$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa File: F164038CBBE211ED8685DC61C4F9AE02.roa (raw, json) Hash identifier: TgPklgLkA3xdg2IBb89UQztEAT8+HE02bwjfwGq7aRA= Subject key identifier: FE:9C:C9:61:87:52:25:77:D6:3A:F6:B6:28:03:0C:F5:E1:B1:D8:5F Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Certificate serial: 0540 Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa Signing time: Sun 03 Mar 2024 00:52:40 +0000 ROA not before: Sun 03 Mar 2024 00:52:40 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 54415 IP address blocks: 103.99.169.0/24 maxlen: 24 103.99.170.0/24 maxlen: 24 103.99.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Validity Not Before: Mar 3 00:52:40 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e3c9d8-ca6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:fe:02:4f:0e:80:15:ba:43:04:2c:fa:18: 6b:2b:24:6a:72:9b:f4:be:a1:ab:a9:98:37:fb:b4: 2c:e2:7a:8a:10:fe:d6:5d:cd:15:54:10:30:9e:17: 0e:51:8f:87:c6:cf:d4:33:69:8e:ff:4c:00:79:cb: 5f:c3:85:2b:c8:5e:87:d2:94:0c:84:82:8b:59:58: 5a:f2:2c:96:c9:07:ac:5b:ee:45:60:fa:cc:7c:b8: e5:34:ab:06:dd:cc:42:8f:28:71:eb:42:d9:e8:d9: dd:17:56:3a:14:94:c8:8f:33:c9:68:b3:f8:13:63: d2:da:70:39:e2:6f:e2:3e:61:5f:ff:5d:8b:89:cb: 4d:c2:52:b5:29:b4:89:3d:d2:19:e2:bb:7b:07:4d: ce:90:43:f3:49:75:cf:59:9f:86:34:37:76:f4:77: ff:51:b0:bd:de:a5:93:31:b2:f0:9d:a9:b8:70:01: 1e:9a:71:52:05:26:3c:4d:74:a4:40:33:94:e8:79: 2d:7c:f3:a3:5d:07:ab:c2:d6:c8:ad:23:d9:80:75: 30:44:4a:5f:f4:4d:fd:ef:76:7e:4a:60:19:56:90: e8:16:00:f0:47:bb:c7:c0:af:0a:63:9b:10:0e:a3: 1d:f1:43:9c:bd:7c:76:bb:5c:54:f6:bc:f3:67:07: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9C:C9:61:87:52:25:77:D6:3A:F6:B6:28:03:0C:F5:E1:B1:D8:5F X509v3 Authority Key Identifier: keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.169.0-103.99.171.255 Signature Algorithm: sha256WithRSAEncryption 00:e5:24:95:a2:dc:a4:11:13:4c:5b:9b:87:6b:ad:b1:f1:32: 59:2e:e2:b3:93:01:ba:64:19:70:dc:16:da:2a:ff:a4:3d:36: 3e:a9:6e:a1:21:6d:3c:dc:3b:e0:b2:06:e0:90:59:d5:71:af: f5:b3:0f:2f:22:f2:d3:02:3c:b1:e1:61:7e:d5:d0:e4:f8:50: 10:74:7a:31:13:e8:c5:4a:43:41:df:6c:dc:db:7f:0f:38:f2: 48:d8:84:03:18:53:d2:27:d8:0a:6f:9a:db:78:a2:a7:87:82: 31:98:9b:ed:95:90:a1:5e:c5:2b:71:8a:50:82:cd:32:0a:96: ef:f8:07:f9:15:87:d2:b4:c9:27:a0:53:03:b2:db:4b:9e:52: fb:1c:66:c7:b5:aa:32:d3:bc:47:ac:71:03:d9:f6:0a:e6:b5: 4e:92:0c:97:1a:c7:96:f6:aa:bd:3f:b1:7b:5c:86:b3:20:fd: 09:42:9a:d0:af:10:5b:74:11:bc:6c:38:a3:79:3e:33:82:43: 6a:82:5f:0f:57:9e:0e:ab:d3:fb:ef:0a:35:84:eb:b1:56:59: 30:53:d7:f3:14:b3:17:3d:1a:95:48:5c:34:5f:f3:12:f9:13: 3e:33:21:00:bd:bb:5f:04:61:da:c0:14:db:ae:18:76:14:a0: 65:67:58:eb -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4 NUI1QkU3MTIwHhcNMjQwMzAzMDA1MjQwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzYzlkOC1jYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvr+Ak8OgBW6QwQs+hhrKyRqcpv0vqGrqZg3+7Qs4nqKEP7WXc0VVBAwnhcO UY+Hxs/UM2mO/0wAectfw4UryF6H0pQMhIKLWVha8iyWyQesW+5FYPrMfLjlNKsG 3cxCjyhx60LZ6NndF1Y6FJTIjzPJaLP4E2PS2nA54m/iPmFf/12LictNwlK1KbSJ PdIZ4rt7B03OkEPzSXXPWZ+GNDd29Hf/UbC93qWTMbLwnam4cAEemnFSBSY8TXSk QDOU6HktfPOjXQerwtbIrSPZgHUwREpf9E3973Z+SmAZVpDoFgDwR7vHwK8KY5sQ DqMd8UOcvXx2u1xU9rzzZwfH8QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFP6cyWGH UiV31jr2tigDDPXhsdhfMB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1 eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI1RDMvNkNBOUQ2OTBBMUE4MTFFQjgzMjE0Qzc0QzRGOUFFMDIvRjE2NDAzOENC QkUyMTFFRDg2ODVEQzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGdjqQMEAmdjqDANBgkqhkiG9w0BAQsFAAOCAQEAAOUk laLcpBETTFubh2utsfEyWS7is5MBumQZcNwW2ir/pD02PqluoSFtPNw74LIG4JBZ 1XGv9bMPLyLy0wI8seFhftXQ5PhQEHR6MRPoxUpDQd9s3Nt/DzjySNiEAxhT0ifY Cm+a23iip4eCMZib7ZWQoV7FK3GKUILNMgqW7/gH+RWH0rTJJ6BTA7LbS55S+xxm x7WqMtO8R6xxA9n2Cua1TpIMlxrHlvaqvT+xe1yGsyD9CUKa0K8QW3QRvGw4o3k+ M4JDaoJfD1eeDqvT++8KNYTrsVZZMFPX8xSzFz0alUhcNF/zEvkTPjMhAL27XwRh 2sAU264YdhSgZWdY6w== -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org