$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/165D22AA7A9C11EDAB620123C4F9AE02.roa File: 165D22AA7A9C11EDAB620123C4F9AE02.roa (raw, json) Hash identifier: ltn5Ga/HVGlPtg0FZ2bC2TiP0qFyVOfp55rZ+eNyYGQ= Subject key identifier: BB:5B:34:CC:49:94:AE:30:6E:78:8C:4D:AB:92:27:AA:DE:DE:B8:7E Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 458E Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/165D22AA7A9C11EDAB620123C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:33:07 +0000 ROA not before: Thu 05 Sep 2024 03:33:07 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140748 IP address blocks: 103.154.180.0/23 maxlen: 23 2001:df4:9480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17806 (0x458e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:33:07 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92673-43fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:5d:09:28:e2:cf:b1:0a:4a:e2:ca:4c:9b: 1c:a7:51:c9:a3:ef:55:d7:2b:5b:02:9d:16:e3:59: d0:43:5f:19:e7:b3:e3:4b:86:2d:d3:58:53:7e:e8: 23:8a:cc:04:aa:8f:dd:0b:ee:10:b5:cf:a0:39:42: 78:65:07:54:c7:f2:6c:76:92:a5:07:48:95:d1:c4: eb:80:65:2e:c8:ae:d1:ed:a5:43:99:39:b5:e7:95: 10:f3:b8:84:f5:3e:cd:57:72:e4:aa:50:84:d1:b5: ba:2b:b7:a3:fb:40:4c:72:68:84:a1:0c:98:88:01: 97:93:0a:aa:2c:12:6a:c3:c4:63:f3:c9:50:18:bf: e7:eb:f7:89:1c:b8:16:4f:53:2b:a4:a0:34:64:88: 18:8a:65:26:56:79:41:4f:8b:37:78:9c:10:da:02: c1:1b:28:f1:96:92:24:58:73:3f:5d:bb:69:70:68: a0:73:33:c9:42:d4:88:2c:ff:92:fd:7d:3a:8a:21: 41:88:8c:f3:d6:27:50:7f:78:ec:c2:b2:a2:c4:64: 32:87:5d:73:ee:e0:60:20:45:02:69:79:1a:a3:6a: ea:a8:23:f9:c5:52:d3:9f:cc:01:87:0b:7b:e1:9b: 2e:dd:25:5f:31:6b:57:20:a9:f3:2f:a7:14:cf:73: 60:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5B:34:CC:49:94:AE:30:6E:78:8C:4D:AB:92:27:AA:DE:DE:B8:7E X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/165D22AA7A9C11EDAB620123C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.180.0/23 IPv6: 2001:df4:9480::/48 Signature Algorithm: sha256WithRSAEncryption 33:2e:d3:f5:23:e8:76:25:b5:28:18:4c:e4:b2:a3:1e:fc:c4: 45:5e:07:2c:86:b8:d9:fd:0f:5d:f1:92:04:fb:f1:ea:dc:8d: b4:ce:bd:15:da:4b:49:50:4a:f2:41:12:34:94:ed:bb:eb:d3: 51:dd:71:10:bb:4b:ea:d5:ac:02:07:c4:a3:df:d4:c2:cc:b3: c2:6a:57:bb:bb:ce:a6:0d:e6:44:d4:bc:7c:af:c0:11:6f:92: 34:9f:e9:75:88:af:df:97:44:4c:df:0c:bb:57:cb:64:2d:bf: 94:d4:48:fe:90:c0:d9:90:10:a1:a1:13:76:0d:49:22:fa:d7: 6e:b8:71:9d:77:1b:82:4b:1f:54:28:e7:f1:b9:c7:9f:d0:8f: 68:5e:ca:08:fe:4f:33:48:6b:8f:92:2c:78:f9:9a:84:b0:f1: c3:7a:27:c1:70:b4:4e:04:a0:0e:f8:26:2d:bd:68:50:24:1e: b6:75:b0:f3:c0:1e:10:bf:d0:2e:6c:be:16:e1:35:9e:9d:38: 87:29:9e:ce:93:ff:1c:29:3f:76:45:5d:61:23:58:84:df:23: 0c:66:a7:11:a6:ff:bc:bb:ed:da:74:e5:0d:18:57:6d:c7:6e: f2:88:14:4e:4b:f2:ce:e0:87:da:82:9f:07:13:d4:e6:77:7d: ae:da:af:f1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMzA3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY3My00M2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArONdCSjiz7EKSuLKTJscp1HJo+9V1ytbAp0W41nQQ18Z57PjS4Yt01hTfugj iswEqo/dC+4Qtc+gOUJ4ZQdUx/JsdpKlB0iV0cTrgGUuyK7R7aVDmTm155UQ87iE 9T7NV3LkqlCE0bW6K7ej+0BMcmiEoQyYiAGXkwqqLBJqw8Rj88lQGL/n6/eJHLgW T1MrpKA0ZIgYimUmVnlBT4s3eJwQ2gLBGyjxlpIkWHM/XbtpcGigczPJQtSILP+S /X06iiFBiIzz1idQf3jswrKixGQyh11z7uBgIEUCaXkao2rqqCP5xVLTn8wBhwt7 4Zsu3SVfMWtXIKnzL6cUz3NgTQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLtbNMxJ lK4wbniMTauSJ6re3rh+MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTY1RDIyQUE3 QTlDMTFFREFCNjIwMTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmrQwDwQCAAIwCQMHACABDfSUgDANBgkqhkiG9w0BAQsF AAOCAQEAMy7T9SPodiW1KBhM5LKjHvzERV4HLIa42f0PXfGSBPvx6tyNtM69FdpL SVBK8kESNJTtu+vTUd1xELtL6tWsAgfEo9/UwsyzwmpXu7vOpg3mRNS8fK/AEW+S NJ/pdYiv35dETN8Mu1fLZC2/lNRI/pDA2ZAQoaETdg1JIvrXbrhxnXcbgksfVCjn 8bnHn9CPaF7KCP5PM0hrj5IsePmahLDxw3onwXC0TgSgDvgmLb1oUCQetnWw88Ae EL/QLmy+FuE1np04hymezpP/HCk/dkVdYSNYhN8jDGanEab/vLvt2nTlDRhXbcdu 8ogUTkvyzuCH2oKfBxPU5nd9rtqv8Q== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org