$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/DFEA30745C3011EEB250DE0EC4F9AE02.roa File: DFEA30745C3011EEB250DE0EC4F9AE02.roa (raw, json) Hash identifier: tsMkLvjKn0Jno43pXfv561BkhcMo5hMdRzf+ZccASKU= Subject key identifier: 5B:BF:6F:D8:31:CB:15:B6:65:09:D9:CB:BE:C8:CA:18:66:2B:5E:0B Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Certificate serial: 07EA Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/DFEA30745C3011EEB250DE0EC4F9AE02.roa Signing time: Thu 08 Aug 2024 21:29:20 +0000 ROA not before: Thu 08 Aug 2024 21:29:20 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 135580 IP address blocks: 45.255.252.0/22 maxlen: 24 103.65.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Validity Not Before: Aug 8 21:29:20 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b538b0-8e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:78:8e:e8:8c:59:1d:69:72:c5:73:05:03: e9:d6:56:6e:04:14:88:ca:e3:f5:2f:88:59:e9:db: c8:a4:cc:e1:df:12:38:6a:13:57:5e:b0:9e:e5:fd: 12:21:3f:06:05:fc:bd:27:4d:8b:9c:ca:41:8e:27: 89:f6:89:01:00:1e:d7:e9:61:cd:01:80:42:46:5e: a6:36:df:cf:32:6b:ae:c2:ce:80:5c:d3:60:0b:9c: 2c:63:46:2c:28:43:5f:ee:c4:58:cb:f1:55:85:67: e2:f7:7e:a6:09:fa:8b:b0:54:b8:08:5e:60:02:38: ad:11:5b:63:99:52:cb:66:d3:3b:61:d6:53:78:94: 14:9d:ed:db:e3:22:8a:76:06:7d:b9:27:d8:4b:f8: d3:ac:d4:eb:0e:91:af:92:70:46:3e:1a:7a:53:44: 44:d2:01:a0:d8:72:31:69:e0:3f:82:9f:c5:5d:73: 9d:c5:e4:22:3d:2d:f5:53:84:2c:14:e6:1e:95:2a: 63:77:1e:70:fa:71:33:5c:b7:81:b6:dd:8f:d4:72: 45:6c:c2:71:5e:d5:b0:50:b6:f9:66:41:73:55:94: cc:d5:3d:3c:67:e8:bb:90:c1:83:27:b1:7f:10:dd: d2:01:5e:07:ff:08:03:f9:2e:e8:2b:54:ca:e9:76: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BF:6F:D8:31:CB:15:B6:65:09:D9:CB:BE:C8:CA:18:66:2B:5E:0B X509v3 Authority Key Identifier: keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/DFEA30745C3011EEB250DE0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.255.252.0/22 103.65.176.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:ec:02:e0:05:9a:80:23:72:6d:2c:7d:5c:08:04:ed:50:91: 74:6d:1c:64:aa:53:52:70:27:54:57:57:2f:00:c2:e8:59:3f: 38:7c:87:34:d4:e8:c0:96:b6:4a:11:59:ea:86:f6:42:89:22: 2c:f1:29:48:b7:9f:ef:1e:c3:b6:fd:fd:49:ce:c5:fb:5b:a0: 4b:1a:9c:8d:9c:59:bc:36:1c:df:4f:6c:19:e9:66:b9:98:63: 19:57:34:7e:97:84:50:2c:23:c4:21:46:86:dc:76:10:4a:5b: eb:f9:b7:2f:a4:a2:06:0f:d7:6b:7b:36:5c:73:4d:4e:f3:38: de:5b:6a:78:cc:1b:7e:91:f5:76:c4:67:23:eb:47:ee:be:12: 04:f2:56:a1:03:20:9d:9a:8a:a8:c6:99:4a:85:9c:52:12:18: 9e:97:af:96:67:13:73:27:0b:4d:74:68:68:30:e3:c5:fa:97: df:b5:69:c9:4f:c2:01:04:0b:c0:86:79:78:5d:86:70:a0:69: 15:a1:8e:aa:3c:72:59:65:6a:ca:55:0a:c4:8c:59:bb:58:c9: a1:a9:94:6e:cf:b1:62:65:6d:36:5c:17:de:92:f2:a9:70:7e: bd:e2:1e:33:01:5a:81:99:ca:81:79:4d:5e:7c:30:d8:7b:e4: 19:11:40:c6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2 N0NDRTNCMkEwHhcNMjQwODA4MjEyOTIwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI1MzhiMC04ZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOt4juiMWR1pcsVzBQPp1lZuBBSIyuP1L4hZ6dvIpMzh3xI4ahNXXrCe5f0S IT8GBfy9J02LnMpBjieJ9okBAB7X6WHNAYBCRl6mNt/PMmuuws6AXNNgC5wsY0Ys KENf7sRYy/FVhWfi936mCfqLsFS4CF5gAjitEVtjmVLLZtM7YdZTeJQUne3b4yKK dgZ9uSfYS/jTrNTrDpGvknBGPhp6U0RE0gGg2HIxaeA/gp/FXXOdxeQiPS31U4Qs FOYelSpjdx5w+nEzXLeBtt2P1HJFbMJxXtWwULb5ZkFzVZTM1T08Z+i7kMGDJ7F/ EN3SAV4H/wgD+S7oK1TK6XarVwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFu/b9gx yxW2ZQnZy77IyhhmK14LMB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQzIvMkREREQyNkNDMkMwMTFFQTkzRDU4NTdGQzRGOUFFMDIvREZFQTMwNzQ1 QzMwMTFFRUIyNTBERTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIt//wDBAJnQbAwDQYJKoZIhvcNAQELBQADggEBAF/sAuAF moAjcm0sfVwIBO1QkXRtHGSqU1JwJ1RXVy8AwuhZPzh8hzTU6MCWtkoRWeqG9kKJ IizxKUi3n+8ew7b9/UnOxftboEsanI2cWbw2HN9PbBnpZrmYYxlXNH6XhFAsI8Qh RobcdhBKW+v5ty+kogYP12t7NlxzTU7zON5banjMG36R9XbEZyPrR+6+EgTyVqED IJ2aiqjGmUqFnFISGJ6Xr5ZnE3MnC010aGgw48X6l9+1aclPwgEEC8CGeXhdhnCg aRWhjqo8clllaspVCsSMWbtYyaGplG7PsWJlbTZcF96S8qlwfr3iHjMBWoGZyoF5 TV58MNh75BkRQMY= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org