$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1FF145B4419F11EA8B12587CC4F9AE02.roa File: 1FF145B4419F11EA8B12587CC4F9AE02.roa (raw, json) Hash identifier: 7ZZ7kYUjqUZ0CBQjkPYTwWNdxtlROjsi9/6RD45BrL8= Subject key identifier: 47:8E:73:73:EA:A1:DC:98:62:7F:00:0E:5F:29:28:80:4F:0E:4B:1C Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0A5C Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1FF145B4419F11EA8B12587CC4F9AE02.roa Signing time: Sun 02 Jun 2024 21:06:04 +0000 ROA not before: Sun 02 Jun 2024 21:06:04 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 17408 IP address blocks: 45.126.84.0/24 maxlen: 24 45.126.86.0/24 maxlen: 24 103.18.228.0/24 maxlen: 24 103.18.230.0/24 maxlen: 24 103.231.36.0/24 maxlen: 24 103.231.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 21:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Jun 2 21:06:04 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665cdebc-ae2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:63:f2:c0:1d:c3:75:c9:55:77:38:fd:31: 72:78:32:37:86:59:f6:71:2d:ec:a5:5e:13:bc:b1: 5a:bf:87:fa:f8:5b:fe:b3:d7:4b:63:15:1f:bf:52: b9:d2:7c:ef:f1:14:72:03:e6:29:47:6a:5d:5e:0c: f0:42:c0:f2:06:6d:94:4d:1f:7b:58:8e:7d:fc:e5: b9:1b:42:80:2a:3c:c6:71:4f:8e:f4:4d:7f:48:0f: d1:66:e3:bb:23:88:0b:d5:96:57:68:5e:c2:9d:33: 99:db:81:ea:8b:ef:ab:67:10:a4:6e:a1:b2:d6:5e: 82:69:4e:c8:57:fc:88:b8:94:b7:91:40:47:e7:0e: f5:30:5a:85:de:fd:16:29:66:e5:31:48:24:04:fc: 61:a7:26:30:7c:3b:16:70:1a:19:3f:84:9d:88:f0: 46:e2:01:62:73:02:d7:0d:a8:15:ef:df:6a:ae:ff: 27:5f:36:f3:80:26:2a:a2:7d:cf:8d:21:55:14:d0: 33:4c:8a:b2:32:ad:2d:b3:5e:23:14:15:b8:28:3d: 1b:16:34:92:73:8c:d8:95:30:19:99:9f:e7:aa:64: 4f:a1:db:f9:2d:6c:f0:31:4d:29:5a:c8:54:a9:9b: a2:6d:13:3f:e8:e2:d5:3e:d3:49:c7:0f:08:99:a1: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8E:73:73:EA:A1:DC:98:62:7F:00:0E:5F:29:28:80:4F:0E:4B:1C X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1FF145B4419F11EA8B12587CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.126.84.0/24 45.126.86.0/24 103.18.228.0/24 103.18.230.0/24 103.231.36.0/24 103.231.38.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:67:39:22:0b:70:99:40:3c:3a:63:32:dd:ff:0c:e7:eb:34: 04:4d:dc:74:48:99:b7:55:5b:d0:65:98:9c:21:c5:01:b0:0f: 1c:15:3e:ac:e7:df:fa:ef:c9:59:48:10:7e:3d:d7:b0:14:f8: 61:72:17:3c:68:0c:82:95:c6:94:8c:6f:49:c2:13:df:bd:17: 8c:ca:77:d1:36:9f:ef:5a:7a:8b:44:0c:7c:04:81:57:d9:fe: b7:f9:29:2b:e6:bf:f0:92:a5:8e:72:41:46:2f:1f:94:4a:2a: d7:56:2e:3f:ea:a2:12:29:9e:2a:5a:76:d3:5c:be:3b:20:3f: 4d:29:70:4a:f4:cb:b6:7b:d4:7a:82:4d:6b:35:9f:ba:d8:aa: 12:70:0a:87:23:24:a5:51:d4:0c:d2:cb:4b:ac:0f:f3:18:13: af:3e:b7:61:96:35:33:62:1f:d2:8c:c0:e3:00:0c:ab:86:37: a9:d6:0b:37:54:3c:a0:83:2f:8e:50:01:8b:e6:66:fa:b6:2a: 3a:c0:0d:06:21:c8:8d:f1:1c:ca:fb:a0:0e:36:90:7a:13:42: ca:ac:db:cc:9f:3a:36:96:1a:56:f4:e4:dd:32:3f:e2:86:dd: 8b:84:a1:7c:80:76:a3:9c:d7:7b:ec:3b:74:fb:1b:1b:c3:21: 33:4a:b7:ea -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjQwNjAyMjEwNjA0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVjZGViYy1hZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArldj8sAdw3XJVXc4/TFyeDI3hln2cS3spV4TvLFav4f6+Fv+s9dLYxUfv1K5 0nzv8RRyA+YpR2pdXgzwQsDyBm2UTR97WI59/OW5G0KAKjzGcU+O9E1/SA/RZuO7 I4gL1ZZXaF7CnTOZ24Hqi++rZxCkbqGy1l6CaU7IV/yIuJS3kUBH5w71MFqF3v0W KWblMUgkBPxhpyYwfDsWcBoZP4SdiPBG4gFicwLXDagV799qrv8nXzbzgCYqon3P jSFVFNAzTIqyMq0ts14jFBW4KD0bFjSSc4zYlTAZmZ/nqmRPodv5LWzwMU0pWshU qZuibRM/6OLVPtNJxw8ImaF8wwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFEeOc3Pq odyYYn8ADl8pKIBPDkscMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCNUIvMjlERTc0OEE0MTlFMTFFQUI4NjZFNzdBQzRGOUFFMDIvMUZGMTQ1QjQ0 MTlGMTFFQThCMTI1ODdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAAtflQDBAAtflYDBABnEuQDBABnEuYDBABn5yQDBABn5yYw DQYJKoZIhvcNAQELBQADggEBAH1nOSILcJlAPDpjMt3/DOfrNARN3HRImbdVW9Bl mJwhxQGwDxwVPqzn3/rvyVlIEH4917AU+GFyFzxoDIKVxpSMb0nCE9+9F4zKd9E2 n+9aeotEDHwEgVfZ/rf5KSvmv/CSpY5yQUYvH5RKKtdWLj/qohIpnipadtNcvjsg P00pcEr0y7Z71HqCTWs1n7rYqhJwCocjJKVR1AzSy0usD/MYE68+t2GWNTNiH9KM wOMADKuGN6nWCzdUPKCDL45QAYvmZvq2KjrADQYhyI3xHMr7oA42kHoTQsqs28yf OjaWGlb05N0yP+KG3YuEoXyAdqOc13vsO3T7GxvDITNKt+o= -----END CERTIFICATE-----Generated at Sun Jun 2 22:48:39 2024 by rpki-client on console-ams.rpki-client.org