bc:8b:68: f9:33:85:e0:76:17:f0:75:b5:37:0e:52:ab:39:65:4d:7c:83: e1:11:a0:e2:97:e6:15:be:d6:32:0e:6b:92:1d:84:6d:e4:c2: 58:b8:e5:6c:01:73:e9:09:cc:3d:6d:5a:91:4a:e0:13:fd:ad: 9e:60:9b:89:6c:e8:83:42:ec:7d:9e:c3:a1:14:3f:e2:54:7c: 67:f5:3e:0e:c4:00:e2:bb:c9:8a:bc:46:b7:89:be:5c:b9:65: f4:e8:a7:77 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC QTBCQjFDQkYwHhcNMjQwODMxMDMzNTAzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyOGY2Ny1hMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkY83FhwzdUOYtqA+0k0ISWJxmZE/EUOj77EGNx/H1AKwjCohiAo/WEeA4FZ skuLzDOG7jFUfoIiInDZBKvepErQc2v7g5htuBbHyEy23H13J6ZXYLAUIvYkDiQE QpSq3y27L+LKhwOHvTPNhpeHD6c5H1XmwupTkZZHROWW5ou2A//A8SGp8zuwvhnE 0EZ87Cgw5RQxwzuHeLKTbsXj3HtAbP7lusawSMIDGwBnZ2NIilHfBmQV66P9uu/R HmXa1fL6rlNZrwZodsDRm7w9olyEIe4DCgYXbRPwyZMsk+u9gI9UsIEfb/syl1Q3 uNdARr/pUoF+dFpVEJua0dqXPQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDL/Berx CkLih7HYeF6CkD6e3ekCMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2 QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkxM0UvREQwODk4RjBDNkJEMTFFQzg5NjM3NDFEQzRGOUFFMDIvMTQ0NTU1N0ND NkMwMTFFQzlEMDlFRjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteoQDBAJnPwAwDQYJKoZIhvcNAQELBQADggEBAE2MUi3k QmI6i/sgjQ3h3I/Grunegd0mjhAjLZj10iyIL8pIVc9wI1kJpkcuvXV7RZR1gOTp 8FVySjagOuk8umjMxN/G9JBPE12k0cURfGtjElisW7Bb8Ul3qsfVleygEOAwW93T feavpxrlY1Hfz7Mo30FGlQbx5YaY41yQqOdZDFr4yHF6sXih7S/wJrV+M3wM7OUs L0jWJhIESYavWryLaPkzheB2F/B1tTcOUqs5ZU18g+ERoOKX5hW+1jIOa5IdhG3k wli45WwBc+kJzD1tWpFK4BP9rZ5gm4ls6INC7H2ew6EUP+JUfGf1Pg7EAOK7yYq8 RreJvly5ZfTop3c= -----END CERTIFICATE-----Generated at Fri Sep 27 03:40:47 2024 by rpki-client on console-ams.rpki-client.org