$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FADE651084FF11EEBABF8B74C4F9AE02.roa File: FADE651084FF11EEBABF8B74C4F9AE02.roa (raw, json) Hash identifier: 4coUh0EPlfk2qqbWCqrSbgabtWTNEWk+wBZqotWEeRY= Subject key identifier: B4:49:DE:25:DE:79:89:9E:F3:86:B1:AA:22:7D:29:9C:37:56:7B:41 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 454D Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FADE651084FF11EEBABF8B74C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:10 +0000 ROA not before: Thu 05 Sep 2024 03:32:10 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131410 IP address blocks: 45.124.88.0/22 maxlen: 24 103.233.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17741 (0x454d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:10 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9263a-4e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:5b:0b:83:49:44:5d:1e:a9:c8:e8:6f:67: d9:61:9e:ff:79:d7:49:7a:4c:57:6a:be:68:36:18: 72:68:90:56:0a:ca:a2:39:27:74:00:d3:e3:ee:38: 0f:2b:f5:92:e8:74:cb:71:18:9d:cc:c0:20:6c:bd: 83:84:bf:31:f1:9c:2b:20:e0:50:e3:ef:ca:7c:8f: 0b:e8:75:35:0f:a9:f1:85:a7:c0:e2:e2:93:44:cc: 36:15:f8:89:b2:f1:17:96:f8:d1:80:bd:00:c8:f3: 63:a2:d4:46:d4:cd:a0:9f:4c:67:71:c9:f1:d0:d5: ea:cd:11:1a:3d:e3:12:be:74:cb:54:06:05:41:54: ff:77:9b:3c:38:78:09:b7:a1:a2:d1:b8:da:43:c7: c8:64:1d:15:a6:5e:e9:8e:20:10:55:d3:b0:24:8b: 05:4e:b0:da:31:ae:f3:28:64:84:3d:96:7a:d3:77: db:4c:d2:24:64:9e:ca:e8:84:e3:90:c2:0b:80:8a: ed:50:92:27:92:8c:81:b7:d1:8c:32:f3:32:9d:db: fe:b3:68:80:ca:97:54:31:46:49:5c:f9:1d:04:c2: ff:7d:c9:2f:3d:ed:67:30:67:5e:8d:2f:d0:2d:07: 89:da:8b:ac:d5:b9:c8:f9:b0:b7:5a:64:69:07:82: 08:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:49:DE:25:DE:79:89:9E:F3:86:B1:AA:22:7D:29:9C:37:56:7B:41 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FADE651084FF11EEBABF8B74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.124.88.0/22 103.233.48.0/22 Signature Algorithm: sha256WithRSAEncryption 54:17:ec:c3:6f:bf:8d:55:11:e7:01:e9:c6:16:82:b7:86:01: 7b:34:b1:3c:c3:ed:a5:a8:74:4b:23:ad:d6:21:64:39:ba:bb: 08:9b:5e:3a:94:b8:fe:d0:f6:b9:37:04:64:3c:51:54:d3:92: fc:c0:b5:d6:0c:e2:c0:db:8f:32:08:04:14:b0:34:99:df:f5: 2f:14:11:e6:f2:08:69:93:37:3a:6c:0c:29:e1:35:33:e3:bd: b4:c2:d6:0f:fb:33:2a:89:b9:ec:85:42:31:f0:c4:0b:6f:54: 21:54:e5:c0:d0:11:65:bc:04:27:cd:3a:e4:52:ee:97:4a:eb: bb:a5:8e:17:f4:4b:9f:b7:4e:bf:c4:fd:f4:59:10:13:da:3a: 0c:51:2b:69:ad:ca:32:2a:f5:e3:e6:ea:24:bb:8b:15:9d:54: 8a:1a:85:f9:ea:b9:89:c8:ce:dd:a1:57:8b:03:2c:3e:9b:79: fd:43:f6:4e:4e:5f:59:11:29:1b:3b:87:d8:42:e1:ed:bf:c6: 7c:13:6f:ca:cd:97:77:48:0a:eb:0a:66:a1:9e:53:53:8f:46: ad:d5:b9:16:ab:87:21:43:8c:64:7d:fd:70:05:b3:72:c9:cc: 91:98:05:3d:e2:bc:38:f2:c6:d6:be:8d:56:46:77:ac:02:4c: 70:c1:2d:b0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICRU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjEwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYzYS00ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eRbC4NJRF0eqcjob2fZYZ7/eddJekxXar5oNhhyaJBWCsqiOSd0ANPj7jgP K/WS6HTLcRidzMAgbL2DhL8x8ZwrIOBQ4+/KfI8L6HU1D6nxhafA4uKTRMw2FfiJ svEXlvjRgL0AyPNjotRG1M2gn0xnccnx0NXqzREaPeMSvnTLVAYFQVT/d5s8OHgJ t6Gi0bjaQ8fIZB0Vpl7pjiAQVdOwJIsFTrDaMa7zKGSEPZZ603fbTNIkZJ7K6ITj kMILgIrtUJInkoyBt9GMMvMyndv+s2iAypdUMUZJXPkdBML/fckvPe1nMGdejS/Q LQeJ2ous1bnI+bC3WmRpB4II4QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLRJ3iXe eYme84axqiJ9KZw3VntBMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkFERTY1MTA4 NEZGMTFFRUJBQkY4Qjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItfFgDBAJn6TAwDQYJKoZIhvcNAQELBQADggEBAFQX7MNv v41VEecB6cYWgreGAXs0sTzD7aWodEsjrdYhZDm6uwibXjqUuP7Q9rk3BGQ8UVTT kvzAtdYM4sDbjzIIBBSwNJnf9S8UEebyCGmTNzpsDCnhNTPjvbTC1g/7MyqJueyF QjHwxAtvVCFU5cDQEWW8BCfNOuRS7pdK67uljhf0S5+3Tr/E/fRZEBPaOgxRK2mt yjIq9ePm6iS7ixWdVIoahfnquYnIzt2hV4sDLD6bef1D9k5OX1kRKRs7h9hC4e2/ xnwTb8rNl3dICusKZqGeU1OPRq3VuRarhyFDjGR9/XAFs3LJzJGYBT3ivDjyxta+ jVZGd6wCTHDBLbA= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org