$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DC51A3BC20BD11EC8551B117C4F9AE02.roa File: DC51A3BC20BD11EC8551B117C4F9AE02.roa (raw, json) Hash identifier: nx0PviWrV0RzKmZpigXOBOM1GkU8hzxaGIEgiU1X9dc= Subject key identifier: 96:8C:FF:C1:A5:D0:8F:26:3E:1C:8E:10:FC:BE:FF:7A:44:CA:BC:3D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F3E Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DC51A3BC20BD11EC8551B117C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:44:29 +0000 ROA not before: Tue 12 Sep 2023 02:44:29 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 63765 IP address blocks: 103.53.158.0/23 maxlen: 24 103.104.116.0/22 maxlen: 24 103.157.20.0/23 maxlen: 24 103.178.102.0/23 maxlen: 24 103.216.112.0/22 maxlen: 24 2001:df2:27c0::/48 maxlen: 48 2001:df3:2d00::/48 maxlen: 48 2400:e2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16190 (0x3f3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:44:29 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd08d-6da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:e7:1b:23:7a:04:b0:a1:72:21:1a:4f:4b: 5e:03:ff:71:4b:a3:78:82:f9:ac:17:bc:22:08:eb: ce:e2:53:1c:94:65:2d:a3:6c:70:d7:db:53:1c:9a: 20:cc:66:37:b4:eb:a9:cf:b4:f0:c3:7e:11:2b:47: 92:f6:88:e9:59:2d:54:b5:12:0e:aa:93:cf:42:be: b0:ff:2f:32:c1:c3:eb:ad:da:b4:80:d8:3d:6f:f8: 63:4f:c7:96:eb:e4:80:2e:f6:b0:cd:a7:cc:a6:9e: 33:84:01:c4:d8:d5:ba:bf:3b:92:24:07:67:00:88: c8:2d:b4:39:16:fd:ae:ab:b9:4c:c8:15:33:27:5e: d3:30:5b:a8:a3:30:d3:f9:4c:6f:2b:8a:c6:a6:41: 1d:99:e6:71:8e:91:61:92:18:bc:5e:06:e5:00:2d: ba:2f:38:bb:91:cf:46:f6:73:34:e9:9a:ae:cb:60: 48:03:9c:58:26:77:be:6d:3a:6c:65:8e:2b:aa:a2: d7:0a:77:22:d7:81:70:6d:1e:37:a2:e2:ff:b2:23: 8d:80:38:42:02:99:ff:55:c6:7b:f9:ce:76:66:b1: 39:bb:28:d3:1f:6b:b5:82:a8:68:48:05:79:fc:75: 08:46:5e:2f:b6:25:9e:ed:43:ec:b8:ac:bc:a0:6d: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8C:FF:C1:A5:D0:8F:26:3E:1C:8E:10:FC:BE:FF:7A:44:CA:BC:3D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DC51A3BC20BD11EC8551B117C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.158.0/23 103.104.116.0/22 103.157.20.0/23 103.178.102.0/23 103.216.112.0/22 IPv6: 2001:df2:27c0::/48 2001:df3:2d00::/48 2400:e2c0::/48 Signature Algorithm: sha256WithRSAEncryption a3:7a:ae:79:08:74:75:be:e7:9a:66:b7:ca:25:68:12:48:7f: 0c:b9:f0:8e:8c:ff:05:ac:4a:e0:20:08:aa:68:69:a7:9d:dc: 1c:98:b4:a7:74:92:9e:c1:95:b4:d4:b3:77:5f:40:d2:56:41: 97:a0:db:7c:ca:90:be:ab:59:3b:f0:c0:c6:f8:f0:c0:70:41: e3:31:63:32:6d:d2:00:f1:3e:2b:82:f4:e6:ca:12:0c:60:b2: 23:ec:bb:92:51:1f:02:50:38:ad:02:8f:50:0e:dc:95:97:16: 94:c6:94:64:6d:a8:40:9f:be:d2:68:de:6c:43:c5:a3:74:04: 57:e0:9a:5b:34:f1:4f:64:93:f3:87:af:99:a5:a5:d2:58:09: 84:3d:2b:8d:db:54:71:60:76:55:d8:4d:f6:fc:4b:da:d8:c0: c1:38:59:7c:18:1f:4b:59:b0:b3:b0:22:dc:c3:81:fe:5c:d5: 78:bd:0d:2a:c0:f8:b1:72:1f:d6:c5:85:96:91:b2:ae:38:25: d9:b6:f8:8b:4f:10:85:ca:b2:82:c6:f3:e1:55:9d:73:08:fb: 11:d0:56:2d:9a:14:2b:14:fb:11:d2:70:b9:d8:cb:35:1e:ee: ee:ef:00:58:c4:35:43:1c:86:3b:40:c2:02:85:39:4b:4f:dc: f7:f2:d9:8b -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgICPz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0NDI5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA4ZC02ZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMLnGyN6BLChciEaT0teA/9xS6N4gvmsF7wiCOvO4lMclGUto2xw19tTHJog zGY3tOupz7Tww34RK0eS9ojpWS1UtRIOqpPPQr6w/y8ywcPrrdq0gNg9b/hjT8eW 6+SALvawzafMpp4zhAHE2NW6vzuSJAdnAIjILbQ5Fv2uq7lMyBUzJ17TMFuoozDT +UxvK4rGpkEdmeZxjpFhkhi8XgblAC26Lzi7kc9G9nM06Zquy2BIA5xYJne+bTps ZY4rqqLXCnci14FwbR43ouL/siONgDhCApn/VcZ7+c52ZrE5uyjTH2u1gqhoSAV5 /HUIRl4vtiWe7UPsuKy8oG12XQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFJaM/8Gl 0I8mPhyOEPy+/3pEyrw9MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvREM1MUEzQkMy MEJEMTFFQzg1NTFCMTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWgYIKwYBBQUHAQcBAf8E SzBJMCQEAgABMB4DBAFnNZ4DBAJnaHQDBAFnnRQDBAFnsmYDBAJn2HAwIQQCAAIw GwMHACABDfInwAMHACABDfMtAAMHACQA4sAAADANBgkqhkiG9w0BAQsFAAOCAQEA o3queQh0db7nmma3yiVoEkh/DLnwjoz/BaxK4CAIqmhpp53cHJi0p3SSnsGVtNSz d19A0lZBl6DbfMqQvqtZO/DAxvjwwHBB4zFjMm3SAPE+K4L05soSDGCyI+y7klEf AlA4rQKPUA7clZcWlMaUZG2oQJ++0mjebEPFo3QEV+CaWzTxT2ST84evmaWl0lgJ hD0rjdtUcWB2VdhN9vxL2tjAwThZfBgfS1mws7Ai3MOB/lzVeL0NKsD4sXIf1sWF lpGyrjgl2bb4i08Qhcqygsbz4VWdcwj7EdBWLZoUKxT7EdJwudjLNR7u7u8AWMQ1 QxyGO0DCAoU5S0/c9/LZiw== -----END CERTIFICATE-----Generated at Fri May 31 15:08:34 2024 by rpki-client on console-fra.rpki-client.org