$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/1AE323249F2D11EC897FD30CC4F9AE02.roa File: 1AE323249F2D11EC897FD30CC4F9AE02.roa (raw, json) Hash identifier: KeGUlxiblyObJWylXKCmQlAzDIkOWbFTSQRBaia1TDI= Subject key identifier: 37:78:E6:CC:FD:E7:00:78:DA:98:0A:A7:E2:7F:E3:E4:0E:B7:20:D3 Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Certificate serial: 02F2 Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/1AE323249F2D11EC897FD30CC4F9AE02.roa Signing time: Wed 17 Jul 2024 02:23:41 +0000 ROA not before: Wed 17 Jul 2024 02:23:41 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 140718 IP address blocks: 103.152.32.0/24 maxlen: 24 2001:df3:f380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Validity Not Before: Jul 17 02:23:41 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66972b2d-f93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:70:89:fc:92:15:37:89:81:f8:61:65:58: 74:fe:a8:3a:e6:17:2f:67:35:6a:9f:50:b9:b9:be: 0a:d3:d4:84:28:3c:d3:63:44:a6:a5:67:5e:36:5a: 81:83:57:04:13:ff:79:3a:8c:a2:bd:ec:d7:64:51: e2:84:cf:f6:67:a2:39:76:49:5f:90:0b:38:82:d1: 67:4d:78:3d:99:45:c7:23:2d:74:7a:cd:15:50:d4: b9:d2:cf:90:e0:f7:9b:8e:68:5f:61:79:cc:65:2f: c9:8d:81:d7:61:4c:aa:37:67:d5:c4:95:c8:55:22: 06:40:0c:3d:8d:29:12:5e:44:f8:61:99:61:85:54: a7:02:52:a2:7f:38:e8:c9:3f:74:79:7d:fd:0b:1b: f8:71:e7:70:a4:46:e2:03:0c:d3:60:c7:f9:d6:d6: 7a:18:fd:52:e8:17:1e:33:fc:2c:5d:ec:68:73:90: 2d:54:34:88:f2:95:c0:b9:92:99:da:fd:61:79:fe: 7f:50:45:bb:a7:1d:82:74:ad:8a:e4:5f:d5:24:79: 59:ee:72:23:31:ff:1b:ee:fe:c0:78:00:1a:37:f2: 01:e1:76:31:0e:3c:58:3f:0b:0a:3d:3f:b8:43:3f: b8:f1:72:a5:4d:f5:ae:e6:14:15:62:1a:77:c5:70: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:78:E6:CC:FD:E7:00:78:DA:98:0A:A7:E2:7F:E3:E4:0E:B7:20:D3 X509v3 Authority Key Identifier: keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/1AE323249F2D11EC897FD30CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.32.0/24 IPv6: 2001:df3:f380::/48 Signature Algorithm: sha256WithRSAEncryption 27:54:17:cd:f0:d2:29:d5:39:6a:8a:4f:d3:4a:d9:91:97:32: 8c:48:5d:b1:6d:a6:38:9f:1c:f9:a0:31:d0:36:51:10:9c:50: f9:6a:4b:1a:7d:ea:83:b9:d4:6c:e9:95:0e:b8:ca:e8:4c:97: 8c:d7:93:9f:c3:b5:25:b0:27:73:9f:12:7c:9f:c8:ca:14:4d: 56:28:8b:04:7b:d6:24:d5:84:bc:75:0a:0c:e8:41:21:03:5a: 05:35:f0:b8:b1:b3:3b:01:e0:4f:ee:55:60:c7:ea:c7:5b:92: a3:b2:1a:49:66:63:5c:c2:e8:bb:05:f1:59:3e:ec:36:6e:75: 30:1c:b6:e6:08:4e:4b:bb:94:47:30:70:50:a8:4a:b9:0a:18: 6d:64:0b:43:2a:43:c4:ef:b7:b6:12:1e:99:4a:46:c2:cc:f1: d2:71:60:29:ec:64:33:d3:65:07:ac:8d:b4:58:31:5b:61:c4: ec:43:ed:a0:b2:a6:9b:fb:74:51:ed:73:a3:0c:84:30:be:fc: bd:a1:2a:f8:fc:ea:9a:05:3f:5d:a5:2a:c3:63:b2:dc:44:38: 10:71:68:d1:0d:95:d1:62:9d:dd:ec:07:7e:8b:53:a4:fb:40: 3d:00:4a:88:80:48:41:4e:c0:6c:c9:60:e2:51:e4:37:10:c5: 3d:26:64:fa -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2 ODI5QTQwMjEwHhcNMjQwNzE3MDIyMzQxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk3MmIyZC1mOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjpwifySFTeJgfhhZVh0/qg65hcvZzVqn1C5ub4K09SEKDzTY0SmpWdeNlqB g1cEE/95OoyivezXZFHihM/2Z6I5dklfkAs4gtFnTXg9mUXHIy10es0VUNS50s+Q 4PebjmhfYXnMZS/JjYHXYUyqN2fVxJXIVSIGQAw9jSkSXkT4YZlhhVSnAlKifzjo yT90eX39Cxv4cedwpEbiAwzTYMf51tZ6GP1S6BceM/wsXexoc5AtVDSI8pXAuZKZ 2v1hef5/UEW7px2CdK2K5F/VJHlZ7nIjMf8b7v7AeAAaN/IB4XYxDjxYPwsKPT+4 Qz+48XKlTfWu5hQVYhp3xXAF7wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDd45sz9 5wB42pgKp+J/4+QOtyDTMB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUVGNDUvNUQ4QjlCODI5RjJBMTFFQ0E3Q0ZBRDBBQzRGOUFFMDIvMUFFMzIzMjQ5 RjJEMTFFQzg5N0ZEMzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnmCAwDwQCAAIwCQMHACABDfPzgDANBgkqhkiG9w0BAQsF AAOCAQEAJ1QXzfDSKdU5aopP00rZkZcyjEhdsW2mOJ8c+aAx0DZREJxQ+WpLGn3q g7nUbOmVDrjK6EyXjNeTn8O1JbAnc58SfJ/IyhRNViiLBHvWJNWEvHUKDOhBIQNa BTXwuLGzOwHgT+5VYMfqx1uSo7IaSWZjXMLouwXxWT7sNm51MBy25ghOS7uURzBw UKhKuQoYbWQLQypDxO+3thIemUpGwszx0nFgKexkM9NlB6yNtFgxW2HE7EPtoLKm m/t0Ue1zowyEML78vaEq+PzqmgU/XaUqw2Oy3EQ4EHFo0Q2V0WKd3ewHfotTpPtA PQBKiIBIQU7AbMlg4lHkNxDFPSZk+g== -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org