$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa File: B3795CBC64F211ED9AEC046FC4F9AE02.roa (raw, json) Hash identifier: EdWi73Mh5xQLy3TivA4ubB2nlEznz8QrqPnUKcwGaiM= Subject key identifier: 8E:FF:03:B5:C9:50:EC:FB:22:E1:72:66:70:AB:30:93:49:AA:6C:7F Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 0148 Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa Signing time: Wed 07 Aug 2024 04:05:39 +0000 ROA not before: Wed 07 Aug 2024 04:05:39 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 133606 IP address blocks: 185.126.46.0/23 maxlen: 24 185.242.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Aug 7 04:05:39 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b2f293-78e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:ea:15:71:e3:7c:a2:17:4e:a1:c8:60:85: bb:54:a9:fc:9b:3f:c5:a9:68:dc:af:93:25:7b:b5: 09:88:c1:84:cd:5d:6b:2b:c7:f7:b7:de:1b:2d:3c: de:9d:e9:6d:6c:0f:2a:d8:2c:d9:d8:d5:ef:ba:f6: 64:60:9f:91:2c:b4:89:f5:ec:3a:04:cc:da:48:13: cf:72:fe:00:f5:80:55:5a:a5:9e:bb:f0:67:7e:65: 7d:b3:42:8c:cf:82:d1:8e:de:f9:1a:f9:c1:81:b3: 0a:f4:1b:6d:cb:a8:7a:53:48:52:15:02:1e:9a:85: ae:4e:d1:c5:3b:80:1f:2f:21:36:12:81:fe:af:50: e3:64:c5:f3:b7:45:57:89:70:6c:82:56:70:fe:ed: 95:24:11:fc:e9:69:d0:08:3b:b1:1a:c3:c4:79:d2: b2:3a:18:6b:a1:25:d2:d2:9b:cd:b6:3b:34:ea:97: 3f:2f:8e:6d:a4:af:07:8e:0c:f7:c0:7c:27:a7:06: 62:d6:8d:5e:85:27:cd:0e:50:e6:09:eb:ae:b4:63: 26:2a:d7:90:2f:c4:54:02:ae:93:de:7b:89:85:02: 74:ab:00:ae:6d:38:b9:69:65:8e:ff:d0:cd:f7:d9: c0:12:3f:8b:3d:3a:89:3d:92:cd:53:41:84:58:ab: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FF:03:B5:C9:50:EC:FB:22:E1:72:66:70:AB:30:93:49:AA:6C:7F X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.126.46.0/23 185.242.38.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:5b:16:37:8c:71:88:d1:94:74:ed:fb:59:29:5e:84:af:71: 6c:9e:65:0a:43:ad:7c:b8:03:6d:dd:96:1a:78:51:68:c4:b3: a2:47:43:06:b0:85:35:2d:cd:3a:85:23:76:87:65:fd:3a:e5: 9a:77:a5:ae:f1:bb:79:d2:e3:4e:ec:46:4b:20:95:ac:e4:d8: a9:40:9b:82:95:12:29:23:c3:08:b3:bb:46:64:b6:27:5f:2d: 67:ac:e7:35:80:ed:f2:8d:9c:21:fe:69:e1:21:1a:70:aa:ac: 10:f5:09:d7:ca:78:97:70:58:da:ec:03:e3:dc:fe:0b:12:19: b6:d0:b2:10:cd:77:96:ff:39:8e:13:c3:8e:8f:7a:b2:70:bb: a5:07:f6:fb:a3:1b:69:72:2b:24:c6:b0:42:3d:5e:c4:5f:ed: a3:3a:6a:65:8a:a8:d3:d3:4a:fb:65:60:c6:ae:bb:3e:9e:69: 03:46:b9:ec:a1:d9:ea:49:a6:4e:79:2a:aa:45:53:9b:df:64: 90:0b:bb:87:7f:62:c6:92:e2:c6:8e:f1:3e:1d:8a:df:49:bc: 41:ca:fa:39:54:a5:cb:45:08:a7:a5:5f:86:aa:44:76:20:9c: 48:0a:80:ac:78:98:7a:44:84:c4:8f:05:9c:53:41:cf:b3:20: e6:7a:49:aa -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjQwODA3MDQwNTM5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyZjI5My03OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLzqFXHjfKIXTqHIYIW7VKn8mz/FqWjcr5Mle7UJiMGEzV1rK8f3t94bLTze neltbA8q2CzZ2NXvuvZkYJ+RLLSJ9ew6BMzaSBPPcv4A9YBVWqWeu/BnfmV9s0KM z4LRjt75GvnBgbMK9Btty6h6U0hSFQIemoWuTtHFO4AfLyE2EoH+r1DjZMXzt0VX iXBsglZw/u2VJBH86WnQCDuxGsPEedKyOhhroSXS0pvNtjs06pc/L45tpK8Hjgz3 wHwnpwZi1o1ehSfNDlDmCeuutGMmKteQL8RUAq6T3nuJhQJ0qwCubTi5aWWO/9DN 99nAEj+LPTqJPZLNU0GEWKuf4QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFI7/A7XJ UOz7IuFyZnCrMJNJqmx/MB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVDRUEvMUY2M0E1Njg2NEVFMTFFREE0QTM0NTEzQzRGOUFFMDIvQjM3OTVDQkM2 NEYyMTFFRDlBRUMwNDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAG5fi4DBAG58iYwDQYJKoZIhvcNAQELBQADggEBAHxbFjeM cYjRlHTt+1kpXoSvcWyeZQpDrXy4A23dlhp4UWjEs6JHQwawhTUtzTqFI3aHZf06 5Zp3pa7xu3nS407sRksglazk2KlAm4KVEikjwwizu0ZktidfLWes5zWA7fKNnCH+ aeEhGnCqrBD1CdfKeJdwWNrsA+Pc/gsSGbbQshDNd5b/OY4Tw46PerJwu6UH9vuj G2lyKyTGsEI9XsRf7aM6amWKqNPTSvtlYMauuz6eaQNGueyh2epJpk55KqpFU5vf ZJALu4d/YsaS4saO8T4dit9JvEHK+jlUpctFCKelX4aqRHYgnEgKgKx4mHpEhMSP BZxTQc+zIOZ6Sao= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:50 2024 by rpki-client on console-ams.rpki-client.org