$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/650B909C903B11EF924F0B86C4F9AE02.roa File: 650B909C903B11EF924F0B86C4F9AE02.roa (raw, json) Hash identifier: l9dH5Yk/IsrZlDMhS/m7QsOx2yvq3McTRworcFa7eFQ= Subject key identifier: F7:EF:82:B6:D2:F9:6C:28:35:15:8A:E5:AB:3B:3A:36:1E:5A:FC:6E Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 345A Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/650B909C903B11EF924F0B86C4F9AE02.roa Signing time: Mon 18 Nov 2024 15:21:03 +0000 ROA not before: Mon 18 Nov 2024 15:21:03 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 24068 IP address blocks: 45.116.236.0/22 maxlen: 22 45.116.236.0/24 maxlen: 24 45.116.237.0/24 maxlen: 24 45.116.238.0/24 maxlen: 24 45.116.239.0/24 maxlen: 24 103.251.200.0/22 maxlen: 22 103.251.200.0/24 maxlen: 24 103.251.202.0/24 maxlen: 24 103.251.203.0/24 maxlen: 24 202.171.48.0/20 maxlen: 20 202.171.48.0/22 maxlen: 22 202.171.48.0/24 maxlen: 24 202.171.49.0/24 maxlen: 24 202.171.50.0/24 maxlen: 24 202.171.51.0/24 maxlen: 24 202.171.52.0/22 maxlen: 22 202.171.52.0/24 maxlen: 24 202.171.53.0/24 maxlen: 24 202.171.54.0/24 maxlen: 24 202.171.55.0/24 maxlen: 24 202.171.56.0/22 maxlen: 22 202.171.56.0/24 maxlen: 24 202.171.57.0/24 maxlen: 24 202.171.58.0/24 maxlen: 24 202.171.60.0/22 maxlen: 22 202.171.60.0/24 maxlen: 24 202.171.61.0/24 maxlen: 24 202.171.62.0/24 maxlen: 24 202.171.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13402 (0x345a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2 Validity Not Before: Nov 18 15:21:03 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=673b5b5f-0b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:75:aa:8e:0e:e2:da:9a:11:a3:6f:14:ae: 95:c5:35:e9:f2:54:92:7a:43:a7:e3:96:b2:96:08: ea:53:fa:97:bd:88:15:f6:d0:f4:01:08:e2:83:38: 08:a1:6a:3d:d2:d3:a2:bb:92:2d:ef:f2:ce:2c:c8: e1:34:89:4b:1c:63:59:7e:d7:96:97:6e:93:1f:8f: c2:0e:09:1f:28:1d:5d:c2:e3:a8:63:24:80:5e:83: 83:7a:b6:5b:9a:e0:e4:a2:e3:71:fb:4b:60:cb:27: 24:47:58:c9:33:ef:7d:e8:67:9e:4a:ad:5d:db:71: 26:84:c5:bb:56:17:18:6b:76:fb:e8:68:db:bd:3c: 94:cc:c5:8e:34:34:50:10:a9:84:39:6a:85:00:a5: 1c:9d:d0:b4:07:46:5d:2a:ff:92:bc:52:c5:b0:6f: 86:6c:5b:e7:49:c8:e3:d5:99:43:e8:b1:dd:04:15: 82:ae:71:63:75:aa:48:74:4a:29:77:ee:e1:0e:30: a2:6c:40:8d:1e:cc:89:1a:28:16:25:fd:16:19:f3: 2e:7b:c1:da:24:87:74:67:63:cc:70:ad:2d:be:2a: 9e:61:0b:78:84:a3:94:d3:27:a4:56:4d:49:68:55: 9f:1e:57:48:d6:b4:60:08:80:5c:b3:9d:4b:1a:1b: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EF:82:B6:D2:F9:6C:28:35:15:8A:E5:AB:3B:3A:36:1E:5A:FC:6E X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/650B909C903B11EF924F0B86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.116.236.0/22 103.251.200.0/22 202.171.48.