$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/820D80C6843211EE9F151C39C4F9AE02.roa File: 820D80C6843211EE9F151C39C4F9AE02.roa (raw, json) Hash identifier: 9dFQmBFThNMp89wuLTxxv/UNZ/uPY7cFXMZP+pYY7D0= Subject key identifier: 13:2C:C1:11:8F:13:4A:A6:FB:E6:17:CA:B5:70:E2:38:47:8D:1D:9B Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 408E Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/820D80C6843211EE9F151C39C4F9AE02.roa Signing time: Thu 16 Nov 2023 03:44:56 +0000 ROA not before: Thu 16 Nov 2023 03:44:56 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 140759 IP address blocks: 103.159.48.0/23 maxlen: 24 2001:df5:7580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16526 (0x408e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Nov 16 03:44:56 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65559038-faaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:4e:24:b2:fb:9f:09:e4:0d:bd:55:97:a0: 39:e2:73:b6:7a:ee:0c:2c:1b:55:74:91:7e:37:09: 8c:3a:0c:79:e1:cf:3d:5e:32:db:45:72:58:1e:59: 28:31:f4:b3:97:29:54:b8:e1:0c:9e:37:c9:02:a5: 3f:f5:53:b4:a0:95:43:cd:01:f4:af:c3:63:8f:b1: de:df:c5:fc:a7:c2:21:b1:2f:ab:88:14:31:a8:f5: af:83:2b:23:30:ae:7a:ff:4f:61:59:02:2a:73:29: c4:88:6a:b6:e4:78:5c:7a:a2:bc:b1:48:5b:da:0e: 3e:bf:68:57:c8:03:b0:aa:62:7f:9a:de:77:c4:04: 4a:5c:37:b4:ea:69:47:6b:41:de:3d:ec:ab:19:8e: d5:61:50:0d:30:59:9e:d7:ed:f8:44:79:f2:a3:95: 6e:bf:10:f4:90:3e:e8:70:00:22:25:2e:62:25:84: 70:1f:b2:77:19:cc:64:0a:04:a1:94:be:1e:49:22: a9:ac:f9:ca:d3:dd:ee:4a:85:47:2a:61:44:d1:89: 1b:84:c5:01:a7:f0:9f:20:46:87:a1:f3:87:69:98: e1:28:48:d2:e8:1c:fa:e2:bc:38:f5:1e:94:27:f9: ba:23:87:05:33:5f:af:39:41:96:95:5a:3b:f5:ee: a6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2C:C1:11:8F:13:4A:A6:FB:E6:17:CA:B5:70:E2:38:47:8D:1D:9B X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/820D80C6843211EE9F151C39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.48.0/23 IPv6: 2001:df5:7580::/48 Signature Algorithm: sha256WithRSAEncryption 5f:1c:0b:32:dc:e3:62:68:ec:2f:bf:0f:c4:79:ef:32:df:82: 23:ac:d9:4b:24:8f:55:b1:7e:e7:43:50:eb:b0:cb:97:53:90: 61:84:35:d4:da:c1:93:9f:f4:55:9e:5d:47:65:92:41:51:e5: 61:94:71:11:35:f0:59:9b:72:15:4a:6a:26:3b:7a:c2:6b:25: 0b:2d:6c:2e:b1:c0:c7:14:a7:96:bd:5b:8a:00:71:34:88:15: 3c:8c:d7:d1:ae:f4:7d:81:c6:e2:6c:00:d6:10:d0:b1:5a:83: fd:ca:e5:e9:57:b1:b1:64:85:0d:ff:48:7a:71:10:bd:01:7e: db:c6:3e:45:94:69:40:9b:4d:1d:0d:38:8a:af:05:0f:2d:ba: 30:d3:f7:e0:06:3b:7d:53:3c:5d:ea:09:5c:0b:4e:0c:94:28: af:9f:ec:61:be:b8:85:bd:7a:74:80:c1:61:0b:8a:1e:d5:05: eb:c0:f4:58:3e:f8:db:5e:12:cb:96:bb:42:55:81:f4:9f:8c: 76:32:79:20:df:d4:17:f6:dc:8e:f5:8e:49:f0:8c:4c:32:36: a4:34:0e:0f:61:00:77:2f:1c:34:7e:c0:d8:b5:d0:18:70:ce: 63:ed:de:8a:55:b6:45:a4:54:ad:3f:c1:3e:b0:71:47:c6:40: 73:c6:fe:28 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICQI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMxMTE2MDM0NDU2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU1OTAzOC1mYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmpOJLL7nwnkDb1Vl6A54nO2eu4MLBtVdJF+NwmMOgx54c89XjLbRXJYHlko MfSzlylUuOEMnjfJAqU/9VO0oJVDzQH0r8Njj7He38X8p8IhsS+riBQxqPWvgysj MK56/09hWQIqcynEiGq25HhceqK8sUhb2g4+v2hXyAOwqmJ/mt53xARKXDe06mlH a0HePeyrGY7VYVANMFme1+34RHnyo5VuvxD0kD7ocAAiJS5iJYRwH7J3GcxkCgSh lL4eSSKprPnK093uSoVHKmFE0YkbhMUBp/CfIEaHofOHaZjhKEjS6Bz64rw49R6U J/m6I4cFM1+vOUGWlVo79e6msQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBMswRGP E0qm++YXyrVw4jhHjR2bMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODIwRDgwQzY4 NDMyMTFFRTlGMTUxQzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnzAwDwQCAAIwCQMHACABDfV1gDANBgkqhkiG9w0BAQsF AAOCAQEAXxwLMtzjYmjsL78PxHnvMt+CI6zZSySPVbF+50NQ67DLl1OQYYQ11NrB k5/0VZ5dR2WSQVHlYZRxETXwWZtyFUpqJjt6wmslCy1sLrHAxxSnlr1bigBxNIgV PIzX0a70fYHG4mwA1hDQsVqD/crl6VexsWSFDf9IenEQvQF+28Y+RZRpQJtNHQ04 iq8FDy26MNP34AY7fVM8XeoJXAtODJQor5/sYb64hb16dIDBYQuKHtUF68D0WD74 214Sy5a7QlWB9J+MdjJ5IN/UF/bcjvWOSfCMTDI2pDQOD2EAdy8cNH7A2LXQGHDO Y+3eilW2RaRUrT/BPrBxR8ZAc8b+KA== -----END CERTIFICATE-----Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org