$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/33521546B7EB11ED9CF6A63EC4F9AE02.roa File: 33521546B7EB11ED9CF6A63EC4F9AE02.roa (raw, json) Hash identifier: vJ7ZcpObo2cilgC0q4Dg+vRqjia7tqNbMZk8o1r6zTg= Subject key identifier: BF:84:1F:03:81:C9:62:C7:2F:39:B5:FC:3C:26:9D:A5:C7:DC:9B:60 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3ED9 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/33521546B7EB11ED9CF6A63EC4F9AE02.roa Signing time: Tue 12 Sep 2023 02:43:00 +0000 ROA not before: Tue 12 Sep 2023 02:43:00 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150823 IP address blocks: 103.91.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16089 (0x3ed9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:43:00 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd033-d068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:8e:6b:32:37:b3:62:6e:7c:18:97:86:f0: 97:7a:b0:31:6f:07:fa:17:67:25:79:0c:b6:b2:49: 82:00:87:5a:e8:36:9c:37:3d:00:f3:dd:3c:34:f7: 4f:c4:c4:47:3e:a1:ed:fc:2c:2d:34:eb:62:ba:52: f9:41:3a:c9:90:e0:9f:5a:83:f7:02:0b:7f:42:7e: 31:f4:33:fb:5a:9e:71:5f:49:47:d4:ae:50:41:1d: 4c:96:71:29:9c:24:cb:56:f9:d2:c8:7d:41:20:e3: 81:b1:6f:0a:ba:e9:6a:16:0e:44:6a:9d:24:30:69: a0:56:50:8e:b5:20:5b:0b:10:1d:74:d6:31:3d:e5: e3:5c:c0:77:40:2d:79:ab:53:14:21:d4:9c:ae:c1: e7:0f:0c:1a:f6:19:b4:ed:36:35:66:4d:27:db:54: 8f:4b:33:ab:53:63:14:df:f5:f4:e2:e4:ee:f0:03: 79:90:19:6c:60:01:23:15:35:62:de:84:7b:83:35: 33:0d:b8:55:2f:ca:66:73:1b:f8:5c:1d:58:8b:c1: 57:35:91:cd:ca:72:9b:c9:5e:51:98:81:c5:ae:f2: 4d:25:48:39:6b:90:42:eb:84:31:36:e5:b9:8c:e7: fd:23:1b:b6:d5:68:d8:d2:ee:22:b5:b1:a7:0c:0e: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:84:1F:03:81:C9:62:C7:2F:39:B5:FC:3C:26:9D:A5:C7:DC:9B:60 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/33521546B7EB11ED9CF6A63EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.170.0/23 Signature Algorithm: sha256WithRSAEncryption 70:2e:4c:02:d3:22:06:ec:25:f7:ad:4b:38:55:81:91:8d:11: 57:03:e2:56:4a:bf:31:35:ff:58:63:59:c2:c1:db:04:c1:43: 16:12:20:f7:31:5f:6c:97:0b:67:95:f1:59:a2:9e:e9:a2:8b: db:6d:72:40:32:4e:42:41:53:03:5a:a9:e0:0b:da:a2:f2:c4: 53:86:95:b3:81:4e:41:d1:46:01:6c:46:02:b9:02:05:63:8b: 96:f9:c8:03:66:3d:2a:03:e5:77:83:50:06:64:f8:54:1c:06: 38:f6:d3:bb:1c:d5:a5:d4:aa:2a:0a:2c:00:0f:3f:e3:59:a1: 8d:5c:cb:e3:8a:ab:c9:8c:8a:3d:88:98:77:1a:68:c7:4a:09: 4d:36:d0:39:5f:fe:26:5a:bc:64:74:2f:00:94:ff:4a:9f:1b: 6f:99:e3:77:90:12:fe:27:b6:37:13:ad:dc:6d:82:eb:64:a4: d1:db:34:ab:58:08:1a:ff:7c:90:9d:2b:02:93:16:bf:72:01: 7e:71:f6:45:c2:24:25:a8:95:a7:9e:8d:57:5e:29:78:77:e6: 1b:ad:de:fe:af:11:9b:18:ae:9b:99:a5:19:71:3b:cc:32:57: 05:30:aa:2e:70:17:cb:2d:40:39:a9:83:ab:6c:9c:3b:60:9f: cb:19:51:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICPtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MzAwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDAzMy1kMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZmOazI3s2JufBiXhvCXerAxbwf6F2cleQy2skmCAIda6DacNz0A8908NPdP xMRHPqHt/CwtNOtiulL5QTrJkOCfWoP3Agt/Qn4x9DP7Wp5xX0lH1K5QQR1MlnEp nCTLVvnSyH1BIOOBsW8KuulqFg5Eap0kMGmgVlCOtSBbCxAddNYxPeXjXMB3QC15 q1MUIdScrsHnDwwa9hm07TY1Zk0n21SPSzOrU2MU3/X04uTu8AN5kBlsYAEjFTVi 3oR7gzUzDbhVL8pmcxv4XB1Yi8FXNZHNynKbyV5RmIHFrvJNJUg5a5BC64QxNuW5 jOf9Ixu21WjY0u4itbGnDA6/SQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL+EHwOB yWLHLzm1/DwmnaXH3JtgMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzM1MjE1NDZC N0VCMTFFRDlDRjZBNjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnW6owDQYJKoZIhvcNAQELBQADggEBAHAuTALTIgbsJfet SzhVgZGNEVcD4lZKvzE1/1hjWcLB2wTBQxYSIPcxX2yXC2eV8Vminumii9ttckAy TkJBUwNaqeAL2qLyxFOGlbOBTkHRRgFsRgK5AgVji5b5yANmPSoD5XeDUAZk+FQc Bjj207sc1aXUqioKLAAPP+NZoY1cy+OKq8mMij2ImHcaaMdKCU020Dlf/iZavGR0 LwCU/0qfG2+Z43eQEv4ntjcTrdxtgutkpNHbNKtYCBr/fJCdKwKTFr9yAX5x9kXC JCWolaeejVdeKXh35hut3v6vEZsYrpuZpRlxO8wyVwUwqi5wF8stQDmpg6tsnDtg n8sZUSo= -----END CERTIFICATE-----Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org