$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/97E05E58B15E11ECB6B31625C4F9AE02.roa File: 97E05E58B15E11ECB6B31625C4F9AE02.roa (raw, json) Hash identifier: 814gK30vRsw3f3GeLBYUI3A+K0FBKsWqCyMte+6ZS3M= Subject key identifier: 75:0B:DE:94:AC:FB:17:6F:BB:B2:72:F0:A6:87:39:A6:96:1A:25:83 Certificate issuer: /CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Certificate serial: 02C6 Authority key identifier: 08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/97E05E58B15E11ECB6B31625C4F9AE02.roa Signing time: Sat 13 Jul 2024 03:24:01 +0000 ROA not before: Sat 13 Jul 2024 03:24:01 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 135391 IP address blocks: 45.255.132.0/24 maxlen: 24 45.255.133.0/24 maxlen: 24 45.255.134.0/24 maxlen: 24 45.255.135.0/24 maxlen: 24 103.65.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Validity Not Before: Jul 13 03:24:01 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6691f351-ccd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f5:aa:a8:e6:f9:18:2f:6e:53:fe:e1:3c:41: 0c:76:93:9f:5a:d6:f4:63:4d:86:e8:d5:4e:8b:c0: 2c:35:67:62:68:f0:62:86:7c:bd:3d:ea:18:0d:61: c4:15:23:e0:4a:7b:68:af:3d:cc:0a:00:bc:6c:da: 12:8b:e3:bc:ca:79:06:94:62:f1:66:dd:c6:ca:ab: cd:94:77:3d:5b:85:cd:ac:f5:b5:aa:4d:33:bb:b8: 1a:76:5f:c9:3f:01:9d:d8:ac:5f:97:7a:5f:49:06: 52:d7:8a:65:ab:d7:f6:88:1e:8d:7f:88:a7:e3:8e: 4c:fd:ea:fc:65:9e:16:ad:5f:6c:25:c6:8c:e8:b6: 12:f1:30:4d:bb:b8:35:b6:9d:50:e4:99:dc:03:ef: e2:7b:37:81:9a:78:81:03:4a:cf:5e:94:63:b3:99: aa:42:7b:39:dc:9e:8d:33:d6:48:f7:d9:68:92:65: 0a:46:15:9a:cb:09:ed:da:6b:e1:da:ef:3a:c1:f2: 8c:c6:43:a0:ec:9e:b1:8e:f2:e1:d1:d5:f8:34:36: 59:77:ed:ce:56:32:fa:73:ae:f8:16:ba:fe:65:49: 49:e7:fa:7d:af:bf:ad:89:b0:68:27:64:e4:5f:0e: 17:bf:5c:cf:21:fb:7d:e4:67:d2:68:f1:a5:a9:e5: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0B:DE:94:AC:FB:17:6F:BB:B2:72:F0:A6:87:39:A6:96:1A:25:83 X509v3 Authority Key Identifier: keyid:08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/97E05E58B15E11ECB6B31625C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.255.132.0/22 103.65.40.0/22 Signature Algorithm: sha256WithRSAEncryption 59:dc:d4:f4:07:ae:c6:be:da:9f:8e:30:db:24:43:4b:63:77: eb:26:a9:96:70:d7:9d:0a:e6:bd:d6:84:bb:05:fb:48:3e:9a: 22:5f:64:d2:65:85:54:f2:aa:33:bc:8e:ba:88:ee:44:7f:45: cd:28:d0:07:d6:24:95:e1:f1:c4:ec:dd:fb:a2:38:65:d3:31: 27:47:5e:3d:f4:6d:82:b4:3f:e5:97:04:0a:fa:df:45:4d:45: 90:34:82:5e:67:3f:ad:a0:52:31:c3:3f:05:b5:bb:f7:e6:a2: 88:14:92:07:c1:81:71:c6:3a:f3:b1:61:0f:15:f1:cb:d9:ea: 22:bc:24:d7:ce:8a:b4:90:d9:fc:09:ad:97:ac:bb:c1:2a:1e: 89:1c:de:e4:bc:fd:0f:86:e0:4b:5c:d9:fc:63:58:3a:0a:5d: 74:45:75:c8:0b:7a:7c:ee:5b:a0:70:fd:bb:a0:14:15:35:44: 16:7f:69:ce:cf:40:15:af:ad:b9:a3:4b:8b:3a:85:e6:7f:9e: c3:85:5c:6e:11:a0:a6:3e:08:b1:52:bc:f9:44:84:09:a5:b0: 68:3f:07:87:c3:1d:cc:ee:fe:f7:2c:1a:d9:9a:c8:9c:02:3b: 47:01:57:fd:93:4a:6f:23:1c:85:09:9c:ae:2c:40:d1:6a:d8: 1d:da:fa:49 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2RTgxMTAvBgNVBAUTKDA4NENGQTlFQkMwNkMwRDY4MTA1NDhCMEVEMUNDNDdD RjhFRTBGMzEwHhcNMjQwNzEzMDMyNDAxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxZjM1MS1jY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vWqqOb5GC9uU/7hPEEMdpOfWtb0Y02G6NVOi8AsNWdiaPBihny9PeoYDWHE FSPgSntorz3MCgC8bNoSi+O8ynkGlGLxZt3GyqvNlHc9W4XNrPW1qk0zu7gadl/J PwGd2Kxfl3pfSQZS14plq9f2iB6Nf4in445M/er8ZZ4WrV9sJcaM6LYS8TBNu7g1 tp1Q5JncA+/iezeBmniBA0rPXpRjs5mqQns53J6NM9ZI99lokmUKRhWaywnt2mvh 2u86wfKMxkOg7J6xjvLh0dX4NDZZd+3OVjL6c674Frr+ZUlJ5/p9r7+tibBoJ2Tk Xw4Xv1zPIft95GfSaPGlqeXk1QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHUL3pSs +xdvu7Jy8KaHOaaWGiWDMB8GA1UdIwQYMBaAFAhM+p68BsDWgQVIsO0cxHz47g8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZFOC9ENEI4REExNkIx NUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dOYUJCVWl3N1J6RWZQanVE ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NFejZucndHd05hQkJVaXc3UnpFZlBqdUR6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ2RTgvRDRCOERBMTZCMTVBMTFFQzgyNDBCODIwQzRGOUFFMDIvOTdFMDVFNThC MTVFMTFFQ0I2QjMxNjI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIt/4QDBAJnQSgwDQYJKoZIhvcNAQELBQADggEBAFnc1PQH rsa+2p+OMNskQ0tjd+smqZZw150K5r3WhLsF+0g+miJfZNJlhVTyqjO8jrqI7kR/ Rc0o0AfWJJXh8cTs3fuiOGXTMSdHXj30bYK0P+WXBAr630VNRZA0gl5nP62gUjHD PwW1u/fmoogUkgfBgXHGOvOxYQ8V8cvZ6iK8JNfOirSQ2fwJrZesu8EqHokc3uS8 /Q+G4Etc2fxjWDoKXXRFdcgLenzuW6Bw/bugFBU1RBZ/ac7PQBWvrbmjS4s6heZ/ nsOFXG4RoKY+CLFSvPlEhAmlsGg/B4fDHczu/vcsGtmayJwCO0cBV/2TSm8jHIUJ nK4sQNFq2B3a+kk= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:54 2024 by rpki-client on console-ams.rpki-client.org