$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/312DC5B8405E11E7A28FCE45C4F9AE02.roa File: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (raw, json) Hash identifier: arkqSY1NH0JOG5y+n5PhHtwp0RcGV49oD/BwEA9o5TM= Subject key identifier: A4:4F:1C:F2:BB:68:B3:D4:68:50:BA:9E:20:52:31:8D:E1:12:83:E2 Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 19F7 Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/312DC5B8405E11E7A28FCE45C4F9AE02.roa Signing time: Thu 24 Oct 2024 16:55:31 +0000 ROA not before: Thu 24 Oct 2024 16:55:31 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 134544 IP address blocks: 45.126.0.0/24 maxlen: 24 45.126.1.0/24 maxlen: 24 103.35.252.0/24 maxlen: 24 103.35.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6647 (0x19f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: Oct 24 16:55:31 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=671a7c03-0a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0f:23:56:15:0c:4d:2a:a3:9a:c8:b5:3e:3a: 79:27:8e:c5:22:26:da:80:7d:be:ef:c6:b1:5a:2d: 56:fd:7f:a9:bc:46:c2:10:bd:b0:55:1b:e4:7c:c5: 34:25:29:5c:13:50:b8:fe:24:30:c3:f5:8c:6d:27: d6:f8:4d:3f:0c:87:cd:48:f7:6e:16:ff:a7:8c:c9: 4d:bd:4b:04:f0:73:fd:3c:77:61:a8:40:e3:8a:2a: 46:42:2f:50:ec:48:b7:6f:34:ac:7b:85:ee:d3:a2: 7a:ce:c1:6e:e2:fd:5a:dc:6d:d1:51:00:e8:72:a4: 4f:45:45:ec:31:a2:b0:54:9b:ed:72:1d:72:05:41: bd:25:1f:61:09:4c:3c:cf:82:0e:63:74:28:1b:e4: 9b:1f:02:3e:70:68:e4:ee:29:4f:ab:1e:54:02:f5: bd:1b:bf:60:f1:2c:f7:a2:40:0f:b1:40:10:b7:3c: 69:51:33:80:4c:dc:a9:04:ef:b9:7a:40:69:a9:e4: bd:47:53:fb:e6:31:0b:08:f8:e4:1b:6e:b0:12:67: 50:aa:6a:51:53:0b:a6:68:db:68:8a:c7:93:53:a2: cb:3e:da:df:68:9e:04:2c:b7:23:dc:3b:91:00:7b: a2:92:92:c4:27:51:a7:8a:15:63:12:e7:9d:d7:f0: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4F:1C:F2:BB:68:B3:D4:68:50:BA:9E:20:52:31:8D:E1:12:83:E2 X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/312DC5B8405E11E7A28FCE45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.126.0.0/23 103.35.252.0/23 Signature Algorithm: sha256WithRSAEncryption ae:84:7c:4b:c8:bb:74:3b:41:a0:81:21:8f:94:5d:f6:b7:e3: 8a:8b:a3:b9:2c:17:1c:6f:05:40:a8:0d:4f:32:bf:3c:1f:27: 6b:21:4f:7e:39:76:03:a2:4d:14:ec:96:01:de:3e:f7:c4:bf: 0b:20:ec:36:ec:b7:38:9c:ff:1b:6e:b0:d4:73:10:26:09:46: 96:0e:df:d0:5d:9d:db:c7:16:4c:75:8b:5a:91:d7:90:c6:4d: 0f:fd:2f:19:fb:fc:6c:a2:98:13:bc:b2:54:3a:87:e6:de:b3: 7d:6e:33:9c:15:8b:f3:66:08:c6:ee:e5:71:58:81:b4:ee:09: a3:c3:6a:9c:47:d6:0b:67:8f:63:d6:9c:4b:54:96:60:04:a7: 39:8f:b0:99:98:d6:c1:b0:78:30:d3:c1:cd:02:7e:14:04:f3: 4b:6f:c4:63:f2:8e:41:b4:0f:d1:3b:92:43:16:3d:c9:1a:21: 97:67:88:1f:68:02:d0:db:d3:96:ad:50:71:1a:64:97:2c:8d: b8:25:0e:6d:ef:49:24:c7:f8:16:b8:b5:f0:38:16:ac:25:29: b9:23:52:14:84:ef:2a:d7:01:db:62:9f:d7:5f:7d:d7:52:af: 97:23:52:fb:52:5b:a5:32:ee:18:4b:28:b0:b8:10:24:80:5d: e8:4a:90:be -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjQxMDI0MTY1NTMxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhN2MwMy0wYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6w8jVhUMTSqjmsi1Pjp5J47FIibagH2+78axWi1W/X+pvEbCEL2wVRvkfMU0 JSlcE1C4/iQww/WMbSfW+E0/DIfNSPduFv+njMlNvUsE8HP9PHdhqEDjiipGQi9Q 7Ei3bzSse4Xu06J6zsFu4v1a3G3RUQDocqRPRUXsMaKwVJvtch1yBUG9JR9hCUw8 z4IOY3QoG+SbHwI+cGjk7ilPqx5UAvW9G79g8Sz3okAPsUAQtzxpUTOATNypBO+5 ekBpqeS9R1P75jELCPjkG26wEmdQqmpRUwumaNtoiseTU6LLPtrfaJ4ELLcj3DuR AHuikpLEJ1GnihVjEued1/CypwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKRPHPK7 aLPUaFC6niBSMY3hEoPiMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY0NEUvRTQzQjZFNEE0MDVEMTFFN0IwMUJBMTQ1QzRGOUFFMDIvMzEyREM1Qjg0 MDVFMTFFN0EyOEZDRTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEtfgADBAFnI/wwDQYJKoZIhvcNAQELBQADggEBAK6EfEvI u3Q7QaCBIY+UXfa344qLo7ksFxxvBUCoDU8yvzwfJ2shT345dgOiTRTslgHePvfE vwsg7Dbstzic/xtusNRzECYJRpYO39BdndvHFkx1i1qR15DGTQ/9Lxn7/GyimBO8 slQ6h+bes31uM5wVi/NmCMbu5XFYgbTuCaPDapxH1gtnj2PWnEtUlmAEpzmPsJmY 1sGweDDTwc0CfhQE80tvxGPyjkG0D9E7kkMWPckaIZdniB9oAtDb05atUHEaZJcs jbglDm3vSSTH+Ba4tfA4FqwlKbkjUhSE7yrXAdtin9dffddSr5cjUvtSW6Uy7hhL KLC4ECSAXehKkL4= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:53 2024 by rpki-client on console-fra.rpki-client.org