$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/4703352E2BC311EEA3EEFA66C4F9AE02.roa File: 4703352E2BC311EEA3EEFA66C4F9AE02.roa (raw, json) Hash identifier: GhMpIsuZe6UWSXVhxx0gZ7LGDFuMOBfOpEr3szGlSIw= Subject key identifier: B8:92:22:0D:41:06:9B:36:CA:37:AE:9F:34:D9:E5:CC:0B:69:B4:1A Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3480 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/4703352E2BC311EEA3EEFA66C4F9AE02.roa Signing time: Wed 26 Jul 2023 14:47:00 +0000 ROA not before: Wed 26 Jul 2023 14:47:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135533 IP address blocks: 61.45.248.0/24 maxlen: 24 2401:4601:248::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13440 (0x3480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Jul 26 14:47:00 2023 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=64c131e4-0cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:54:e2:f3:e8:c9:be:51:57:34:1b:cd:cd: 66:b5:6c:d2:57:9f:2a:8b:d0:2a:aa:48:c7:43:7e: e9:8e:ae:a1:8e:5c:b1:00:df:77:b2:90:13:4b:e1: c8:b3:6a:35:c2:1b:b3:1f:46:ca:7c:7e:4f:8d:25: 32:85:90:a0:e3:d4:d2:b1:3b:e9:79:f5:8a:a4:1d: c4:8a:1f:36:65:34:db:ce:5c:79:da:45:23:73:ce: a5:20:6a:28:e6:e7:00:dd:c1:2e:d9:4c:3c:97:ad: 2f:fa:06:44:27:ea:d3:5c:50:c9:53:03:a7:d1:fc: c5:98:63:a9:9a:a4:53:50:b6:d8:28:78:e4:78:25: 03:9e:c7:b2:8b:db:da:6e:ee:aa:af:58:9d:28:7b: b4:a4:8d:8b:9b:55:05:5b:b5:8d:83:0f:2e:44:1d: 07:ed:34:5e:4a:84:33:86:6c:e4:0d:3f:3e:0c:04: 50:16:76:a6:27:46:2e:2b:80:58:6f:a1:ea:00:ba: 49:b5:37:01:28:2c:90:c6:c0:ef:fd:c9:a6:6d:9d: a8:06:20:db:7a:2e:e0:6e:e1:ca:07:c9:2c:fd:db: 64:63:8b:ab:e5:ef:a9:d3:d8:9f:cf:be:1f:8b:e8: 19:47:49:06:68:fb:1b:95:cc:2c:b5:0b:27:a5:d8: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:92:22:0D:41:06:9B:36:CA:37:AE:9F:34:D9:E5:CC:0B:69:B4:1A X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/4703352E2BC311EEA3EEFA66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.45.248.0/24 IPv6: 2401:4601:248::/48 Signature Algorithm: sha256WithRSAEncryption 9d:00:80:0b:90:50:7a:33:d9:6d:0a:42:e5:db:cc:49:ed:e3: a0:f8:a6:a7:1f:7a:21:06:24:cc:8e:6e:54:3f:36:e1:58:1c: c6:20:67:33:23:cd:02:25:05:56:e2:c4:77:52:9c:b0:e2:58: fd:72:fe:48:0d:cc:99:c7:ae:6d:01:8b:be:74:7e:ac:12:35: ea:2b:e5:c4:ae:32:bb:00:7f:90:a8:bf:db:e4:02:b1:80:46: b8:d3:0d:59:98:10:4d:07:ec:e0:f3:b7:32:9c:e1:b4:d8:f1: 3a:df:60:bd:31:d4:bd:a7:97:0d:93:a6:a9:c4:92:8d:40:28: d1:65:47:88:a4:1b:9a:87:52:b7:76:5f:52:3e:1b:e4:a7:a5: c6:d0:8d:1c:ef:66:af:b0:52:be:2f:71:08:48:f7:fe:22:ac: b5:cf:59:ad:f8:5e:c0:b1:63:71:37:cc:43:58:d9:e5:7b:f3: df:60:bb:90:6e:f4:d7:65:5d:a2:be:5e:92:d5:4f:6f:b9:f3: 85:e7:57:93:52:fd:3b:7d:a1:38:11:d1:e5:20:d4:70:b2:0d: a2:c2:a0:1c:90:80:f5:4c:62:c4:ed:2a:7a:31:d4:5f:29:27: e1:5a:bf:17:c2:76:ec:6f:80:d2:f9:dc:1f:4f:38:4f:d9:29: d0:61:3f:be -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjMwNzI2MTQ0NzAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGMxMzFlNC0wY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7ZU4vPoyb5RVzQbzc1mtWzSV58qi9AqqkjHQ37pjq6hjlyxAN93spATS+HI s2o1whuzH0bKfH5PjSUyhZCg49TSsTvpefWKpB3Eih82ZTTbzlx52kUjc86lIGoo 5ucA3cEu2Uw8l60v+gZEJ+rTXFDJUwOn0fzFmGOpmqRTULbYKHjkeCUDnseyi9va bu6qr1idKHu0pI2Lm1UFW7WNgw8uRB0H7TReSoQzhmzkDT8+DARQFnamJ0YuK4BY b6HqALpJtTcBKCyQxsDv/cmmbZ2oBiDbei7gbuHKB8ks/dtkY4ur5e+p09ifz74f i+gZR0kGaPsblcwstQsnpdjySwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLiSIg1B Bps2yjeunzTZ5cwLabQaMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvNDcwMzM1MkUy QkMzMTFFRUEzRUVGQTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAA9LfgwDwQCAAIwCQMHACQBRgECSDANBgkqhkiG9w0BAQsF AAOCAQEAnQCAC5BQejPZbQpC5dvMSe3joPimpx96IQYkzI5uVD824VgcxiBnMyPN AiUFVuLEd1KcsOJY/XL+SA3MmceubQGLvnR+rBI16ivlxK4yuwB/kKi/2+QCsYBG uNMNWZgQTQfs4PO3MpzhtNjxOt9gvTHUvaeXDZOmqcSSjUAo0WVHiKQbmodSt3Zf Uj4b5KelxtCNHO9mr7BSvi9xCEj3/iKstc9ZrfhewLFjcTfMQ1jZ5Xvz32C7kG70 12Vdor5ektVPb7nzhedXk1L9O32hOBHR5SDUcLINosKgHJCA9UxixO0qejHUXykn 4Vq/F8J27G+A0vncH084T9kp0GE/vg== -----END CERTIFICATE-----Generated at Sun May 26 16:40:37 2024 by rpki-client on console-fra.rpki-client.org