$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/97E61FE46F2111EB85D19531C4F9AE02.roa File: 97E61FE46F2111EB85D19531C4F9AE02.roa (raw, json) Hash identifier: QT/K5tGfOd7GalxXyOBi4xKWLa0cvDIyEyK/W9LM+Pk= Subject key identifier: F9:B1:85:2C:EE:7B:3E:CD:E2:C0:FB:B5:6C:05:03:9C:87:24:2E:29 Certificate issuer: /CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Certificate serial: 095B Authority key identifier: 5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/97E61FE46F2111EB85D19531C4F9AE02.roa Signing time: Wed 18 Sep 2024 20:09:48 +0000 ROA not before: Wed 18 Sep 2024 20:09:47 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 10105 IP address blocks: 45.125.124.0/24 maxlen: 24 117.104.160.0/21 maxlen: 24 203.143.64.0/20 maxlen: 20 203.143.64.0/23 maxlen: 23 203.143.64.0/24 maxlen: 24 203.143.66.0/23 maxlen: 23 203.143.67.0/24 maxlen: 24 203.143.70.0/23 maxlen: 23 203.143.70.0/24 maxlen: 24 203.143.72.0/24 maxlen: 24 203.143.79.0/24 maxlen: 24 203.143.80.0/23 maxlen: 24 203.143.91.0/24 maxlen: 24 203.143.92.0/22 maxlen: 22 203.143.94.0/23 maxlen: 23 203.143.94.0/24 maxlen: 24 2400:6800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2395 (0x95b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Validity Not Before: Sep 18 20:09:47 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66eb338b-eb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:46:af:4b:50:5f:3a:f7:f9:4f:36:b9:51: ac:ab:8a:c9:8b:8e:1f:4f:0f:a6:06:fa:9d:a8:65: 02:99:d2:0e:a1:66:c0:c0:16:ad:85:56:ef:5f:4b: 44:a7:6b:b2:9b:be:2e:bb:1e:f2:99:50:22:03:53: c0:74:16:b2:a2:50:b4:4b:54:87:57:4e:b9:3d:f7: a7:a4:13:df:74:9d:99:50:15:56:b5:52:df:6e:5e: d8:15:c0:09:10:49:a2:0c:0b:0c:37:d9:39:e8:ee: c9:cb:9c:f7:c1:4b:53:3f:8c:50:82:96:54:3e:3f: 6a:d4:1d:fb:1b:33:b4:f6:1a:f2:a6:62:14:6b:ca: 15:08:f4:69:eb:d8:35:84:61:d1:75:e4:65:e0:7b: 8f:52:db:c1:28:d9:e7:cb:17:49:b0:2c:1a:9a:2d: ee:21:10:56:1a:07:0a:d1:29:0a:a1:19:b7:38:72: 06:bb:9a:25:21:a7:a3:83:65:1b:0d:b3:e4:a9:41: 03:60:6c:75:06:45:3f:16:de:6d:dc:ed:63:1f:ab: 49:55:fa:55:80:7c:c9:55:9c:2c:1c:ed:ac:94:fb: 27:94:e3:9d:d5:e5:05:01:c0:e8:f6:d4:a7:87:0f: f5:92:1c:29:f4:08:75:02:5d:0d:46:a3:6f:9f:24: 9a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B1:85:2C:EE:7B:3E:CD:E2:C0:FB:B5:6C:05:03:9C:87:24:2E:29 X509v3 Authority Key Identifier: keyid:5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/97E61FE46F2111EB85D19531C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.124.0/24 117.104.160.0/21 203.143.64.0-203.143.81.255 203.143.91.0-203.143.95.255 IPv6: 2400:6800::/32 Signature Algorithm: