$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/BF54F1F0FB4511EEA4E4B262C4F9AE02.roa File: BF54F1F0FB4511EEA4E4B262C4F9AE02.roa (raw, json) Hash identifier: 5Ou38Qxg9Gsoa53WcZNYf5wlEs+O9IWG7+V8DjfXWwU= Subject key identifier: B6:78:BA:5C:58:6C:50:FB:0A:EF:6D:14:10:A0:C2:88:55:C9:65:61 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 0215 Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/BF54F1F0FB4511EEA4E4B262C4F9AE02.roa Signing time: Mon 15 Apr 2024 16:32:28 +0000 ROA not before: Mon 15 Apr 2024 16:32:28 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 7018 IP address blocks: 45.248.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: Apr 15 16:32:28 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=661d569b-f40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:b9:4a:af:b7:06:6c:06:8a:61:b8:f7:e4: e7:19:74:5b:7c:3d:ed:86:14:42:7c:9e:d1:29:c4: 9f:d5:70:56:1e:37:20:59:a9:52:de:f9:21:ed:e9: 8c:85:bf:b5:b0:08:d6:b9:b3:2c:00:a1:f8:7b:60: 24:c8:ac:81:f1:29:e7:39:99:a3:5b:93:e8:41:30: 7e:30:0e:34:cd:b3:eb:78:c5:6c:8d:c2:91:45:40: 53:85:77:db:7b:dc:59:09:fb:c9:52:73:cf:c1:a6: 34:87:bb:19:33:5b:90:29:23:7a:5c:8c:bf:37:e4: 8b:76:89:62:ca:0f:15:41:8e:a8:98:76:ea:70:5f: 63:47:ea:74:8e:df:7e:b7:67:ab:7f:0f:96:33:49: cf:9d:77:7f:dc:85:9e:d4:6c:e7:ec:80:71:2c:84: ec:62:ed:97:97:23:25:0e:d7:23:46:fe:4d:b0:e9: 80:bc:21:b5:cc:61:2c:bb:7a:a1:75:78:dd:d7:14: 8c:dc:68:b9:35:92:05:76:15:04:32:ce:25:96:71: 63:53:b6:9f:da:e6:75:77:52:f9:bc:13:15:a5:f7: a3:aa:01:ff:ea:c6:81:10:54:a6:4d:8b:a7:c7:13: 12:ad:71:bf:59:b8:03:70:6d:18:bb:27:e8:e2:69: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:78:BA:5C:58:6C:50:FB:0A:EF:6D:14:10:A0:C2:88:55:C9:65:61 X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/BF54F1F0FB4511EEA4E4B262C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.248.54.0/24 Signature Algorithm: sha256WithRSAEncryption 54:41:c1:46:69:5e:9b:c6:14:b7:eb:81:b5:da:1f:d1:08:9c: fa:38:c8:a9:4a:b0:65:21:9f:4a:a3:bf:db:06:88:7c:25:c4: 91:e3:e1:2e:21:ad:ec:dc:75:69:35:95:55:e1:3b:2a:e4:19: b1:ad:5f:3d:b0:75:c7:a6:07:65:e3:f9:05:d6:a0:ab:24:34: ba:13:45:8c:49:c0:a4:ad:ef:fc:c5:8d:64:d2:fc:10:28:fb: 68:dc:19:65:20:89:06:92:c5:f8:bc:9c:1d:45:da:aa:38:2c: 2e:ce:eb:5d:27:2b:67:5f:28:e7:6c:9f:73:37:d8:a4:95:e1: c3:2b:64:60:18:ad:53:d6:aa:28:56:10:3c:08:5a:3c:f7:71: 95:21:63:6b:d6:31:be:6a:38:d9:a3:60:48:a6:33:cc:dd:a9: 2b:31:12:87:90:09:ac:71:e5:57:0b:53:fd:c0:77:b3:f9:7a: e7:cc:04:ad:8f:50:a4:eb:c3:cb:fd:4c:d2:98:8c:34:1a:bd: e3:2f:80:d8:99:0c:89:d3:00:7c:5f:17:6f:b7:27:99:1b:e7: 76:80:af:84:ff:15:29:ee:b8:c2:21:06:98:f7:06:d2:c3:85: c8:07:15:25:52:55:e2:23:0e:71:c0:9a:f9:43:59:eb:90:79: 93:14:9c:4b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjQwNDE1MTYzMjI4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFkNTY5Yi1mNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJq5Sq+3BmwGimG49+TnGXRbfD3thhRCfJ7RKcSf1XBWHjcgWalS3vkh7emM hb+1sAjWubMsAKH4e2AkyKyB8SnnOZmjW5PoQTB+MA40zbPreMVsjcKRRUBThXfb e9xZCfvJUnPPwaY0h7sZM1uQKSN6XIy/N+SLdoliyg8VQY6omHbqcF9jR+p0jt9+ t2erfw+WM0nPnXd/3IWe1Gzn7IBxLITsYu2XlyMlDtcjRv5NsOmAvCG1zGEsu3qh dXjd1xSM3Gi5NZIFdhUEMs4llnFjU7af2uZ1d1L5vBMVpfejqgH/6saBEFSmTYun xxMSrXG/WbgDcG0Yuyfo4mn4awIDAQABo4IClTCCApEwHQYDVR0OBBYEFLZ4ulxY bFD7Cu9tFBCgwohVyWVhMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk5NDUvQkMwMEM4RjJGMDlFMTFFQ0FFRTczRTE5QzRGOUFFMDIvQkY1NEYxRjBG QjQ1MTFFRUE0RTRCMjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAt+DYwDQYJKoZIhvcNAQELBQADggEBAFRBwUZpXpvGFLfr gbXaH9EInPo4yKlKsGUhn0qjv9sGiHwlxJHj4S4hrezcdWk1lVXhOyrkGbGtXz2w dcemB2Xj+QXWoKskNLoTRYxJwKSt7/zFjWTS/BAo+2jcGWUgiQaSxfi8nB1F2qo4 LC7O610nK2dfKOdsn3M32KSV4cMrZGAYrVPWqihWEDwIWjz3cZUhY2vWMb5qONmj YEimM8zdqSsxEoeQCaxx5VcLU/3Ad7P5eufMBK2PUKTrw8v9TNKYjDQaveMvgNiZ DInTAHxfF2+3J5kb53aAr4T/FSnuuMIhBpj3BtLDhcgHFSVSVeIjDnHAmvlDWeuQ eZMUnEs= -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:39 2024 by rpki-client on console-ams.rpki-client.org