$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa File: 5480D316764D11EA8CB5C039C4F9AE02.roa (raw, json) Hash identifier: ftobPRBcc8wlVTCOH3GxCPMFHQM9ebuoV2KFpLluNR4= Subject key identifier: AC:BD:E0:F2:3A:2A:A8:92:62:DE:0B:6E:5D:55:76:B8:BC:9C:14:C6 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 215F Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa Signing time: Thu 10 Oct 2024 16:23:26 +0000 ROA not before: Thu 10 Oct 2024 16:23:26 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 56308 IP address blocks: 43.255.124.0/22 maxlen: 22 45.125.196.0/22 maxlen: 22 2407:8100:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8543 (0x215f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Oct 10 16:23:26 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6707ff7e-71e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:0a:86:b7:33:9a:db:58:06:a8:ea:50:5c: 30:47:c4:48:57:81:63:b0:f2:db:68:b4:05:09:f0: 14:40:8b:56:7d:63:31:05:28:74:f6:44:62:42:01: 46:9e:10:55:42:4b:bc:87:de:71:39:9a:5f:3b:a0: 72:45:a8:be:a0:75:1b:be:d2:9f:0e:22:09:2f:57: 63:59:34:69:46:14:2c:da:f0:69:cd:a3:91:a5:61: 10:bd:51:0c:7a:58:e4:9e:55:d5:e6:62:be:86:c4: 9f:0b:16:93:88:ff:36:ef:91:b0:2e:92:0e:43:b4: a0:9a:57:ec:97:d7:b1:4f:33:b0:47:0a:31:9d:4d: f6:be:d5:b7:c0:28:51:40:08:a3:ae:6a:50:97:a1: bc:56:ca:2a:26:8b:69:e7:2e:01:a0:97:3d:9b:35: fc:95:ba:2f:ea:e9:50:e7:14:21:43:33:fe:6c:ca: 2c:49:9c:e7:90:8b:51:3c:16:df:c7:1d:4a:5b:5f: b9:3b:a7:b3:46:cd:1e:01:7e:bb:d1:db:b5:a6:2e: db:c2:9b:37:41:da:96:e4:1e:0d:36:4d:c8:5a:55: ad:db:69:c5:ec:ab:e9:37:9d:68:42:ae:a9:1e:57: ef:86:81:b1:04:2c:24:67:27:94:f3:c9:9a:74:dc: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:E0:F2:3A:2A:A8:92:62:DE:0B:6E:5D:55:76:B8:BC:9C:14:C6 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.124.0/22 45.125.196.0/22 IPv6: 2407:8100:5::/48 Signature Algorithm: sha256WithRSAEncryption 76:71:f5:3b:c1:63:2a:81:21:90:62:40:20:c5:d9:67:61:0b: 10:e6:0a:7b:d5:aa:52:ca:12:56:5d:d2:df:c6:21:0b:8e:fd: 3e:cd:a9:67:21:3f:2b:0c:e3:26:80:81:30:64:8e:02:77:45: 0f:30:e9:01:17:fe:11:ad:ab:74:f6:c6:16:e9:4a:eb:d0:03: ce:c9:d2:88:46:10:9c:c2:bf:92:bc:28:e0:7c:0b:8f:3a:6d: 2a:82:40:22:ee:33:bd:11:1c:7c:47:3d:4f:30:a3:e1:49:93: 30:8a:73:38:96:46:9c:c0:3c:c7:8f:43:db:b1:e9:dd:8b:25: da:aa:de:cf:09:e5:2d:95:19:c9:70:65:c0:35:a8:a9:10:66: e7:70:30:90:15:7a:8e:eb:49:b0:09:f6:72:a6:dd:65:17:78: 7a:07:b3:7b:70:74:1a:a1:9b:be:42:e5:ba:43:a9:c6:bd:f1: 29:c6:1a:67:8a:7f:5e:32:9d:a5:02:45:7d:3c:95:69:4a:d3: ba:26:32:f9:6b:22:15:f7:2e:f8:15:92:ea:ab:8d:9e:fe:ce: af:1e:18:89:4e:25:16:07:18:1a:7b:2f:33:f3:5a:01:e5:6d: e0:f1:2d:c7:01:8e:0f:8f:3b:4f:cc:21:6c:a9:9b:00:f1:f0: 93:c5:fb:88 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICIV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjQxMDEwMTYyMzI2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA3ZmY3ZS03MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApU0KhrczmttYBqjqUFwwR8RIV4FjsPLbaLQFCfAUQItWfWMxBSh09kRiQgFG nhBVQku8h95xOZpfO6ByRai+oHUbvtKfDiIJL1djWTRpRhQs2vBpzaORpWEQvVEM eljknlXV5mK+hsSfCxaTiP8275GwLpIOQ7Sgmlfsl9exTzOwRwoxnU32vtW3wChR QAijrmpQl6G8VsoqJotp5y4BoJc9mzX8lbov6ulQ5xQhQzP+bMosSZznkItRPBbf xx1KW1+5O6ezRs0eAX670du1pi7bwps3QdqW5B4NNk3IWlWt22nF7KvpN51oQq6p HlfvhoGxBCwkZyeU88madNztowIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKy94PI6 KqiSYt4Lbl1Vdri8nBTGMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNTQ4MEQzMTY3 NjREMTFFQThDQjVDMDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIr/3wDBAItfcQwDwQCAAIwCQMHACQHgQAABTANBgkqhkiG 9w0BAQsFAAOCAQEAdnH1O8FjKoEhkGJAIMXZZ2ELEOYKe9WqUsoSVl3S38YhC479 Ps2pZyE/KwzjJoCBMGSOAndFDzDpARf+Ea2rdPbGFulK69ADzsnSiEYQnMK/krwo 4HwLjzptKoJAIu4zvREcfEc9TzCj4UmTMIpzOJZGnMA8x49D27Hp3Ysl2qrezwnl LZUZyXBlwDWoqRBm53AwkBV6jutJsAn2cqbdZRd4egeze3B0GqGbvkLlukOpxr3x KcYaZ4p/XjKdpQJFfTyVaUrTuiYy+WsiFfcu+BWS6quNnv7Orx4YiU4lFgcYGnsv M/NaAeVt4PEtxwGOD487T8whbKmbAPHwk8X7iA== -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:07 2024 by rpki-client on console-fra.rpki-client.org