$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/3A8CD0DEF2BE11EA8EE60873C4F9AE02.roa File: 3A8CD0DEF2BE11EA8EE60873C4F9AE02.roa (raw, json) Hash identifier: FOCv9FxdrzoVFJRYD+6uA/Mk2XCcbitjvPQPM4VbunI= Subject key identifier: EE:57:E3:D5:72:95:15:C7:6E:21:D5:BB:BE:D3:34:75:0E:F6:71:F2 Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 068F Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/3A8CD0DEF2BE11EA8EE60873C4F9AE02.roa Signing time: Thu 22 Jun 2023 17:45:40 +0000 ROA not before: Thu 22 Jun 2023 17:45:40 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 135092 IP address blocks: 45.64.136.0/22 maxlen: 24 103.19.252.0/22 maxlen: 24 2401:1980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Jun 2024 17:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Jun 22 17:45:40 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=649488c3-d8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:dc:dd:0b:7c:9a:8b:4d:d5:00:4b:5d:86: 33:79:d3:ba:4f:98:2c:cf:a4:78:6c:af:90:89:bd: 29:ef:93:05:5c:79:39:ba:19:45:c7:fe:3d:a4:c0: bd:fa:50:c8:6b:00:fa:dd:49:0d:53:69:66:65:f5: f9:94:b3:27:e6:87:26:a6:bd:d6:fc:72:a0:4b:0a: cb:5e:04:b7:f4:4d:b4:a9:ff:9a:de:e7:cb:4a:87: 6a:e6:10:29:c0:39:72:c6:7d:ef:49:d1:98:c1:5e: 22:d4:c9:d5:8a:7d:b8:b2:d5:12:ca:be:62:51:e0: 6f:a0:da:17:bd:df:75:22:c4:df:30:d8:7a:4b:8c: 55:46:db:82:df:33:1b:3d:98:ea:35:1e:4b:17:2a: a4:61:dd:fe:5c:fe:46:2b:ce:ed:20:33:b8:0d:1b: b5:75:9c:bd:36:44:7d:dc:85:ac:b0:15:66:b0:ee: 28:38:d5:56:c7:74:36:c5:8c:ff:af:65:31:e5:fa: 29:95:7c:28:36:54:d6:97:4f:cc:a1:ce:76:9e:45: 77:be:79:31:b2:a3:36:50:da:8c:01:2f:cf:02:36: bb:ac:36:bc:60:c4:a1:2d:81:a7:3c:9e:ad:19:74: 81:4e:a3:b7:bf:e4:24:cf:29:63:9b:4f:1e:77:a6: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:57:E3:D5:72:95:15:C7:6E:21:D5:BB:BE:D3:34:75:0E:F6:71:F2 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/3A8CD0DEF2BE11EA8EE60873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.136.0/22 103.19.252.0/22 IPv6: 2401:1980::/32 Signature Algorithm: sha256WithRSAEncryption 93:1b:2a:4f:ff:5b:a6:85:29:bd:95:75:44:e0:c8:be:5d:4a: e0:c1:4d:06:d5:fb:91:b8:0a:2f:f2:e3:f3:a7:86:9b:49:17: df:0d:09:16:61:41:e9:10:1a:95:66:40:da:18:a9:9b:0d:f2: 34:35:1d:2d:4d:a3:9f:61:01:10:72:57:63:7e:e5:52:93:52: e6:47:4c:b8:90:df:54:04:c3:97:d2:2d:05:bc:5a:24:8b:e4: e8:9e:fd:a5:df:1c:c6:09:3a:9e:01:57:1e:62:82:5d:df:64: 2e:e9:92:59:83:08:5d:7c:cb:d3:d7:bf:2c:91:f4:9e:04:03: ea:28:f5:57:57:d8:7d:df:dc:89:8c:c0:18:7b:25:63:f8:bd: 6e:be:9a:b3:69:c4:06:d8:e2:bf:73:25:83:1e:4b:79:db:d6: d3:fe:48:22:09:61:70:c8:8e:b1:3f:3a:f2:6a:36:d2:26:c2: d8:0f:ce:ef:a9:90:be:5c:5c:2d:41:33:61:99:15:6c:1e:44: c8:22:04:98:19:28:ce:09:d8:f8:1b:54:1a:a6:ad:4f:2b:ea: 09:b8:94:23:00:65:f7:bd:f1:65:5a:82:bd:d0:f3:8c:49:a3: 10:58:65:f2:5b:0d:93:b0:3b:1a:4e:e8:8e:0e:c8:31:ee:cc: 9f:72:3a:56 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjMwNjIyMTc0NTQwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk0ODhjMy1kOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl3c3Qt8motN1QBLXYYzedO6T5gsz6R4bK+Qib0p75MFXHk5uhlFx/49pMC9 +lDIawD63UkNU2lmZfX5lLMn5ocmpr3W/HKgSwrLXgS39E20qf+a3ufLSodq5hAp wDlyxn3vSdGYwV4i1MnVin24stUSyr5iUeBvoNoXvd91IsTfMNh6S4xVRtuC3zMb PZjqNR5LFyqkYd3+XP5GK87tIDO4DRu1dZy9NkR93IWssBVmsO4oONVWx3Q2xYz/ r2Ux5foplXwoNlTWl0/Moc52nkV3vnkxsqM2UNqMAS/PAja7rDa8YMShLYGnPJ6t GXSBTqO3v+Qkzyljm08ed6blOQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFO5X49Vy lRXHbiHVu77TNHUO9nHyMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvM0E4Q0QwREVG MkJFMTFFQThFRTYwODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItQIgDBAJnE/wwDQQCAAIwBwMFACQBGYAwDQYJKoZIhvcN AQELBQADggEBAJMbKk//W6aFKb2VdUTgyL5dSuDBTQbV+5G4Ci/y4/OnhptJF98N CRZhQekQGpVmQNoYqZsN8jQ1HS1No59hARByV2N+5VKTUuZHTLiQ31QEw5fSLQW8 WiSL5Oie/aXfHMYJOp4BVx5igl3fZC7pklmDCF18y9PXvyyR9J4EA+oo9VdX2H3f 3ImMwBh7JWP4vW6+mrNpxAbY4r9zJYMeS3nb1tP+SCIJYXDIjrE/OvJqNtImwtgP zu+pkL5cXC1BM2GZFWweRMgiBJgZKM4J2PgbVBqmrU8r6gm4lCMAZfe98WVagr3Q 84xJoxBYZfJbDZOwOxpO6I4OyDHuzJ9yOlY= -----END CERTIFICATE-----Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org