$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D243E2105F9411EDA8B4CE5CC4F9AE02.roa File: D243E2105F9411EDA8B4CE5CC4F9AE02.roa (raw, json) Hash identifier: 5DQitQ9xcIJfi4wV9MrnIBcXoR5TGagQDPgtBeL3cgU= Subject key identifier: 8A:EE:39:23:18:BA:68:1C:F6:79:D5:55:3A:CF:B9:EB:BE:1F:17:29 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3EC4 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D243E2105F9411EDA8B4CE5CC4F9AE02.roa Signing time: Tue 12 Sep 2023 02:42:43 +0000 ROA not before: Tue 12 Sep 2023 02:42:43 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 149131 IP address blocks: 103.234.160.0/24 maxlen: 24 103.234.161.0/24 maxlen: 24 2400:a920::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16068 (0x3ec4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:42:43 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd023-b6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:6c:92:a0:98:e2:70:fc:3e:cd:63:89:4a: a0:03:3d:f7:5e:05:5d:cf:f4:82:60:26:f3:e4:4b: 88:75:ac:ac:7a:1b:98:ba:84:cd:ee:7b:2b:d9:e1: 31:98:8d:9b:51:d1:b5:32:43:03:7e:e4:8d:f2:97: 6e:f0:74:5e:1f:84:c6:da:38:d0:f9:0d:e4:74:c8: e1:fb:70:d2:0a:fb:98:07:c5:45:77:e7:cf:e9:38: 45:9e:c0:60:4c:47:fd:94:64:b1:53:66:ee:38:3b: ec:26:3a:8f:cb:69:99:15:fb:ca:9c:aa:c4:e7:d5: 01:ed:ac:59:78:80:f7:d7:e3:53:4d:b6:d0:db:a5: 96:cd:04:0e:a9:e3:60:19:64:70:31:c9:48:6b:90: a5:87:56:07:a4:ce:f7:28:b1:9b:65:0f:bf:bd:3e: 51:50:72:b3:45:4e:46:e0:ef:3c:eb:e9:e0:1a:c6: 87:f6:80:31:69:52:27:8d:3f:4f:64:c0:39:76:0c: 05:a6:b5:e3:20:44:69:59:2d:e2:80:ce:c4:e5:5b: 62:f0:c9:01:fb:ea:80:5f:c2:1c:4c:bd:a4:72:93: 08:c3:08:f8:19:0f:c4:c8:eb:9d:e2:98:87:28:25: 6c:2c:21:61:33:e0:14:b3:04:ae:1f:a2:5e:19:8d: 9c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EE:39:23:18:BA:68:1C:F6:79:D5:55:3A:CF:B9:EB:BE:1F:17:29 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D243E2105F9411EDA8B4CE5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.160.0/23 IPv6: 2400:a920::/48 Signature Algorithm: sha256WithRSAEncryption 1a:eb:c3:94:19:18:7c:ad:71:2b:cc:56:41:65:72:04:74:89: f9:7c:90:92:bd:c6:e0:5c:9b:c3:77:54:27:b0:92:3c:6d:92: 26:bc:59:68:d6:9a:64:53:0a:19:27:df:2b:56:d4:6d:ca:89: 2a:e6:fa:11:8c:07:2e:d7:84:4e:20:41:ac:5f:4b:ca:a9:e1: aa:8b:21:9c:b3:1f:ac:ce:11:9f:2e:27:63:56:05:00:00:24: e9:4f:87:7b:74:af:3a:7d:8d:0e:86:d4:4b:f1:bc:1f:af:f2: 24:df:3a:79:d6:38:79:62:0a:50:4c:d9:c1:aa:67:1f:ee:23: cc:4d:2a:a7:28:81:84:24:3a:aa:76:92:bb:24:19:3a:2a:dc: ef:db:00:c0:85:c1:d1:59:47:b1:a7:ce:4f:87:aa:26:8c:8f: 56:9d:99:1e:a8:28:77:8e:9e:ec:6c:c1:b5:50:35:b3:7d:a7: d3:df:aa:7d:d2:d8:d6:5b:61:a6:75:06:a4:ba:2b:ae:6b:63: 05:e8:a9:16:b0:e5:05:ba:18:18:03:f6:7a:da:57:ea:0f:e4: d3:2d:bc:b0:b7:9f:81:fd:f5:47:10:61:f4:d7:68:d1:ca:57: c5:71:f6:37:04:5d:c9:7e:8f:d7:0a:f8:66:a2:cf:a6:70:d1: 0a:60:f2:8a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICPsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MjQzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDAyMy1iNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylFskqCY4nD8Ps1jiUqgAz33XgVdz/SCYCbz5EuIdaysehuYuoTN7nsr2eEx mI2bUdG1MkMDfuSN8pdu8HReH4TG2jjQ+Q3kdMjh+3DSCvuYB8VFd+fP6ThFnsBg TEf9lGSxU2buODvsJjqPy2mZFfvKnKrE59UB7axZeID31+NTTbbQ26WWzQQOqeNg GWRwMclIa5Clh1YHpM73KLGbZQ+/vT5RUHKzRU5G4O886+ngGsaH9oAxaVInjT9P ZMA5dgwFprXjIERpWS3igM7E5Vti8MkB++qAX8IcTL2kcpMIwwj4GQ/EyOud4piH KCVsLCFhM+AUswSuH6JeGY2cfwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIruOSMY umgc9nnVVTrPueu+HxcpMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDI0M0UyMTA1 Rjk0MTFFREE4QjRDRTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn6qAwDwQCAAIwCQMHACQAqSAAADANBgkqhkiG9w0BAQsF AAOCAQEAGuvDlBkYfK1xK8xWQWVyBHSJ+XyQkr3G4Fybw3dUJ7CSPG2SJrxZaNaa ZFMKGSffK1bUbcqJKub6EYwHLteETiBBrF9LyqnhqoshnLMfrM4Rny4nY1YFAAAk 6U+He3SvOn2NDobUS/G8H6/yJN86edY4eWIKUEzZwapnH+4jzE0qpyiBhCQ6qnaS uyQZOirc79sAwIXB0VlHsafOT4eqJoyPVp2ZHqgod46e7GzBtVA1s32n09+qfdLY 1lthpnUGpLorrmtjBeipFrDlBboYGAP2etpX6g/k0y28sLefgf31RxBh9Ndo0cpX xXH2NwRdyX6P1wr4ZqLPpnDRCmDyig== -----END CERTIFICATE-----Generated at Fri Jun 14 04:11:25 2024 by rpki-client on console-fra.rpki-client.org