$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/88978730772311EBB972032EC4F9AE02.roa File: 88978730772311EBB972032EC4F9AE02.roa (raw, json) Hash identifier: nz3/6k7N3mPNzs0DFxh1VvDXVpDIjk6/7OQf5UZ/EgA= Subject key identifier: 4A:50:C0:77:92:EC:29:E8:A8:20:1D:7A:39:D1:20:46:72:3C:F4:4D Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3441 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/88978730772311EBB972032EC4F9AE02.roa Signing time: Fri 21 Apr 2023 12:50:14 +0000 ROA not before: Fri 21 Apr 2023 12:50:14 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135539 IP address blocks: 61.45.254.0/24 maxlen: 24 2401:4601:254::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13377 (0x3441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Apr 21 12:50:14 2023 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=64428686-ed1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:9f:7d:be:d2:80:8d:7f:6b:c2:5c:26:b8: 1b:eb:61:6f:e4:f4:2c:dd:da:c1:d0:37:e3:cd:a6: d6:ba:67:f6:28:98:79:53:bf:91:f0:8a:0e:64:ca: d7:d1:89:d1:19:e6:02:b6:26:7a:c7:11:37:c7:69: 97:84:a7:1c:b0:bb:d1:90:08:e2:8e:07:d8:74:36: 6a:d0:90:1d:a9:22:bb:00:0a:2f:05:28:f2:4d:b0: 02:6c:a4:7b:fa:0b:2b:78:4c:8e:9d:41:73:ec:c4: dd:4d:16:30:e4:b1:17:98:4d:4e:dc:9a:fc:2b:d5: 95:da:2f:ac:5f:01:a6:1b:b3:f3:e9:a8:4f:22:a6: a3:e1:e2:b4:dd:d0:03:ce:9a:f6:4f:f7:83:1d:35: 7b:7e:0c:5e:be:46:ae:e6:41:6a:1a:be:cc:ea:57: 6e:a2:d1:8c:6c:6d:e9:32:c3:7c:3b:3c:44:d2:ef: 26:ce:a8:e0:e9:87:a8:7e:7f:dc:a4:e5:81:5f:0d: d6:9e:85:1f:06:e9:29:84:41:8c:16:1b:b0:f3:a3: 61:0b:76:ad:f2:1a:97:7c:35:f2:10:c2:2f:a9:35: 21:0b:08:84:de:de:5a:36:b9:78:29:4c:18:53:a8: e7:da:20:4c:49:f0:07:b9:a6:ba:ad:0e:1d:1b:1d: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:50:C0:77:92:EC:29:E8:A8:20:1D:7A:39:D1:20:46:72:3C:F4:4D X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/88978730772311EBB972032EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.45.254.0/24 IPv6: 2401:4601:254::/48 Signature Algorithm: sha256WithRSAEncryption 10:16:12:c5:cc:1c:0c:2e:e1:d0:d1:ad:d1:b4:b1:89:3c:62: 77:21:81:b3:2b:c5:2d:d6:2c:47:26:f8:e1:a8:3f:36:f5:6b: 51:24:e6:60:3d:52:40:b2:43:40:f6:de:71:b9:d2:ed:fd:bf: 39:32:b8:6c:8f:2a:37:95:09:c3:69:a8:a4:73:53:29:70:3c: de:d3:06:4e:e6:c5:97:52:5f:19:72:48:e6:72:eb:ec:89:60: 6e:12:a5:cd:0d:5d:d0:a1:d4:f6:df:2f:c9:3e:88:b2:48:bc: 69:76:7b:95:48:bd:8e:aa:f9:03:e6:85:95:90:21:f4:e6:9d: 1f:4b:48:11:46:40:ef:9b:4b:05:da:25:78:df:89:76:0c:21: 0b:e7:81:a1:36:4d:e5:1f:c7:0f:9b:89:12:04:26:ed:45:19: 96:79:97:96:99:b3:a1:e5:a3:e0:9d:45:9f:9d:9c:43:51:28: 0b:72:9a:89:68:41:60:75:b7:a2:0d:43:c5:c1:91:ab:80:1f: e8:fa:91:17:4f:ce:f7:1c:14:86:fc:80:bc:d0:01:97:95:af: e8:ec:3c:49:e1:3e:c3:c4:ac:3f:f4:87:77:a4:3b:dd:17:7e: 6c:f2:7c:a9:b5:ba:ed:d1:87:e0:d3:df:63:b8:fc:53:c1:e3: de:81:c2:24 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjMwNDIxMTI1MDE0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDQyODY4Ni1lZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0Cffb7SgI1/a8JcJrgb62Fv5PQs3drB0DfjzabWumf2KJh5U7+R8IoOZMrX 0YnRGeYCtiZ6xxE3x2mXhKccsLvRkAjijgfYdDZq0JAdqSK7AAovBSjyTbACbKR7 +gsreEyOnUFz7MTdTRYw5LEXmE1O3Jr8K9WV2i+sXwGmG7Pz6ahPIqaj4eK03dAD zpr2T/eDHTV7fgxevkau5kFqGr7M6lduotGMbG3pMsN8OzxE0u8mzqjg6Yeofn/c pOWBXw3WnoUfBukphEGMFhuw86NhC3at8hqXfDXyEMIvqTUhCwiE3t5aNrl4KUwY U6jn2iBMSfAHuaa6rQ4dGx1jjQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEpQwHeS 7CnoqCAdejnRIEZyPPRNMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvODg5Nzg3MzA3 NzIzMTFFQkI5NzIwMzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAA9Lf4wDwQCAAIwCQMHACQBRgECVDANBgkqhkiG9w0BAQsF AAOCAQEAEBYSxcwcDC7h0NGt0bSxiTxidyGBsyvFLdYsRyb44ag/NvVrUSTmYD1S QLJDQPbecbnS7f2/OTK4bI8qN5UJw2mopHNTKXA83tMGTubFl1JfGXJI5nLr7Ilg bhKlzQ1d0KHU9t8vyT6Iski8aXZ7lUi9jqr5A+aFlZAh9OadH0tIEUZA75tLBdol eN+JdgwhC+eBoTZN5R/HD5uJEgQm7UUZlnmXlpmzoeWj4J1Fn52cQ1EoC3KaiWhB YHW3og1DxcGRq4Af6PqRF0/O9xwUhvyAvNABl5Wv6Ow8SeE+w8SsP/SHd6Q73Rd+ bPJ8qbW67dGH4NPfY7j8U8Hj3oHCJA== -----END CERTIFICATE-----Generated at Fri May 31 15:08:34 2024 by rpki-client on console-fra.rpki-client.org