$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/5E979F10C6C811ECA5A9AB33C4F9AE02.roa File: 5E979F10C6C811ECA5A9AB33C4F9AE02.roa (raw, json) Hash identifier: hZ1F/54EU32b4+tOv1jdpwsQTgq+Rgy859FLjmzADU0= Subject key identifier: 71:AA:48:CF:5A:93:10:59:AC:30:08:6A:E7:F3:18:DD:0D:F9:3F:9A Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Certificate serial: 0271 Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/5E979F10C6C811ECA5A9AB33C4F9AE02.roa Signing time: Sat 11 May 2024 04:10:30 +0000 ROA not before: Sat 11 May 2024 04:10:30 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 132742 IP address blocks: 45.115.240.0/22 maxlen: 24 103.56.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6 Validity Not Before: May 11 04:10:30 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=663eefb6-821d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:99:23:1b:af:e7:bf:54:7e:a7:03:3b:57: 17:41:e0:ff:b9:46:35:a0:0b:28:b0:13:99:fa:2e: 4d:7c:34:71:78:7e:d7:cd:34:37:f8:79:ed:be:5a: 54:c5:2a:f9:20:a4:1b:8c:39:09:8a:3d:98:ca:3e: d1:41:33:3d:41:3a:d4:31:09:1d:02:c6:4d:fb:88: cb:cb:b5:aa:6b:53:eb:2c:c5:2d:f8:47:8d:42:49: 4a:3f:fe:05:60:a5:97:ef:a5:ac:8e:f3:f0:d5:86: 4d:e7:7a:69:68:5e:80:75:0f:5a:89:1b:33:49:a0: 43:7b:fd:df:90:66:8e:2b:66:a6:b9:08:bb:23:7a: 42:68:0a:90:96:88:c1:f9:71:da:26:38:86:74:7e: 97:f8:54:10:f8:0c:a2:d6:9b:48:88:80:ad:a5:bb: a4:60:c2:76:67:60:fe:a2:66:ee:78:ca:7b:1c:37: f6:21:e0:43:83:a3:58:83:1c:5a:ad:0d:f8:d1:f1: 2d:10:78:d3:d8:6c:cb:a2:5c:fd:28:be:59:6e:f7: 53:3a:37:3b:10:00:02:73:08:2e:34:ca:66:7b:39: 46:89:72:84:07:d1:80:66:76:4b:e7:b0:ed:96:46: 30:8a:b1:19:1f:67:f0:39:d7:6c:36:88:a8:7b:98: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:48:CF:5A:93:10:59:AC:30:08:6A:E7:F3:18:DD:0D:F9:3F:9A X509v3 Authority Key Identifier: keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/5E979F10C6C811ECA5A9AB33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.240.0/22 103.56.24.0/22 Signature Algorithm: sha256WithRSAEncryption 65:bf:ac:ea:6d:dd:20:2a:44:b3:1f:9a:0e:a1:28:63:38:51: ef:ce:6b:10:ff:44:c3:d9:b6:82:06:eb:25:55:49:06:ef:69: 3b:fc:31:3c:e1:b5:61:6e:d0:d0:76:18:6d:00:48:22:99:67: c2:6b:87:b3:30:48:e8:a4:00:29:a4:af:25:f9:71:3b:7f:9a: fd:cd:5f:03:19:60:3d:9e:b5:fc:cf:c2:e8:b5:d1:95:8b:5b: 9b:6b:66:20:a1:e6:54:95:5c:e0:9f:0f:1a:81:b1:2c:d8:cd: 8c:c3:a4:4c:fe:f1:14:dd:91:7b:29:dd:47:f2:f2:a2:2f:b1: 03:60:c5:43:16:b7:0a:29:c3:97:97:42:30:04:6a:cc:11:95: 46:3e:fa:15:75:e6:04:ef:a0:08:c4:d5:c0:cb:a6:14:3c:8a: 7f:db:47:c0:d7:0d:43:ba:1d:a7:6a:82:57:1f:2e:99:e9:2e: 8d:f2:b4:30:b9:34:d8:a5:70:2e:d7:dc:39:05:a2:8e:62:bb: 6d:dd:43:cb:9f:29:68:14:50:e1:90:79:f5:80:0f:d9:b0:cc: 2e:21:15:94:24:33:72:91:cf:2a:08:81:2b:e7:40:51:22:be: 1f:48:86:b2:f4:8e:8d:67:02:61:fc:e0:01:e1:d8:69:56:cb: 71:c9:e6:98 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB RjI4ODYyRjYwHhcNMjQwNTExMDQxMDMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNlZWZiNi04MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOSZIxuv579UfqcDO1cXQeD/uUY1oAsosBOZ+i5NfDRxeH7XzTQ3+HntvlpU xSr5IKQbjDkJij2Yyj7RQTM9QTrUMQkdAsZN+4jLy7Wqa1PrLMUt+EeNQklKP/4F YKWX76WsjvPw1YZN53ppaF6AdQ9aiRszSaBDe/3fkGaOK2amuQi7I3pCaAqQlojB +XHaJjiGdH6X+FQQ+Ayi1ptIiICtpbukYMJ2Z2D+ombueMp7HDf2IeBDg6NYgxxa rQ340fEtEHjT2GzLolz9KL5ZbvdTOjc7EAACcwguNMpmezlGiXKEB9GAZnZL57Dt lkYwirEZH2fwOddsNoioe5jdEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHGqSM9a kxBZrDAIaufzGN0N+T+aMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2 MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzAyQjkvM0I3MkVFOTBDNjA1MTFFQ0FCNzREOTYyQzRGOUFFMDIvNUU5NzlGMTBD NkM4MTFFQ0E1QTlBQjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItc/ADBAJnOBgwDQYJKoZIhvcNAQELBQADggEBAGW/rOpt 3SAqRLMfmg6hKGM4Ue/OaxD/RMPZtoIG6yVVSQbvaTv8MTzhtWFu0NB2GG0ASCKZ Z8Jrh7MwSOikACmkryX5cTt/mv3NXwMZYD2etfzPwui10ZWLW5trZiCh5lSVXOCf DxqBsSzYzYzDpEz+8RTdkXsp3Ufy8qIvsQNgxUMWtwopw5eXQjAEaswRlUY++hV1 5gTvoAjE1cDLphQ8in/bR8DXDUO6HadqglcfLpnpLo3ytDC5NNilcC7X3DkFoo5i u23dQ8ufKWgUUOGQefWAD9mwzC4hFZQkM3KRzyoIgSvnQFEivh9IhrL0jo1nAmH8 4AHh2GlWy3HJ5pg= -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:58 2024 by rpki-client on console-fra.rpki-client.org