$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa File: F5A921B85BE911EF8624AA20C4F9AE02.roa (raw, json) Hash identifier: wiOEudTGWtiO2PCJUHgbdooBMCVi8hh164T5dQWF5Es= Subject key identifier: 02:58:81:E3:A4:7A:D0:8B:70:10:48:0B:44:CC:B7:EC:85:17:30:0E Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 03C5 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa Signing time: Fri 16 Aug 2024 16:09:48 +0000 ROA not before: Fri 16 Aug 2024 16:09:48 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 58867 IP address blocks: 45.129.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Aug 16 16:09:48 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66bf79cc-14f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:bf:0c:01:28:cf:7a:b8:29:78:c5:37:a3: d8:21:b1:83:91:a5:dc:f4:9c:93:d8:ff:b4:3f:be: 39:3d:a6:d1:0c:a8:ea:5d:4e:9d:a5:ed:9c:95:d8: cb:6f:e0:b1:75:ee:87:bd:af:24:4f:d5:d8:06:9a: 36:ad:75:57:e5:67:19:5b:43:be:b2:a6:57:b3:88: a6:0c:8b:9b:d1:5e:75:91:92:b9:75:e7:43:fd:f2: d3:ed:cf:c2:7b:af:ea:8d:fe:64:f2:e5:78:61:de: 45:4c:8d:63:d9:08:57:ea:a8:65:ce:a6:64:b6:0f: 35:c9:72:98:4c:04:43:84:e0:e5:11:4d:66:bf:67: 34:1c:70:9f:82:a3:64:b4:ae:69:27:c2:8e:e5:e8: 62:fd:d3:8b:ed:fc:ed:bb:96:fe:0d:8a:31:f1:64: cd:fd:d8:7e:38:dc:2a:55:21:92:9d:04:9c:6e:fb: 0a:3c:ac:44:90:d3:55:37:1b:17:c9:19:35:5b:95: 99:91:b7:17:4c:94:c6:08:04:58:bb:c6:55:f4:be: 92:c3:80:4d:2c:51:95:3b:78:da:e0:9b:99:28:98: ca:e6:0f:b9:74:bc:67:98:30:19:cb:ed:be:a5:d8: 1e:ae:b9:01:0a:c5:20:e6:cb:3a:5e:44:ca:3c:53: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:58:81:E3:A4:7A:D0:8B:70:10:48:0B:44:CC:B7:EC:85:17:30:0E X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.129.229.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:11:92:79:f5:3a:51:fe:ca:48:d1:69:41:7b:9f:f3:e5:60: 49:79:f5:5f:f5:78:3d:40:63:27:1b:43:e4:25:a1:d3:77:e7: 05:8f:6b:c0:45:f0:69:be:af:39:36:9f:f7:d5:f7:cb:23:62: 7f:8d:ab:2e:ec:98:2a:e5:c2:93:75:80:84:79:84:5d:1b:85: 07:a3:f1:0a:3a:f9:ea:5c:fe:d2:86:7f:54:a2:cf:00:bf:25: df:19:59:08:3b:ae:b5:92:53:ee:9b:36:e3:c3:44:45:76:63: 12:ba:fe:e7:c5:ed:3f:7b:bd:f2:bb:0f:39:9a:10:ef:d3:a8: 39:c1:6c:1f:9e:61:17:1f:f8:72:d9:89:e5:bc:06:32:03:b1: e6:2a:de:87:9f:85:41:56:ca:5a:e4:fd:12:f7:b4:ac:19:66: 21:b7:8d:3c:d9:22:64:40:75:46:76:37:74:02:85:70:e1:37: a2:e3:a7:76:5e:d3:8e:5e:7f:9b:b2:21:b0:c0:ed:86:72:05: b2:26:94:a2:bf:a3:93:8e:1e:03:a1:7f:61:d4:85:e7:0b:4f: c0:f0:db:21:0d:5e:58:7b:bc:6e:de:d5:f9:35:ec:d1:04:6b: a5:3d:f1:97:26:68:5c:b8:0e:96:89:c6:e9:5f:d5:03:36:e2: 23:52:7c:4c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjQwODE2MTYwOTQ4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmNzljYy0xNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwei/DAEoz3q4KXjFN6PYIbGDkaXc9JyT2P+0P745PabRDKjqXU6dpe2cldjL b+Cxde6Hva8kT9XYBpo2rXVX5WcZW0O+sqZXs4imDIub0V51kZK5dedD/fLT7c/C e6/qjf5k8uV4Yd5FTI1j2QhX6qhlzqZktg81yXKYTARDhODlEU1mv2c0HHCfgqNk tK5pJ8KO5ehi/dOL7fztu5b+DYox8WTN/dh+ONwqVSGSnQScbvsKPKxEkNNVNxsX yRk1W5WZkbcXTJTGCARYu8ZV9L6Sw4BNLFGVO3ja4JuZKJjK5g+5dLxnmDAZy+2+ pdgerrkBCsUg5ss6XkTKPFNDRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAJYgeOk etCLcBBIC0TMt+yFFzAOMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNUI0QzRFMzY1OTY5MTFFQzk0QTNFNzcwQzRGOUFFMDIvRjVBOTIxQjg1 QkU5MTFFRjg2MjRBQTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtgeUwDQYJKoZIhvcNAQELBQADggEBAEoRknn1OlH+ykjR aUF7n/PlYEl59V/1eD1AYycbQ+QlodN35wWPa8BF8Gm+rzk2n/fV98sjYn+Nqy7s mCrlwpN1gIR5hF0bhQej8Qo6+epc/tKGf1SizwC/Jd8ZWQg7rrWSU+6bNuPDREV2 YxK6/ufF7T97vfK7DzmaEO/TqDnBbB+eYRcf+HLZieW8BjIDseYq3oefhUFWylrk /RL3tKwZZiG3jTzZImRAdUZ2N3QChXDhN6Ljp3Ze045ef5uyIbDA7YZyBbImlKK/ o5OOHgOhf2HUhecLT8Dw2yENXlh7vG7e1fk17NEEa6U98ZcmaFy4DpaJxulf1QM2 4iNSfEw= -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:18 2024 by rpki-client on console-ams.rpki-client.org