$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36D1D2606FAD11EC9F0C2164C4F9AE02.roa File: 36D1D2606FAD11EC9F0C2164C4F9AE02.roa (raw, json) Hash identifier: yYACpDQqbeIbRA9R5roQjo5XoWCXVst+dX8xIoDezq8= Subject key identifier: 2B:A3:BF:D2:1F:DB:F7:9D:61:56:37:B2:92:B0:FB:BE:A6:76:A6:14 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3EAC Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36D1D2606FAD11EC9F0C2164C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:42:21 +0000 ROA not before: Tue 12 Sep 2023 02:42:21 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 149065 IP address blocks: 103.177.170.0/23 maxlen: 24 2001:df0:27c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16044 (0x3eac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:42:21 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd00d-970b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:c3:f2:c0:e5:ad:25:b7:86:b9:de:0d:8b: 77:3d:2f:39:ac:2c:9d:16:5b:80:0a:50:33:da:8e: 3c:65:a6:02:ff:dd:a9:f7:fe:99:83:f7:b8:aa:4c: 72:00:b0:b6:c5:a8:96:7f:45:13:77:1b:33:cb:12: d9:51:f7:8b:ff:ac:fd:2f:f6:4a:fb:df:ce:18:2b: 8b:66:e5:2b:1a:72:88:b2:8b:34:e6:5a:9e:ea:68: 81:a8:ec:b1:a2:e5:cc:a4:56:e1:26:57:97:11:35: 80:fe:42:db:ef:69:cd:85:75:e7:09:57:a0:41:6f: ca:d0:29:ab:58:41:8b:5c:cf:c5:4c:b9:be:14:41: 0e:60:a2:09:07:3c:8f:6d:76:fe:ff:6b:0d:1a:6b: d7:7d:64:8a:fd:0a:26:a2:90:81:64:3a:85:46:fa: e1:3b:8a:be:2a:2b:f3:a4:1d:a2:96:53:6c:5a:71: 01:04:60:47:08:10:f1:c6:29:65:e5:df:83:86:e8: 5f:8a:f1:07:53:b9:c5:14:be:c6:71:9b:9c:74:63: 5a:56:e5:ea:ed:10:2d:c1:0c:a1:f3:0b:2c:39:f8: c6:b4:50:9b:8e:2d:a7:33:96:2b:e2:e2:21:d5:bf: 2e:05:cd:f9:c7:6c:a5:1a:63:9a:2d:8e:2e:6e:65: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A3:BF:D2:1F:DB:F7:9D:61:56:37:B2:92:B0:FB:BE:A6:76:A6:14 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36D1D2606FAD11EC9F0C2164C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.170.0/23 IPv6: 2001:df0:27c0::/48 Signature Algorithm: sha256WithRSAEncryption 34:7b:1d:80:f8:29:6f:e3:55:87:5a:fc:24:c8:66:02:64:02: 8c:f6:6e:96:7b:7d:79:c1:df:e3:a4:c4:3c:85:7e:29:00:97: b8:98:5a:16:d9:09:00:03:8f:cc:5b:65:f4:cd:7f:04:51:70: 8f:42:5b:d4:b0:bc:27:6d:d5:f8:f8:f4:89:f8:82:a4:f0:1d: 3a:4b:8d:ac:6b:4e:f1:25:ba:04:ad:8d:69:87:80:4d:94:93: dc:7e:c3:4b:9a:06:79:66:ba:14:3b:9c:27:be:9a:fb:02:5d: e0:25:61:b2:6f:bc:8e:35:fa:c0:d2:21:ef:90:26:ff:69:3e: b7:1e:5f:36:b2:0e:41:05:61:30:97:54:d1:51:3e:d5:84:10: fd:51:95:26:38:b8:a4:8d:cc:ac:5d:a2:96:1f:67:c8:63:23: 2d:90:6f:8d:81:4f:f6:25:21:8a:8c:69:70:4c:83:24:ae:12: 92:2f:4e:6b:09:8c:3e:ab:ae:3c:c8:88:1d:9c:df:20:f6:f0: e9:dc:4d:2f:bd:89:a3:51:f0:9e:41:6b:99:36:70:d4:97:14: e1:8b:b1:14:56:56:f0:1b:b4:cc:7f:8c:9a:3b:df:2a:2a:ae: 22:bd:ea:9f:1a:05:99:08:57:b1:3e:eb:6d:80:e9:09:85:a6: 4b:32:c4:54 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICPqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MjIxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDAwZC05NzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6zD8sDlrSW3hrneDYt3PS85rCydFluAClAz2o48ZaYC/92p9/6Zg/e4qkxy ALC2xaiWf0UTdxszyxLZUfeL/6z9L/ZK+9/OGCuLZuUrGnKIsos05lqe6miBqOyx ouXMpFbhJleXETWA/kLb72nNhXXnCVegQW/K0CmrWEGLXM/FTLm+FEEOYKIJBzyP bXb+/2sNGmvXfWSK/QomopCBZDqFRvrhO4q+KivzpB2illNsWnEBBGBHCBDxxill 5d+DhuhfivEHU7nFFL7GcZucdGNaVuXq7RAtwQyh8wssOfjGtFCbji2nM5Yr4uIh 1b8uBc35x2ylGmOaLY4ubmV07QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCujv9If 2/edYVY3spKw+76mdqYUMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzZEMUQyNjA2 RkFEMTFFQzlGMEMyMTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsaowDwQCAAIwCQMHACABDfAnwDANBgkqhkiG9w0BAQsF AAOCAQEANHsdgPgpb+NVh1r8JMhmAmQCjPZulnt9ecHf46TEPIV+KQCXuJhaFtkJ AAOPzFtl9M1/BFFwj0Jb1LC8J23V+Pj0ifiCpPAdOkuNrGtO8SW6BK2NaYeATZST 3H7DS5oGeWa6FDucJ76a+wJd4CVhsm+8jjX6wNIh75Am/2k+tx5fNrIOQQVhMJdU 0VE+1YQQ/VGVJji4pI3MrF2ilh9nyGMjLZBvjYFP9iUhioxpcEyDJK4Ski9OawmM PquuPMiIHZzfIPbw6dxNL72Jo1HwnkFrmTZw1JcU4YuxFFZW8Bu0zH+MmjvfKiqu Ir3qnxoFmQhXsT7rbYDpCYWmSzLEVA== -----END CERTIFICATE-----Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org