sha256WithRSAEncryption 79:5a:44:9f:e2:b7:45:a8:20:f2:2e:19:16:a7:57:0c:0a:83: b6:b2:27:a0:7d:a4:c3:9b:e7:6d:2f:af:80:dc:b1:cf:b5:ad: 1b:7b:ca:ff:6e:6a:2d:aa:e8:bb:f3:4c:c0:70:63:0c:ee:a8: 3b:c1:3c:c0:06:54:4e:c8:5f:79:a5:94:e3:8b:ad:86:c0:5d: e0:8a:ff:a4:ea:4b:8f:af:bc:dc:92:fd:f4:6f:68:fd:48:08: cb:8d:c2:ca:df:76:27:b0:cc:3d:7e:ac:db:dd:0e:c1:17:e5: 10:df:b4:20:b0:07:7e:e7:70:0f:ce:0c:be:62:9f:98:97:de: 06:7d:a7:4c:82:5e:93:bd:73:84:c1:d2:29:dd:ee:8d:3c:ca: 7e:2f:5b:71:21:62:9b:ea:20:e5:47:72:b8:82:67:1e:f0:5a: 29:43:69:27:04:9a:4d:9a:fe:e1:17:97:a6:94:d5:74:d4:2b: 90:9b:89:02:3e:62:76:c9:10:74:de:c8:13:b1:f4:60:60:7f: ad:be:d3:8a:f7:eb:7a:25:1c:3e:56:5d:96:d0:0c:cc:bb:20: b0:f1:3a:c0:22:d9:24:00:c9:f7:7d:6a:76:6f:98:3d:70:27: 0c:7b:a1:b9:e8:8b:9b:21:b1:6b:6d:a4:b3:b6:04:d7:75:c6: c3:60:93:bb -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgICCVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMzQxMTAvBgNVBAUTKDVERjEwMkUyQTVFNzM2NzcyMUMxMThEQkVDREE2MDJB ODAyOUVFOTQwHhcNMjQwOTE4MjAwOTQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmViMzM4Yi1lYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB9Gr0tQXzr3+U82uVGsq4rJi44fTw+mBvqdqGUCmdIOoWbAwBathVbvX0tE p2uym74uux7ymVAiA1PAdBayolC0S1SHV065PfenpBPfdJ2ZUBVWtVLfbl7YFcAJ EEmiDAsMN9k56O7Jy5z3wUtTP4xQgpZUPj9q1B37GzO09hrypmIUa8oVCPRp69g1 hGHRdeRl4HuPUtvBKNnnyxdJsCwami3uIRBWGgcK0SkKoRm3OHIGu5olIaejg2Ub DbPkqUEDYGx1BkU/Ft5t3O1jH6tJVfpVgHzJVZwsHO2slPsnlOOd1eUFAcDo9tSn hw/1khwp9Ah1Al0NRqNvnySa6wIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFPmxhSzu ez7N4sD7tWwFA5yHJC4pMB8GA1UdIwQYMBaAFF3xAuKl5zZ3IcEY2+zaYCqAKe6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIzNC82MDM3RDVEQzgy QTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5uY2h3UmpiN05wZ0tvQXA3 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmRUM0cVhuTm5jaHdSamI3TnBnS29BcDdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBCMzQvNjAzN0Q1REM4MkExMTFFQTkzNDEzQjRBQzRGOUFFMDIvOTdFNjFGRTQ2 RjIxMTFFQjg1RDE5NTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUAYIKwYBBQUHAQcBAf8E QTA/MC4EAgABMCgDBAAtfXwDBAN1aKAwDAMEBsuPQAMEAcuPUDAMAwQAy49bAwQF y49AMA0EAgACMAcDBQAkAGgAMA0GCSqGSIb3DQEBCwUAA4IBAQB5WkSf4rdFqCDy LhkWp1cMCoO2siegfaTDm+dtL6+A3LHPta0be8r/bmotqui780zAcGMM7qg7wTzA BlROyF95pZTji62GwF3giv+k6kuPr7zckv30b2j9SAjLjcLK33YnsMw9fqzb3Q7B F+UQ37QgsAd+53APzgy+Yp+Yl94GfadMgl6TvXOEwdIp3e6NPMp+L1txIWKb6iDl R3K4gmce8FopQ2knBJpNmv7hF5emlNV01CuQm4kCPmJ2yRB03sgTsfRgYH+tvtOK 9+t6JRw+Vl2W0AzMuyCw8TrAItkkAMn3fWp2b5g9cCcMe6G56IubIbFrbaSztgTX dcbDYJO7 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org