$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/83CA613CF55611EE8CE6274DC4F9AE02.roa File: 83CA613CF55611EE8CE6274DC4F9AE02.roa (raw, json) Hash identifier: ufXYT6M8+NAM8MxgjpkUV5nxmsL/JDOXu7NiWGw3BFA= Subject key identifier: 25:A7:25:02:80:E4:3B:39:18:F5:21:0B:80:0A:C2:CB:E2:99:28:1E Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Certificate serial: 02 Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/83CA613CF55611EE8CE6274DC4F9AE02.roa Signing time: Mon 08 Apr 2024 03:17:22 +0000 ROA not before: Mon 08 Apr 2024 03:17:22 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 13896 IP address blocks: 45.252.184.0/23 maxlen: 23 45.252.186.0/23 maxlen: 23 103.197.96.0/23 maxlen: 23 103.197.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Validity Not Before: Apr 8 03:17:22 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=661361c2-42d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:ea:8e:9a:a7:64:ac:89:38:75:b3:70:07: c6:54:32:f2:7b:a8:a3:68:45:37:68:71:ad:db:11: 9a:d3:5d:17:dc:d8:24:d0:98:a7:c6:be:0d:b8:99: fb:b7:a7:8a:62:f5:bf:54:c8:a5:ff:34:09:c3:85: 43:37:9e:5a:3d:04:4b:8d:cf:1f:05:1c:b5:a9:48: aa:40:fd:f4:78:c2:4a:9f:eb:44:94:12:ec:9c:5c: 32:58:19:d6:51:30:48:d6:87:98:70:c9:96:c2:67: f4:58:b2:a8:82:b6:2e:86:7a:23:5c:3f:37:3d:0b: 17:1a:fe:9d:d4:25:7d:ee:56:db:a4:cb:b8:6f:62: d1:e0:f4:ad:f1:44:a7:1c:cc:7c:ec:f1:bc:4e:e8: 39:37:6b:91:46:c5:56:c7:02:07:61:b0:a3:d7:d2: 1e:61:10:dc:bf:89:82:b0:e0:b0:15:1c:a6:4c:4c: 79:67:37:a6:f5:f5:c5:94:90:c9:92:af:31:5c:25: 3e:03:5e:0b:33:9e:f6:0a:38:69:77:1b:30:df:50: c8:97:e0:16:e7:6f:dd:ae:f8:a4:36:16:ec:56:69: f7:62:4a:42:02:1d:05:ce:0c:77:2a:13:9d:04:51: 42:b2:06:14:70:d3:ec:22:a2:07:c0:cf:d1:3c:88: 52:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A7:25:02:80:E4:3B:39:18:F5:21:0B:80:0A:C2:CB:E2:99:28:1E X509v3 Authority Key Identifier: keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/83CA613CF55611EE8CE6274DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.252.184.0/22 103.197.96.0/22 Signature Algorithm: sha256WithRSAEncryption 53:79:c9:59:78:ea:2b:0f:ff:85:78:c0:8f:79:b6:83:b8:81: b1:1a:73:32:92:2c:a5:35:32:e2:55:ef:0d:a7:47:d1:d3:de: 45:45:9b:82:b2:81:04:54:e6:41:95:84:42:07:2f:49:47:55: ae:dc:74:81:88:5c:23:21:11:68:1f:91:2d:97:56:43:ed:2c: 5b:d1:95:ae:95:c3:e8:49:64:65:d6:30:35:dc:5b:52:20:6b: b5:9c:08:e2:21:55:18:7b:6d:e1:18:82:9c:ed:27:7b:42:43: cc:ad:d2:5a:26:f0:fa:06:fa:6c:d6:7d:e3:21:b3:c6:27:82: b5:44:73:31:1f:fd:d7:21:cd:33:fe:44:89:63:6c:b1:4f:a4: 10:62:62:42:07:0d:4e:70:26:bd:90:88:08:3b:c0:c4:94:c5: a4:63:d9:9c:ff:4e:88:ae:81:e4:cc:98:73:c4:9e:0b:66:5d: 02:f4:b1:2e:01:2b:2e:f0:1e:82:27:45:5d:c7:b7:f9:c8:b7: d4:79:6d:bd:9c:03:f6:eb:84:54:ff:68:21:6f:4d:a7:c4:b3: 65:3c:45:bf:01:e4:77:86:48:ae:37:26:5a:f6:65:d8:e7:d4: 61:dd:3b:5b:d9:14:50:0a:73:cc:03:9a:97:1f:34:86:04:59: b1:dc:0b:a1 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjA1NTExMC8GA1UEBRMoOTk5QjJGNjUzOUMyM0VBRUI0NjlFNjc1MzlGQjJEQzkz M0Q5ODA0MDAeFw0yNDA0MDgwMzE3MjJaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MTM2MWMyLTQyZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY0uqOmqdkrIk4dbNwB8ZUMvJ7qKNoRTdoca3bEZrTXRfc2CTQmKfGvg24mfu3 p4pi9b9UyKX/NAnDhUM3nlo9BEuNzx8FHLWpSKpA/fR4wkqf60SUEuycXDJYGdZR MEjWh5hwyZbCZ/RYsqiCti6GeiNcPzc9Cxca/p3UJX3uVtuky7hvYtHg9K3xRKcc zHzs8bxO6Dk3a5FGxVbHAgdhsKPX0h5hENy/iYKw4LAVHKZMTHlnN6b19cWUkMmS rzFcJT4DXgsznvYKOGl3GzDfUMiX4Bbnb92u+KQ2FuxWafdiSkICHQXODHcqE50E UUKyBhRw0+wiogfAz9E8iFIVAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUJaclAoDk OzkY9SELgArCy+KZKB4wHwYDVR0jBBgwFoAUmZsvZTnCPq60aeZ1OfstyTPZgEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMDU1LzRBQkJDMDFDRjU1 NTExRUVBQ0YxMjM0QkM0RjlBRTAyL21ac3ZaVG5DUHE2MGFlWjFPZnN0eVRQWmdF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbVpzdlpUbkNQcTYwYWVaMU9mc3R5VFBaZ0VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA1NS80QUJCQzAxQ0Y1NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi84M0NBNjEzQ0Y1 NTYxMUVFOENFNjI3NERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAi38uAMEAmfFYDANBgkqhkiG9w0BAQsFAAOCAQEAU3nJWXjq Kw//hXjAj3m2g7iBsRpzMpIspTUy4lXvDadH0dPeRUWbgrKBBFTmQZWEQgcvSUdV rtx0gYhcIyERaB+RLZdWQ+0sW9GVrpXD6ElkZdYwNdxbUiBrtZwI4iFVGHtt4RiC nO0ne0JDzK3SWibw+gb6bNZ94yGzxieCtURzMR/91yHNM/5EiWNssU+kEGJiQgcN TnAmvZCICDvAxJTFpGPZnP9OiK6B5MyYc8SeC2ZdAvSxLgErLvAegidFXce3+ci3 1HltvZwD9uuEVP9oIW9Np8SzZTxFvwHkd4ZIrjcmWvZl2OfUYd07W9kUUApzzAOa lx80hgRZsdwLoQ== -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:48 2024 by rpki-client on console-fra.rpki-client.org