$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/17BB4C20F17E11EAA3CC597BC4F9AE02.roa File: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (raw, json) Hash identifier: GHc32dmD8PGI6ypRydRPnBnTyP57BJjF/HmqnaNiKdw= Subject key identifier: B3:FD:C6:88:08:5F:14:67:FB:FB:6E:7A:1C:7E:7A:08:B0:DF:1E:5C Certificate issuer: /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7 Certificate serial: 3417 Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/17BB4C20F17E11EAA3CC597BC4F9AE02.roa Signing time: Fri 20 Sep 2024 15:21:05 +0000 ROA not before: Fri 20 Sep 2024 15:21:05 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 45945 IP address blocks: 43.245.124.0/22 maxlen: 22 43.245.124.0/24 maxlen: 24 43.245.125.0/24 maxlen: 24 43.245.126.0/24 maxlen: 24 43.245.127.0/24 maxlen: 24 103.1.148.0/22 maxlen: 22 103.1.148.0/24 maxlen: 24 103.1.149.0/24 maxlen: 24 103.1.150.0/24 maxlen: 24 103.1.151.0/24 maxlen: 24 124.150.140.0/22 maxlen: 22 124.150.140.0/24 maxlen: 24 124.150.141.0/24 maxlen: 24 124.150.142.0/24 maxlen: 24 124.150.143.0/24 maxlen: 24 2401:fd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13335 (0x3417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7 Validity Not Before: Sep 20 15:21:05 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66ed92e1-d482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:05:78:dd:6e:b7:dc:4b:83:d2:a2:09:3b: 44:33:9f:07:21:48:5f:29:1e:5a:54:53:b8:18:77: 76:87:d9:c7:56:82:18:f8:e0:d9:f7:34:4e:01:9c: 90:13:90:fb:f8:07:0b:d8:4f:a7:17:a8:25:31:b4: 9d:0e:2d:a6:ae:71:d7:87:a8:72:84:07:60:96:20: 72:24:42:4b:d1:59:d5:8a:34:75:8b:b4:df:24:64: ad:0d:aa:19:db:68:d3:a5:81:21:10:b4:ab:6d:4e: 1b:bf:4e:ad:de:5e:a1:3e:20:5d:50:eb:b3:97:8e: af:06:b8:12:16:29:17:be:95:a2:71:d8:ee:86:99: 08:b7:8e:f3:8f:b8:b5:0a:9a:33:71:8b:f6:f3:fd: b9:23:f5:17:87:fd:36:eb:5e:45:ef:c4:d0:76:da: c8:74:84:65:90:d2:09:a4:e3:dc:28:a0:6c:6f:33: 45:8d:15:39:cd:29:58:f9:63:a7:ed:aa:98:73:06: a8:ab:84:04:8b:9f:f3:10:ef:fb:5f:f1:3a:47:43: 0c:72:a9:df:13:73:31:0f:4b:2b:09:28:48:c9:c4: 11:f4:e0:3d:9d:10:ad:3a:cf:e2:d6:77:e2:23:ff: 10:db:8f:17:5f:3e:6c:96:f6:08:73:75:ae:80:03: c8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FD:C6:88:08:5F:14:67:FB:FB:6E:7A:1C:7E:7A:08:B0:DF:1E:5C X509v3 Authority Key Identifier: keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/17BB4C20F17E11EAA3CC597BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.124.0/22 103.1.148.0/22 124.150.140.0/22 IPv6: 2401:fd00::/32 Signature Algorithm: sha256WithRSAEncryption 