$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/032132A0E0D011ECAF88A30DC4F9AE02.roa File: 032132A0E0D011ECAF88A30DC4F9AE02.roa (raw, json) Hash identifier: FkwKjd0cjTkO39Y5Lyp/hKN4auqwagZ/64vYY3VAepk= Subject key identifier: 30:31:0A:0E:11:00:38:D2:25:69:04:99:90:66:A5:C8:36:99:B5:10 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 0704 Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/032132A0E0D011ECAF88A30DC4F9AE02.roa Signing time: Fri 04 Aug 2023 21:38:33 +0000 ROA not before: Fri 04 Aug 2023 21:38:33 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 132325 IP address blocks: 45.125.48.0/22 maxlen: 22 45.125.48.0/24 maxlen: 24 45.125.49.0/24 maxlen: 24 45.125.50.0/24 maxlen: 24 103.193.172.0/22 maxlen: 22 103.193.172.0/24 maxlen: 24 103.193.173.0/24 maxlen: 24 103.193.174.0/24 maxlen: 24 103.193.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1796 (0x704) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Aug 4 21:38:33 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64cd6fd9-f906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:35:e5:f5:16:d9:da:45:2e:d6:82:8a:39:5d: 94:0d:d2:d6:21:a4:b9:27:48:4b:db:20:78:70:51: e7:85:05:19:67:e2:d4:df:71:9f:31:1c:e8:7c:19: c5:3d:67:cb:7f:fa:63:7c:72:26:22:c9:d4:1e:d0: f3:72:a7:af:e0:ec:84:4b:f0:52:79:df:b9:a2:a2: 1a:c8:93:ba:06:61:4e:82:06:bc:44:5f:07:2c:e7: 99:2d:58:b6:25:3b:07:d7:db:96:1e:1f:8b:77:24: 0f:81:ff:c0:40:4b:19:77:83:13:09:77:59:83:ff: d5:a8:27:6a:6c:84:8c:ca:a6:1b:3b:2b:39:d9:0c: c5:ea:86:f5:7b:3e:49:84:3f:56:4e:97:4f:17:c3: d3:f2:4b:0c:0a:16:d7:4d:c7:73:bb:97:34:c2:da: 13:d0:b0:fb:8b:a8:a9:5b:74:7e:de:3a:e4:d5:f0: d1:4a:32:48:22:52:04:f0:fc:49:83:bd:86:6b:4d: 48:c1:f2:82:b3:d9:d0:25:ff:95:4d:90:bf:8c:a9: 97:82:a9:2b:ab:09:c4:b8:11:e2:c3:cb:ea:45:24: b9:7b:96:5f:21:a0:66:9f:f5:af:f0:24:eb:9f:d7: 7c:ce:7e:b5:1f:69:1a:9d:80:fd:78:05:60:ba:48: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:31:0A:0E:11:00:38:D2:25:69:04:99:90:66:A5:C8:36:99:B5:10 X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/032132A0E0D011ECAF88A30DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.48.0/22 103.193.172.0/22 Signature Algorithm: sha256WithRSAEncryption b7:cd:52:ef:51:d5:59:78:30:93:28:26:75:ad:5c:1f:dd:57: 7a:0f:29:2e:46:97:0d:3b:ef:28:33:10:65:7d:c4:6d:c2:dd: 90:77:86:f5:21:cd:d8:de:39:8b:bc:6a:8a:36:30:58:39:a5: 36:14:ab:40:b2:c2:30:e8:6e:6f:be:70:89:e0:e9:21:4a:2c: 1b:a1:8d:33:63:06:45:e7:7c:35:50:23:37:82:8d:cc:cc:1f: 08:be:d3:49:03:22:e3:3d:52:be:74:39:a5:47:44:8d:4e:50: 12:6f:45:b9:30:07:a4:5c:45:c2:82:e8:71:44:4d:32:b3:18: 5a:ac:f1:27:90:f3:c0:8f:aa:51:a0:19:5d:d2:d3:66:fd:a5: 6a:27:e5:d2:0d:3a:34:09:20:ad:80:91:be:fd:4f:8e:4b:9f: 6a:c0:7c:45:cb:fe:32:45:37:91:7c:57:b5:16:ec:5b:df:d6: 79:06:d8:bc:63:40:76:c2:24:c6:bf:d3:7b:56:4e:47:81:cf: de:1c:63:9b:c7:b2:8b:8e:d6:2f:62:ba:e3:0b:31:e9:37:2e: fb:aa:a6:21:15:0a:37:b4:61:83:c1:ef:23:01:7e:8f:91:12: af:0a:d2:39:5b:fc:86:76:5a:dc:cd:c8:50:aa:ce:b5:4f:a8: 0d:a6:d4:bf -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjMwODA0MjEzODMzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNkNmZkOS1mOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jXl9RbZ2kUu1oKKOV2UDdLWIaS5J0hL2yB4cFHnhQUZZ+LU33GfMRzofBnF PWfLf/pjfHImIsnUHtDzcqev4OyES/BSed+5oqIayJO6BmFOgga8RF8HLOeZLVi2 JTsH19uWHh+LdyQPgf/AQEsZd4MTCXdZg//VqCdqbISMyqYbOys52QzF6ob1ez5J hD9WTpdPF8PT8ksMChbXTcdzu5c0wtoT0LD7i6ipW3R+3jrk1fDRSjJIIlIE8PxJ g72Ga01IwfKCs9nQJf+VTZC/jKmXgqkrqwnEuBHiw8vqRSS5e5ZfIaBmn/Wv8CTr n9d8zn61H2kanYD9eAVgukga/QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDAxCg4R ADjSJWkEmZBmpcg2mbUQMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ4MzQvNTFCRURGQzRDQzhEMTFFQUFGRkVEQjM2QzRGOUFFMDIvMDMyMTMyQTBF MEQwMTFFQ0FGODhBMzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItfTADBAJnwawwDQYJKoZIhvcNAQELBQADggEBALfNUu9R 1Vl4MJMoJnWtXB/dV3oPKS5Glw077ygzEGV9xG3C3ZB3hvUhzdjeOYu8aoo2MFg5 pTYUq0CywjDobm++cIng6SFKLBuhjTNjBkXnfDVQIzeCjczMHwi+00kDIuM9Ur50 OaVHRI1OUBJvRbkwB6RcRcKC6HFETTKzGFqs8SeQ88CPqlGgGV3S02b9pWon5dIN OjQJIK2Akb79T45Ln2rAfEXL/jJFN5F8V7UW7Fvf1nkG2LxjQHbCJMa/03tWTkeB z94cY5vHsouO1i9iuuMLMek3LvuqpiEVCje0YYPB7yMBfo+REq8K0jlb/IZ2WtzN yFCqzrVPqA2m1L8= -----END CERTIFICATE-----Generated at Fri May 10 23:55:06 2024 by rpki-client on console-fra.rpki-client.org