$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa File: B70AE7D20C6B11EC82638A40C4F9AE02.roa (raw, json) Hash identifier: qyTxkkSSZz/mEPJmCPmO4drOsBAzqss/jEsEWzyS7n4= Subject key identifier: A6:46:41:DA:D0:65:85:EB:FE:82:DC:0D:8B:4D:67:47:28:01:3B:A9 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 2782 Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa Signing time: Sat 02 Nov 2024 15:52:22 +0000 ROA not before: Sat 02 Nov 2024 15:52:22 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 132447 IP address blocks: 45.121.88.0/22 maxlen: 22 45.121.88.0/24 maxlen: 24 45.121.89.0/24 maxlen: 24 45.121.90.0/24 maxlen: 24 45.121.91.0/24 maxlen: 24 103.21.164.0/22 maxlen: 22 103.21.164.0/24 maxlen: 24 103.21.165.0/24 maxlen: 24 103.21.166.0/24 maxlen: 24 103.21.167.0/24 maxlen: 24 2405:6b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10114 (0x2782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Nov 2 15:52:22 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67264ab5-16d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:88:b2:c4:b2:b5:97:24:70:0f:df:67:10: 37:34:10:69:8d:00:fc:0e:f1:b4:29:98:38:59:0c: 01:2e:9c:8a:39:ae:5a:8f:1b:48:87:f4:d1:6e:13: 7d:3b:3b:5d:97:03:1b:99:b9:ee:6e:b5:06:dd:08: a7:d5:1d:bc:e6:06:03:ae:e8:59:bf:a0:1d:12:c0: 8e:1d:25:c3:68:7e:4e:8c:4d:1b:af:97:e8:d3:68: d8:2c:72:bf:a0:ac:33:81:49:c5:e6:7a:3e:b4:35: e3:bc:db:30:53:d3:e8:da:8c:d0:55:fe:87:40:83: f3:92:9d:c2:60:5f:74:a5:9b:fb:3b:9c:31:a1:06: fa:78:0d:95:09:3f:4a:9c:78:3c:fb:e6:0d:eb:29: 2d:d7:cb:d5:1e:06:9a:00:51:03:97:4c:cf:af:be: ce:76:fd:13:d4:ec:d6:a5:e9:ee:3f:d9:26:4a:26: ba:0c:82:7b:e7:49:4b:f2:b5:bd:70:20:48:e3:f2: c3:cc:26:e3:0c:b5:aa:94:9c:f9:73:39:e4:47:93: 2d:5b:41:db:93:c9:68:5f:ac:39:81:dc:2c:39:72: 64:62:c5:8f:3a:82:50:4d:bb:db:ad:db:62:98:20: 08:76:b5:b3:3f:c2:58:02:1a:55:d1:0d:78:fa:10: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:46:41:DA:D0:65:85:EB:FE:82:DC:0D:8B:4D:67:47:28:01:3B:A9 X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.88.0/22 103.21.164.0/22 IPv6: 2405:6b00::/48 Signature Algorithm: sha256WithRSAEncryption 92:09:5c:fa:80:06:7e:dc:1e:b1:62:8a:55:1b:b3:1c:8d:1c: b9:23:00:a4:7f:2c:aa:f2:80:ed:52:d3:26:dc:e3:da:74:2f: 7f:49:b2:06:db:bc:23:d6:ad:bb:7f:ae:33:69:7f:e4:db:37: 87:66:61:ac:16:34:c3:72:8c:5c:b3:82:c2:dc:05:8e:fb:f5: cc:25:b9:15:5e:84:fc:d1:e0:89:4e:2e:72:60:f9:cc:80:81: 9e:f3:0c:9b:28:5a:43:d3:45:98:dd:77:a3:b8:1b:7f:18:a3: 9e:bf:b0:59:f6:2c:9c:60:fb:37:66:22:8d:29:44:aa:17:7f: a5:1d:fd:df:9d:ed:a7:8c:ca:49:38:cc:73:6f:74:de:dd:75: e7:4d:c4:d9:1d:b5:a9:d3:1e:b7:80:48:95:4b:68:e6:22:e9: e5:bc:1a:33:62:5c:98:23:73:06:59:a5:f2:9f:e2:33:7e:c9: 4f:e7:9c:b6:7d:5d:ef:a0:00:34:69:f8:13:83:13:10:95:bb: ca:bd:86:0a:c3:81:70:ed:54:e1:48:d6:ef:10:b7:05:2b:92: ce:cb:73:76:c3:32:6d:23:c0:70:14:b1:0b:cb:7f:c1:ef:64: 10:e5:7b:f8:b9:db:28:7b:0e:9b:62:49:3c:29:30:58:4c:a6: e0:69:87:60 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICJ4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjQxMTAyMTU1MjIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2NGFiNS0xNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzE+IssSytZckcA/fZxA3NBBpjQD8DvG0KZg4WQwBLpyKOa5ajxtIh/TRbhN9 OztdlwMbmbnubrUG3Qin1R285gYDruhZv6AdEsCOHSXDaH5OjE0br5fo02jYLHK/ oKwzgUnF5no+tDXjvNswU9Po2ozQVf6HQIPzkp3CYF90pZv7O5wxoQb6eA2VCT9K nHg8++YN6ykt18vVHgaaAFEDl0zPr77Odv0T1OzWpenuP9kmSia6DIJ750lL8rW9 cCBI4/LDzCbjDLWqlJz5cznkR5MtW0Hbk8loX6w5gdwsOXJkYsWPOoJQTbvbrdti mCAIdrWzP8JYAhpV0Q14+hCxhwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKZGQdrQ ZYXr/oLcDYtNZ0coATupMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNkIvNzUyNDRCNjJBMTYzMTFFNEI5NjZERDBGQzRGOUFFMDIvQjcwQUU3RDIw QzZCMTFFQzgyNjM4QTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIteVgDBAJnFaQwDwQCAAIwCQMHACQFawAAADANBgkqhkiG 9w0BAQsFAAOCAQEAkglc+oAGftwesWKKVRuzHI0cuSMApH8sqvKA7VLTJtzj2nQv f0myBtu8I9atu3+uM2l/5Ns3h2ZhrBY0w3KMXLOCwtwFjvv1zCW5FV6E/NHgiU4u cmD5zICBnvMMmyhaQ9NFmN13o7gbfxijnr+wWfYsnGD7N2YijSlEqhd/pR39353t p4zKSTjMc2903t11503E2R21qdMet4BIlUto5iLp5bwaM2JcmCNzBlml8p/iM37J T+ectn1d76AANGn4E4MTEJW7yr2GCsOBcO1U4UjW7xC3BSuSzstzdsMybSPAcBSx C8t/we9kEOV7+LnbKHsOm2JJPCkwWEym4GmHYA== -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org