$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/345AD30E1E1311EE846A3261C4F9AE02.roa File: 345AD30E1E1311EE846A3261C4F9AE02.roa (raw, json) Hash identifier: zTYXuX3GDZ63v54RvQHdui7ccszwzNrfqOTF6/FnToE= Subject key identifier: 39:33:C1:3C:2D:C6:47:9C:A9:5F:22:00:C6:A7:7D:84:2C:45:50:A2 Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Certificate serial: D5 Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/345AD30E1E1311EE846A3261C4F9AE02.roa Signing time: Sat 17 Aug 2024 05:46:47 +0000 ROA not before: Sat 17 Aug 2024 05:46:47 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151488 IP address blocks: 103.234.16.0/23 maxlen: 23 103.234.16.0/25 maxlen: 25 103.234.16.128/25 maxlen: 25 103.234.17.0/25 maxlen: 25 103.234.17.128/25 maxlen: 25 2001:df2:a7c0::/48 maxlen: 48 2001:df2:a7c0::/64 maxlen: 64 2001:df2:a7c0:1::/64 maxlen: 64 2001:df2:a7c0:2::/64 maxlen: 64 2001:df2:a7c0:3::/64 maxlen: 64 2001:df2:a7c0:4::/64 maxlen: 64 2001:df2:a7c0:5::/64 maxlen: 64 2001:df2:a7c0:6::/64 maxlen: 64 2001:df2:a7c0:7::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Validity Not Before: Aug 17 05:46:47 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c03946-29e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:21:45:cd:2e:df:9c:df:be:82:f3:53:10: 0a:ce:b2:df:97:91:3f:b8:56:e2:31:14:c0:d1:c9: 4c:78:63:d9:b6:6f:7d:b6:a0:9a:20:2c:e4:f4:29: 3c:20:2d:39:54:a4:1b:e8:27:a8:ae:4d:d7:8d:01: 1a:92:48:6d:c2:4e:7d:96:d7:08:69:6e:b2:fd:89: e4:8c:a5:cf:af:7f:4f:e2:4b:1b:e0:54:b8:54:9c: 42:e2:60:a2:cd:c1:29:60:34:39:bf:75:7a:fd:d4: 8e:31:67:3d:06:8c:48:fe:45:3f:54:14:af:57:bd: 9e:b3:58:3f:da:8e:e1:7e:57:2e:0c:27:7b:0a:0d: d7:10:d1:c9:34:ca:2d:24:f6:39:9a:fe:a4:d8:d4: b1:4c:65:43:5c:8e:48:54:9d:a9:58:3c:35:cd:aa: 83:07:c6:90:50:99:32:e2:bf:a2:d2:93:3c:56:d3: 12:b4:f0:2b:73:33:d4:18:2d:56:80:a3:60:13:69: 30:73:0a:5e:ac:ed:e9:5d:a5:11:bb:9f:ca:28:d7: c5:5b:47:2a:76:52:f1:5a:eb:7c:ee:51:95:35:c2: 35:67:6c:2b:de:e1:1b:c7:27:33:56:de:52:47:a8: 3e:ea:51:ab:61:d4:06:93:3f:7a:6f:7e:49:79:d8: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:33:C1:3C:2D:C6:47:9C:A9:5F:22:00:C6:A7:7D:84:2C:45:50:A2 X509v3 Authority Key Identifier: keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/345AD30E1E1311EE846A3261C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.16.0/23 IPv6: 2001:df2:a7c0::/48 Signature Algorithm: sha256WithRSAEncryption c0:2a:4d:3f:64:c5:4e:a7:0c:b9:4a:29:e5:20:fe:bb:4b:18: 