$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4BC2B80195911ED9A037633C4F9AE02.roa File: A4BC2B80195911ED9A037633C4F9AE02.roa (raw, json) Hash identifier: bnTuxLkpHSIDMlF0JSMaQO0vzTgsmZu6pAWOV/d7yHw= Subject key identifier: FC:97:4B:79:32:02:CD:F0:D8:80:3D:4E:82:1D:9E:3C:13:47:AB:30 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4734 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4BC2B80195911ED9A037633C4F9AE02.roa Signing time: Tue 08 Oct 2024 09:06:16 +0000 ROA not before: Tue 08 Oct 2024 09:06:16 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131423 IP address blocks: 42.96.16.0/20 maxlen: 24 45.119.212.0/22 maxlen: 24 103.48.84.0/22 maxlen: 24 103.48.192.0/22 maxlen: 24 103.78.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18228 (0x4734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 8 09:06:16 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6704f608-a2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6b:89:c9:ec:26:d0:b5:3f:14:d4:1b:ca:e6: c6:f0:a9:cd:c9:f5:de:9b:fa:30:2c:4f:59:fd:c9: bb:89:3a:69:bc:2f:2f:7b:f2:00:fa:2c:3e:03:4b: 00:78:e0:56:53:76:b9:6b:1f:00:85:df:86:41:3e: bd:94:8b:fe:66:ff:1f:8a:cd:b9:bb:65:73:57:a4: 5a:be:f0:16:0b:02:8a:c4:89:ea:e4:f7:93:25:c8: 9e:1a:b4:bb:25:33:a4:06:57:c1:75:0c:5a:dd:2e: e6:6f:e9:6c:d1:1e:0e:b6:3a:43:f8:e7:43:15:13: 23:29:6e:c8:81:2d:33:8e:ba:a1:a6:ec:d6:d8:a5: 50:ab:10:34:05:b1:cd:25:12:cd:7e:90:80:50:bd: ba:78:23:2f:3c:1a:a6:53:0c:eb:e6:6b:62:e3:86: cd:44:c4:60:fa:2f:54:1f:1f:1d:89:e7:4f:e0:3e: b3:bd:c1:54:c4:8c:2f:f2:7c:69:51:e1:fa:fb:0b: a1:90:6f:be:ee:9e:d3:bf:c6:de:9b:a9:02:91:7c: 9d:8b:4b:4d:d2:f6:b5:f8:44:63:6c:a4:d4:7e:7b: 59:9a:01:28:e1:41:86:0b:b0:b8:2c:34:01:e2:e2: fd:e2:56:20:76:90:ac:91:d1:3d:4b:3e:6f:0f:af: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:97:4B:79:32:02:CD:F0:D8:80:3D:4E:82:1D:9E:3C:13:47:AB:30 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4BC2B80195911ED9A037633C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.96.16.0/20 45.119.212.0/22 103.48.84.0/22 103.48.192.0/22 103.78.88.0/22 Signature Algorithm: sha256WithRSAEncryption 90:71:ca:16:3d:91:25:66:50:16:c6:d0:33:42:63:fd:c4:27: 56:f6:79:21:67:32:6c:50:04:d6:c0:c2:db:c5:c6:72:35:10: 60:3c:49:3e:6f:8f:4f:97:32:bd:9d:ec:68:26:bb:80:40:e8: 74:ad:27:f2:36:4a:e9:11:68:61:ec:de:31:99:1b:10:28:e1: 6f:29:56:10:50:d3:58:dd:f8:38:0d:bf:f6:9e:6d:35:f5:cb: 3f:46:3c:ad:f5:19:e1:dd:d7:26:a3:9d:26:6e:07:99:00:74: df:16:a3:9d:e4:1b:bd:21:47:ad:d2:c8:82:cd:cf:2a:98:6d: 3a:53:98:18:58:ca:71:e2:54:dd:fb:05:82:1d:a4:e1:d1:18: 06:72:af:a4:99:e7:65:5e:98:f6:07:6f:d0:7a:c2:aa:40:a5: 2d:75:15:5a:b9:bc:98:48:58:44:90:2e:3d:9f:62:86:24:3b: 5f:7d:d0:78:22:b6:3d:5e:03:bd:01:ba:5a:60:33:e7:62:26: 61:5b:c4:be:08:4c:6c:e3:a6:2a:20:1b:85:a6:04:13:67:af: f8:e2:f0:82:d3:7f:1b:28:e4:f5:e3:1f:f2:b2:18:57:41:c8: ff:dd:8e:d8:9d:d9:3a:7f:95:a9:a2:32:1b:e5:a6:69:32:0b: 64:1a:8c:5d -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICRzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMDA4MDkwNjE2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA0ZjYwOC1hMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02uJyewm0LU/FNQbyubG8KnNyfXem/owLE9Z/cm7iTppvC8ve/IA+iw+A0sA eOBWU3a5ax8Ahd+GQT69lIv+Zv8fis25u2VzV6RavvAWCwKKxInq5PeTJcieGrS7 JTOkBlfBdQxa3S7mb+ls0R4OtjpD+OdDFRMjKW7IgS0zjrqhpuzW2KVQqxA0BbHN JRLNfpCAUL26eCMvPBqmUwzr5mti44bNRMRg+i9UHx8diedP4D6zvcFUxIwv8nxp UeH6+wuhkG++7p7Tv8bem6kCkXydi0tN0va1+ERjbKTUfntZmgEo4UGGC7C4LDQB 4uL94lYgdpCskdE9Sz5vD69JDQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPyXS3ky As3w2IA9ToIdnjwTR6swMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTRCQzJCODAx OTU5MTFFRDlBMDM3NjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAQqYBADBAItd9QDBAJnMFQDBAJnMMADBAJnTlgwDQYJKoZI hvcNAQELBQADggEBAJBxyhY9kSVmUBbG0DNCY/3EJ1b2eSFnMmxQBNbAwtvFxnI1 EGA8ST5vj0+XMr2d7Ggmu4BA6HStJ/I2SukRaGHs3jGZGxAo4W8pVhBQ01jd+DgN v/aebTX1yz9GPK31GeHd1yajnSZuB5kAdN8Wo53kG70hR63SyILNzyqYbTpTmBhY ynHiVN37BYIdpOHRGAZyr6SZ52VemPYHb9B6wqpApS11FVq5vJhIWESQLj2fYoYk O1990Hgitj1eA70BulpgM+diJmFbxL4ITGzjpiogG4WmBBNnr/ji8ILTfxso5PXj H/KyGFdByP/djtid2Tp/lamiMhvlpmkyC2QajF0= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org