$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/FB45F610638211E9A58B4C45C4F9AE02.roa File: FB45F610638211E9A58B4C45C4F9AE02.roa (raw, json) Hash identifier: 0Ef45WOQtOuveGkONJNzk3PchAu2KhMz/NV4Wv3q7VU= Subject key identifier: F6:6B:67:1B:B9:FA:04:E9:58:79:00:A5:C6:2B:94:46:36:92:7F:54 Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Certificate serial: 0E9E Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/FB45F610638211E9A58B4C45C4F9AE02.roa Signing time: Sat 02 Mar 2024 18:26:31 +0000 ROA not before: Sat 02 Mar 2024 18:26:31 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 132590 IP address blocks: 45.121.236.0/22 maxlen: 24 103.245.76.0/22 maxlen: 24 2401:7540::/32 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3742 (0xe9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F Validity Not Before: Mar 2 18:26:31 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e36f57-0f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:53:00:66:6a:fc:c2:54:bb:fc:76:43:09: ad:d7:74:d6:25:45:a2:a1:7c:16:06:a9:67:01:75: 27:68:54:6a:2d:34:79:07:bc:b0:bc:1d:8a:1b:d5: 77:22:d9:0e:23:66:85:82:89:75:59:26:f6:8a:33: fb:22:cc:ca:e7:98:55:7d:66:f2:9e:95:42:6f:ed: bb:e4:58:d0:3a:75:6c:92:78:c0:00:53:bc:35:5f: ba:de:33:46:c4:17:a6:d3:63:c3:2c:5c:71:5e:6e: 01:74:3c:45:50:63:fb:92:1f:9b:72:41:13:f3:a5: 41:0e:b8:b6:90:09:c0:11:0f:c5:6d:2f:49:da:1f: a2:38:e0:5d:fa:40:71:05:87:0a:4d:f3:b1:a1:2e: a2:e3:70:c8:25:b5:0f:c9:d0:88:5b:0c:c2:6f:45: a9:b1:d7:4a:19:4c:67:a2:9d:9a:8a:6a:94:f2:4b: 5e:c0:fb:c2:53:c3:c0:0d:a9:ec:96:2b:9b:2a:ed: 07:3e:e0:d4:24:8c:a6:6c:8b:c9:10:7b:c6:f9:d4: 17:07:9e:13:6d:80:54:32:40:b6:7e:c0:3f:61:97: 08:c9:cf:c3:cb:5b:1e:99:61:0b:29:0a:54:d0:26: 3b:35:eb:3e:87:83:d6:2c:ac:dc:fb:cc:85:cc:8a: c2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6B:67:1B:B9:FA:04:E9:58:79:00:A5:C6:2B:94:46:36:92:7F:54 X509v3 Authority Key Identifier: keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/FB45F610638211E9A58B4C45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.236.0/22 103.245.76.0/22 IPv6: 2401:7540::/32 Signature Algorithm: sha256WithRSAEncryption 50:fb:74:a8:09:4e:94:3e:9b:4c:ee:04:2d:65:40:e6:1d:54: 17:3e:7a:52:31:2c:63:45:89:d2:40:f0:d7:22:9e:44:df:70: 6e:1b:a3:ab:9c:c3:97:b2:b7:49:59:dc:a3:b7:80:fc:49:33: 61:80:69:b8:7d:9d:be:af:61:d1:ad:9e:e2:e4:ec:00:f4:6b: f0:2d:f3:45:e9:d0:d9:27:4f:da:e4:f2:59:80:cf:c9:e9:dc: a9:f5:4a:67:15:83:3f:91:db:f3:a4:90:ba:59:77:12:0e:45: ae:45:92:41:e9:62:b8:cf:f4:37:e8:56:d3:9d:28:52:3e:47: e2:48:ef:48:0e:7d:2d:6c:ab:05:df:5f:d5:21:74:56:4d:13: b9:65:00:49:48:e8:95:78:d0:80:86:c4:ac:3b:9e:27:35:b5: 48:26:b1:94:88:2e:83:a2:d2:85:ba:28:f6:86:38:63:f5:d3: 8e:95:fc:f5:f7:0b:ed:95:66:2c:7f:8d:c6:d9:10:66:d0:3c: a0:ee:b1:16:9d:19:96:63:e9:86:8d:72:17:99:34:fb:71:11: 8e:45:b7:1f:b4:18:54:f0:1f:5b:87:74:06:cd:32:50:41:a6: 72:92:90:54:23:ef:3a:98:f4:cd:35:1e:10:51:50:da:0c:12: 73:14:d7:55 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD QzE0MURGOEYwHhcNMjQwMzAyMTgyNjMxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzNmY1Ny0wZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlBTAGZq/MJUu/x2Qwmt13TWJUWioXwWBqlnAXUnaFRqLTR5B7ywvB2KG9V3 ItkOI2aFgol1WSb2ijP7IszK55hVfWbynpVCb+275FjQOnVsknjAAFO8NV+63jNG xBem02PDLFxxXm4BdDxFUGP7kh+bckET86VBDri2kAnAEQ/FbS9J2h+iOOBd+kBx BYcKTfOxoS6i43DIJbUPydCIWwzCb0WpsddKGUxnop2aimqU8ktewPvCU8PADans liubKu0HPuDUJIymbIvJEHvG+dQXB54TbYBUMkC2fsA/YZcIyc/Dy1semWELKQpU 0CY7Nes+h4PWLKzc+8yFzIrCawIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPZrZxu5 +gTpWHkApcYrlEY2kn9UMB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODU5QTMvNzY0MzVGRUU2MzgxMTFFOTlBNTFBNjQyQzRGOUFFMDIvRkI0NUY2MTA2 MzgyMTFFOUE1OEI0QzQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIteewDBAJn9UwwDQQCAAIwBwMFACQBdUAwDQYJKoZIhvcN AQELBQADggEBAFD7dKgJTpQ+m0zuBC1lQOYdVBc+elIxLGNFidJA8NcinkTfcG4b o6ucw5eyt0lZ3KO3gPxJM2GAabh9nb6vYdGtnuLk7AD0a/At80Xp0NknT9rk8lmA z8np3Kn1SmcVgz+R2/OkkLpZdxIORa5FkkHpYrjP9DfoVtOdKFI+R+JI70gOfS1s qwXfX9UhdFZNE7llAElI6JV40ICGxKw7nic1tUgmsZSILoOi0oW6KPaGOGP1046V /PX3C+2VZix/jcbZEGbQPKDusRadGZZj6YaNcheZNPtxEY5Ftx+0GFTwH1uHdAbN MlBBpnKSkFQj7zqY9M01HhBRUNoMEnMU11U= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org