08:2e:c9:6f:9f:c4:b2:6f:8f:b1:f7:7a:3a:90:1b:57:34:0f: 68:d4:8f:76:e0:1f:b8:b8:85:b9:10:3f:44:cb:e8:d3:12:3e: 31:3b:45:f6:2c:a3:11:b7:90:1e:be:eb:7e:6d:f0:7d:3f:93: e1:3f:ea:4d:12:f9:12:c3:84:ae:02:ad:ed:1b:29:29:bb:4f: bb:99:94:a8:6d:66:1e:48:3c:5b:19:c2:31:56:a4:fb:42:1f: b3:84:49:69:fc:fe:10:68:76:f0:a7:e4:39:5b:88:e2:21:a3: dc:ad:d7:45:30:92:da:7d:a5:3c:c3:49:c4:7e:57:19:ce:4d: 56:c8:1c:80:20:05:dd:be:d5:2f:01:39:61:86:f9:ef:85:42: 17:2b:05:62:a0:a2:43:d0:6c:a6:ec:fd:e2:5d:29:61:bb:5e: 89:af:93:96:df:41:5e:bd:fc:1b:51:17:6a:42:c3:2e:10:8f: a9:8c:46:66:20:f9:e8:3b:24:7d:1c:d6:fe:8b:67:23:c8:a0: 2e:d1:02:53:05:54:0f:ed:4a:b9:2c:89:c8:d9:be:71:b5:5e: 0a:0b:99:c4:7a:2e:c3:0f:19:77:f4:c4:c4:c5:5c:a9:3c:65: 7c:7c:7a:3b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2RTQxMTAvBgNVBAUTKDkxRTJBNDk3MDMzOThGQjIwMEFDMEU5RkE0NzY2OTE1 RDc0QkY5RTUwHhcNMjQwODE3MDU0NjQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmMwMzk0Ni0yOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoYhRc0u35zfvoLzUxAKzrLfl5E/uFbiMRTA0clMeGPZtm99tqCaICzk9Ck8 IC05VKQb6Ceork3XjQEakkhtwk59ltcIaW6y/YnkjKXPr39P4ksb4FS4VJxC4mCi zcEpYDQ5v3V6/dSOMWc9BoxI/kU/VBSvV72es1g/2o7hflcuDCd7Cg3XENHJNMot JPY5mv6k2NSxTGVDXI5IVJ2pWDw1zaqDB8aQUJky4r+i0pM8VtMStPArczPUGC1W gKNgE2kwcwperO3pXaURu5/KKNfFW0cqdlLxWut87lGVNcI1Z2wr3uEbxyczVt5S R6g+6lGrYdQGkz96b35JedhqYwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDkzwTwt xkecqV8iAManfYQsRVCiMB8GA1UdIwQYMBaAFJHipJcDOY+yAKwOn6R2aRXXS/nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZFNC9BQkU3RTA1NjFF MEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3SUFyQTZmcEhacEZkZEwt ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlS2tsd001ajdJQXJBNmZwSFpwRmRkTC1lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ2RTQvQUJFN0UwNTYxRTBFMTFFRTkxNzBGNDI5QzRGOUFFMDIvMzQ1QUQzMEUx RTEzMTFFRTg0NkEzMjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn6hAwDwQCAAIwCQMHACABDfKnwDANBgkqhkiG9w0BAQsF AAOCAQEAwCpNP2TFTqcMuUop5SD+u0sYCC7Jb5/Esm+Psfd6OpAbVzQPaNSPduAf uLiFuRA/RMvo0xI+MTtF9iyjEbeQHr7rfm3wfT+T4T/qTRL5EsOErgKt7RspKbtP u5mUqG1mHkg8WxnCMVak+0Ifs4RJafz+EGh28KfkOVuI4iGj3K3XRTCS2n2lPMNJ xH5XGc5NVsgcgCAF3b7VLwE5YYb574VCFysFYqCiQ9Bspuz94l0pYbteia+Tlt9B Xr38G1EXakLDLhCPqYxGZiD56DskfRzW/otnI8igLtECUwVUD+1KuSyJyNm+cbVe CguZxHouww8Zd/TExMVcqTxlfHx6Ow== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:27 2024 by rpki-client on console-ams.rpki-client.org