$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/2445BC6A6FCE11E9AA5D2439C4F9AE02.roa File: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (raw, json) Hash identifier: ZBnczf6i1Ft0AmNpKiJIV1DqYZIANTcE+WYR+xMSOmI= Subject key identifier: 2F:19:F9:75:4E:94:84:A8:EB:3B:E0:E3:E2:2C:29:79:CE:A4:CD:54 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1CC5 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/2445BC6A6FCE11E9AA5D2439C4F9AE02.roa Signing time: Fri 16 Feb 2024 16:34:06 +0000 ROA not before: Fri 16 Feb 2024 16:34:06 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 17539 IP address blocks: 45.64.180.0/24 maxlen: 32 45.64.181.0/24 maxlen: 24 45.64.182.0/24 maxlen: 24 45.64.183.0/24 maxlen: 24 103.249.152.0/24 maxlen: 24 103.249.153.0/24 maxlen: 24 103.249.154.0/24 maxlen: 24 103.249.155.0/24 maxlen: 24 203.170.64.0/23 maxlen: 24 203.170.66.0/24 maxlen: 24 203.170.67.0/24 maxlen: 24 203.170.68.0/24 maxlen: 24 203.170.71.0/24 maxlen: 32 203.170.72.0/24 maxlen: 24 203.170.73.0/24 maxlen: 24 203.170.74.0/24 maxlen: 24 203.170.75.0/24 maxlen: 24 203.170.76.0/24 maxlen: 24 203.170.77.0/24 maxlen: 24 203.170.78.0/24 maxlen: 24 203.170.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7365 (0x1cc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Feb 16 16:34:06 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65cf8e7e-1586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:a2:ab:4c:63:a2:34:9b:90:d6:74:96:82: c4:b5:7f:e3:80:ea:29:b3:e7:89:60:36:77:e9:26: f5:57:1d:4c:86:bd:2a:95:e2:33:09:c9:83:56:95: 14:75:47:17:57:bc:8d:f0:be:9c:23:a9:f3:e5:88: 70:c3:c8:6d:b3:b7:ba:10:56:09:28:b1:ff:41:0c: 97:ea:ff:dc:ef:ea:62:22:72:46:69:8e:00:24:dc: 07:3b:8c:87:48:58:2e:86:91:e7:e8:df:13:7e:89: f4:24:4d:8e:92:84:d0:a2:af:3d:cc:7c:46:89:58: b0:61:bb:ac:b9:9f:48:6a:79:84:6e:50:94:8f:17: a7:9f:95:ed:ae:6a:ee:8f:cd:12:35:5e:69:f6:41: 93:92:7f:19:d3:4c:09:e0:c7:2d:56:3d:11:83:8a: ee:d3:90:1e:a3:ee:75:3c:5c:ed:5b:5d:d9:0a:b9: dc:b8:a2:ef:86:d0:82:64:3f:e5:30:28:07:d4:81: 0a:e1:ac:ee:d8:ca:1b:dc:e5:18:37:12:cc:c2:86: 62:2c:9a:b5:01:56:bd:f5:88:5f:12:7a:f9:30:b6: c4:3a:77:0f:80:c9:7d:28:85:1f:02:35:92:1e:c8: 0c:f0:a6:6d:48:d3:5c:71:cb:20:f9:7a:b8:69:a9: 18:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:19:F9:75:4E:94:84:A8:EB:3B:E0:E3:E2:2C:29:79:CE:A4:CD:54 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/2445BC6A6FCE11E9AA5D2439C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.180.0/22 103.249.152.0/22 203.170.64.0-203.170.68.255 203.170.71.0-203.170.79.255 Signature Algorithm: sha256WithRSAEncryption 4c:6d:6a:7d:d2:64:fc:61:05:e8:be:83:e6:af:97:b8:fe:b8: 9c:89:02:84:dc:4e:63:b3:21:09:6f:4e:2f:a9:4b:fd:1a:2b: db:35:47:2a:0a:b1:ea:7d:2c:a6:c3:58:09:e2:7d:db:e7:d9: b9:bc:c0:94:4e:04:49:e7:94:4f:42:ff:b9:94:35:ed:0f:ab: 02:d0:e5:7e:b1:46:d6:bb:43:94:db:52:f1:bb:0d:5b:33:c3: c1:f7:3f:27:23:ca:e3:a9:d5:70:e7:10:33:dc:e2:b8:8c:e9: b6:55:78:12:5c:86:a0:8b:e6:fb:21:3b:37:84:9c:af:4f:43: fc:3f:05:e8:39:de:a6:d6:d3:c6:14:72:b9:be:6d:18:05:7c: d5:09:b2:a6:cf:f5:85:7f:3b:5d:8f:ce:80:53:a0:c0:8b:67: 6c:fd:9c:5e:6d:80:59:49:41:7a:ab:e8:cb:e5:b9:d9:3c:89: 67:13:1c:bb:62:c2:e9:78:6a:5d:2c:84:5c:f2:d9:07:bf:c3: 90:5c:e4:16:ff:3b:95:72:12:45:bf:78:07:d8:38:13:ff:8f: 51:16:a1:4c:52:92:86:bd:2d:36:da:60:4a:17:77:b8:f4:3e: af:bf:dc:ec:e7:51:0e:66:a1:79:35:ba:80:39:d0:5e:ea:db: b5:33:65:81 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICHMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjQwMjE2MTYzNDA2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNmOGU3ZS0xNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8qiq0xjojSbkNZ0loLEtX/jgOops+eJYDZ36Sb1Vx1Mhr0qleIzCcmDVpUU dUcXV7yN8L6cI6nz5Yhww8hts7e6EFYJKLH/QQyX6v/c7+piInJGaY4AJNwHO4yH SFguhpHn6N8Tfon0JE2OkoTQoq89zHxGiViwYbusuZ9IanmEblCUjxenn5Xtrmru j80SNV5p9kGTkn8Z00wJ4MctVj0Rg4ru05Aeo+51PFztW13ZCrncuKLvhtCCZD/l MCgH1IEK4azu2Mob3OUYNxLMwoZiLJq1AVa99YhfEnr5MLbEOncPgMl9KIUfAjWS HsgM8KZtSNNcccsg+Xq4aakYqQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFC8Z+XVO lISo6zvg4+IsKXnOpM1UMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyODgvQTkzQUE4ODBBMjcyMTFFNkI4QkM5OTZBQzRGOUFFMDIvMjQ0NUJDNkE2 RkNFMTFFOUFBNUQyNDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgDBAItQLQDBAJn+ZgwDAMEBsuqQAMEAMuqRDAMAwQAy6pHAwQE y6pAMA0GCSqGSIb3DQEBCwUAA4IBAQBMbWp90mT8YQXovoPmr5e4/riciQKE3E5j syEJb04vqUv9GivbNUcqCrHqfSymw1gJ4n3b59m5vMCUTgRJ55RPQv+5lDXtD6sC 0OV+sUbWu0OU21Lxuw1bM8PB9z8nI8rjqdVw5xAz3OK4jOm2VXgSXIagi+b7ITs3 hJyvT0P8PwXoOd6m1tPGFHK5vm0YBXzVCbKmz/WFfztdj86AU6DAi2ds/ZxebYBZ SUF6q+jL5bnZPIlnExy7YsLpeGpdLIRc8tkHv8OQXOQW/zuVchJFv3gH2DgT/49R FqFMUpKGvS022mBKF3e49D6vv9zs51EOZqF5NbqAOdBe6tu1M2WB -----END CERTIFICATE-----Generated at Thu May 16 17:51:53 2024 by rpki-client on console-ams.rpki-client.org