$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DB1456CD86A11ED8C149E7DC4F9AE02.roa File: 3DB1456CD86A11ED8C149E7DC4F9AE02.roa (raw, json) Hash identifier: RYq33H/rXFKLQW+2GpyJAK+5r0fMCeFPQOfM/CHDllo= Subject key identifier: C1:D9:42:75:CA:6F:13:BB:44:25:FB:7C:34:C7:F6:30:D0:C1:22:97 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3E56 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DB1456CD86A11ED8C149E7DC4F9AE02.roa Signing time: Tue 12 Sep 2023 02:41:05 +0000 ROA not before: Tue 12 Sep 2023 02:41:05 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 131409 IP address blocks: 103.149.254.0/23 maxlen: 24 2406:23c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 14:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15958 (0x3e56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:41:05 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffcfc1-90d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:f1:42:67:d3:35:21:87:f4:35:ba:fe:ee: 61:49:fa:c8:4f:ec:85:a7:d6:ad:b7:2f:49:85:44: 9e:29:68:3b:0c:9b:28:43:b6:a1:b6:0f:ec:6c:67: 9b:b0:ee:4b:ab:0f:1e:94:53:72:e9:d3:b5:89:e0: ee:fc:b7:05:08:fd:dd:d4:67:2d:14:88:8d:5a:27: b4:2f:b2:5b:42:df:c8:6e:83:bf:c3:9d:07:9b:c7: 25:1f:0c:c4:4b:d7:ec:95:c6:22:2d:95:7f:3a:49: a2:f9:87:1f:ba:8b:d1:52:52:2f:e3:65:da:b1:d2: ef:a2:11:fa:74:13:6c:ea:9d:f5:eb:ba:25:d8:82: 6d:2e:81:34:78:8d:f0:29:fb:30:f6:65:db:03:15: bd:8d:db:bd:38:88:3c:b8:10:9c:75:df:5f:44:67: ca:95:48:7c:97:2d:61:d3:53:e4:df:f1:73:c2:15: 91:5e:30:82:24:d7:d9:e8:92:54:3c:48:7c:61:c5: 7d:3a:ea:8d:6c:0a:c5:9d:7d:6e:35:27:f1:e6:ab: ed:e1:30:d4:6d:6a:b0:22:61:d9:2f:30:27:70:3e: 49:53:b6:46:72:b7:01:5d:fe:5d:c6:c6:10:de:75: a3:e9:6d:2e:10:b3:5f:ee:bf:59:e4:41:ce:96:30: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D9:42:75:CA:6F:13:BB:44:25:FB:7C:34:C7:F6:30:D0:C1:22:97 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DB1456CD86A11ED8C149E7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.254.0/23 IPv6: 2406:23c0::/48 Signature Algorithm: sha256WithRSAEncryption 90:bb:e0:0d:ec:b4:06:b4:d4:ad:3f:b9:8f:3c:ad:40:46:1f: d2:91:66:ca:5d:a0:65:ec:d4:74:ac:41:c5:fe:42:a3:4f:9c: 2f:e3:81:ca:de:f8:ad:f8:7f:2f:bf:95:ae:cf:33:51:f8:08: 95:07:27:05:9b:e0:af:53:fd:c3:77:93:20:34:65:24:84:e3: 69:36:51:27:94:51:c1:8b:af:6d:32:43:e3:a3:8d:b1:66:3c: a7:70:0a:52:d1:f7:1c:30:92:37:1d:81:d7:24:6e:8c:09:a0: 08:77:b5:fe:0e:7b:7b:28:47:10:a8:bb:86:d8:31:9e:24:9e: d9:f2:d0:31:c9:92:20:92:8d:4a:9b:54:fb:f4:11:41:ff:0b: f2:1f:d4:c2:dc:a4:6e:12:ba:36:19:12:71:82:52:1a:dd:ec: db:b3:c7:f7:4d:74:52:3c:4b:57:88:fe:93:15:46:e5:58:e9: 19:53:1e:49:60:5e:85:5b:da:bd:a2:dd:c5:82:ac:ca:1d:c4: 04:0f:60:eb:07:90:8b:61:71:4e:2a:0c:aa:64:9c:7b:32:83: f5:3c:5c:dd:9c:48:ef:ee:7f:a4:a6:91:03:17:76:c6:36:4e: 50:35:27:10:7a:f7:8e:87:b2:50:da:84:cb:fb:96:3c:65:be: f9:0d:4d:0c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICPlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MTA1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmY2ZjMS05MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TDxQmfTNSGH9DW6/u5hSfrIT+yFp9atty9JhUSeKWg7DJsoQ7ahtg/sbGeb sO5Lqw8elFNy6dO1ieDu/LcFCP3d1GctFIiNWie0L7JbQt/IboO/w50Hm8clHwzE S9fslcYiLZV/Okmi+YcfuovRUlIv42XasdLvohH6dBNs6p3167ol2IJtLoE0eI3w Kfsw9mXbAxW9jdu9OIg8uBCcdd9fRGfKlUh8ly1h01Pk3/FzwhWRXjCCJNfZ6JJU PEh8YcV9OuqNbArFnX1uNSfx5qvt4TDUbWqwImHZLzAncD5JU7ZGcrcBXf5dxsYQ 3nWj6W0uELNf7r9Z5EHOljCCbQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMHZQnXK bxO7RCX7fDTH9jDQwSKXMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0RCMTQ1NkNE ODZBMTFFRDhDMTQ5RTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlf4wDwQCAAIwCQMHACQGI8AAADANBgkqhkiG9w0BAQsF AAOCAQEAkLvgDey0BrTUrT+5jzytQEYf0pFmyl2gZezUdKxBxf5Co0+cL+OByt74 rfh/L7+Vrs8zUfgIlQcnBZvgr1P9w3eTIDRlJITjaTZRJ5RRwYuvbTJD46ONsWY8 p3AKUtH3HDCSNx2B1yRujAmgCHe1/g57eyhHEKi7htgxniSe2fLQMcmSIJKNSptU +/QRQf8L8h/UwtykbhK6NhkScYJSGt3s27PH9010UjxLV4j+kxVG5VjpGVMeSWBe hVvavaLdxYKsyh3EBA9g6weQi2FxTioMqmScezKD9Txc3ZxI7+5/pKaRAxd2xjZO UDUnEHr3joeyUNqEy/uWPGW++Q1NDA== -----END CERTIFICATE-----Generated at Fri Jun 14 16:49:41 2024 by rpki-client on console-fra.rpki-client.org