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:da:6f:3a:f0:d1:09:e2:d2:16:cf:7b:0b:ce:2c:c7:fd:03: 59:6b:a7:03:64:ff:26:4d:c2:ed:c1:df:9a:85:25:38:b0:03: 0f:4b:27:31:6a:27:14:92:fd:04:b3:b5:7f:f3:19:fc:2f:73: 2c:be:e7:79:f1:d8:32:8b:a6:ce:28:eb:7b:0c:cf:93:ea:11: 0d:ba:39:4e:bc:41:3f:2f:65:72:d0:89:e2:32:f6:7f:55:f1: 40:eb:f2:fb:29:45:d5:7f:6c:8f:4d:77:37:0b:a2:78:62:0f: 81:11:99:85:10:c3:b3:ca:e7:7b:af:3f:ee:16:f8:51:4b:07: 0e:52:9c:a9:3b:5f:95:ac:0b:a7:36:ef:fb:ae:81:ab:ea:a0: a7:89:e7:80:dd:32:70:43:98:4f:c5:9d:7e:09:db:ba:5a:96: fb:13:ab:a2:bf:0f:0b:a5:7d:36:fe:0c:fb:10:7b:37:6a:36: a6:e3:ef:df:95:50:f8:66:f8:d5:67:f4:c6:38:40:9a:5c:30: 0b:87:45:7b:40:85:e9:5c:58:61:bc:1d:5d:e0:ff:7c:b1:94: 98:4a:2d:12:05:29:e8:84:3a:29:b6:81:f8:fb:1b:96:0e:b4: 3e:bc:cb:98:8c:23:c5:ab:1d:ee:0c:6f:6a:f3:79:03:1a:00: 38:34:ab:62 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjQxMTE4MTUyMTAzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNiNWI1Zi0wYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunF1qo4O4tqaEaNvFK6VxTXp8lSSekOn45aylgjqU/qXvYgV9tD0AQjigzgI oWo90tOiu5It7/LOLMjhNIlLHGNZfteWl26TH4/CDgkfKB1dwuOoYySAXoODerZb muDkouNx+0tgyyckR1jJM+996GeeSq1d23EmhMW7VhcYa3b76GjbvTyUzMWONDRQ EKmEOWqFAKUcndC0B0ZdKv+SvFLFsG+GbFvnScjj1ZlD6LHdBBWCrnFjdapIdEop d+7hDjCibECNHsyJGigWJf0WGfMue8HaJId0Z2PMcK0tviqeYQt4hKOU0yekVk1J aFWfHldI1rRgCIBcs51LGhtjKQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPfvgrbS +WwoNRWK5as7OjYeWvxuMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQ4RjIvNDZEMDkxOTgxREE5MTFFMjlDRkQzRUE0MDhCMDJDRDIvNjUwQjkwOUM5 MDNCMTFFRjkyNEYwQjg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAItdOwDBAJn+8gDBATKqzAwDQYJKoZIhvcNAQELBQADggEB AD/abzrw0Qni0hbPewvOLMf9A1lrpwNk/yZNwu3B35qFJTiwAw9LJzFqJxSS/QSz tX/zGfwvcyy+53nx2DKLps4o63sMz5PqEQ26OU68QT8vZXLQieIy9n9V8UDr8vsp RdV/bI9NdzcLonhiD4ERmYUQw7PK53uvP+4W+FFLBw5SnKk7X5WsC6c27/uugavq oKeJ54DdMnBDmE/FnX4J27palvsTq6K/DwulfTb+DPsQezdqNqbj79+VUPhm+NVn 9MY4QJpcMAuHRXtAhelcWGG8HV3g/3yxlJhKLRIFKeiEOim2gfj7G5YOtD68y5iM I8WrHe4Mb2rzeQMaADg0q2I= -----END CERTIFICATE-----Generated at Sat Apr 5 02:08:03 2025 by rpki-client