$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/13C88472A8C311EC8F560C42C4F9AE02.roa File: 13C88472A8C311EC8F560C42C4F9AE02.roa (raw, json) Hash identifier: omxOgq839wp5zWid5JzWriWJ80XusOhkSlMOn+y7puo= Subject key identifier: 46:19:33:CF:F2:BB:86:CB:B8:E5:D5:DA:EE:EF:2F:CD:AB:08:97:D8 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4535 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/13C88472A8C311EC8F560C42C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:31:48 +0000 ROA not before: Thu 05 Sep 2024 03:31:48 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131367 IP address blocks: 45.118.148.0/22 maxlen: 24 103.20.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17717 (0x4535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:31:48 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92624-c51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fa:33:69:d2:61:b3:c3:ea:2f:86:b3:a5:1a: 21:1e:0f:c8:41:f4:5e:37:c9:b3:ef:13:db:31:18: f0:d2:10:15:ec:e4:46:ee:84:ca:0e:70:7c:21:d1: 49:b3:60:67:80:b0:bc:38:f8:6a:6c:45:2e:6a:d5: 93:fb:3f:2f:a1:7d:a0:6f:db:ae:2e:89:3c:bf:e1: 0f:3c:6b:60:20:e8:79:80:fb:94:38:73:dc:75:61: 01:7e:16:6b:17:4d:76:40:49:df:7b:76:7c:5c:c1: 5b:a6:3c:78:0f:9b:17:98:7f:ee:e0:a2:2e:16:0c: 76:d8:2e:bb:ee:34:78:b0:65:8e:36:10:9f:83:7b: e3:71:28:9d:2d:c9:1b:cb:95:22:e2:10:ed:f0:c2: 21:31:c5:4c:b9:e4:8d:c3:d7:53:c6:91:d5:24:e0: e6:6a:d4:94:65:78:6e:e6:30:e2:af:fd:af:58:ea: c6:16:17:02:72:98:f0:38:b3:78:71:09:23:20:44: 6a:c2:28:db:a4:ed:22:f3:8c:72:66:67:e6:0e:c8: f8:98:4c:da:6a:d1:0e:2f:11:d3:79:3d:d0:57:5d: bd:d0:78:9e:85:60:a6:68:30:39:ee:39:4c:24:86: bd:f5:04:3f:96:17:cd:c4:65:60:a2:26:28:8c:4e: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:19:33:CF:F2:BB:86:CB:B8:E5:D5:DA:EE:EF:2F:CD:AB:08:97:D8 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/13C88472A8C311EC8F560C42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.148.0/22 103.20.148.0/22 Signature Algorithm: sha256WithRSAEncryption b2:0d:b6:0b:06:9e:59:1e:21:81:94:a9:0e:0b:aa:4b:e0:89: 28:89:fc:bc:12:2d:83:dc:c5:89:67:7d:18:0d:4c:8b:b3:a3: e8:95:36:e0:50:54:16:56:63:1f:53:8a:66:c2:a6:40:8a:5e: 5b:39:79:bc:a2:ed:85:19:06:c4:19:2a:f4:30:cd:db:8b:7d: 8d:93:a5:0b:d3:df:0c:06:c8:90:57:df:20:91:cc:d6:90:b2: 1a:12:90:7a:19:24:1d:43:16:0b:38:91:36:6b:33:3f:c0:0b: 0f:53:47:6e:b8:1f:bd:aa:47:43:fc:a0:75:2e:56:76:eb:32: 7c:46:83:26:7d:9d:10:73:28:5f:63:31:c0:7b:10:52:a9:57: 28:43:e5:57:1d:f0:9b:64:5f:c6:1f:53:0e:dc:ed:95:8c:46: 80:e6:34:fa:94:01:bf:35:b2:7b:85:a5:e2:7f:09:30:61:a8: e9:90:d3:3c:9c:6e:ba:e1:2c:62:33:cf:7f:78:3a:86:bc:03: 56:10:cb:e1:f6:9c:7a:bf:bb:48:ad:a3:d0:1b:1e:4c:88:7b: fb:f9:74:83:d4:0d:a3:05:00:7c:aa:a1:b5:b3:3e:52:8e:ba: be:56:b0:44:a0:2d:4d:e8:8f:80:46:e9:22:84:4b:1c:a9:c2: 9d:da:c9:e7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICRTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMTQ4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYyNC1jNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vozadJhs8PqL4azpRohHg/IQfReN8mz7xPbMRjw0hAV7ORG7oTKDnB8IdFJ s2BngLC8OPhqbEUuatWT+z8voX2gb9uuLok8v+EPPGtgIOh5gPuUOHPcdWEBfhZr F012QEnfe3Z8XMFbpjx4D5sXmH/u4KIuFgx22C677jR4sGWONhCfg3vjcSidLckb y5Ui4hDt8MIhMcVMueSNw9dTxpHVJODmatSUZXhu5jDir/2vWOrGFhcCcpjwOLN4 cQkjIERqwijbpO0i84xyZmfmDsj4mEzaatEOLxHTeT3QV1290HiehWCmaDA57jlM JIa99QQ/lhfNxGVgoiYojE6BlQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEYZM8/y u4bLuOXV2u7vL82rCJfYMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTNDODg0NzJB OEMzMTFFQzhGNTYwQzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItdpQDBAJnFJQwDQYJKoZIhvcNAQELBQADggEBALINtgsG nlkeIYGUqQ4LqkvgiSiJ/LwSLYPcxYlnfRgNTIuzo+iVNuBQVBZWYx9TimbCpkCK Xls5ebyi7YUZBsQZKvQwzduLfY2TpQvT3wwGyJBX3yCRzNaQshoSkHoZJB1DFgs4 kTZrMz/ACw9TR264H72qR0P8oHUuVnbrMnxGgyZ9nRBzKF9jMcB7EFKpVyhD5Vcd 8JtkX8YfUw7c7ZWMRoDmNPqUAb81snuFpeJ/CTBhqOmQ0zycbrrhLGIzz394Ooa8 A1YQy+H2nHq/u0ito9AbHkyIe/v5dIPUDaMFAHyqobWzPlKOur5WsESgLU3oj4BG 6SKESxypwp3ayec= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org