$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/3166C07AE16C11ECB2629D1AC4F9AE02.roa File: 3166C07AE16C11ECB2629D1AC4F9AE02.roa (raw, json) Hash identifier: 5HeQjUddVlUYpXJizX31EU4mHLeHBhXjUJazCJXsOvU= Subject key identifier: 6C:06:C6:01:5A:E5:5B:EC:24:A2:C0:D6:AA:2C:42:72:82:9E:08:D1 Certificate issuer: /CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Certificate serial: 01CB Authority key identifier: C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/3166C07AE16C11ECB2629D1AC4F9AE02.roa Signing time: Wed 15 Nov 2023 03:35:57 +0000 ROA not before: Wed 15 Nov 2023 03:35:57 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 141357 IP address blocks: 103.174.230.0/23 maxlen: 23 103.174.230.0/24 maxlen: 24 103.174.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3E17/serialNumber=C8A92EA5FDF6DA38EA4085AAEE55A7248CD34F3A Validity Not Before: Nov 15 03:35:57 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65543c9d-60c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:99:74:8d:0b:58:a7:c2:f0:13:42:2f:4c: 40:02:69:69:8e:81:a9:4e:2e:bd:d9:f3:87:e4:59: 5b:15:c4:fe:70:dd:17:0d:49:34:96:a4:08:74:aa: 78:0f:0d:8c:d9:02:34:fd:0b:7f:69:d1:7f:2d:03: df:45:c2:a9:c8:28:c9:89:22:93:9a:b5:a3:da:54: d5:76:e0:91:5a:84:35:dd:6f:18:fe:97:18:03:3e: f5:de:7e:4d:b1:62:94:d9:b6:ee:60:b6:cf:7c:c5: 24:93:84:33:c9:d2:ac:b7:13:d9:c2:82:76:33:d9: 09:bc:b5:13:e6:16:05:bf:77:14:2b:67:06:07:39: 97:5e:37:4f:60:19:4d:56:ae:e5:cc:5b:f3:08:cb: 0c:18:3e:dc:ba:99:0d:b9:b8:5f:0a:61:57:fc:52: 65:24:f3:a2:e5:ff:8a:69:17:0c:2a:b2:48:9e:65: 56:63:d4:d6:bc:88:28:8d:a3:42:fd:87:13:9c:06: f5:11:a8:e7:13:bc:17:ea:ae:85:73:35:16:4c:d7: 97:ba:91:51:eb:46:be:c0:70:44:8f:1e:78:e3:91: 32:d1:a3:87:5e:51:4b:4f:48:19:9e:10:76:ac:56: 38:be:fa:96:cd:35:62:69:f4:3b:f8:55:bc:3d:ab: be:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:06:C6:01:5A:E5:5B:EC:24:A2:C0:D6:AA:2C:42:72:82:9E:08:D1 X509v3 Authority Key Identifier: keyid:C8:A9:2E:A5:FD:F6:DA:38:EA:40:85:AA:EE:55:A7:24:8C:D3:4F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/yKkupf322jjqQIWq7lWnJIzTTzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yKkupf322jjqQIWq7lWnJIzTTzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3E17/920C5ECAE16811ECAAD8F818C4F9AE02/3166C07AE16C11ECB2629D1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.230.0/23 Signature Algorithm: sha256WithRSAEncryption 30:a6:78:23:e4:2b:63:66:71:05:27:d6:58:cb:d1:34:04:b5: 62:b3:ff:42:2b:a6:47:fa:19:92:4e:47:0c:ba:aa:61:4e:d3: ae:ee:35:97:90:22:c5:46:e9:4a:b3:33:29:18:79:aa:84:36: 12:85:25:d2:ef:fc:57:4b:e1:93:97:a4:b1:47:f9:27:69:ed: a3:ed:d8:6f:8e:f5:12:82:62:4a:5c:c9:50:b0:d1:e6:f6:98: 39:15:01:fd:ad:04:de:2c:c1:b5:5f:f5:10:88:55:1a:41:02: 30:39:2f:41:de:0c:9d:f6:6e:54:0c:c1:7d:0a:5a:22:dc:1e: e0:fd:1f:15:12:73:61:2d:83:e5:0f:eb:7b:57:29:83:df:59: 1a:20:8b:60:19:eb:3c:f4:b7:f7:d4:37:b2:80:d9:a0:5d:60: 83:9f:73:e0:df:1d:6a:c4:b6:cf:42:d9:eb:58:99:ab:c3:5c: b5:c7:61:37:7c:69:c2:ee:ea:f2:3e:71:9a:72:59:67:9f:c4: dc:6e:e3:4b:e3:49:58:c9:d2:36:e5:5f:a2:96:fb:ce:11:83: 81:30:8b:59:7b:d6:e7:ca:fe:d0:92:5b:26:b8:c5:0e:28:bd: 6a:fd:ce:09:35:2a:80:70:24:c2:3c:ad:f4:74:db:d4:c5:66: a8:9b:16:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNFMTcxMTAvBgNVBAUTKEM4QTkyRUE1RkRGNkRBMzhFQTQwODVBQUVFNTVBNzI0 OENEMzRGM0EwHhcNMjMxMTE1MDMzNTU3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU0M2M5ZC02MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nyZdI0LWKfC8BNCL0xAAmlpjoGpTi692fOH5FlbFcT+cN0XDUk0lqQIdKp4 Dw2M2QI0/Qt/adF/LQPfRcKpyCjJiSKTmrWj2lTVduCRWoQ13W8Y/pcYAz713n5N sWKU2bbuYLbPfMUkk4QzydKstxPZwoJ2M9kJvLUT5hYFv3cUK2cGBzmXXjdPYBlN Vq7lzFvzCMsMGD7cupkNubhfCmFX/FJlJPOi5f+KaRcMKrJInmVWY9TWvIgojaNC /YcTnAb1EajnE7wX6q6FczUWTNeXupFR60a+wHBEjx5445Ey0aOHXlFLT0gZnhB2 rFY4vvqWzTViafQ7+FW8Pau+zQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGwGxgFa 5VvsJKLA1qosQnKCngjRMB8GA1UdIwQYMBaAFMipLqX99to46kCFqu5VpySM0086 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0UxNy85MjBDNUVDQUUx NjgxMUVDQUFEOEY4MThDNEY5QUUwMi95S2t1cGYzMjJqanFRSVdxN2xXbkpJelRU em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lLa3VwZjMyMmpqcVFJV3E3bFduSkl6VFR6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNFMTcvOTIwQzVFQ0FFMTY4MTFFQ0FBRDhGODE4QzRGOUFFMDIvMzE2NkMwN0FF MTZDMTFFQ0IyNjI5RDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnruYwDQYJKoZIhvcNAQELBQADggEBADCmeCPkK2NmcQUn 1ljL0TQEtWKz/0Irpkf6GZJORwy6qmFO067uNZeQIsVG6UqzMykYeaqENhKFJdLv /FdL4ZOXpLFH+Sdp7aPt2G+O9RKCYkpcyVCw0eb2mDkVAf2tBN4swbVf9RCIVRpB AjA5L0HeDJ32blQMwX0KWiLcHuD9HxUSc2Etg+UP63tXKYPfWRogi2AZ6zz0t/fU N7KA2aBdYIOfc+DfHWrEts9C2etYmavDXLXHYTd8acLu6vI+cZpyWWefxNxu40vj SVjJ0jblX6KW+84Rg4Ewi1l71ufK/tCSWya4xQ4ovWr9zgk1KoBwJMI8rfR029TF ZqibFsg= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:48 2024 by rpki-client on console-ams.rpki-client.org