$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAFE91C0D5BB11ECA8BE4666C4F9AE02.roa File: CAFE91C0D5BB11ECA8BE4666C4F9AE02.roa (raw, json) Hash identifier: 8KT+K/FKmLjMcuHXvXVkKfXEqkIOcY9ZXWcVFPNWAHc= Subject key identifier: 53:B5:FE:AB:3F:35:22:E1:1C:DD:BC:79:51:21:8A:36:38:3F:F5:74 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7093 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAFE91C0D5BB11ECA8BE4666C4F9AE02.roa Signing time: Wed 10 May 2023 16:44:14 +0000 ROA not before: Wed 10 May 2023 16:44:14 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149600 IP address blocks: 45.249.241.0/24 maxlen: 24 45.250.0.0/24 maxlen: 24 45.250.1.0/24 maxlen: 24 45.250.2.0/24 maxlen: 24 45.250.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28819 (0x7093) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:44:14 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc9dd-61f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:97:6b:22:f2:e8:f8:e9:58:0b:e4:31:7c:88: 67:df:c8:e3:92:74:f1:35:6a:aa:9a:3e:f6:4b:5e: df:40:17:12:eb:8c:06:dc:db:87:06:06:b2:48:bd: a7:ba:46:d7:60:0b:61:d9:5f:ae:c7:6f:87:8d:96: 95:3b:96:44:d7:35:9d:d8:ed:6b:6e:9b:fd:ce:6a: 0b:a4:d9:75:44:34:99:38:45:f0:45:da:39:23:5a: a8:e1:51:81:21:b8:e0:2b:0b:f5:08:4f:0c:14:52: c3:7b:d7:67:95:38:ba:3c:93:de:17:5d:3a:2e:d0: 28:28:59:56:c7:d3:24:0b:b2:13:9b:03:fe:6e:bb: 7a:ac:08:f2:51:da:57:2d:0a:51:17:88:9c:f6:5d: 65:a4:21:04:f5:13:88:a2:59:f1:7e:5d:08:95:0e: f7:ef:35:0c:de:c4:09:07:ef:5c:ad:a2:30:04:17: 59:2e:91:e1:5b:43:e6:41:d3:2f:b4:88:05:10:b2: d0:2a:f8:a1:42:f5:d6:00:02:77:15:d7:1a:ab:fa: 80:6a:e1:25:fe:83:71:ad:cf:47:ba:71:5a:2f:d9: b5:fa:fd:41:7e:23:c4:1b:f4:9a:50:8f:76:f8:06: 52:27:96:91:59:8b:cd:2f:dd:a9:56:71:15:01:7e: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B5:FE:AB:3F:35:22:E1:1C:DD:BC:79:51:21:8A:36:38:3F:F5:74 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAFE91C0D5BB11ECA8BE4666C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.241.0/24 45.250.0.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:63:0d:15:8d:dc:2c:19:b6:3e:2c:01:be:6e:d4:5d:12:d1: 7c:c5:34:a0:53:e6:5a:86:76:b9:23:c6:9b:9f:c7:97:aa:91: 7a:d1:da:49:61:26:4e:12:93:8f:f2:61:4d:47:7e:c7:ef:ea: 3b:b5:66:ca:49:52:cf:7e:ab:c6:02:50:12:01:79:f6:08:21: 9c:de:f8:30:82:eb:1c:8a:76:4d:5f:47:e6:27:2a:c7:59:12: 6a:1e:8e:bd:d2:cf:78:a5:94:07:80:bf:87:88:bc:76:48:94: 01:68:28:53:43:bc:7b:4e:bb:dc:ac:be:fa:2a:a0:55:72:27: f3:6e:97:60:29:fd:a1:41:52:58:50:81:51:4d:eb:77:c5:e6: 55:2a:28:37:e7:36:8b:99:f1:42:a4:1b:47:0c:98:82:51:87: d0:9c:5d:17:bc:3e:f8:c7:fb:7c:1d:d4:e3:3e:fd:d2:c8:12: 80:e8:b5:03:85:de:4b:87:23:fd:bc:f1:12:51:6e:ee:9e:cd: c4:c6:60:71:cd:a2:45:38:60:39:cb:02:ed:e3:cf:8b:d1:75: 3c:71:5f:a1:3e:98:cf:84:32:4c:84:c9:e3:8c:09:de:22:b8: 83:e0:44:0d:b4:b0:b4:88:30:56:c8:48:b8:e3:b5:f0:a7:65: df:9a:2f:83 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICcJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDE0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzlkZC02MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZdrIvLo+OlYC+QxfIhn38jjknTxNWqqmj72S17fQBcS64wG3NuHBgaySL2n ukbXYAth2V+ux2+HjZaVO5ZE1zWd2O1rbpv9zmoLpNl1RDSZOEXwRdo5I1qo4VGB IbjgKwv1CE8MFFLDe9dnlTi6PJPeF106LtAoKFlWx9MkC7ITmwP+brt6rAjyUdpX LQpRF4ic9l1lpCEE9ROIolnxfl0IlQ737zUM3sQJB+9craIwBBdZLpHhW0PmQdMv tIgFELLQKvihQvXWAAJ3Fdcaq/qAauEl/oNxrc9HunFaL9m1+v1BfiPEG/SaUI92 +AZSJ5aRWYvNL92pVnEVAX5m0QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFO1/qs/ NSLhHN28eVEhijY4P/V0MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0FGRTkxQzBE NUJCMTFFQ0E4QkU0NjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAt+fEDBAIt+gAwDQYJKoZIhvcNAQELBQADggEBAF1jDRWN 3CwZtj4sAb5u1F0S0XzFNKBT5lqGdrkjxpufx5eqkXrR2klhJk4Sk4/yYU1Hfsfv 6ju1ZspJUs9+q8YCUBIBefYIIZze+DCC6xyKdk1fR+YnKsdZEmoejr3Sz3illAeA v4eIvHZIlAFoKFNDvHtOu9ysvvoqoFVyJ/Nul2Ap/aFBUlhQgVFN63fF5lUqKDfn NouZ8UKkG0cMmIJRh9CcXRe8PvjH+3wd1OM+/dLIEoDotQOF3kuHI/288RJRbu6e zcTGYHHNokU4YDnLAu3jz4vRdTxxX6E+mM+EMkyEyeOMCd4iuIPgRA20sLSIMFbI SLjjtfCnZd+aL4M= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org