$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/65EADA381A8011ECAD1E4B30C4F9AE02.roa File: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (raw, json) Hash identifier: swa1tXqn4jx39kN/76V0jPk/byrE4zjRHjVhK5jUeu0= Subject key identifier: 9F:71:CB:84:3C:E2:72:5F:85:2B:D3:DB:FE:40:D4:2F:69:25:D8:07 Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Certificate serial: 0E9F Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/65EADA381A8011ECAD1E4B30C4F9AE02.roa Signing time: Sat 02 Mar 2024 18:26:32 +0000 ROA not before: Sat 02 Mar 2024 18:26:32 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 135333 IP address blocks: 45.121.239.0/24 maxlen: 24 103.214.148.0/22 maxlen: 24 124.109.16.0/22 maxlen: 22 124.109.16.0/24 maxlen: 24 124.109.17.0/24 maxlen: 24 124.109.18.0/24 maxlen: 24 124.109.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3743 (0xe9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Validity Not Before: Mar 2 18:26:32 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e36f58-c48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:a9:15:35:ec:71:9b:67:89:ff:a7:2a:30: c4:20:98:a9:8c:38:9e:ca:48:4b:bd:4b:51:b5:b8: 18:ae:c5:33:18:72:39:9b:6a:0f:d3:78:e2:b8:75: a9:40:76:14:90:a7:58:77:42:7e:fd:82:37:44:1d: a1:7d:64:aa:21:a8:cc:6d:a5:d5:09:66:d1:72:2b: 64:fd:cc:07:f6:20:f8:b1:e2:41:b5:f2:73:07:5f: 87:bb:6b:6f:3f:b1:5a:45:7a:f5:ac:30:42:19:8e: c2:57:c4:b7:9e:0a:9d:43:47:0b:9e:81:5a:2a:6c: cd:dc:76:ea:eb:72:46:d4:fd:ac:52:f0:f1:e9:89: a8:8d:31:c4:ec:e0:f2:48:5f:c3:6f:d7:9a:47:c0: 49:cb:6e:66:05:47:d2:df:34:e0:0a:b8:0b:7e:df: d2:64:a6:52:ad:37:2a:ef:8f:a7:27:77:70:25:a7: c0:84:54:e3:67:f9:13:df:33:7e:07:51:d9:94:78: 9f:2b:b2:a7:00:c8:5b:71:65:32:4f:56:7b:2c:8e: 08:03:82:12:36:56:62:69:4a:39:b0:0a:1f:6a:e7: 3c:fb:cc:74:c3:23:2e:a3:c6:2b:bd:66:c5:58:57: 74:ac:ab:4e:a1:3d:e9:90:c0:db:9c:f4:a5:7c:89: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:71:CB:84:3C:E2:72:5F:85:2B:D3:DB:FE:40:D4:2F:69:25:D8:07 X509v3 Authority Key Identifier: keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/65EADA381A8011ECAD1E4B30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.239.0/24 103.214.148.0/22 124.109.16.0/22 Signature Algorithm: sha256WithRSAEncryption 11:b4:5d:29:af:5e:78:07:ea:bd:96:b9:8f:f9:06:58:dc:dd: 58:cf:88:93:86:2a:f7:3d:e3:6c:af:43:58:c5:db:43:5e:9d: 09:bb:ee:b3:e8:11:76:fa:7b:5b:a9:4a:31:2c:9e:0b:94:8d: a5:15:91:2d:6a:00:f8:2f:d7:93:b4:a3:db:63:9e:21:2f:8c: 81:a2:42:9c:ea:4f:d7:83:0b:9d:15:12:e2:d7:bb:17:2a:41: 16:8c:f5:1e:b9:5b:4a:24:9f:45:e8:50:90:76:ff:54:cd:ae: bf:c8:0a:16:a8:b5:ee:24:4a:dc:7b:cb:34:04:73:2f:77:be: fa:af:d9:ea:56:19:dd:ac:a2:ed:10:13:2c:a6:8e:80:44:86: ef:79:69:6e:d1:59:53:2f:ef:55:c0:32:97:7a:0a:90:4f:fa: 9a:12:21:0b:df:78:48:be:84:3f:28:5d:01:d1:8a:31:1e:21: 59:f4:35:4f:35:75:dc:48:55:ed:46:c6:a5:61:9c:01:6b:8e: 5d:8b:67:76:97:36:c0:77:14:22:8f:72:a9:73:52:8c:c1:df: aa:e1:ae:8b:49:d4:c7:85:bb:23:3e:5d:6f:aa:f7:6c:27:3b: e0:f2:7f:e0:03:59:5d:14:43:f5:28:54:9b:9f:4c:17:13:0a: cb:5a:72:f8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD QzE0MURGOEYwHhcNMjQwMzAyMTgyNjMyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzNmY1OC1jNDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjGpFTXscZtnif+nKjDEIJipjDieykhLvUtRtbgYrsUzGHI5m2oP03jiuHWp QHYUkKdYd0J+/YI3RB2hfWSqIajMbaXVCWbRcitk/cwH9iD4seJBtfJzB1+Hu2tv P7FaRXr1rDBCGY7CV8S3ngqdQ0cLnoFaKmzN3Hbq63JG1P2sUvDx6YmojTHE7ODy SF/Db9eaR8BJy25mBUfS3zTgCrgLft/SZKZSrTcq74+nJ3dwJafAhFTjZ/kT3zN+ B1HZlHifK7KnAMhbcWUyT1Z7LI4IA4ISNlZiaUo5sAofauc8+8x0wyMuo8YrvWbF WFd0rKtOoT3pkMDbnPSlfIlitwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJ9xy4Q8 4nJfhSvT2/5A1C9pJdgHMB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODU5QTMvNzY0MzVGRUU2MzgxMTFFOTlBNTFBNjQyQzRGOUFFMDIvNjVFQURBMzgx QTgwMTFFQ0FEMUU0QjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAtee8DBAJn1pQDBAJ8bRAwDQYJKoZIhvcNAQELBQADggEB ABG0XSmvXngH6r2WuY/5Bljc3VjPiJOGKvc942yvQ1jF20NenQm77rPoEXb6e1up SjEsnguUjaUVkS1qAPgv15O0o9tjniEvjIGiQpzqT9eDC50VEuLXuxcqQRaM9R65 W0okn0XoUJB2/1TNrr/IChaote4kStx7yzQEcy93vvqv2epWGd2sou0QEyymjoBE hu95aW7RWVMv71XAMpd6CpBP+poSIQvfeEi+hD8oXQHRijEeIVn0NU81ddxIVe1G xqVhnAFrjl2LZ3aXNsB3FCKPcqlzUozB36rhrotJ1MeFuyM+XW+q92wnO+Dyf+AD WV0UQ/UoVJufTBcTCstacvg= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org