$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/21E2BFDAD2EF11EDAE3FC25FC4F9AE02.roa File: 21E2BFDAD2EF11EDAE3FC25FC4F9AE02.roa (raw, json) Hash identifier: RfZRe5AfoKnKc25VqJJfbDOYdwAKOjs/dyXEfs3NpZg= Subject key identifier: EC:88:0C:B4:6C:F6:3B:D5:58:E3:C3:75:DF:5C:39:AE:14:7B:11:7D Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 25 Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/21E2BFDAD2EF11EDAE3FC25FC4F9AE02.roa Signing time: Sat 03 Jun 2023 08:17:28 +0000 ROA not before: Sat 03 Jun 2023 08:17:28 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 134190 IP address blocks: 45.117.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Jun 3 08:17:28 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=647af717-ceeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:4b:35:59:0b:ac:a1:61:07:79:4e:a8:b5: 76:eb:6c:2a:1e:0b:f9:ac:bf:95:37:73:83:f9:d2: 02:04:51:a3:a1:f0:9b:9a:f8:60:73:30:5d:da:de: 55:aa:49:9c:0b:ca:ba:69:bc:f6:d6:a0:59:cb:7b: 89:2a:17:da:a3:e0:2e:e7:86:f5:00:a1:73:ff:fa: ea:df:82:a6:f3:c2:c2:4b:3b:12:37:bd:ae:24:bb: 6b:ca:36:21:1d:ba:02:bc:52:00:69:e1:9a:74:bd: 6e:45:24:ba:87:68:37:88:f8:43:65:94:da:df:65: d4:73:91:20:38:9f:cb:a4:67:7f:f9:49:b2:ec:f4: 0e:b1:01:c1:9d:84:e1:1e:2c:5b:25:d0:29:36:0f: d4:53:d2:b1:e0:71:a8:13:5e:c3:7f:9c:04:1e:b2: d5:22:fc:ba:0d:d4:51:19:9e:30:a6:34:46:ff:f2: a9:06:14:9d:86:ef:6b:90:f8:0b:9d:aa:db:75:dc: ea:6a:89:f1:2f:0d:c9:0c:1f:37:f2:f3:b0:38:15: 17:b2:d5:7c:90:d2:a1:7d:68:5b:60:2a:bf:84:53: 60:b9:61:dd:e1:0c:97:c2:5f:ef:02:0a:1f:a4:ad: 6e:26:1e:fe:a6:e1:cb:12:f9:5b:39:d7:be:8d:f9: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:88:0C:B4:6C:F6:3B:D5:58:E3:C3:75:DF:5C:39:AE:14:7B:11:7D X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/21E2BFDAD2EF11EDAE3FC25FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.123.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:ad:51:b8:22:5a:a2:83:00:bd:09:03:4c:e7:5e:7a:31:d8: f6:b1:67:21:e5:99:c5:22:62:71:b6:0c:9e:fa:20:45:2d:d8: c8:66:8e:e5:a3:82:8a:c5:61:b4:64:64:3e:6a:8e:7a:97:8d: ed:1d:9a:e0:c3:1f:69:84:19:1b:97:a4:35:bd:e9:83:64:8f: 72:9d:bf:0f:25:d9:a8:62:7f:3d:06:20:04:dc:d0:ce:fc:5d: ca:b4:f0:e8:05:42:b1:5d:19:2b:0e:e9:81:81:7b:fb:25:fa: b0:97:6b:d9:b5:cf:1b:77:bc:8f:88:55:92:2c:61:e1:12:ea: 58:b2:35:dc:47:01:f3:7e:43:9e:5f:ec:2e:47:58:3c:c8:85: 4b:4e:11:0f:db:af:c0:57:35:61:9c:24:90:73:67:e3:df:ef: df:da:d3:0a:ba:54:3f:84:cb:af:52:b9:81:fb:da:7d:27:d8: 73:37:00:5c:b6:4e:3a:73:08:70:b9:bd:97:f0:07:4a:fd:ff: 95:79:fb:23:b3:79:24:57:7f:a2:ec:b5:5f:f6:af:41:51:52: 35:56:46:8c:02:a3:d2:7e:14:17:1c:fc:7b:ee:3c:6c:17:79: 3e:fe:ef:02:0d:79:65:7b:f3:6e:b1:e8:87:18:1d:27:bd:52: a4:b3:6c:6b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjhFMjExMC8GA1UEBRMoQjQ4MTk4NzMzMUUxRUQ0MDhCNTFDQjlGRDhFRjRBNjUw QUM4NjY5QTAeFw0yMzA2MDMwODE3MjhaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0N2FmNzE3LWNlZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7oks1WQusoWEHeU6otXbrbCoeC/msv5U3c4P50gIEUaOh8Jua+GBzMF3a3lWq SZwLyrppvPbWoFnLe4kqF9qj4C7nhvUAoXP/+urfgqbzwsJLOxI3va4ku2vKNiEd ugK8UgBp4Zp0vW5FJLqHaDeI+ENllNrfZdRzkSA4n8ukZ3/5SbLs9A6xAcGdhOEe LFsl0Ck2D9RT0rHgcagTXsN/nAQestUi/LoN1FEZnjCmNEb/8qkGFJ2G72uQ+Aud qtt13OpqifEvDckMHzfy87A4FRey1XyQ0qF9aFtgKr+EU2C5Yd3hDJfCX+8CCh+k rW4mHv6m4csS+Vs5176N+VdzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7IgMtGz2 O9VY48N131w5rhR7EX0wHwYDVR0jBBgwFoAUtIGYczHh7UCLUcuf2O9KZQrIZpow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyOEUyLzk1MkZBNjMyRDJF NjExRUQ5QTUyRDU1QUM0RjlBRTAyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdElHWWN6SGg3VUNMVWN1ZjJPOUtaUXJJWnBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi8yMUUyQkZEQUQy RUYxMUVEQUUzRkMyNUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAC11ezANBgkqhkiG9w0BAQsFAAOCAQEAjq1RuCJaooMAvQkD TOdeejHY9rFnIeWZxSJicbYMnvogRS3YyGaO5aOCisVhtGRkPmqOepeN7R2a4MMf aYQZG5ekNb3pg2SPcp2/DyXZqGJ/PQYgBNzQzvxdyrTw6AVCsV0ZKw7pgYF7+yX6 sJdr2bXPG3e8j4hVkixh4RLqWLI13EcB835Dnl/sLkdYPMiFS04RD9uvwFc1YZwk kHNn49/v39rTCrpUP4TLr1K5gfvafSfYczcAXLZOOnMIcLm9l/AHSv3/lXn7I7N5 JFd/ouy1X/avQVFSNVZGjAKj0n4UFxz8e+48bBd5Pv7vAg15ZXvzbrHohxgdJ71S pLNsaw== -----END CERTIFICATE-----Generated at Mon May 27 06:56:12 2024 by rpki-client on console-fra.rpki-client.org