$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/2605BA6A267D11ECAF7F166DC4F9AE02.roa File: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (raw, json) Hash identifier: iU+dm7+nLQRZzFMHQxkAgltXoZ5D3RNCl5X3OGdssIA= Subject key identifier: 63:7E:5C:EA:A2:B3:91:67:15:53:19:4F:30:DE:51:20:90:4C:31:CF Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 05FE Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/2605BA6A267D11ECAF7F166DC4F9AE02.roa Signing time: Wed 31 May 2023 00:57:15 +0000 ROA not before: Wed 31 May 2023 00:57:15 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 20473 IP address blocks: 45.114.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 22:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: May 31 00:57:15 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64769b6b-1efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:bb:c4:31:42:fc:c2:d3:13:46:d3:0b:1a: b9:9e:76:7b:40:d1:a8:31:a0:40:82:67:10:f2:db: c1:ee:3c:10:b2:b9:f7:f6:91:a1:44:f1:aa:a5:08: c5:27:8b:04:21:a1:e4:a0:46:c1:b2:d9:b4:47:11: 40:1d:d4:6d:3f:64:ad:b8:47:87:d4:cb:4a:cc:a6: 0a:92:6e:d6:69:a9:28:50:45:2b:0c:38:a9:6e:a0: f0:a8:67:08:21:d3:44:70:7c:ec:de:1c:b2:88:e5: 38:0b:85:33:ff:51:30:b3:32:47:13:47:bf:78:56: 74:1f:15:35:1f:cb:26:d7:e5:f9:7c:92:00:0d:bf: 46:ba:17:fc:1a:29:ed:b6:8a:64:61:5e:f1:ff:79: 04:f8:01:86:b8:86:fc:24:c5:6a:26:a1:c9:c7:a9: ec:f1:40:3a:23:47:54:37:dc:cc:aa:6e:e6:cd:87: 1c:fa:3d:5a:02:ff:40:ea:b6:40:ff:85:e7:f7:3f: 2c:e7:62:6f:ff:76:9c:82:2b:28:85:3e:a9:e8:44: f6:6e:d5:ed:72:37:49:1b:93:84:76:84:6f:05:eb: 56:bb:b9:ad:a8:5e:db:0f:04:a8:31:71:16:e1:23: 07:41:87:3a:ee:20:b3:57:5b:c8:a9:46:98:96:d5: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7E:5C:EA:A2:B3:91:67:15:53:19:4F:30:DE:51:20:90:4C:31:CF X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/2605BA6A267D11ECAF7F166DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.190.0/24 Signature Algorithm: sha256WithRSAEncryption 72:e8:08:ae:f1:fb:32:00:32:07:5c:ca:55:f4:be:63:36:40: 95:65:b6:01:ac:19:b8:dd:db:c1:bb:37:71:22:d3:80:ef:07: 13:2f:ac:d9:6d:c8:87:d5:09:29:64:80:dd:d5:e4:1e:52:d8: 84:76:00:6c:73:46:39:3d:7d:63:dc:76:1f:76:0f:0e:08:4c: 03:7b:fa:86:49:17:12:1f:dc:e4:c5:0e:20:d5:94:4c:eb:fc: 49:5f:d5:20:d1:0d:01:97:70:fa:31:fe:d1:aa:fc:cf:0e:5e: b2:03:c6:4e:7c:72:55:95:9f:e8:95:2c:33:6f:f0:28:e5:e4: f5:1f:16:07:21:16:e0:16:7c:d3:d3:03:e0:88:e8:1d:7d:49: 0d:d3:1b:21:6c:bf:8e:c4:3c:57:09:b0:7f:f1:34:45:c6:e8: cb:c0:13:cf:ae:14:66:b8:f7:2f:c2:7e:76:71:93:18:44:66: fd:8c:e6:2a:13:83:12:ac:44:b2:96:cd:d1:94:b3:db:52:39: 53:8e:34:30:9f:17:24:8c:66:2f:aa:d1:46:c9:26:af:be:bb: 68:81:79:6c:e9:ec:50:03:55:a5:95:3f:83:e9:72:61:b2:85: a4:a3:51:2c:5e:8e:d4:b5:52:29:7c:f3:ae:0a:83:8d:64:17: 78:b1:7a:cb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjMwNTMxMDA1NzE1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc2OWI2Yi0xZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyK7xDFC/MLTE0bTCxq5nnZ7QNGoMaBAgmcQ8tvB7jwQsrn39pGhRPGqpQjF J4sEIaHkoEbBstm0RxFAHdRtP2StuEeH1MtKzKYKkm7WaakoUEUrDDipbqDwqGcI IdNEcHzs3hyyiOU4C4Uz/1EwszJHE0e/eFZ0HxU1H8sm1+X5fJIADb9Guhf8Gint topkYV7x/3kE+AGGuIb8JMVqJqHJx6ns8UA6I0dUN9zMqm7mzYcc+j1aAv9A6rZA /4Xn9z8s52Jv/3acgisohT6p6ET2btXtcjdJG5OEdoRvBetWu7mtqF7bDwSoMXEW 4SMHQYc67iCzV1vIqUaYltVK5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGN+XOqi s5FnFVMZTzDeUSCQTDHPMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvMjYwNUJBNkEy NjdEMTFFQ0FGN0YxNjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtcr4wDQYJKoZIhvcNAQELBQADggEBAHLoCK7x+zIAMgdc ylX0vmM2QJVltgGsGbjd28G7N3Ei04DvBxMvrNltyIfVCSlkgN3V5B5S2IR2AGxz Rjk9fWPcdh92Dw4ITAN7+oZJFxIf3OTFDiDVlEzr/Elf1SDRDQGXcPox/tGq/M8O XrIDxk58clWVn+iVLDNv8Cjl5PUfFgchFuAWfNPTA+CI6B19SQ3TGyFsv47EPFcJ sH/xNEXG6MvAE8+uFGa49y/CfnZxkxhEZv2M5ioTgxKsRLKWzdGUs9tSOVOONDCf FySMZi+q0UbJJq++u2iBeWzp7FADVaWVP4PpcmGyhaSjUSxejtS1Uil8864Kg41k F3ixess= -----END CERTIFICATE-----Generated at Wed Apr 17 01:28:25 2024 by rpki-client on console-ams.rpki-client.org