$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/22A794108B6B11EEB06AEB4CC4F9AE02.roa File: 22A794108B6B11EEB06AEB4CC4F9AE02.roa (raw, json) Hash identifier: HfRzRk+Ra3SEnSmlJUNL0etdIxRw0PAiVgmvAcSjyLk= Subject key identifier: 87:5B:CD:0E:13:A4:EE:95:B5:C9:AE:B9:1E:22:64:8A:44:D3:C3:8F Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 06E6 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/22A794108B6B11EEB06AEB4CC4F9AE02.roa Signing time: Sat 25 Nov 2023 08:17:55 +0000 ROA not before: Sat 25 Nov 2023 08:17:55 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 58889 IP address blocks: 45.64.136.0/22 maxlen: 24 2401:1980::/32 maxlen: 36 2401:1980::/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Jun 2024 17:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Nov 25 08:17:55 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6561adb3-0726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:fb:77:ab:45:42:b7:bc:bb:8b:8f:a1:a0: 14:61:a7:29:bd:9c:07:ab:2a:fb:92:d4:9c:d8:5c: 70:2e:79:b5:39:64:c6:81:fb:a9:6c:67:ff:92:67: da:8a:a8:eb:93:2b:67:a5:d3:a4:98:46:ae:e4:dd: 52:6e:0b:b2:67:d6:f6:ec:40:02:23:dc:8b:6b:37: 3d:ec:25:9b:8d:5a:cb:ae:64:7b:97:a5:99:37:5f: 40:88:13:d2:4c:f7:fb:ad:4b:12:d2:8c:cc:27:10: f6:47:7a:eb:5e:ef:12:95:7d:ec:14:e2:04:e9:8e: 3e:1d:f7:ad:5e:bb:3f:69:cb:fd:79:6c:60:74:af: fe:b9:14:0e:30:a4:ce:6b:17:3d:1f:de:75:bc:80: cd:e9:de:23:18:22:08:5b:52:35:30:8a:55:cd:57: d9:6b:07:b8:12:1c:f2:a6:61:54:5f:56:d9:d1:94: db:03:15:54:d2:20:11:0f:3b:78:26:30:62:48:12: e8:d8:9e:a7:47:2d:7e:b1:4a:86:75:0c:06:58:f8: 4e:c2:39:de:e2:dd:d2:a5:be:66:d1:81:ef:06:74: f1:08:66:ef:92:9b:c8:2a:7e:82:39:00:a7:ef:36: 30:18:92:02:ac:92:cc:17:e4:fc:b6:81:5c:35:58: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5B:CD:0E:13:A4:EE:95:B5:C9:AE:B9:1E:22:64:8A:44:D3:C3:8F X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/22A794108B6B11EEB06AEB4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.136.0/22 IPv6: 2401:1980::/32 Signature Algorithm: sha256WithRSAEncryption 0f:29:30:ca:32:d9:a6:32:c8:0b:ce:ea:de:5d:19:3e:23:21: fb:c0:2b:6c:dd:09:4f:73:bb:4d:93:98:34:d2:3c:af:02:ce: 4c:5d:9b:40:96:4f:98:ec:b4:7b:11:5f:d2:54:97:45:02:25: f3:30:9e:3d:fd:9d:37:e8:5e:a7:fb:3b:9c:ca:83:72:99:0c: b7:de:13:27:fd:45:d5:86:25:10:a5:7a:c6:b6:c3:ea:d7:a4: 34:1b:a5:be:62:2b:b7:1e:5f:a4:b1:34:f3:c0:5b:d8:6d:99: a2:c4:9b:54:c8:b5:77:9b:de:37:c6:bc:36:e3:47:22:82:1d: df:13:94:f1:f8:31:58:e9:ad:7e:28:a6:6c:27:4c:21:86:90: a3:02:34:1a:b8:ae:aa:dd:ba:95:a2:bc:b1:10:cd:5f:7c:8b: 40:65:b0:6c:cd:49:c2:d7:9f:75:92:12:2a:b1:81:63:d2:2d: 80:64:60:74:51:77:e3:06:19:f1:3e:4f:80:ce:b8:ea:de:10: 1e:38:00:9e:bf:ca:4f:fe:04:b8:b5:88:26:be:f1:2a:24:9d: 7c:24:8b:72:68:90:ce:81:93:b1:82:2e:b0:5a:68:ac:b7:cd: 80:77:86:25:9a:c1:8f:d6:88:34:6a:1c:72:a1:9c:04:e7:b0: 8d:dd:08:94 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjMxMTI1MDgxNzU1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTYxYWRiMy0wNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunX7d6tFQre8u4uPoaAUYacpvZwHqyr7ktSc2FxwLnm1OWTGgfupbGf/kmfa iqjrkytnpdOkmEau5N1SbguyZ9b27EACI9yLazc97CWbjVrLrmR7l6WZN19AiBPS TPf7rUsS0ozMJxD2R3rrXu8SlX3sFOIE6Y4+HfetXrs/acv9eWxgdK/+uRQOMKTO axc9H951vIDN6d4jGCIIW1I1MIpVzVfZawe4EhzypmFUX1bZ0ZTbAxVU0iARDzt4 JjBiSBLo2J6nRy1+sUqGdQwGWPhOwjne4t3Spb5m0YHvBnTxCGbvkpvIKn6COQCn 7zYwGJICrJLMF+T8toFcNVhWuQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIdbzQ4T pO6VtcmuuR4iZIpE08OPMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvMjJBNzk0MTA4 QjZCMTFFRUIwNkFFQjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAItQIgwDQQCAAIwBwMFACQBGYAwDQYJKoZIhvcNAQELBQAD ggEBAA8pMMoy2aYyyAvO6t5dGT4jIfvAK2zdCU9zu02TmDTSPK8Czkxdm0CWT5js tHsRX9JUl0UCJfMwnj39nTfoXqf7O5zKg3KZDLfeEyf9RdWGJRClesa2w+rXpDQb pb5iK7ceX6SxNPPAW9htmaLEm1TItXeb3jfGvDbjRyKCHd8TlPH4MVjprX4opmwn TCGGkKMCNBq4rqrdupWivLEQzV98i0BlsGzNScLXn3WSEiqxgWPSLYBkYHRRd+MG GfE+T4DOuOreEB44AJ6/yk/+BLi1iCa+8SoknXwki3JokM6Bk7GCLrBaaKy3zYB3 hiWawY/WiDRqHHKhnATnsI3dCJQ= -----END CERTIFICATE-----Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org