$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/1B25BF167FE111EBB6C0941AC4F9AE02.roa File: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (raw, json) Hash identifier: ch5lvybil+KBbySkYvZWkm3N5xvJLycUcNv3iDCsa/Q= Subject key identifier: 28:B3:7D:7C:51:CD:B6:06:17:02:57:91:85:F4:39:03:FF:6F:88:3E Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Certificate serial: 05F6 Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/1B25BF167FE111EBB6C0941AC4F9AE02.roa Signing time: Fri 04 Oct 2024 23:02:22 +0000 ROA not before: Fri 04 Oct 2024 23:02:22 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 45230 IP address blocks: 45.112.60.0/24 maxlen: 24 45.112.61.0/24 maxlen: 24 45.112.62.0/24 maxlen: 24 45.112.63.0/24 maxlen: 24 103.74.208.0/24 maxlen: 24 103.74.209.0/24 maxlen: 24 103.74.210.0/24 maxlen: 24 103.74.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Validity Not Before: Oct 4 23:02:22 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670073fe-d0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:f2:77:53:a7:13:0e:39:4c:0c:be:e1:2b: f0:b3:91:d5:12:5b:42:15:fb:66:eb:1b:cf:8e:77: 78:2d:53:0e:77:ed:86:c3:fb:5a:dc:94:dd:89:19: ab:1e:57:34:bf:80:d9:46:85:18:33:21:fb:31:1a: 5c:14:77:f5:27:92:ea:6f:bd:01:d2:ff:2a:33:b6: c6:f0:0d:06:8d:a7:87:93:24:a8:c6:4b:72:77:ed: 4a:04:80:22:91:2d:c1:f5:4b:64:00:cb:80:c3:c6: 67:bd:45:b8:ff:5f:ee:bd:eb:0e:27:9a:89:37:da: c7:04:b2:24:7c:c4:a0:8f:3b:f1:0f:f0:2d:d8:f5: 9c:63:29:94:78:63:bd:f8:ea:4d:01:f5:6f:da:57: 5c:58:25:6a:d2:12:d0:74:cd:1b:e3:39:c7:a5:09: 21:10:4f:49:4e:75:71:d3:fe:18:a4:28:23:a6:fa: 00:aa:9d:fc:eb:89:d7:0e:b7:b5:47:b6:9e:9b:00: f3:df:f6:0f:da:65:b9:0e:86:7e:31:3d:1c:b1:80: 34:dc:f3:bd:05:04:a4:27:83:cf:f7:14:1f:b9:a9: 1d:d9:5b:ac:b2:f8:85:ef:55:bf:f4:d0:ea:00:22: 55:26:6c:a8:65:3e:26:5a:43:b1:41:07:6b:cb:b0: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B3:7D:7C:51:CD:B6:06:17:02:57:91:85:F4:39:03:FF:6F:88:3E X509v3 Authority Key Identifier: keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/1B25BF167FE111EBB6C0941AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.112.60.0/22 103.74.208.0/22 Signature Algorithm: sha256WithRSAEncryption b5:ac:14:a7:88:65:c0:a1:07:09:e1:88:08:18:0b:40:d5:cb: 56:c5:90:26:7b:8d:58:61:bf:3e:39:36:84:38:55:da:54:5b: 3f:3b:34:16:b3:6e:11:09:a8:1b:1c:a4:e1:92:12:e1:bd:6f: ff:88:0f:71:4b:4f:b3:b0:27:39:a5:d8:13:e6:a3:26:db:e4: b5:ea:02:f3:99:4f:79:3f:31:ab:73:a0:8f:3d:b4:35:9d:75: dd:ac:24:1e:a6:a1:88:6f:96:7e:1c:0e:95:4f:90:c5:fc:90: ac:92:b8:90:61:af:98:1f:ef:b2:0b:85:97:f2:df:f3:84:c2: 00:27:87:d5:e6:51:5f:59:15:4e:77:6f:8a:95:63:9e:b3:fd: 72:b2:60:5b:64:fc:4b:3d:d6:64:df:55:c6:1d:30:30:08:97: ed:8d:86:94:85:07:38:5a:84:c3:38:ad:8c:93:98:bd:49:69: 09:90:29:b7:16:c7:8d:3e:3f:55:95:b7:68:cc:c3:a3:9d:35: af:45:34:5e:0d:64:c5:e3:0b:92:05:27:3a:e1:00:29:f0:85: 2f:60:35:45:3b:b7:98:69:6d:0e:e9:f3:2e:87:4c:1a:a1:4f: ab:5c:75:fa:a1:36:dc:4d:fe:e6:3c:af:8c:a7:9a:9e:37:b9: ec:73:a3:c6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF MDNCRTgzMzIwHhcNMjQxMDA0MjMwMjIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwNzNmZS1kMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5byd1OnEw45TAy+4Svws5HVEltCFftm6xvPjnd4LVMOd+2Gw/ta3JTdiRmr Hlc0v4DZRoUYMyH7MRpcFHf1J5Lqb70B0v8qM7bG8A0GjaeHkySoxktyd+1KBIAi kS3B9UtkAMuAw8ZnvUW4/1/uvesOJ5qJN9rHBLIkfMSgjzvxD/At2PWcYymUeGO9 +OpNAfVv2ldcWCVq0hLQdM0b4znHpQkhEE9JTnVx0/4YpCgjpvoAqp3864nXDre1 R7aemwDz3/YP2mW5DoZ+MT0csYA03PO9BQSkJ4PP9xQfuakd2VussviF71W/9NDq ACJVJmyoZT4mWkOxQQdry7D8hwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCizfXxR zbYGFwJXkYX0OQP/b4g+MB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDRFNDUvRjhGMUMxOTQ3RkRFMTFFQkExODhDRjE0QzRGOUFFMDIvMUIyNUJGMTY3 RkUxMTFFQkI2QzA5NDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItcDwDBAJnStAwDQYJKoZIhvcNAQELBQADggEBALWsFKeI ZcChBwnhiAgYC0DVy1bFkCZ7jVhhvz45NoQ4VdpUWz87NBazbhEJqBscpOGSEuG9 b/+ID3FLT7OwJzml2BPmoybb5LXqAvOZT3k/MatzoI89tDWddd2sJB6moYhvln4c DpVPkMX8kKySuJBhr5gf77ILhZfy3/OEwgAnh9XmUV9ZFU53b4qVY56z/XKyYFtk /Es91mTfVcYdMDAIl+2NhpSFBzhahMM4rYyTmL1JaQmQKbcWx40+P1WVt2jMw6Od Na9FNF4NZMXjC5IFJzrhACnwhS9gNUU7t5hpbQ7p8y6HTBqhT6tcdfqhNtxN/uY8 r4ynmp43uexzo8Y= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org