$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa File: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (raw, json) Hash identifier: EkwWJK2JMsgrSqPZGShXj+awl3UUP/bSxj5kv4pCabE= Subject key identifier: 3F:FC:FB:84:17:19:60:94:1D:66:9B:EF:F1:2D:97:47:66:0E:9D:05 Certificate issuer: /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282 Certificate serial: 06D8 Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa Signing time: Thu 21 Nov 2024 10:11:09 +0000 ROA not before: Thu 21 Nov 2024 10:11:09 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 24323 IP address blocks: 45.64.132.0/22 maxlen: 24 103.4.64.0/22 maxlen: 22 103.4.64.0/24 maxlen: 24 103.4.65.0/24 maxlen: 24 103.4.66.0/24 maxlen: 24 103.4.67.0/24 maxlen: 24 182.160.96.0/19 maxlen: 24 202.74.240.0/21 maxlen: 24 203.202.240.0/20 maxlen: 24 2401:c000::/32 maxlen: 40 2401:c000::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282 Validity Not Before: Nov 21 10:11:09 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=673f073c-b083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:e6:e1:71:30:4e:35:df:a8:e2:e6:22:58: 1d:50:3f:aa:15:83:55:94:c5:1e:b9:af:ca:d5:14: ec:85:4e:b3:27:1e:8f:be:13:16:6b:34:0f:56:56: 3f:00:7c:b3:f5:d5:c1:d0:fd:09:89:7a:8d:4d:ff: 7f:bc:38:10:e7:c7:80:af:db:9b:dc:96:03:1e:07: 7c:f5:8f:70:f0:be:9b:61:98:fb:a1:0d:13:48:e2: 9b:a5:73:29:37:9e:ec:38:e9:c2:fb:45:36:02:c2: 24:6c:0d:b6:d5:80:3f:8d:2d:c6:d4:ed:71:44:f9: e6:b4:f2:1e:6f:01:40:05:ba:91:11:5c:04:6b:76: 08:8c:d5:8f:36:54:c9:43:96:3e:b0:58:cd:a2:70: 31:81:e6:45:33:99:1f:01:3d:2d:cb:8a:40:5c:ef: 58:ec:f3:57:b6:6e:f6:3a:8f:12:fa:6f:24:a4:18: da:87:e0:f8:3b:dd:89:3c:9c:6a:5c:a1:0c:6d:64: af:0b:34:9c:be:9f:88:bc:24:af:ce:56:0f:ee:5e: 1a:be:73:16:fd:e7:2f:38:84:c8:4c:56:b7:68:19: a8:a0:04:50:c5:cf:af:1b:2c:85:29:53:fb:22:dc: 8a:29:a5:a5:12:cd:a3:8f:65:70:aa:02:9c:c0:3d: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:FB:84:17:19:60:94:1D:66:9B:EF:F1:2D:97:47:66:0E:9D:05 X509v3 Authority Key Identifier: keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.132.0/22 103.4.64.0/22 182.160.96.0/19 202.74.240.0/21 203.202.240.0/20 IPv6: 2401:c000::/32 Signature Algorithm: sha256WithRSAEncryption 3e:7b:bd:6b:e0:8c:84:5a:f0:df:76:cf:01:fe:9a:47:32:b3: 2b:0a:81:6c:bb:b3:d1:2a:47:c7:9d:48:3f:c3:cb:2c:c6:99: 68:ed:54:9f:59:dc:af:33:91:42:52:d7:7a:cb:a1:80:1a:f8: cc:9d:ad:9d:d8:62:1b:6c:a8:65:87:37:d1:6d:c3:9d:2b:f7: 40:88:73:68:64:f0:62:68:cf:49:c4:ff:55:34:73:b2:5a:45: d0:34:b0:fb:90:3b:f7:f0:af:c3:1d:84:43:4c:2e:9a:13:61: 91:99:53:61:6f:8f:09:03:dc:52:4c:d4:93:0e:a0:91:cf:7c: 7f:94:2b:7f:c3:bf:10:aa:3c:76:97:0d:a3:7e:25:c3:ce:1f: ac:1b:5e:ec:13:b0:a5:89:93:8f:38:25:3d:1b:e7:5b:38:56: 1c:43:f6:a3:b9:cf:41:b5:a0:f0:9d:c0:05:91:6a:92:a8:80: e9:29:f4:d2:80:ce:36:b0:35:98:27:e1:8f:34:5a:70:ca:e0: 98:4d:bf:e1:27:42:df:a2:f4:a5:21:a4:f2:74:00:10:36:37: c5:57:e1:a5:f1:d1:4d:7a:d4:80:4d:7d:d8:40:4a:ca:ea:2c: cb:f4:36:2c:7a:1f:42:88:75:22:1c:04:49:01:96:81:42:77: 7c:ae:78:0a -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM4MzQxMTAvBgNVBAUTKDFBMEQwQkZBMTkxOTExRjg1NUI1QkFCREZBMDNCOUMw N0ZERDIyODIwHhcNMjQxMTIxMTAxMTA5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNmMDczYy1iMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApabm4XEwTjXfqOLmIlgdUD+qFYNVlMUeua/K1RTshU6zJx6PvhMWazQPVlY/ AHyz9dXB0P0JiXqNTf9/vDgQ58eAr9ub3JYDHgd89Y9w8L6bYZj7oQ0TSOKbpXMp N57sOOnC+0U2AsIkbA221YA/jS3G1O1xRPnmtPIebwFABbqREVwEa3YIjNWPNlTJ Q5Y+sFjNonAxgeZFM5kfAT0ty4pAXO9Y7PNXtm72Oo8S+m8kpBjah+D4O92JPJxq XKEMbWSvCzScvp+IvCSvzlYP7l4avnMW/ecvOITITFa3aBmooARQxc+vGyyFKVP7 ItyKKaWlEs2jj2VwqgKcwD3r8QIDAQABo4ICvDCCArgwHQYDVR0OBBYEFD/8+4QX GWCUHWab7/Etl0dmDp0FMB8GA1UdIwQYMBaAFBoNC/oZGRH4VbW6vfoDucB/3SKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzgzNC84QkMyRURCMDNB NDExMUVCODNCNTdGMTRDNEY5QUUwMi9HZzBMLWhrWkVmaFZ0YnE5LWdPNXdIX2RJ b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnMEwtaGtaRWZoVnRicTktZ081d0hfZElvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM4MzQvOEJDMkVEQjAzQTQxMTFFQjgzQjU3RjE0QzRGOUFFMDIvRjI2NTA1QTZB N0VBMTFFRjhDQkNDRjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAItQIQDBAJnBEADBAW2oGADBAPKSvADBATLyvAwDQQCAAIw BwMFACQBwAAwDQYJKoZIhvcNAQELBQADggEBAD57vWvgjIRa8N92zwH+mkcysysK gWy7s9EqR8edSD/DyyzGmWjtVJ9Z3K8zkUJS13rLoYAa+MydrZ3YYhtsqGWHN9Ft w50r90CIc2hk8GJoz0nE/1U0c7JaRdA0sPuQO/fwr8MdhENMLpoTYZGZU2FvjwkD 3FJM1JMOoJHPfH+UK3/DvxCqPHaXDaN+JcPOH6wbXuwTsKWJk484JT0b51s4VhxD 9qO5z0G1oPCdwAWRapKogOkp9NKAzjawNZgn4Y80WnDK4JhNv+EnQt+i9KUhpPJ0 ABA2N8VX4aXx0U161IBNfdhASsrqLMv0Nix6H0KIdSIcBEkBloFCd3yueAo= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org