$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa File: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: jQRT5PlFbI2u576tkmy6PzP4OP+SK4T1Hzx4zOkrIWw= Subject key identifier: DB:8B:38:00:4B:76:97:F6:6D:38:F0:E4:48:9A:BE:D8:17:3F:B1:02 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34E4 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:32 +0000 ROA not before: Mon 22 Jul 2024 14:40:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 38554 IP address blocks: 58.181.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA Validity Not Before: Jul 22 14:40:32 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f60-445b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:f2:b8:65:dd:39:d3:40:aa:1a:1d:a9:44: b2:bc:7d:5a:61:a5:96:0a:2c:d4:5c:18:90:1b:2f: 82:ce:55:d1:70:1a:0d:5a:45:6a:d3:83:fb:32:b9: 13:6b:da:a7:38:52:c7:68:61:8c:d4:4e:97:44:96: 59:51:ac:4a:57:18:54:05:09:ec:56:b2:9c:ee:55: 17:19:3b:14:39:db:b7:8b:09:24:bc:1d:fa:8f:bd: a6:d8:7f:50:ef:57:af:53:a2:ac:e8:9a:f8:53:22: 88:3e:fa:ee:be:22:04:08:0e:83:91:4e:9f:19:e0: 6c:c4:28:85:c4:1c:27:cc:73:cc:6c:29:86:06:a7: ab:54:4d:c0:e3:84:61:e3:2e:ed:eb:b4:cb:30:88: 22:bd:2a:cf:4d:54:80:be:9e:6f:ad:80:4e:e7:43: bd:9a:0e:fa:fb:dc:c7:20:b2:30:78:33:31:90:c1: 93:4e:b1:e2:b3:ed:e4:b3:ec:ae:bc:06:5b:da:45: 5c:ca:d2:d7:ac:13:ff:1d:6f:28:c5:07:7c:f8:64: 46:bc:7c:7d:a0:25:dc:55:fa:79:2e:0a:73:14:95: a0:35:d1:d5:e4:8c:a5:13:2f:34:a0:d6:42:b1:ee: 81:c1:86:0d:d5:c5:66:4d:46:4d:a1:a4:a6:38:e2: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8B:38:00:4B:76:97:F6:6D:38:F0:E4:48:9A:BE:D8:17:3F:B1:02 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.154.0/24 Signature Algorithm: sha256WithRSAEncryption a7:1f:b0:b9:ba:88:d1:8f:73:4c:b0:ca:54:ec:bb:16:e1:7d: a7:74:cf:49:7b:bc:27:46:5e:8e:1c:25:2c:94:74:8a:97:32: 0e:21:43:5c:ef:8a:e2:f3:52:8f:34:ff:d0:b3:d5:f0:88:03: 81:f6:26:37:a8:f9:ef:2e:79:af:13:2d:ca:7b:bf:e6:96:c7: 03:15:9a:22:4b:9e:ab:7e:3b:53:77:b6:42:f0:54:f0:5b:54: 41:0c:9a:e6:c8:b8:8e:cf:75:75:b4:4b:2a:70:fa:d0:46:61: 52:08:83:75:22:cc:34:47:d7:64:85:dc:05:1d:86:25:69:0c: 80:4e:04:4e:47:e3:b2:15:a3:f8:9a:01:84:54:66:94:a8:41: b8:ab:54:dd:19:a8:b7:95:a0:c7:9f:63:b5:67:13:93:23:fe: 6f:c5:a1:e5:77:fa:01:57:6d:ca:a5:78:4c:7a:59:bf:18:dc: 0e:81:16:02:30:43:d2:f9:74:bb:bb:7f:f5:39:2d:20:f0:4e: cd:f6:84:f6:5c:8c:cf:68:78:19:60:b8:97:b1:0b:15:4b:c0: e6:60:11:ed:b4:36:3a:1d:11:c3:12:62:d0:f4:49:3f:6a:f1: 00:e8:96:7b:da:a7:78:1a:88:99:40:1f:b2:bd:f5:89:da:2e: 7e:d1:48:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY2MC00NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvDyuGXdOdNAqhodqUSyvH1aYaWWCizUXBiQGy+CzlXRcBoNWkVq04P7MrkT a9qnOFLHaGGM1E6XRJZZUaxKVxhUBQnsVrKc7lUXGTsUOdu3iwkkvB36j72m2H9Q 71evU6Ks6Jr4UyKIPvruviIECA6DkU6fGeBsxCiFxBwnzHPMbCmGBqerVE3A44Rh 4y7t67TLMIgivSrPTVSAvp5vrYBO50O9mg76+9zHILIweDMxkMGTTrHis+3ks+yu vAZb2kVcytLXrBP/HW8oxQd8+GRGvHx9oCXcVfp5LgpzFJWgNdHV5IylEy80oNZC se6BwYYN1cVmTUZNoaSmOOJsvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNuLOABL dpf2bTjw5EiavtgXP7ECMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDUzRjhFOTg4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6tZowDQYJKoZIhvcNAQELBQADggEBAKcfsLm6iNGPc0yw ylTsuxbhfad0z0l7vCdGXo4cJSyUdIqXMg4hQ1zviuLzUo80/9Cz1fCIA4H2Jjeo +e8uea8TLcp7v+aWxwMVmiJLnqt+O1N3tkLwVPBbVEEMmubIuI7PdXW0Sypw+tBG YVIIg3UizDRH12SF3AUdhiVpDIBOBE5H47IVo/iaAYRUZpSoQbirVN0ZqLeVoMef Y7VnE5Mj/m/FoeV3+gFXbcqleEx6Wb8Y3A6BFgIwQ9L5dLu7f/U5LSDwTs32hPZc jM9oeBlguJexCxVLwOZgEe20NjodEcMSYtD0ST9q8QDolnvap3gaiJlAH7K99Yna Ln7RSAU= -----END CERTIFICATE-----Generated at Sun Feb 16 22:25:59 2025 by rpki-client