$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/AB9A3F46135211EB83A5A869C4F9AE02.roa File: AB9A3F46135211EB83A5A869C4F9AE02.roa (raw, json) Hash identifier: 1TJJ9TxJWi7wnEGMOxXiwcAZ23eOY7mFMgZfaQA6EKg= Subject key identifier: 20:DC:D8:17:6D:98:A7:E7:15:E9:C5:C8:A8:1D:3A:EB:13:66:75:9F Certificate issuer: /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5 Certificate serial: 06DF Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/AB9A3F46135211EB83A5A869C4F9AE02.roa Signing time: Tue 16 Jul 2024 22:40:21 +0000 ROA not before: Tue 16 Jul 2024 22:40:21 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135356 IP address blocks: 45.251.108.0/24 maxlen: 24 45.251.109.0/24 maxlen: 24 45.251.110.0/24 maxlen: 24 45.251.111.0/24 maxlen: 24 103.220.76.0/24 maxlen: 24 103.220.77.0/24 maxlen: 24 103.220.78.0/24 maxlen: 24 103.220.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5 Validity Not Before: Jul 16 22:40:21 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6696f6d5-f59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:bc:d7:b3:55:ac:3a:8b:af:b0:3b:f7:f4: c7:27:c9:3b:ad:50:5a:dd:45:00:03:f3:d4:67:26: 2e:f4:37:6a:52:40:b5:e2:e4:11:39:32:36:57:1e: be:35:ab:e7:45:9d:2f:87:73:57:30:ca:24:89:60: b7:9c:07:d4:50:35:e0:01:45:25:12:40:fb:bc:17: ac:33:df:af:b8:19:79:ee:cd:8f:ee:48:f3:23:bb: b7:b5:22:54:00:e2:b5:52:52:68:0c:3e:8d:57:ce: 80:0e:0f:58:03:ce:6e:33:f8:0c:82:ae:2f:df:b5: 17:e8:54:60:8d:a2:e6:57:ea:45:d3:cd:e6:4a:6c: c6:1c:7f:be:3a:38:8e:1f:b3:d8:48:53:5e:b7:31: 98:76:d1:4b:20:0c:ec:5f:3f:40:23:a7:5a:52:40: c7:fb:49:52:5d:5d:81:ea:d7:2d:af:66:b3:12:f5: b9:be:5d:72:72:3d:97:91:cc:60:f3:42:63:21:4f: cc:c1:ee:c2:6f:27:5f:8e:6d:75:37:41:c4:fe:d5: c5:d5:0e:00:24:6e:ac:a6:ae:fe:cb:42:48:16:66: 58:df:06:62:af:7d:ae:fd:fa:3d:37:b7:75:ec:ab: 31:5e:81:dd:a3:92:5c:65:b0:05:e6:a3:cd:ee:b5: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:D8:17:6D:98:A7:E7:15:E9:C5:C8:A8:1D:3A:EB:13:66:75:9F X509v3 Authority Key Identifier: keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/AB9A3F46135211EB83A5A869C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.251.108.0/22 103.220.76.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:ef:58:d7:b2:ae:1f:71:60:f6:30:7c:be:89:a5:0d:2a:d9: a1:88:57:5b:09:b6:bc:e1:20:6b:e0:17:1e:f7:0c:b9:f6:18: 00:15:95:b2:85:95:2e:73:52:aa:f9:04:ed:4f:8b:16:f7:ac: b4:02:40:a1:e5:ab:26:3b:c5:aa:50:b8:b3:9f:cb:1c:bc:f6: fc:a8:3c:e4:74:34:48:eb:f1:db:de:f8:25:f4:fe:f9:32:99: 4e:ab:9a:ad:65:d9:18:a1:a8:63:99:40:78:a4:d5:eb:b4:9e: ff:04:d7:cf:47:58:f0:90:73:06:1d:58:35:24:6c:84:20:a7: c2:53:5b:b9:7c:62:18:90:78:77:98:ae:3a:56:9d:b2:c0:87: f7:3c:e2:fa:31:1e:5b:7f:a7:cd:50:b9:68:c3:5f:e2:4f:e6: 95:4c:17:de:bd:9d:37:6b:97:42:71:1d:e1:0d:d7:f7:2e:cf: a0:c2:a7:c5:97:08:d9:f7:5e:60:f3:10:22:b2:8e:cb:3e:33: cd:3e:35:bf:84:b6:fd:ba:66:f0:c2:73:6d:18:07:ad:c1:43: 32:71:08:97:d4:04:42:4a:09:0e:e9:0d:7b:96:41:62:5e:82: 04:5a:de:0a:4d:fd:58:8f:9b:d8:89:6c:b2:cb:ed:93:e5:fc: c4:91:7f:ca -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTIxMTAvBgNVBAUTKDhDOTk2OEEwOTQwMEYzMjJGNDk1OThFMjc1MTFGQ0Ux QjhGODhCRjUwHhcNMjQwNzE2MjI0MDIxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ZjZkNS1mNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmK817NVrDqLr7A79/THJ8k7rVBa3UUAA/PUZyYu9DdqUkC14uQROTI2Vx6+ NavnRZ0vh3NXMMokiWC3nAfUUDXgAUUlEkD7vBesM9+vuBl57s2P7kjzI7u3tSJU AOK1UlJoDD6NV86ADg9YA85uM/gMgq4v37UX6FRgjaLmV+pF083mSmzGHH++OjiO H7PYSFNetzGYdtFLIAzsXz9AI6daUkDH+0lSXV2B6tctr2azEvW5vl1ycj2Xkcxg 80JjIU/Mwe7Cbydfjm11N0HE/tXF1Q4AJG6spq7+y0JIFmZY3wZir32u/fo9N7d1 7KsxXoHdo5JcZbAF5qPN7rVpQwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCDc2Bdt mKfnFenFyKgdOusTZnWfMB8GA1UdIwQYMBaAFIyZaKCUAPMi9JWY4nUR/OG4+Iv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFMi85ODc5MjQyNjEy QTkxMUVCQjBCNjVGN0FDNEY5QUUwMi9qSmxvb0pRQTh5TDBsWmppZFJIODRiajRp X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKbG9vSlFBOHlMMGxaamlkUkg4NGJqNGlfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M0RTIvOTg3OTI0MjYxMkE5MTFFQkIwQjY1RjdBQzRGOUFFMDIvQUI5QTNGNDYx MzUyMTFFQjgzQTVBODY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIt+2wDBAJn3EwwDQYJKoZIhvcNAQELBQADggEBAE7vWNey rh9xYPYwfL6JpQ0q2aGIV1sJtrzhIGvgFx73DLn2GAAVlbKFlS5zUqr5BO1Pixb3 rLQCQKHlqyY7xapQuLOfyxy89vyoPOR0NEjr8dve+CX0/vkymU6rmq1l2RihqGOZ QHik1eu0nv8E189HWPCQcwYdWDUkbIQgp8JTW7l8YhiQeHeYrjpWnbLAh/c84vox Hlt/p81QuWjDX+JP5pVMF969nTdrl0JxHeEN1/cuz6DCp8WXCNn3XmDzECKyjss+ M80+Nb+Etv26ZvDCc20YB63BQzJxCJfUBEJKCQ7pDXuWQWJeggRa3gpN/ViPm9iJ bLLL7ZPl/MSRf8o= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:45 2024 by rpki-client on console-ams.rpki-client.org