$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/671C31AAC6C811ECA5A9AB33C4F9AE02.roa File: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (raw, json) Hash identifier: +vJahyBsj/iwD6Uf+V5LVvoqUetqk1SrdYTgQvG1J8M= Subject key identifier: E0:CB:B4:9E:EB:1A:C1:10:AC:7A:17:F8:89:49:B8:4A:18:AF:69:AE Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 029D Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/671C31AAC6C811ECA5A9AB33C4F9AE02.roa Signing time: Wed 07 Aug 2024 02:44:32 +0000 ROA not before: Wed 07 Aug 2024 02:44:32 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132742 IP address blocks: 45.121.56.0/22 maxlen: 24 103.61.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: Aug 7 02:44:32 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b2df90-8bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:e8:8c:00:17:0b:1d:a0:90:1a:88:e1:33: fd:62:20:71:27:7e:a5:8f:bd:30:2f:41:1e:f9:06: 69:89:04:3c:2b:06:86:d4:91:a1:1d:d1:50:15:92: 18:eb:92:71:b1:12:48:d8:ad:01:60:8f:81:88:6f: bb:fe:74:b6:61:dc:44:0e:3c:fd:b1:5a:33:d5:08: 88:ec:61:bc:53:bb:bf:f6:25:21:83:e8:9e:52:36: ea:02:58:1e:32:34:1e:74:3f:0c:8c:eb:f6:16:e6: 03:48:be:8d:2d:d4:fa:13:c6:3f:50:ca:1f:59:a8: ed:98:82:ba:cc:49:9a:0c:2f:3a:9c:8d:cd:44:40: a4:a8:dd:27:9e:da:04:10:84:e8:32:6d:b5:76:f6: ff:e2:90:a4:67:6e:c1:d9:66:2e:1e:14:14:24:9d: 83:c3:d4:58:e4:27:34:db:48:92:64:cf:94:75:9f: 36:2c:e0:27:db:6a:e3:ab:a7:46:09:6e:85:a5:5a: 09:5f:6b:88:b3:87:06:07:c6:0f:c3:ba:51:38:15: 28:44:2b:e6:48:58:43:e5:4e:95:d4:6f:e9:53:3d: a9:f5:c1:4d:06:38:84:97:78:1a:29:c7:3b:0b:ff: 8f:84:0f:cf:57:8e:d6:1e:39:da:66:ae:6f:56:ea: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CB:B4:9E:EB:1A:C1:10:AC:7A:17:F8:89:49:B8:4A:18:AF:69:AE X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/671C31AAC6C811ECA5A9AB33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.56.0/22 103.61.144.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:4f:a0:10:6b:93:08:ce:1c:22:fc:8c:70:4c:5b:81:61:1b: 18:d0:33:06:03:ef:c0:fa:7d:86:26:61:e0:a1:e1:a0:5d:72: 84:5e:15:71:e7:a6:99:0b:c2:1c:c6:60:49:b3:81:17:ea:1d: e1:5b:a7:8f:77:58:01:c2:88:93:03:3a:8d:3c:fa:2d:73:c4: d6:7c:52:88:2b:56:a7:9c:04:65:64:22:02:80:98:ba:12:4c: f2:d3:49:07:02:8b:59:69:01:8c:04:94:f6:63:38:00:3a:9b: 5b:ee:7a:83:d5:40:ee:09:d4:b6:4a:7a:34:41:15:2d:24:ba: 2f:76:dc:e7:7d:bc:56:01:2c:f9:f0:ce:39:77:9f:42:f8:53: 7a:08:4b:5b:5c:ce:f4:ec:31:a6:f7:61:48:9f:b5:c2:22:10: 91:cf:a9:cb:bd:75:98:72:f0:9c:b5:6f:fe:78:eb:47:a3:4c: f4:cc:3e:5e:1f:08:1c:a0:ff:61:42:b1:9e:ff:f8:9e:88:a6: b8:df:c2:b3:1b:25:c3:81:6e:5a:24:b4:48:ca:07:b3:fd:cb: 7e:ff:cb:03:f4:e7:cd:57:3d:b9:ed:f6:b6:c9:20:5f:04:b2: b2:a8:b0:6b:2c:3a:80:03:60:c9:ef:21:4e:43:e0:a0:df:9d: 14:3a:65:f3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjQwODA3MDI0NDMyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyZGY5MC04YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2/ojAAXCx2gkBqI4TP9YiBxJ36lj70wL0Ee+QZpiQQ8KwaG1JGhHdFQFZIY 65JxsRJI2K0BYI+BiG+7/nS2YdxEDjz9sVoz1QiI7GG8U7u/9iUhg+ieUjbqAlge MjQedD8MjOv2FuYDSL6NLdT6E8Y/UMofWajtmIK6zEmaDC86nI3NRECkqN0nntoE EIToMm21dvb/4pCkZ27B2WYuHhQUJJ2Dw9RY5Cc020iSZM+UdZ82LOAn22rjq6dG CW6FpVoJX2uIs4cGB8YPw7pROBUoRCvmSFhD5U6V1G/pUz2p9cFNBjiEl3gaKcc7 C/+PhA/PV47WHjnaZq5vVuoCVwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFODLtJ7r GsEQrHoX+IlJuEoYr2muMB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZEQjMvNTNBQTFCRDRDNjA4MTFFQzlCMzE0NDZEQzRGOUFFMDIvNjcxQzMxQUFD NkM4MTFFQ0E1QTlBQjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteTgDBAJnPZAwDQYJKoZIhvcNAQELBQADggEBAJxPoBBr kwjOHCL8jHBMW4FhGxjQMwYD78D6fYYmYeCh4aBdcoReFXHnppkLwhzGYEmzgRfq HeFbp493WAHCiJMDOo08+i1zxNZ8UogrVqecBGVkIgKAmLoSTPLTSQcCi1lpAYwE lPZjOAA6m1vueoPVQO4J1LZKejRBFS0kui923Od9vFYBLPnwzjl3n0L4U3oIS1tc zvTsMab3YUiftcIiEJHPqcu9dZhy8Jy1b/5460ejTPTMPl4fCByg/2FCsZ7/+J6I prjfwrMbJcOBbloktEjKB7P9y37/ywP0581XPbnt9rbJIF8EsrKosGssOoADYMnv IU5D4KDfnRQ6ZfM= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:53 2024 by rpki-client on console-ams.rpki-client.org