97:f2:1e:ca:53:c9:12:4c:e5:6d:cb:f6:75:bb:ca:57:38:dd: 87:93:eb:aa:e6:12:77:56:bc:eb:4f:13:39:54:36:85:f0:2f: 6e:db:7e:20:b9:c1:13:c8:19:1a:7b:f1:10:d5:48:c4:8a:b2: 18:c2:02:05:1d:93:b2:4d:89:80:d7:f5:eb:b8:00:35:7d:f4: 52:52:9a:b6:e1:30:50:9e:b8:54:8a:6c:40:19:70:95:7c:ec: c7:ec:df:8e:13:6d:ea:e6:12:48:c9:9b:c9:d6:fb:55:eb:96: 5c:03:68:b7:e0:c2:0e:79:d8:71:d1:62:1c:bc:4a:5f:85:9a: 98:97:94:44:09:52:95:30:70:c8:c2:fb:8a:3f:47:9c:f4:61: 59:98:ec:05:ca:13:7e:ca:39:12:ca:69:96:01:c8:a6:20:89: 68:2e:6d:f0:f9:a6:f7:c1:a5:46:a0:1b:41:60:7d:8f:18:f6: 0e:33:3a:06:f8:81:8e:fe:5f:44:4d:3e:e4:18:cd:db:06:18: 02:e0:b8:69:b2:ba:ea:7d:aa:87:99:b1:4a:c1:3f:f9:00:d1: 66:0e:75:7f:0e:76:07:e7:67:d5:81:e2:0b:46:c0:88:07:47: a4:3d:33:0b:ac:9d:b4:74:b7:b3:a9:f5:78:cd:00:db:a7:86: e1:ce:f6:2a -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICNBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NUExMTAvBgNVBAUTKEMxNDIyQTBDNENGRjI0OEQ1MTczNThFQkRGN0I0RTgw MkJBQ0MwRTcwHhcNMjQwOTIwMTUyMTA1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVkOTJlMS1kNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSsFeN1ut9xLg9KiCTtEM58HIUhfKR5aVFO4GHd2h9nHVoIY+ODZ9zROAZyQ E5D7+AcL2E+nF6glMbSdDi2mrnHXh6hyhAdgliByJEJL0VnVijR1i7TfJGStDaoZ 22jTpYEhELSrbU4bv06t3l6hPiBdUOuzl46vBrgSFikXvpWicdjuhpkIt47zj7i1 CpozcYv28/25I/UXh/02615F78TQdtrIdIRlkNIJpOPcKKBsbzNFjRU5zSlY+WOn 7aqYcwaoq4QEi5/zEO/7X/E6R0MMcqnfE3MxD0srCShIycQR9OA9nRCtOs/i1nfi I/8Q248XXz5slvYIc3WugAPIvQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLP9xogI XxRn+/tuehx+egiw3x5cMB8GA1UdIwQYMBaAFMFCKgxM/ySNUXNY6997ToArrMDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ1QS8xRTQ0OEE0ODFE QTExMUUyOUY1NjA3OTMwOEIwMkNEMi93VUlxREV6X0pJMVJjMWpyMzN0T2dDdXN3 T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVSXFERXpfSkkxUmMxanIzM3RPZ0N1c3dPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI0NUEvMUU0NDhBNDgxREExMTFFMjlGNTYwNzkzMDhCMDJDRDIvMTdCQjRDMjBG MTdFMTFFQUEzQ0M1OTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr9XwDBAJnAZQDBAJ8lowwDQQCAAIwBwMFACQB/QAwDQYJ KoZIhvcNAQELBQADggEBAJfyHspTyRJM5W3L9nW7ylc43YeT66rmEndWvOtPEzlU NoXwL27bfiC5wRPIGRp78RDVSMSKshjCAgUdk7JNiYDX9eu4ADV99FJSmrbhMFCe uFSKbEAZcJV87Mfs344TbermEkjJm8nW+1XrllwDaLfgwg552HHRYhy8Sl+FmpiX lEQJUpUwcMjC+4o/R5z0YVmY7AXKE37KORLKaZYByKYgiWgubfD5pvfBpUagG0Fg fY8Y9g4zOgb4gY7+X0RNPuQYzdsGGALguGmyuup9qoeZsUrBP/kA0WYOdX8Odgfn Z9WB4gtGwIgHR6Q9MwusnbR0t7Op9XjNANunhuHO9io= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:53 2024 by rpki-client on console-fra.rpki-client.org