$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/C45188B8554D11EBA9D33130C4F9AE02.roa File: C45188B8554D11EBA9D33130C4F9AE02.roa (raw, json) Hash identifier: oaZwV6VdiAWhU8LpCHEa1Wy0xGXTkB3v4AFCD4GLNIA= Subject key identifier: 46:CD:81:87:68:62:45:7A:AC:2C:EE:1E:F3:C6:2E:1C:F7:9F:44:49 Certificate issuer: /CN=A91BB31B/serialNumber=27C5BE05E9FC30B312A069102DFEAF8EA75EF744 Certificate serial: 05FB Authority key identifier: 27:C5:BE:05:E9:FC:30:B3:12:A0:69:10:2D:FE:AF:8E:A7:5E:F7:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/C45188B8554D11EBA9D33130C4F9AE02.roa Signing time: Sat 23 Mar 2024 00:02:28 +0000 ROA not before: Sat 23 Mar 2024 00:02:28 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 9381 IP address blocks: 45.120.168.0/22 maxlen: 24 103.6.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.crl rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB31B/serialNumber=27C5BE05E9FC30B312A069102DFEAF8EA75EF744 Validity Not Before: Mar 23 00:02:28 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65fe1c13-0239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:90:32:e0:d8:e5:9d:81:72:bf:dc:db:1e: ca:77:ef:fc:c9:33:55:29:22:51:96:c1:f8:ef:c6: e8:be:60:f0:77:a1:87:99:ce:bb:34:c1:38:ad:ca: 38:27:9d:8e:95:82:e2:79:02:8e:01:99:20:56:32: ce:53:f9:13:30:59:c8:a4:e9:1f:4d:3a:f9:ab:6e: 14:9b:e7:94:18:46:5d:f8:7a:88:38:b2:9b:b4:14: 55:ce:db:4a:11:96:ec:60:24:da:9f:36:ca:e5:96: b0:9c:9e:0c:31:88:24:ca:0e:2c:ba:50:17:f4:dd: 4f:96:fa:40:7c:80:58:b0:47:42:96:26:f5:7a:7d: 56:91:70:b8:aa:46:2f:f9:9e:73:44:47:c0:a7:7d: c2:79:7b:7a:e0:37:86:62:64:2c:ea:ea:c8:dc:39: 1f:b2:f6:27:a9:09:2c:b7:d6:dd:bb:21:14:db:47: 42:4d:b6:be:be:a2:24:78:9b:ed:6d:e5:95:62:fb: 32:1b:87:b0:8a:ae:58:a0:d6:5c:4c:9a:cd:22:09: f3:ac:86:af:9f:fb:d6:8d:77:5e:98:9f:dd:f3:ad: ca:13:e9:25:3e:99:b7:17:c4:93:65:71:dd:2a:18: 6c:9f:2e:bc:4a:7d:19:37:dd:b9:4f:4c:16:28:52: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CD:81:87:68:62:45:7A:AC:2C:EE:1E:F3:C6:2E:1C:F7:9F:44:49 X509v3 Authority Key Identifier: keyid:27:C5:BE:05:E9:FC:30:B3:12:A0:69:10:2D:FE:AF:8E:A7:5E:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/C45188B8554D11EBA9D33130C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.168.0/22 103.6.152.0/22 Signature Algorithm: sha256WithRSAEncryption 23:2e:0e:c0:e9:dc:2e:ea:3c:48:41:b5:09:34:7c:d0:c5:7a: 