$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1FF145B4419F11EA8B12587CC4F9AE02.roa File: 1FF145B4419F11EA8B12587CC4F9AE02.roa (raw, json) Hash identifier: YYRZccfDeXuQXXuLT7sfmIy2XVYNm8yW1UQMFyY/kVY= Subject key identifier: 72:4D:07:75:34:40:49:07:0B:D9:72:3B:A2:84:C9:8E:3A:14:0E:79 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 099D Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1FF145B4419F11EA8B12587CC4F9AE02.roa Signing time: Fri 02 Jun 2023 21:32:38 +0000 ROA not before: Fri 02 Jun 2023 21:32:38 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 17408 IP address blocks: 45.126.84.0/24 maxlen: 24 45.126.86.0/24 maxlen: 24 103.18.228.0/24 maxlen: 24 103.18.230.0/24 maxlen: 24 103.231.36.0/24 maxlen: 24 103.231.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 20:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Jun 2 21:32:38 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=647a5ff6-074f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:59:24:87:b9:1e:57:0a:ee:aa:29:f7:51: 70:c6:b4:c9:bb:7b:16:ca:eb:52:dc:a3:6a:61:97: 8c:e7:e8:3d:7f:fd:f7:66:9b:64:f2:0c:db:72:23: a1:e5:47:c7:8e:72:60:ee:74:31:bb:51:e6:5c:08: 0a:75:15:e7:a4:bc:20:75:95:fe:73:f9:27:4b:36: 0d:75:24:12:5c:44:74:15:cb:96:c2:7f:76:40:36: 01:82:89:54:3c:8f:d3:7f:49:42:d9:fc:e9:3b:2c: b9:a5:46:c1:5b:4c:3e:d9:32:2a:36:c9:dd:ec:dc: 95:0c:09:97:d0:c4:5c:ae:8f:16:1e:05:a8:70:17: 1c:dc:7b:05:c5:ea:7c:57:5f:42:aa:25:9f:91:ba: 98:27:d6:1e:1a:dc:31:ed:23:c8:56:bd:e1:df:d5: c0:1f:d6:5f:34:6b:09:7e:44:47:71:44:d7:0a:c3: 38:54:51:0d:f8:39:ad:a3:12:24:3e:4c:57:28:9b: 1e:87:19:30:6a:f9:27:48:d4:34:37:fe:a6:fe:f0: 2e:c9:0d:e1:d1:91:43:8c:51:47:88:13:a1:83:d9: b8:b9:ab:f7:4a:f8:3f:31:cd:b8:68:34:c5:ef:fb: 71:e9:77:75:a2:77:44:e3:f2:61:2f:52:c0:b0:56: 1b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4D:07:75:34:40:49:07:0B:D9:72:3B:A2:84:C9:8E:3A:14:0E:79 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1FF145B4419F11EA8B12587CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.126.84.0/24 45.126.86.0/24 103.18.228.0/24 103.18.230.0/24 103.231.36.0/24 103.231.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:e3:2f:5e:08:c1:5d:15:e4:29:83:17:72:25:34:9b:42:7c: c2:72:21:44:fe:58:32:c1:9b:43:8b:ee:c0:4d:be:14:c0:9d: 2d:dc:a9:6b:e8:a4:19:68:df:fe:e1:be:26:b3:49:21:f4:d0: 9f:5c:d8:29:3a:80:b3:bd:fe:62:8f:09:33:98:c2:89:b8:07: 7d:38:1c:8c:62:66:76:ef:71:95:16:70:c5:d2:34:2b:f4:d3: 5a:78:a4:59:1d:70:8e:d3:31:cc:7b:6a:2d:f8:e4:3b:f9:03: 44:ed:0c:66:ba:73:b7:a4:72:f7:1d:3c:d3:32:07:29:eb:35: 5f:5a:30:4d:52:55:fc:31:a1:97:28:e0:06:75:a8:a3:de:a7: 6a:4b:8e:76:94:1e:e6:fa:92:d9:30:39:94:94:b7:bf:d7:2f: 1b:7e:11:4a:20:8f:eb:d5:b4:44:73:09:01:51:52:09:eb:d8: c7:86:2a:79:77:55:8a:d0:06:7b:c5:c6:c2:36:4a:39:34:52: 70:16:5a:fa:fc:7b:d3:0b:df:d9:ae:7f:5a:d6:97:76:11:97: 18:be:a6:ce:02:d9:2c:a1:6f:a3:b2:2b:bb:b3:85:b4:2d:d0: 78:2a:71:24:af:1a:e3:3b:f1:9a:ca:7b:61:92:22:8f:52:d0: 41:db:d6:02 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjMwNjAyMjEzMjM4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNWZmNi0wNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bNZJIe5HlcK7qop91FwxrTJu3sWyutS3KNqYZeM5+g9f/33Zptk8gzbciOh 5UfHjnJg7nQxu1HmXAgKdRXnpLwgdZX+c/knSzYNdSQSXER0FcuWwn92QDYBgolU PI/Tf0lC2fzpOyy5pUbBW0w+2TIqNsnd7NyVDAmX0MRcro8WHgWocBcc3HsFxep8 V19CqiWfkbqYJ9YeGtwx7SPIVr3h39XAH9ZfNGsJfkRHcUTXCsM4VFEN+DmtoxIk PkxXKJsehxkwavknSNQ0N/6m/vAuyQ3h0ZFDjFFHiBOhg9m4uav3Svg/Mc24aDTF 7/tx6Xd1ondE4/JhL1LAsFYbjQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFHJNB3U0 QEkHC9lyO6KEyY46FA55MB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCNUIvMjlERTc0OEE0MTlFMTFFQUI4NjZFNzdBQzRGOUFFMDIvMUZGMTQ1QjQ0 MTlGMTFFQThCMTI1ODdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAAtflQDBAAtflYDBABnEuQDBABnEuYDBABn5yQDBABn5yYw DQYJKoZIhvcNAQELBQADggEBAC/jL14IwV0V5CmDF3IlNJtCfMJyIUT+WDLBm0OL 7sBNvhTAnS3cqWvopBlo3/7hviazSSH00J9c2Ck6gLO9/mKPCTOYwom4B304HIxi ZnbvcZUWcMXSNCv001p4pFkdcI7TMcx7ai345Dv5A0TtDGa6c7ekcvcdPNMyBynr NV9aME1SVfwxoZco4AZ1qKPep2pLjnaUHub6ktkwOZSUt7/XLxt+EUogj+vVtERz CQFRUgnr2MeGKnl3VYrQBnvFxsI2Sjk0UnAWWvr8e9ML39muf1rWl3YRlxi+ps4C 2Syhb6OyK7uzhbQt0HgqcSSvGuM78ZrKe2GSIo9S0EHb1gI= -----END CERTIFICATE-----Generated at Wed May 22 23:17:03 2024 by rpki-client on console-ams.rpki-client.org