$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3E0BA21CEBB211EEA93D9B14C4F9AE02.roa File: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (raw, json) Hash identifier: Hw5SkndQ0QVHo5c/bZ+ncUaWkLy6ql9s794fTfe1NXk= Subject key identifier: 3D:1D:FF:F9:A9:98:CA:6C:89:D1:2C:A9:D6:24:7F:15:B4:50:DE:79 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 29 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3E0BA21CEBB211EEA93D9B14C4F9AE02.roa Signing time: Fri 31 May 2024 23:55:22 +0000 ROA not before: Fri 31 May 2024 23:55:22 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 16509 IP address blocks: 167.103.90.0/24 maxlen: 24 167.103.91.0/24 maxlen: 24 167.103.92.0/24 maxlen: 24 167.103.93.0/24 maxlen: 24 167.103.94.0/24 maxlen: 24 167.103.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: May 31 23:55:22 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=665a6369-05c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:63:54:d8:0d:0e:5e:49:49:d8:9c:11:60: 07:8d:36:6a:c2:3e:03:7c:12:4a:93:5e:39:90:54: 00:e7:75:76:da:71:f3:cb:25:2f:f7:0d:78:d6:73: 0b:10:5a:48:41:26:15:37:f0:03:a2:b0:e8:19:48: f1:bb:08:e8:29:8c:7c:29:f9:5d:b2:92:d4:98:cc: 38:12:19:5b:85:90:eb:76:25:6b:3b:1f:e0:d8:53: e1:51:a0:50:4e:00:19:7a:50:02:4e:29:04:a6:b9: 80:a6:77:a2:36:00:39:72:8f:91:18:4d:7c:da:05: 7e:00:2c:ef:1e:24:d1:c5:ed:33:05:0d:a3:9e:3b: 52:e5:9b:d5:21:d9:b3:d1:ad:85:6b:74:8b:3b:0c: 67:ef:c7:d3:0b:38:93:07:8e:6f:2d:15:a9:ab:4c: cf:97:fc:b9:d4:6b:c7:0c:08:ce:e4:e8:59:42:c8: cb:43:55:2a:f7:76:b2:db:fa:ab:05:6c:27:a5:83: 63:cc:c2:1e:75:93:96:aa:22:20:f8:ae:8c:c0:62: c4:df:94:16:4d:37:8d:d7:1c:2a:0b:c7:a5:66:df: a3:07:d3:40:b7:05:a3:af:36:2f:a5:e7:c4:c7:72: e5:29:33:1a:03:e7:23:f9:63:23:fa:07:89:cc:55: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1D:FF:F9:A9:98:CA:6C:89:D1:2C:A9:D6:24:7F:15:B4:50:DE:79 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3E0BA21CEBB211EEA93D9B14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.103.90.0-167.103.95.255 Signature Algorithm: sha256WithRSAEncryption 32:e7:e9:b0:43:ff:1a:ce:a2:d4:c1:61:f6:a7:6a:58:21:1c: a1:6c:1e:2c:85:cf:a6:2f:61:e5:0e:c8:22:8f:6e:eb:10:2b: 77:1f:fd:69:cb:b3:a3:21:20:11:93:07:f6:cc:62:88:2a:49: b8:08:63:f7:a8:a2:ec:82:23:08:0b:96:85:f6:e9:d9:2a:c4: d6:db:fa:ce:8a:fd:3d:13:2c:1c:b0:70:1f:3f:a4:21:f3:17: c0:6c:b9:35:96:78:6d:f1:99:b3:1a:84:3d:1b:9f:85:15:30: c0:b7:12:67:ea:78:ce:d0:af:79:f2:2c:8a:97:b2:6b:eb:32: 20:2a:33:14:8d:85:d2:dd:e7:50:10:44:78:00:d8:88:e0:a1: c8:fc:65:e2:a8:68:38:43:0f:1c:2e:03:91:b1:df:92:f0:24: b2:3d:ab:4c:76:5c:1d:fa:53:ad:bd:de:1c:d6:6c:66:ba:b7: 1f:4d:34:d9:1e:92:98:46:84:92:0e:7d:11:dd:47:b6:0b:37: 10:74:f2:48:b0:db:76:c2:55:29:bd:0a:29:2a:c4:d1:6b:d9: e7:92:23:5d:9a:be:14:3a:05:71:8c:25:11:94:68:1c:ab:db: 03:a1:22:15:31:7d:01:e5:9a:71:f4:2c:63:6c:e6:14:3e:b3: 54:ff:3f:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzE2OTExMC8GA1UEBRMoNDA0MkMyNDkwRDdEQUZFQzMzMjAzMTZFRDVBQTc0RTBC RUNBQTlBOTAeFw0yNDA1MzEyMzU1MjJaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NWE2MzY5LTA1YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuUGNU2A0OXklJ2JwRYAeNNmrCPgN8EkqTXjmQVADndXbacfPLJS/3DXjWcwsQ WkhBJhU38AOisOgZSPG7COgpjHwp+V2yktSYzDgSGVuFkOt2JWs7H+DYU+FRoFBO ABl6UAJOKQSmuYCmd6I2ADlyj5EYTXzaBX4ALO8eJNHF7TMFDaOeO1Llm9Uh2bPR rYVrdIs7DGfvx9MLOJMHjm8tFamrTM+X/LnUa8cMCM7k6FlCyMtDVSr3drLb+qsF bCelg2PMwh51k5aqIiD4rozAYsTflBZNN43XHCoLx6Vm36MH00C3BaOvNi+l58TH cuUpMxoD5yP5YyP6B4nMVbk1AgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUPR3/+amY ymyJ0Syp1iR/FbRQ3nkwHwYDVR0jBBgwFoAUQELCSQ19r+wzIDFu1ap04L7Kqakw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MTY5LzYyMzNERDNFRUJB RTExRUU4QTBFRDk2NEM0RjlBRTAyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fh ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUVMQ1NRMTlyLXd6SURGdTFhcDA0TDdLcWFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi8zRTBCQTIxQ0VC QjIxMUVFQTkzRDlCMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQBp2daAwQFp2dAMA0GCSqGSIb3DQEBCwUAA4IBAQAy5+mw Q/8azqLUwWH2p2pYIRyhbB4shc+mL2HlDsgij27rECt3H/1py7OjISARkwf2zGKI Kkm4CGP3qKLsgiMIC5aF9unZKsTW2/rOiv09EywcsHAfP6Qh8xfAbLk1lnht8Zmz GoQ9G5+FFTDAtxJn6njO0K958iyKl7Jr6zIgKjMUjYXS3edQEER4ANiI4KHI/GXi qGg4Qw8cLgORsd+S8CSyPatMdlwd+lOtvd4c1mxmurcfTTTZHpKYRoSSDn0R3Ue2 CzcQdPJIsNt2wlUpvQopKsTRa9nnkiNdmr4UOgVxjCURlGgcq9sDoSIVMX0B5Zpx 9CxjbOYUPrNU/z/L -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:30 2024 by rpki-client on console-fra.rpki-client.org