$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/43A61E9E4D5311EEAC075D5AC4F9AE02.roa File: 43A61E9E4D5311EEAC075D5AC4F9AE02.roa (raw, json) Hash identifier: 5Zf+m3RjxM9siS/ZCDt3dB4cOvc0WkOujEeVaEm9CO8= Subject key identifier: C2:49:B6:D4:29:08:33:64:43:94:6E:40:52:F9:B6:3F:5F:8D:CF:AC Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4115 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/43A61E9E4D5311EEAC075D5AC4F9AE02.roa Signing time: Tue 05 Dec 2023 09:44:46 +0000 ROA not before: Tue 05 Dec 2023 09:44:46 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150872 IP address blocks: 103.249.158.0/24 maxlen: 24 2401:2220::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16661 (0x4115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Dec 5 09:44:46 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=656ef10e-2f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:ea:3b:4e:cf:71:14:2c:15:d5:e6:92:8e: b9:60:de:b4:82:12:2c:82:79:8d:4f:6a:18:d5:60: af:22:2c:5f:a2:fa:b0:2d:23:c9:ab:3b:bc:4e:7f: 67:b6:dc:77:dd:77:cc:1f:2b:d4:71:86:a9:82:01: ae:28:99:d3:1a:1e:15:a9:88:d0:21:9a:c2:8a:dc: 4f:37:68:5b:1a:0f:ca:6b:93:5f:0b:bf:b7:d4:e0: 43:75:77:41:df:dc:19:79:9c:3b:69:1f:cb:a4:9e: a9:07:2e:33:3e:43:fd:d4:7c:ce:b5:a7:6a:08:67: f5:1d:44:33:e0:54:9e:3d:f0:ba:c0:5a:da:9a:78: 5e:6e:5f:35:44:11:51:c3:b9:75:03:5a:b5:77:c8: 85:2f:09:8e:9b:c1:c8:ba:a1:58:e5:30:83:63:37: e3:55:2b:75:24:a4:05:50:d8:dd:a9:41:dd:58:60: 17:3e:29:ea:f3:52:b3:8a:68:a6:e7:b6:cd:c5:d9: e4:98:ed:4b:94:c0:cb:0f:df:af:87:4e:55:8c:ec: a1:db:b2:a6:97:d1:1b:b9:3a:8d:20:e7:c3:d0:56: f6:21:cf:7c:c7:7b:16:7e:e5:76:27:fa:5f:3e:f1: 2a:9c:f4:0e:87:2c:0c:aa:6b:65:42:47:19:a4:72: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:49:B6:D4:29:08:33:64:43:94:6E:40:52:F9:B6:3F:5F:8D:CF:AC X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/43A61E9E4D5311EEAC075D5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.249.158.0/24 IPv6: 2401:2220::/48 Signature Algorithm: sha256WithRSAEncryption 9a:3f:e2:7e:7a:c8:fc:2e:02:4a:59:78:47:0d:77:86:8a:22: ff:7c:6d:04:00:e4:f7:88:27:8d:ec:5f:63:36:bb:87:2e:b7: 80:ca:71:31:80:7e:5f:43:72:84:c2:6e:da:28:fe:16:80:43: 3a:b9:a0:5d:98:d1:f0:a0:12:a9:d6:88:9d:9a:d1:35:b7:1a: c5:e9:ce:9d:3a:cc:ab:c2:4f:13:1b:64:a7:d9:d7:9e:cb:71: b2:2b:4a:86:c1:9d:2c:82:3e:19:50:15:cf:df:18:ba:8c:1a: ee:c7:e5:6e:28:0d:cd:c3:46:e5:d0:ed:69:8b:1c:60:f1:b1: e4:c3:20:3c:fc:da:ba:3a:9f:56:46:d6:09:dd:ff:31:2f:21: b2:5c:68:44:2c:db:fd:b9:4b:ea:fb:92:98:4e:a4:ed:87:6a: 0b:fb:fc:4a:f0:bf:4d:41:01:65:df:99:24:3e:43:33:81:3b: 74:29:c1:0a:b0:d8:11:00:51:9d:a8:a2:a7:83:85:52:5b:eb: 8f:74:cc:a2:63:1a:8d:d6:3a:c6:de:bd:e9:52:53:87:df:7b: 14:0b:06:67:b8:f4:b6:59:21:3f:cb:84:2d:99:ef:14:18:fb: a7:77:af:0b:84:fb:49:e9:9c:2d:4e:d7:72:d7:25:41:4a:4d: b3:83:11:09 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICQRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMxMjA1MDk0NDQ2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlZjEwZS0yZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnz/qO07PcRQsFdXmko65YN60ghIsgnmNT2oY1WCvIixfovqwLSPJqzu8Tn9n ttx33XfMHyvUcYapggGuKJnTGh4VqYjQIZrCitxPN2hbGg/Ka5NfC7+31OBDdXdB 39wZeZw7aR/LpJ6pBy4zPkP91HzOtadqCGf1HUQz4FSePfC6wFramnhebl81RBFR w7l1A1q1d8iFLwmOm8HIuqFY5TCDYzfjVSt1JKQFUNjdqUHdWGAXPinq81Kzimim 57bNxdnkmO1LlMDLD9+vh05VjOyh27Kml9EbuTqNIOfD0Fb2Ic98x3sWfuV2J/pf PvEqnPQOhywMqmtlQkcZpHINBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMJJttQp CDNkQ5RuQFL5tj9fjc+sMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDNBNjFFOUU0 RDUzMTFFRUFDMDc1RDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn+Z4wDwQCAAIwCQMHACQBIiAAADANBgkqhkiG9w0BAQsF AAOCAQEAmj/ifnrI/C4CSll4Rw13hooi/3xtBADk94gnjexfYza7hy63gMpxMYB+ X0NyhMJu2ij+FoBDOrmgXZjR8KASqdaInZrRNbcaxenOnTrMq8JPExtkp9nXnstx sitKhsGdLII+GVAVz98Yuowa7sflbigNzcNG5dDtaYscYPGx5MMgPPzaujqfVkbW Cd3/MS8hslxoRCzb/blL6vuSmE6k7YdqC/v8SvC/TUEBZd+ZJD5DM4E7dCnBCrDY EQBRnaiip4OFUlvrj3TMomMajdY6xt696VJTh997FAsGZ7j0tlkhP8uELZnvFBj7 p3evC4T7SemcLU7XctclQUpNs4MRCQ== -----END CERTIFICATE-----Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org