$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/102DBE5EC0D611EEA07B2383C4F9AE02.roa File: 102DBE5EC0D611EEA07B2383C4F9AE02.roa (raw, json) Hash identifier: waNj5kEf5BPxhCqk/khsCDTDqN8v67fB8j/qbtM+raA= Subject key identifier: A8:9E:2D:24:84:18:FA:8E:97:EB:1A:1E:42:A6:2D:81:E8:E5:F6:D4 Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0737 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/102DBE5EC0D611EEA07B2383C4F9AE02.roa Signing time: Thu 01 Feb 2024 07:48:06 +0000 ROA not before: Thu 01 Feb 2024 07:48:06 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 58889 IP address blocks: 45.64.136.0/22 maxlen: 24 2401:1980::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Jun 2024 17:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Feb 1 07:48:06 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65bb4cb6-688b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:34:24:22:64:29:1f:d6:28:c5:20:d3:89: 6e:34:40:71:3e:7f:c4:b8:e9:77:66:a7:02:26:52: 18:da:8d:c0:c6:52:89:08:9b:98:dc:e9:36:6c:92: 9f:c6:49:03:3a:36:8f:e2:34:7e:77:2d:2f:b5:8a: b8:fb:4d:b1:91:73:30:73:36:16:70:3e:ca:fa:ef: 0d:1f:95:5d:64:92:8d:e3:0a:cc:cf:31:63:8f:6e: 7d:f9:e9:bf:38:6b:ec:ed:11:44:5d:36:b9:b4:c0: cb:8d:7e:31:77:61:f9:ac:ee:25:f6:2c:b0:dc:fb: e9:1f:7e:27:0a:2b:65:3f:9c:45:0c:d5:0c:78:ff: f3:35:d3:70:42:16:d2:31:f8:59:8f:5d:d3:96:18: ce:76:1b:9f:25:fc:d2:f8:9a:26:31:9a:30:21:b9: 07:54:7b:77:62:29:d0:b3:16:c9:db:96:61:9a:8c: 30:e1:d6:5c:54:cb:8c:ed:0e:96:b7:44:eb:89:e5: 1f:7a:fa:ef:e3:13:e9:5f:22:8a:1c:2c:29:9d:15: 96:56:b3:38:1e:23:32:72:bc:4f:98:9e:28:54:fd: ab:a5:1b:10:a3:55:d7:28:dd:4b:8b:65:0a:89:d7: fb:0c:a6:e7:0b:db:06:30:b3:55:c4:85:1b:da:3f: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9E:2D:24:84:18:FA:8E:97:EB:1A:1E:42:A6:2D:81:E8:E5:F6:D4 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/102DBE5EC0D611EEA07B2383C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.136.0/22 IPv6: 2401:1980::/32 Signature Algorithm: sha256WithRSAEncryption 03:4e:e2:25:b0:26:3e:ae:91:fc:a2:87:9f:14:47:43:88:76: f7:54:c9:b3:42:8b:e2:5b:64:80:e6:4a:71:66:05:c3:ff:04: 64:1d:79:f0:b6:ce:1e:ee:99:da:4e:b3:cb:48:56:60:26:f6: 37:98:73:34:c3:f2:c9:66:bc:bb:f9:42:9d:22:9b:fe:27:77: 76:fb:06:63:1c:78:72:a8:09:d3:9e:8d:e1:76:37:9b:94:46: c6:3c:9d:b3:99:e8:26:ec:70:4e:78:8a:ab:5b:4c:35:99:e7: de:48:3d:43:ef:66:6d:e6:6f:50:0f:57:b3:a3:ef:e7:48:f6: f3:29:1e:0e:ff:57:08:b2:44:11:53:a0:bc:61:32:6d:1d:e3: 27:c3:27:62:3c:20:61:fe:bd:49:24:0b:bd:3d:db:46:ce:63: 55:b7:b0:04:9f:35:ce:37:21:b4:c1:26:8b:78:dc:79:39:27: ee:24:be:13:74:ea:ea:a9:f9:0b:30:58:74:07:05:9d:f2:ff: 55:91:9c:bf:1c:8b:2f:09:e0:31:48:9e:be:ea:43:38:92:0b: 67:0c:28:56:e0:d1:40:f2:1e:b0:bc:d0:17:6f:25:7b:f8:d1: 5a:25:67:d0:09:26:c8:d0:40:5b:9d:4b:72:66:10:f2:db:6c: 12:12:0f:b2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjQwMjAxMDc0ODA2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJiNGNiNi02ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQo0JCJkKR/WKMUg04luNEBxPn/EuOl3ZqcCJlIY2o3AxlKJCJuY3Ok2bJKf xkkDOjaP4jR+dy0vtYq4+02xkXMwczYWcD7K+u8NH5VdZJKN4wrMzzFjj259+em/ OGvs7RFEXTa5tMDLjX4xd2H5rO4l9iyw3PvpH34nCitlP5xFDNUMeP/zNdNwQhbS MfhZj13TlhjOdhufJfzS+JomMZowIbkHVHt3YinQsxbJ25Zhmoww4dZcVMuM7Q6W t0TrieUfevrv4xPpXyKKHCwpnRWWVrM4HiMycrxPmJ4oVP2rpRsQo1XXKN1Li2UK idf7DKbnC9sGMLNVxIUb2j+vYwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKieLSSE GPqOl+saHkKmLYHo5fbUMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvMTAyREJFNUVD MEQ2MTFFRUEwN0IyMzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAItQIgwDQQCAAIwBwMFACQBGYAwDQYJKoZIhvcNAQELBQAD ggEBAANO4iWwJj6ukfyih58UR0OIdvdUybNCi+JbZIDmSnFmBcP/BGQdefC2zh7u mdpOs8tIVmAm9jeYczTD8slmvLv5Qp0im/4nd3b7BmMceHKoCdOejeF2N5uURsY8 nbOZ6CbscE54iqtbTDWZ595IPUPvZm3mb1APV7Oj7+dI9vMpHg7/VwiyRBFToLxh Mm0d4yfDJ2I8IGH+vUkkC70920bOY1W3sASfNc43IbTBJot43Hk5J+4kvhN06uqp +QswWHQHBZ3y/1WRnL8ciy8J4DFInr7qQziSC2cMKFbg0UDyHrC80BdvJXv40Vol Z9AJJsjQQFudS3JmEPLbbBISD7I= -----END CERTIFICATE-----Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org