$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D543A66B32611ED847D3C6CC4F9AE02.roa File: 3D543A66B32611ED847D3C6CC4F9AE02.roa (raw, json) Hash identifier: P2O4OInQCejZi/TMdK5hY9fkzZsYh24B/xiyBd/SSZE= Subject key identifier: 65:A9:B3:38:8F:C5:F8:2D:19:12:06:96:CF:26:86:8B:D4:5F:04:4F Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F73 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D543A66B32611ED847D3C6CC4F9AE02.roa Signing time: Tue 26 Sep 2023 07:13:33 +0000 ROA not before: Tue 26 Sep 2023 07:13:33 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 149078 IP address blocks: 103.72.68.0/23 maxlen: 24 103.72.70.0/23 maxlen: 24 103.75.72.0/23 maxlen: 24 103.85.246.0/23 maxlen: 24 103.122.162.0/23 maxlen: 24 103.228.126.0/23 maxlen: 24 2400:6720::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16243 (0x3f73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 26 07:13:33 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6512849d-c721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:8d:c6:2b:22:4d:d1:d9:1e:00:2f:42:fb: 55:64:3a:ef:50:76:37:1d:43:f0:65:4a:17:06:dc: f4:c1:fd:50:87:7b:98:47:f3:33:50:b8:71:03:0a: b0:6f:64:a7:e7:bf:c6:74:02:13:91:bf:7f:12:e1: 96:00:00:df:f8:b4:2b:6d:b6:51:ff:23:a3:b4:d7: 89:e5:a8:51:bb:c1:4d:3f:a5:ee:e3:87:bf:3c:8b: b4:5e:e0:53:0e:c0:38:ec:22:dc:04:f7:f0:b3:d5: c8:28:3c:9a:46:c5:d5:f7:73:80:2a:36:23:8a:23: 70:2f:27:8d:8d:ca:72:0b:91:81:8d:d7:25:3f:62: ab:5f:9f:d1:5a:2e:d2:b4:b6:92:e5:ad:32:82:66: 6a:9d:9f:eb:93:42:f0:47:6c:a5:dc:26:db:31:cc: 69:4e:99:e7:ab:5f:7e:e4:0b:82:45:11:79:ca:a7: cd:af:92:3b:cc:f6:8c:51:85:e8:27:77:6d:2a:84: 16:94:61:c2:d8:92:98:d0:f8:26:15:7a:10:5a:cd: 24:69:db:8b:5e:46:ce:ad:29:70:ff:03:b9:69:25: ca:8c:6d:0e:76:34:17:9d:6b:08:f3:b2:20:dc:54: db:68:22:c1:ee:6e:0c:39:f6:12:40:a3:1a:48:ce: b1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A9:B3:38:8F:C5:F8:2D:19:12:06:96:CF:26:86:8B:D4:5F:04:4F X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D543A66B32611ED847D3C6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.68.0/22 103.75.72.0/23 103.85.246.0/23 103.122.162.0/23 103.228.126.0/23 IPv6: 2400:6720::/48 Signature Algorithm: sha256WithRSAEncryption 38:4d:8d:01:91:2d:56:95:79:d5:b8:ed:ba:34:0b:c6:57:ef: 7e:40:31:5a:1e:47:98:86:60:f5:43:12:d2:85:08:28:f0:98: c4:9f:4e:e8:b3:48:0e:a2:81:b0:d0:80:02:23:f9:0e:37:1e: 8c:da:5a:ad:5b:7c:e5:9f:a6:a1:5c:d4:e2:6d:66:40:f9:e6: cc:51:ac:8d:8c:99:8f:54:df:f8:30:fe:44:e9:53:7b:5d:a0: f6:e7:d0:bc:c3:f9:71:d4:19:45:01:38:0f:65:81:0d:f7:c4: 36:a4:97:eb:9c:aa:0f:ce:2b:24:36:b4:ce:9b:c7:60:19:b0: bc:21:57:e5:73:a0:ce:f2:b8:4b:9c:42:66:9c:de:82:ac:84: 31:ac:2b:50:49:4a:52:60:94:b9:38:cb:21:3b:ac:8f:31:44: 75:f5:ca:53:a7:de:a7:35:70:42:44:49:37:ca:3a:9f:97:4b: 12:71:c3:25:05:22:22:dc:62:88:04:58:cb:5d:9f:71:e1:d9: d4:91:d5:92:92:6a:da:ad:fe:f7:47:35:bf:ef:c0:66:71:30: 64:f4:da:44:2c:21:56:35:0b:a6:07:29:19:5c:a8:bb:cc:98: b4:75:dc:f5:79:37:c6:e5:f2:55:97:8b:ff:86:2e:75:11:34: b5:8d:92:2f -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICP3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTI2MDcxMzMzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEyODQ5ZC1jNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4iNxisiTdHZHgAvQvtVZDrvUHY3HUPwZUoXBtz0wf1Qh3uYR/MzULhxAwqw b2Sn57/GdAITkb9/EuGWAADf+LQrbbZR/yOjtNeJ5ahRu8FNP6Xu44e/PIu0XuBT DsA47CLcBPfws9XIKDyaRsXV93OAKjYjiiNwLyeNjcpyC5GBjdclP2KrX5/RWi7S tLaS5a0ygmZqnZ/rk0LwR2yl3CbbMcxpTpnnq19+5AuCRRF5yqfNr5I7zPaMUYXo J3dtKoQWlGHC2JKY0PgmFXoQWs0kaduLXkbOrSlw/wO5aSXKjG0OdjQXnWsI87Ig 3FTbaCLB7m4MOfYSQKMaSM6xIQIDAQABo4ICvjCCArowHQYDVR0OBBYEFGWpsziP xfgtGRIGls8mhovUXwRPMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0Q1NDNBNjZC MzI2MTFFRDg0N0QzQzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MCQEAgABMB4DBAJnSEQDBAFnS0gDBAFnVfYDBAFneqIDBAFn5H4wDwQCAAIw CQMHACQAZyAAADANBgkqhkiG9w0BAQsFAAOCAQEAOE2NAZEtVpV51bjtujQLxlfv fkAxWh5HmIZg9UMS0oUIKPCYxJ9O6LNIDqKBsNCAAiP5DjcejNparVt85Z+moVzU 4m1mQPnmzFGsjYyZj1Tf+DD+ROlTe12g9ufQvMP5cdQZRQE4D2WBDffENqSX65yq D84rJDa0zpvHYBmwvCFX5XOgzvK4S5xCZpzegqyEMawrUElKUmCUuTjLITusjzFE dfXKU6fepzVwQkRJN8o6n5dLEnHDJQUiItxiiARYy12fceHZ1JHVkpJq2q3+90c1 v+/AZnEwZPTaRCwhVjULpgcpGVyou8yYtHXc9Xk3xuXyVZeL/4YudRE0tY2SLw== -----END CERTIFICATE-----Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org