$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa File: C23053B019A911EF97366417C4F9AE02.roa (raw, json) Hash identifier: hkeZkGjMOirqhDK/KK7jBO8WJq01RycGTZ8NB/XcPEg= Subject key identifier: EB:BF:89:C3:14:F9:62:4E:EC:37:44:53:62:20:14:79:B6:22:FC:83 Certificate issuer: /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Certificate serial: 05 Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa Signing time: Fri 24 May 2024 08:51:01 +0000 ROA not before: Fri 24 May 2024 08:51:01 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 64006 IP address blocks: 45.116.48.0/22 maxlen: 24 103.81.40.0/22 maxlen: 22 103.81.40.0/24 maxlen: 24 2400:6140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623 Validity Not Before: May 24 08:51:01 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=665054f5-9f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:dd:9c:d2:53:5f:ba:86:3b:64:ed:0d:d1: 13:92:b1:49:ad:f4:5a:b2:ab:db:05:4a:a2:fe:e4: 9f:bc:57:8c:99:27:ef:34:a9:5a:47:13:d5:7c:de: cd:93:dd:ee:f8:e9:f3:0c:a7:f5:0b:cb:6f:ef:36: 0a:22:e5:e3:9f:e1:a0:99:21:6a:a4:82:51:75:45: ee:0d:69:ee:9b:11:85:57:19:7d:35:9a:4e:e9:d2: 1a:3f:dc:20:e5:5c:e0:eb:46:90:fa:57:67:2e:26: bd:81:8f:b4:ab:de:e4:87:be:ff:9a:ef:10:c3:da: 61:75:e2:4e:f2:53:2a:d0:94:0c:9d:c6:69:86:c7: 2b:a0:ca:35:eb:1f:f0:52:11:b9:d7:44:65:3d:95: 27:b6:ee:cb:13:7c:c6:a3:b0:88:92:d3:23:88:2e: 6b:e1:f4:ba:7f:26:fc:8c:11:a1:05:8e:a4:9a:26: 7d:f8:9a:50:38:3b:4a:6a:8f:2b:73:e1:77:4b:b5: 80:8d:15:b6:1f:bb:60:2b:3c:16:11:89:4a:18:25: 24:ce:2d:3d:b8:59:0e:11:e6:bb:a9:0f:ac:6a:63: ce:96:24:55:d5:cf:b4:a1:18:08:12:82:4f:d0:36: 1d:c9:34:5e:51:f3:e6:09:73:8c:34:a9:c4:4e:69: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BF:89:C3:14:F9:62:4E:EC:37:44:53:62:20:14:79:B6:22:FC:83 X509v3 Authority Key Identifier: keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.116.48.0/22 103.81.40.0/22 IPv6: 2400:6140::/32 Signature Algorithm: sha256WithRSAEncryption 14:f8:ef:c1:ba:f0:1c:e1:91:3c:e9:93:e8:42:8a:00:27:f1: bd:91:71:7c:64:71:6d:7d:80:04:0d:3e:37:cc:43:9c:58:df: f7:70:85:03:b0:e4:44:43:6a:63:9c:68:fb:ff:48:ac:e1:3d: 15:20:80:6f:a9:65:82:bf:a5:44:be:25:43:39:0d:f0:f2:12: d3:98:7d:c0:ec:b2:5d:21:39:37:cf:ee:d2:2b:da:17:0a:b6: 92:f9:ba:37:7b:c9:b4:67:80:ea:5b:28:64:9e:00:3e:50:d9: 89:64:2b:64:68:d6:7a:21:fb:8a:28:1b:00:e5:b8:0d:ec:40: 53:1b:3d:31:8c:91:ed:d9:19:b9:43:54:78:f4:ed:23:17:7a: 56:80:01:31:cf:c3:f7:09:02:69:dd:44:f9:8a:ec:3c:3e:76: dd:64:41:3f:36:4f:f7:38:44:e3:80:0b:70:f5:b0:83:72:b8: f3:3c:a6:07:45:85:06:cf:b2:7a:01:64:93:7e:a7:34:79:b6: 1f:6c:82:e3:65:89:1d:56:c5:04:a2:9a:32:ca:31:3b:df:39: bb:03:a3:af:1d:00:e9:15:f3:9e:b1:d1:94:6c:b3:fc:a0:40: 21:a7:a9:9b:d2:b9:e6:22:b6:be:19:28:c4:e3:b6:b7:35:f6: c0:30:be:26 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODNCRjExMC8GA1UEBRMoNTFBNDgyNThENENENkUwMUQyNDU4QzVCOTIxNkVGQTQ1 MjEwQjYyMzAeFw0yNDA1MjQwODUxMDFaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NTA1NGY1LTlmMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFMN2c0lNfuoY7ZO0N0ROSsUmt9Fqyq9sFSqL+5J+8V4yZJ+80qVpHE9V83s2T 3e746fMMp/ULy2/vNgoi5eOf4aCZIWqkglF1Re4Nae6bEYVXGX01mk7p0ho/3CDl XODrRpD6V2cuJr2Bj7Sr3uSHvv+a7xDD2mF14k7yUyrQlAydxmmGxyugyjXrH/BS EbnXRGU9lSe27ssTfMajsIiS0yOILmvh9Lp/JvyMEaEFjqSaJn34mlA4O0pqjytz 4XdLtYCNFbYfu2ArPBYRiUoYJSTOLT24WQ4R5rupD6xqY86WJFXVz7ShGAgSgk/Q Nh3JNF5R8+YJc4w0qcROaUXRAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQU67+JwxT5 Yk7sN0RTYiAUebYi/IMwHwYDVR0jBBgwFoAUUaSCWNTNbgHSRYxbkhbvpFIQtiMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4M0JGL0Y2N0M2MUVBMTk4 MTExRUZBNUFDNDc1M0M0RjlBRTAyL1VhU0NXTlROYmdIU1JZeGJraGJ2cEZJUXRp TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWFTQ1dOVE5iZ0hTUll4YmtoYnZwRklRdGlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCRi9GNjdDNjFFQTE5ODExMUVGQTVBQzQ3NTNDNEY5QUUwMi9DMjMwNTNCMDE5 QTkxMUVGOTczNjY0MTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAi10MAMEAmdRKDANBAIAAjAHAwUAJABhQDANBgkqhkiG9w0B AQsFAAOCAQEAFPjvwbrwHOGRPOmT6EKKACfxvZFxfGRxbX2ABA0+N8xDnFjf93CF A7DkRENqY5xo+/9IrOE9FSCAb6llgr+lRL4lQzkN8PIS05h9wOyyXSE5N8/u0iva Fwq2kvm6N3vJtGeA6lsoZJ4APlDZiWQrZGjWeiH7iigbAOW4DexAUxs9MYyR7dkZ uUNUePTtIxd6VoABMc/D9wkCad1E+YrsPD523WRBPzZP9zhE44ALcPWwg3K48zym B0WFBs+yegFkk36nNHm2H2yC42WJHVbFBKKaMsoxO985uwOjrx0A6RXznrHRlGyz /KBAIaepm9K55iK2vhkoxOO2tzX2wDC+Jg== -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:51 2024 by rpki-client on console-ams.rpki-client.org