4e:07:0d:88:51:42:19:3d:5c:9e:5c:e6:22:36:9a:fc:a7:f4: 3c:09:60:62:00:6a:8e:45:39:7e:92:31:bb:b5:31:dd:38:5f: a7:19:77:86:31:b8:a6:d6:87:b2:c3:d5:4b:1a:a1:38:3e:47: 8c:d0:a5:61:d9:42:e4:10:2d:a8:a2:af:2e:a2:23:f9:77:f7: c5:d9:33:dd:4a:c6:df:68:e3:83:91:41:7d:75:3d:d9:79:50: db:00:c1:34:15:cf:43:9f:60:2c:fe:6e:a9:db:71:cd:23:bc: c6:8c:e6:05:38:15:f8:8f:db:99:45:0e:1d:65:eb:cc:e0:20: bf:09:5a:23:ed:21:58:37:1c:61:40:93:4e:5d:8f:b4:5d:fb: 40:bc:ca:97:9d:f3:dd:16:ed:04:24:c7:55:ac:34:9e:7e:37: 7f:f3:63:c0:3d:1b:03:50:42:fc:00:2c:4f:88:76:79:40:e1: 8c:40:c5:27:1f:62:d7:6a:e8:37:61:9f:52:4c:69:ae:2f:45: f0:e9:63:1f:06:fe:93:7b:05:67:8e:12:c2:66:fb:df:9e:95: af:8d:b3:9b:92:9d:6c:6d:8c:09:3c:e9:6a:0b:bb:fd:f5:3a: b3:c6:10:fd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIzMUIxMTAvBgNVBAUTKDI3QzVCRTA1RTlGQzMwQjMxMkEwNjkxMDJERkVBRjhF QTc1RUY3NDQwHhcNMjQwMzIzMDAwMjI4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWZlMWMxMy0wMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqWQMuDY5Z2Bcr/c2x7Kd+/8yTNVKSJRlsH478bovmDwd6GHmc67NME4rco4 J52OlYLieQKOAZkgVjLOU/kTMFnIpOkfTTr5q24Um+eUGEZd+HqIOLKbtBRVzttK EZbsYCTanzbK5ZawnJ4MMYgkyg4sulAX9N1PlvpAfIBYsEdClib1en1WkXC4qkYv +Z5zREfAp33CeXt64DeGYmQs6urI3DkfsvYnqQkst9bduyEU20dCTba+vqIkeJvt beWVYvsyG4ewiq5YoNZcTJrNIgnzrIavn/vWjXdemJ/d863KE+klPpm3F8STZXHd Khhsny68Sn0ZN925T0wWKFLBwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEbNgYdo YkV6rCzuHvPGLhz3n0RJMB8GA1UdIwQYMBaAFCfFvgXp/DCzEqBpEC3+r46nXvdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjMxQi83NTUyMDhEQzU1 M0UxMUVCOTE4N0Y0NzhDNEY5QUUwMi9KOFctQmVuOE1MTVNvR2tRTGY2dmpxZGU5 MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4Vy1CZW44TUxNU29Ha1FMZjZ2anFkZTkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkIzMUIvNzU1MjA4REM1NTNFMTFFQjkxODdGNDc4QzRGOUFFMDIvQzQ1MTg4Qjg1 NTREMTFFQkE5RDMzMTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteKgDBAJnBpgwDQYJKoZIhvcNAQELBQADggEBACMuDsDp 3C7qPEhBtQk0fNDFek4HDYhRQhk9XJ5c5iI2mvyn9DwJYGIAao5FOX6SMbu1Md04 X6cZd4YxuKbWh7LD1UsaoTg+R4zQpWHZQuQQLaiiry6iI/l398XZM91Kxt9o44OR QX11Pdl5UNsAwTQVz0OfYCz+bqnbcc0jvMaM5gU4FfiP25lFDh1l68zgIL8JWiPt IVg3HGFAk05dj7Rd+0C8yped890W7QQkx1WsNJ5+N3/zY8A9GwNQQvwALE+IdnlA 4YxAxScfYtdq6Ddhn1JMaa4vRfDpYx8G/pN7BWeOEsJm+9+ela+Ns5uSnWxtjAk8 6WoLu/31OrPGEP0= -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:48 2024 by rpki-client on console-fra.rpki-client.org