$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/45D16954A04E11EFB7A1FD6CC4F9AE02.roa File: 45D16954A04E11EFB7A1FD6CC4F9AE02.roa (raw, json) Hash identifier: ZDeuMCGn92bs4geP2myGIqJkxEeZZToab6ilA20tIVc= Subject key identifier: AB:1E:CA:6D:91:CE:D1:29:BC:08:50:28:68:D6:E5:5C:5F:51:11:6A Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 0135 Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/45D16954A04E11EFB7A1FD6CC4F9AE02.roa Signing time: Mon 11 Nov 2024 17:31:41 +0000 ROA not before: Mon 11 Nov 2024 17:31:41 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 149023 IP address blocks: 103.176.246.0/24 maxlen: 24 103.176.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Nov 11 17:31:41 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=67323f7d-6759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:82:27:b1:33:0d:52:23:f4:74:35:1f:6d: 5c:65:0a:32:dc:84:f8:d1:9a:2d:e3:c1:07:70:5a: 32:3b:20:48:dd:eb:20:10:3c:be:bc:75:98:c9:9a: 5f:b2:19:e1:72:02:b1:b7:09:e2:6b:05:29:2a:a6: 7c:a6:64:9d:c8:25:a2:32:a1:a0:83:5d:01:49:02: a1:91:01:5c:2f:12:98:22:23:9f:34:72:6c:1a:43: dc:06:ec:a4:da:7b:cd:70:9d:3c:3e:7e:28:77:63: 50:6c:52:90:8d:ab:79:68:b8:ed:49:df:f1:d4:21: cb:a8:de:cb:63:6e:6c:ea:4c:7a:c7:0c:6b:73:cb: 07:ee:03:ca:3c:cd:f7:3a:63:30:a4:92:e8:d7:20: 5a:d7:06:e7:2a:52:6a:fb:a1:ba:51:b0:d5:15:11: 17:7f:71:65:d1:da:a0:60:e8:9b:78:a4:9f:36:3a: 6d:d0:1c:24:8d:35:71:1f:80:f4:42:98:c8:92:16: e1:f8:0b:89:39:b0:d1:d8:6d:9c:62:9a:18:a4:68: 8a:8d:7b:63:ba:ba:13:f2:1c:14:c2:fc:98:72:58: dc:b0:2a:d5:86:a6:f8:ed:1d:a2:2f:3d:da:e5:d3: d1:8b:7d:45:53:d4:41:20:a8:d1:0a:6b:f7:42:be: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1E:CA:6D:91:CE:D1:29:BC:08:50:28:68:D6:E5:5C:5F:51:11:6A X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/45D16954A04E11EFB7A1FD6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.246.0/23 Signature Algorithm: sha256WithRSAEncryption 82:02:48:eb:1b:ef:e4:54:08:fc:b0:04:38:95:92:46:7a:f0: c5:f9:92:65:60:70:85:19:17:09:ef:93:3e:a6:14:80:1f:df: 3d:15:96:c8:97:ab:b5:c2:4f:56:0f:1e:f3:25:8c:88:f3:c9: 0f:55:ba:35:22:5b:8f:1a:83:c2:c0:a8:21:08:53:99:ba:9e: 34:95:24:61:96:14:7a:23:35:a1:43:c6:78:08:e2:3d:f3:e9: b9:29:d4:bb:91:40:dd:e2:71:83:82:59:d9:8e:d1:44:98:2a: 9e:22:c9:c5:df:86:43:bd:a6:4d:e4:bf:f4:73:ac:dc:6f:59: 18:c3:78:88:6e:64:b1:ce:9f:cf:bf:0c:4d:41:69:6f:22:27: 10:ad:8b:00:a0:e9:d4:8f:4f:ac:62:b6:87:af:4a:d9:47:32: a3:0d:68:8d:d7:f7:f3:aa:62:c4:c9:76:a4:4f:2c:47:c5:65: 18:66:9b:e8:62:12:fd:69:f0:c4:42:90:9c:bb:5d:ba:b7:b8: 66:71:80:97:70:34:81:fd:c8:2d:07:ca:ae:02:d6:1d:95:62: d5:d1:08:af:7f:83:b4:ae:4f:6b:2f:b9:be:38:d5:df:e9:84: ea:e5:f8:1e:02:02:f3:5c:d1:33:17:65:a6:ac:0b:4c:1d:48: 67:19:25:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjQxMTExMTczMTQxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMyM2Y3ZC02NzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C+CJ7EzDVIj9HQ1H21cZQoy3IT40Zot48EHcFoyOyBI3esgEDy+vHWYyZpf shnhcgKxtwniawUpKqZ8pmSdyCWiMqGgg10BSQKhkQFcLxKYIiOfNHJsGkPcBuyk 2nvNcJ08Pn4od2NQbFKQjat5aLjtSd/x1CHLqN7LY25s6kx6xwxrc8sH7gPKPM33 OmMwpJLo1yBa1wbnKlJq+6G6UbDVFREXf3Fl0dqgYOibeKSfNjpt0BwkjTVxH4D0 QpjIkhbh+AuJObDR2G2cYpoYpGiKjXtjuroT8hwUwvyYcljcsCrVhqb47R2iLz3a 5dPRi31FU9RBIKjRCmv3Qr7BEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKseym2R ztEpvAhQKGjW5VxfURFqMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNCMkUvMEY1NUM2OTZENjdEMTFFRDg2RDMzNzUwQzRGOUFFMDIvNDVEMTY5NTRB MDRFMTFFRkI3QTFGRDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsPYwDQYJKoZIhvcNAQELBQADggEBAIICSOsb7+RUCPyw BDiVkkZ68MX5kmVgcIUZFwnvkz6mFIAf3z0VlsiXq7XCT1YPHvMljIjzyQ9VujUi W48ag8LAqCEIU5m6njSVJGGWFHojNaFDxngI4j3z6bkp1LuRQN3icYOCWdmO0USY Kp4iycXfhkO9pk3kv/RzrNxvWRjDeIhuZLHOn8+/DE1BaW8iJxCtiwCg6dSPT6xi toevStlHMqMNaI3X9/OqYsTJdqRPLEfFZRhmm+hiEv1p8MRCkJy7Xbq3uGZxgJdw NIH9yC0Hyq4C1h2VYtXRCK9/g7SuT2svub441d/phOrl+B4CAvNc0TMXZaasC0wd SGcZJUk= -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org