$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/F5C5A42C5ADC11EF8061F335C4F9AE02.roa File: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (raw, json) Hash identifier: 4YzC6Cc8LgqFpsCXxrDBOTQrvB+yHSUB5SnQRI2dyL4= Subject key identifier: 94:2D:06:E3:1C:9E:13:6B:83:BD:E2:54:F1:45:51:B5:AE:24:DF:82 Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: 02 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/F5C5A42C5ADC11EF8061F335C4F9AE02.roa Signing time: Thu 15 Aug 2024 08:04:13 +0000 ROA not before: Thu 15 Aug 2024 08:04:13 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 26658 IP address blocks: 45.127.160.0/22 maxlen: 22 103.196.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Aug 15 08:04:13 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66bdb67d-f7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:c2:e0:9a:2b:12:0f:50:93:7f:29:77:f0: 65:69:7f:ea:0c:48:cc:46:f3:3e:3f:73:f5:84:f9: ee:19:49:f8:6d:e1:c8:20:0a:c2:4e:a8:a2:15:b1: a2:51:94:12:94:34:89:f4:d3:43:b4:83:6d:6f:24: 52:f0:ab:24:f4:27:ba:25:91:92:04:77:af:61:44: 5c:44:e4:1c:ef:2f:f8:e6:13:af:d4:1c:a2:aa:0f: e9:2f:5f:b8:be:7b:31:0a:be:d9:b5:a7:be:7f:e2: d0:49:1f:d1:03:96:85:2b:36:f2:ac:04:d3:c6:5e: 24:09:df:01:be:03:bf:c6:b5:68:ee:0c:cc:ea:e9: 95:c6:23:82:c1:30:ef:03:8e:ba:9c:8f:08:43:2e: a4:b6:a8:0f:e5:b1:e5:0d:77:86:ea:fb:b3:29:0c: 26:b3:8d:6a:ad:cf:41:7a:c2:44:7b:42:66:0a:ed: 7a:39:3e:d6:54:66:27:0d:e8:e8:0c:12:3e:e1:3f: 7d:79:83:a6:79:51:ab:d6:12:16:a9:ec:30:dd:3e: c8:1c:d9:18:ea:c9:70:c2:49:0c:cd:73:5a:13:85: de:7b:1c:00:21:44:72:dd:24:d1:c5:b9:66:12:27: c6:ed:ed:66:a7:ff:0d:92:29:64:9a:13:19:df:56: 40:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2D:06:E3:1C:9E:13:6B:83:BD:E2:54:F1:45:51:B5:AE:24:DF:82 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/F5C5A42C5ADC11EF8061F335C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.160.0/22 103.196.100.0/22 Signature Algorithm: sha256WithRSAEncryption 56:7b:1d:12:a8:bb:ed:5d:57:36:d2:0a:f9:ac:02:39:52:da: 0a:e7:68:a4:af:85:74:55:50:99:4d:97:a1:39:60:b6:e8:0e: de:92:51:05:e5:00:32:ac:f8:45:46:40:34:36:05:f1:2d:af: 42:45:3f:6a:c8:ef:58:dc:d3:c1:75:b3:14:78:48:e4:f9:9b: 99:a9:d1:53:c1:8f:eb:74:ac:68:4e:b8:f6:fb:0a:49:5c:fc: ae:26:72:02:33:37:1c:c7:9c:74:70:60:de:f5:b5:d6:da:23: 65:8e:bd:35:70:4b:6b:2d:fe:7a:ac:36:89:87:20:b5:18:94: 6a:22:68:b1:e8:ef:31:64:1a:a1:2a:85:19:f5:14:31:03:4f: 66:90:8c:b7:39:dd:a5:29:e6:cc:f8:05:31:6b:76:95:e6:a9: 1e:5f:f8:bd:ab:9d:72:1f:19:c1:d5:7a:34:8c:4b:96:31:22: 45:40:bb:8f:85:4e:51:a1:57:1e:c2:c8:00:77:65:e8:e5:2e: e3:05:98:ff:9c:e5:ec:12:5d:c9:b6:20:0b:f2:45:82:09:bb: 87:93:13:97:4e:b0:99:f7:74:54:98:0e:36:78:9a:76:9f:e5: 63:b9:e8:2b:f1:23:d6:14:71:d4:e1:c9:af:1e:a2:4b:94:6b: 20:07:61:d7 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDRBODExMC8GA1UEBRMoODZFMjM0RTJFMUUyM0E0OTcxNDU4RDJBNzI2MTRERjEz ODk1RTI5QTAeFw0yNDA4MTUwODA0MTNaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmRiNjdkLWY3YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGGsLgmisSD1CTfyl38GVpf+oMSMxG8z4/c/WE+e4ZSfht4cggCsJOqKIVsaJR lBKUNIn000O0g21vJFLwqyT0J7olkZIEd69hRFxE5BzvL/jmE6/UHKKqD+kvX7i+ ezEKvtm1p75/4tBJH9EDloUrNvKsBNPGXiQJ3wG+A7/GtWjuDMzq6ZXGI4LBMO8D jrqcjwhDLqS2qA/lseUNd4bq+7MpDCazjWqtz0F6wkR7QmYK7Xo5PtZUZicN6OgM Ej7hP315g6Z5UavWEhap7DDdPsgc2RjqyXDCSQzNc1oThd57HAAhRHLdJNHFuWYS J8bt7Wan/w2SKWSaExnfVkAnAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUlC0G4xye E2uDveJU8UVRta4k34IwHwYDVR0jBBgwFoAUhuI04uHiOklxRY0qcmFN8TiV4pow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNEE4L0E1RjhFODc4NUFE QzExRUY4RjRDOTM3N0M0RjlBRTAyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHVJMDR1SGlPa2x4UlkwcWNtRk44VGlWNHBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9GNUM1QTQyQzVB REMxMUVGODA2MUYzMzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAi1/oAMEAmfEZDANBgkqhkiG9w0BAQsFAAOCAQEAVnsdEqi7 7V1XNtIK+awCOVLaCudopK+FdFVQmU2XoTlgtugO3pJRBeUAMqz4RUZANDYF8S2v QkU/asjvWNzTwXWzFHhI5PmbmanRU8GP63SsaE649vsKSVz8riZyAjM3HMecdHBg 3vW11tojZY69NXBLay3+eqw2iYcgtRiUaiJosejvMWQaoSqFGfUUMQNPZpCMtznd pSnmzPgFMWt2leapHl/4vaudch8ZwdV6NIxLljEiRUC7j4VOUaFXHsLIAHdl6OUu 4wWY/5zl7BJdybYgC/JFggm7h5MTl06wmfd0VJgONniadp/lY7noK/Ej1hRx1OHJ rx6iS5RrIAdh1w== -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:11 2024 by rpki-client on console-ams.rpki-client.org