$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa File: 331F345A383611E6B2282B5DC4F9AE02.roa (raw, json) Hash identifier: WuXzJGatSIhxLLVFJYnAc7zb2/GN+pIVoHOaMyICWzI= Subject key identifier: 77:14:5A:FB:93:AB:C3:7B:DA:6F:67:62:79:75:D2:BF:22:30:E2:E0 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 343F Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa Signing time: Fri 21 Apr 2023 12:50:12 +0000 ROA not before: Fri 21 Apr 2023 12:50:12 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135537 IP address blocks: 61.45.252.0/24 maxlen: 24 2401:4601:252::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13375 (0x343f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Apr 21 12:50:12 2023 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=64428683-19b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:bb:0b:90:15:d1:99:24:51:7b:be:a0:ab: 60:9e:c2:33:7a:0d:40:0a:b4:d9:0e:4f:29:e1:05: f3:d1:13:7e:80:38:71:47:dc:20:00:5f:60:94:bb: 4b:84:09:97:dd:a4:db:21:fa:8c:a3:bc:c2:10:61: 64:da:f2:89:7d:8f:ca:9c:9c:28:f9:af:8e:57:e7: 10:83:5f:b9:fd:7c:f5:68:f7:fb:ba:87:f2:b9:ff: 1a:31:fa:27:fc:ab:d5:9d:57:06:74:b8:cc:40:e6: 1c:41:26:99:4f:a4:fd:be:04:f7:f9:35:d3:e4:c6: 28:b2:79:c2:ca:01:eb:8f:3e:69:bf:fe:bc:ea:fe: 9b:1c:6c:9f:f6:71:92:9d:1b:65:66:fb:a1:5e:d3: ad:ac:a7:53:1e:46:5a:93:03:c3:32:d9:22:be:fa: 23:95:7f:65:2b:64:38:af:c2:ff:e1:43:0d:f1:a5: 5c:e0:d5:45:32:c5:b3:f6:e1:cf:a1:6b:3b:76:a7: e9:32:7e:8e:89:3b:6e:f5:71:c2:e7:66:3c:b7:a5: 39:53:32:df:77:0f:7d:2a:4f:6e:ea:01:e9:16:8e: 69:63:d6:92:8a:96:9c:c4:65:ff:a1:f0:8b:90:f7: 26:d0:ed:85:78:60:fc:33:ae:ab:d5:96:9b:fb:05: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:14:5A:FB:93:AB:C3:7B:DA:6F:67:62:79:75:D2:BF:22:30:E2:E0 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.45.252.0/24 IPv6: 2401:4601:252::/48 Signature Algorithm: sha256WithRSAEncryption 2b:31:0a:ec:4c:d5:f5:c8:1c:6b:2d:f2:02:dc:79:1a:99:42: ed:83:42:e6:82:85:c3:ba:5e:23:c4:34:8b:3f:ca:96:3d:b6: cd:58:1b:95:e6:e2:67:5b:82:3c:75:34:f8:3f:f8:03:ba:c2: a3:01:84:36:53:1a:05:4f:43:3b:f2:ca:95:bc:95:b0:9d:79: 81:34:dc:7d:e7:78:12:4d:53:4a:a2:6d:fd:ff:98:62:bd:5f: 65:58:96:ce:94:0d:ea:3c:87:e1:bd:60:bc:bb:8c:58:a3:cc: 0a:e9:b8:79:d8:23:b3:31:68:3f:7e:45:fc:82:00:40:b7:f9: 7d:e2:cd:d6:02:d8:fb:bb:4c:c9:98:18:1d:49:a1:f5:78:b1: 2c:68:69:bd:04:c6:4b:3f:b7:56:cc:9b:c7:4c:e6:f3:f0:7c: 6e:70:d0:c6:7e:ca:ad:19:2a:89:11:21:27:01:52:37:95:77: 78:e9:b4:f2:1c:b1:12:d5:ed:87:32:05:2b:aa:d1:21:58:62: 58:b4:13:8f:41:79:b3:af:69:a6:3d:9f:11:2b:a6:32:e6:3a: e3:b0:d4:58:81:a5:49:ab:fc:a5:68:e3:7f:b0:e4:2e:7d:e8: 9c:b2:96:ba:4b:c7:fd:fc:fd:3e:64:b9:61:6b:21:97:4e:a3: c7:cc:cf:c8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICND8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjMwNDIxMTI1MDEyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDQyODY4My0xOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEW7C5AV0ZkkUXu+oKtgnsIzeg1ACrTZDk8p4QXz0RN+gDhxR9wgAF9glLtL hAmX3aTbIfqMo7zCEGFk2vKJfY/KnJwo+a+OV+cQg1+5/Xz1aPf7uofyuf8aMfon /KvVnVcGdLjMQOYcQSaZT6T9vgT3+TXT5MYosnnCygHrjz5pv/686v6bHGyf9nGS nRtlZvuhXtOtrKdTHkZakwPDMtkivvojlX9lK2Q4r8L/4UMN8aVc4NVFMsWz9uHP oWs7dqfpMn6OiTtu9XHC52Y8t6U5UzLfdw99Kk9u6gHpFo5pY9aSipacxGX/ofCL kPcm0O2FeGD8M66r1Zab+wUahwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHcUWvuT q8N72m9nYnl10r8iMOLgMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvMzMxRjM0NUEz ODM2MTFFNkIyMjgyQjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAA9LfwwDwQCAAIwCQMHACQBRgECUjANBgkqhkiG9w0BAQsF AAOCAQEAKzEK7EzV9cgcay3yAtx5GplC7YNC5oKFw7peI8Q0iz/Klj22zVgblebi Z1uCPHU0+D/4A7rCowGENlMaBU9DO/LKlbyVsJ15gTTcfed4Ek1TSqJt/f+YYr1f ZViWzpQN6jyH4b1gvLuMWKPMCum4edgjszFoP35F/IIAQLf5feLN1gLY+7tMyZgY HUmh9XixLGhpvQTGSz+3Vsybx0zm8/B8bnDQxn7KrRkqiREhJwFSN5V3eOm08hyx EtXthzIFK6rRIVhiWLQTj0F5s69ppj2fESumMuY647DUWIGlSav8pWjjf7DkLn3o nLKWukvH/fz9PmS5YWshl06jx8zPyA== -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org