$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/360B9954512711ED89B40324C4F9AE02.roa File: 360B9954512711ED89B40324C4F9AE02.roa (raw, json) Hash identifier: ee8OISvhCndA9naHGOGl4rEVI/vK9GiivcgkJOLjcQM= Subject key identifier: 2E:2D:40:DD:6A:E9:60:97:D8:E3:F7:95:2D:AF:68:DD:4E:CE:4E:D3 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3EFE Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/360B9954512711ED89B40324C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:43:33 +0000 ROA not before: Tue 12 Sep 2023 02:43:33 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 38253 IP address blocks: 103.17.140.0/23 maxlen: 24 103.172.236.0/23 maxlen: 24 2400:b520::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16126 (0x3efe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:43:33 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd055-ba91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:17:c9:18:d1:bf:1a:da:a4:fe:90:4e:33: ad:26:3d:3e:5e:01:b4:09:81:49:f8:cd:a0:29:74: 57:78:c5:e6:4d:28:8c:a0:4e:fd:42:0b:c1:dc:2e: 2f:1d:3d:b4:ae:28:23:c2:09:41:d5:70:77:14:51: 7b:74:53:2e:b6:d5:21:40:2c:45:58:a9:38:35:41: c8:1c:93:01:89:97:b8:d1:1a:6e:86:4c:46:67:00: c3:b8:87:3a:e2:97:01:89:ee:8a:92:c6:de:09:24: e8:a1:db:30:6e:24:41:83:7e:c2:de:3c:99:c0:d1: a1:65:3f:f9:f5:ba:95:07:a2:94:f9:c7:55:fa:5a: e8:6f:8e:81:4b:b4:75:45:ad:89:8c:9d:1d:f5:cd: b5:33:2e:75:1b:41:52:86:d6:e9:f0:09:e5:5b:ff: 22:a7:67:37:7c:47:ad:8a:c2:08:34:b4:9c:ff:72: b3:26:cc:42:5d:64:36:ca:de:2e:d6:a6:8a:63:6c: 84:fb:2c:8f:70:d0:e8:78:f6:39:b9:f2:fb:e0:c3: 36:af:e4:3c:d9:e9:6e:09:a9:d7:ad:ca:57:17:b9: f5:85:36:b7:2d:5b:e8:d0:41:ae:62:73:bc:5b:0c: 9d:2d:0c:e1:24:32:0b:df:88:0d:76:15:eb:a4:3f: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2D:40:DD:6A:E9:60:97:D8:E3:F7:95:2D:AF:68:DD:4E:CE:4E:D3 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/360B9954512711ED89B40324C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.140.0/23 103.172.236.0/23 IPv6: 2400:b520::/48 Signature Algorithm: sha256WithRSAEncryption 1d:16:f6:1e:c4:00:d6:25:d8:8d:e5:c3:bc:6c:3b:ee:f7:01: b0:10:7f:8d:87:eb:47:ae:85:31:d8:34:06:47:fc:73:96:1b: ca:b2:cb:c9:fb:2d:65:88:95:46:6d:dd:60:6b:c9:2a:98:43: eb:9e:e8:74:f6:68:22:91:e0:ce:84:b3:d5:5b:1a:00:20:18: d6:73:c6:e5:a3:04:5c:1a:cd:79:67:86:8b:9d:c2:b7:2f:f2: 68:5d:98:35:e9:7e:35:83:c7:7d:a9:17:b0:07:0e:cc:d5:ca: e8:a5:3b:17:e1:69:5c:ee:4f:7f:1c:af:9c:a9:08:11:4e:93: 3d:21:e4:ff:ae:f1:a0:dd:dc:23:42:9e:1c:cb:b7:ab:2c:5a: 3c:f4:7d:f1:fa:24:69:45:da:05:07:ad:85:3e:6c:4b:26:82: 4e:34:d7:93:56:3c:bb:ab:ba:ba:a0:73:90:8d:3a:89:35:b6: 5e:57:51:3f:09:10:12:c5:de:1e:86:ad:1b:b3:b3:c6:f3:cc: c0:2d:be:57:8f:36:69:a1:b0:36:48:d1:cc:c1:5d:1e:7f:27: 52:6b:7b:e1:40:0c:47:9e:17:5a:11:a8:6b:69:99:eb:19:f7: 81:f1:c2:f3:6a:04:03:83:22:ec:78:e3:24:96:d8:7b:13:39: 33:16:ff:cd -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICPv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MzMzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA1NS1iYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWAXyRjRvxrapP6QTjOtJj0+XgG0CYFJ+M2gKXRXeMXmTSiMoE79QgvB3C4v HT20rigjwglB1XB3FFF7dFMuttUhQCxFWKk4NUHIHJMBiZe40RpuhkxGZwDDuIc6 4pcBie6KksbeCSToodswbiRBg37C3jyZwNGhZT/59bqVB6KU+cdV+lrob46BS7R1 Ra2JjJ0d9c21My51G0FShtbp8AnlW/8ip2c3fEetisIINLSc/3KzJsxCXWQ2yt4u 1qaKY2yE+yyPcNDoePY5ufL74MM2r+Q82eluCanXrcpXF7n1hTa3LVvo0EGuYnO8 WwydLQzhJDIL34gNdhXrpD9DtQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFC4tQN1q 6WCX2OP3lS2vaN1Ozk7TMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzYwQjk5NTQ1 MTI3MTFFRDg5QjQwMzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnEYwDBAFnrOwwDwQCAAIwCQMHACQAtSAAADANBgkqhkiG 9w0BAQsFAAOCAQEAHRb2HsQA1iXYjeXDvGw77vcBsBB/jYfrR66FMdg0Bkf8c5Yb yrLLyfstZYiVRm3dYGvJKphD657odPZoIpHgzoSz1VsaACAY1nPG5aMEXBrNeWeG i53Cty/yaF2YNel+NYPHfakXsAcOzNXK6KU7F+FpXO5PfxyvnKkIEU6TPSHk/67x oN3cI0KeHMu3qyxaPPR98fokaUXaBQethT5sSyaCTjTXk1Y8u6u6uqBzkI06iTW2 XldRPwkQEsXeHoatG7OzxvPMwC2+V482aaGwNkjRzMFdHn8nUmt74UAMR54XWhGo a2mZ6xn3gfHC82oEA4Mi7HjjJJbYexM5Mxb/zQ== -----END CERTIFICATE-----Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org