$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2987446CB3D411ECA9ECEB2DC4F9AE02.roa File: 2987446CB3D411ECA9ECEB2DC4F9AE02.roa (raw, json) Hash identifier: lNEnOT9N3a6JrBzeGAVV+GFm0EJXfT357MP6MC4bUoU= Subject key identifier: A7:16:92:E0:93:03:15:5A:5E:58:E1:62:42:AC:05:28:5D:66:10:F5 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4546 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2987446CB3D411ECA9ECEB2DC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:03 +0000 ROA not before: Thu 05 Sep 2024 03:32:03 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131402 IP address blocks: 103.71.180.0/24 maxlen: 24 103.71.181.0/24 maxlen: 24 103.227.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17734 (0x4546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:03 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92633-6c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:8c:e0:d6:66:f4:25:6b:22:4c:05:63:67: 45:ea:52:b2:81:2e:9a:99:c6:12:81:69:d6:61:a1: 79:47:ba:97:31:a1:44:68:3b:f3:bf:77:38:19:cc: 3b:f1:b5:c0:4e:cc:d5:39:f2:20:57:ab:81:24:41: 90:66:ea:95:53:94:53:75:50:3f:c5:60:ac:9e:72: e1:4c:5b:86:cd:f1:d0:a5:6d:e4:dd:72:cc:58:6d: 5d:29:69:04:29:1a:31:87:03:ea:f4:55:b9:68:b0: d2:7f:c6:f2:a5:a2:37:fc:30:f4:68:31:46:c7:38: bf:ec:bb:f9:da:39:34:9c:d0:d8:23:27:59:bd:ab: 93:20:82:49:fb:dc:7b:6f:ac:1c:05:dc:45:21:a3: 61:42:5a:3d:38:e4:0b:a7:0c:6f:39:c8:af:05:00: 59:86:54:f8:8d:3c:a9:7d:92:66:cb:e4:70:9e:a9: 68:10:cb:da:d2:34:f1:62:4e:ee:78:5e:7d:b2:1f: 37:2c:ca:73:7e:38:5c:b1:34:e5:8d:bf:8d:0a:5e: a6:ba:30:36:83:fa:0a:e8:0b:ed:f7:4e:22:62:27: 99:00:fc:73:f5:95:1d:5a:14:a3:1b:e3:d9:c7:b1: ee:b8:94:29:53:b7:3e:0f:82:ca:c6:08:98:49:d8: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:16:92:E0:93:03:15:5A:5E:58:E1:62:42:AC:05:28:5D:66:10:F5 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2987446CB3D411ECA9ECEB2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.180.0/23 103.227.216.0/22 Signature Algorithm: sha256WithRSAEncryption b7:a4:62:c7:e1:25:db:44:13:3b:a9:ea:89:e7:56:7d:d7:0a: 3f:bb:4c:60:33:33:87:f9:52:bc:5a:62:11:81:82:36:b2:e4: 88:93:9f:95:a5:5f:b4:f2:c6:6f:18:3f:2f:45:8f:b7:2c:47: 33:f1:cb:9a:a8:84:c7:bd:15:98:a7:7e:9e:e2:be:f5:4f:d1: 1c:56:3d:ad:19:af:ea:b3:e0:4a:d5:09:81:92:f7:63:45:ec: cb:54:5a:df:b1:18:e3:55:21:24:64:a1:01:48:d0:ca:83:85: 54:87:e6:61:08:a5:2a:2c:5b:bb:62:ee:b2:b3:01:48:01:b9: b5:29:6a:b1:eb:16:e5:25:3c:d8:2f:53:e4:ec:73:86:6d:19: b3:f8:f1:f0:25:e0:86:65:0c:40:32:5f:35:4b:c4:d6:01:74: 70:38:98:29:0c:8c:15:b8:54:a6:18:3b:ba:e8:22:cf:4a:ad: 74:db:99:52:a1:3d:0f:9f:ce:50:65:33:11:cd:4a:0a:21:56: 4a:e5:95:6a:7d:48:11:75:e7:3c:d2:b1:aa:f2:2b:67:db:f8: 0d:36:01:57:67:54:6b:83:be:2c:54:1b:37:2e:0e:f1:33:88: 91:8b:3c:b7:b2:0b:88:e5:28:de:f9:4a:57:1d:40:48:d7:79: 56:43:2c:8a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICRUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjAzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYzMy02YzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2KM4NZm9CVrIkwFY2dF6lKygS6amcYSgWnWYaF5R7qXMaFEaDvzv3c4Gcw7 8bXATszVOfIgV6uBJEGQZuqVU5RTdVA/xWCsnnLhTFuGzfHQpW3k3XLMWG1dKWkE KRoxhwPq9FW5aLDSf8bypaI3/DD0aDFGxzi/7Lv52jk0nNDYIydZvauTIIJJ+9x7 b6wcBdxFIaNhQlo9OOQLpwxvOcivBQBZhlT4jTypfZJmy+RwnqloEMva0jTxYk7u eF59sh83LMpzfjhcsTTljb+NCl6mujA2g/oK6Avt904iYieZAPxz9ZUdWhSjG+PZ x7HuuJQpU7c+D4LKxgiYSdgAWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKcWkuCT AxVaXljhYkKsBShdZhD1MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMjk4NzQ0NkNC M0Q0MTFFQ0E5RUNFQjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnR7QDBAJn49gwDQYJKoZIhvcNAQELBQADggEBALekYsfh JdtEEzup6onnVn3XCj+7TGAzM4f5UrxaYhGBgjay5IiTn5WlX7Tyxm8YPy9Fj7cs RzPxy5qohMe9FZinfp7ivvVP0RxWPa0Zr+qz4ErVCYGS92NF7MtUWt+xGONVISRk oQFI0MqDhVSH5mEIpSosW7ti7rKzAUgBubUparHrFuUlPNgvU+Tsc4ZtGbP48fAl 4IZlDEAyXzVLxNYBdHA4mCkMjBW4VKYYO7roIs9KrXTbmVKhPQ+fzlBlMxHNSgoh VkrllWp9SBF15zzSsaryK2fb+A02AVdnVGuDvixUGzcuDvEziJGLPLeyC4jlKN75 SlcdQEjXeVZDLIo= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org