$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/33521546B7EB11ED9CF6A63EC4F9AE02.roa File: 33521546B7EB11ED9CF6A63EC4F9AE02.roa (raw, json) Hash identifier: S2BISZtFi+oSeeh2lh4MlkGdDdx8I6TBPjLhK91x2aA= Subject key identifier: 84:E9:12:AB:E5:D6:32:87:E4:01:0E:D8:D9:1F:64:12:96:3F:2D:99 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 45E6 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/33521546B7EB11ED9CF6A63EC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:34:23 +0000 ROA not before: Thu 05 Sep 2024 03:34:23 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150823 IP address blocks: 103.91.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17894 (0x45e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:34:23 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d926bf-c6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:c8:6f:4f:ea:fc:e6:af:0a:bd:8c:02:6b: cb:15:96:2d:c8:08:b6:21:50:92:39:80:d3:3f:a7: 39:d7:2f:0e:12:7a:a0:1a:28:e0:36:16:3d:3f:bb: 88:8f:73:1e:24:cb:b2:ba:62:e5:3b:91:d8:d2:cc: 6a:ba:b7:6b:14:e3:08:3c:c8:81:1f:66:e0:27:4b: de:15:36:b2:6a:2f:46:5f:0c:8c:4f:3b:1f:09:fd: 5d:70:9a:13:b2:20:a6:25:f4:b1:a6:69:4e:3c:c5: 19:62:bd:fa:0b:7f:c5:2a:c9:d5:49:44:d1:fa:90: 96:13:9c:be:1e:22:27:1e:34:1c:24:21:92:58:d6: 8f:61:01:f3:a9:af:96:0c:34:79:ef:e1:67:20:e6: a5:50:fe:e1:be:2a:39:6c:94:06:ed:15:1e:d0:63: fe:4d:3e:db:9b:33:bb:83:66:ba:e5:92:e0:a2:4e: 11:93:90:c7:75:67:d1:21:88:bb:1a:37:2e:c5:24: c3:c0:cb:77:cb:ec:08:8a:46:4a:58:4a:ea:6d:bf: 6a:04:42:e8:bf:57:3e:a8:ff:dd:7d:b0:ad:88:4c: 43:2d:c3:f9:dd:e9:6c:a0:f8:08:de:5c:cc:5b:1a: f5:ce:57:b3:0a:79:7d:ed:a7:ab:49:35:e5:3e:10: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E9:12:AB:E5:D6:32:87:E4:01:0E:D8:D9:1F:64:12:96:3F:2D:99 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/33521546B7EB11ED9CF6A63EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.170.0/23 Signature Algorithm: sha256WithRSAEncryption a5:d5:14:30:e7:61:2e:1e:65:eb:fe:5f:d0:16:98:85:84:75: 14:67:0c:c6:ce:30:ec:72:97:4f:72:70:fb:28:d8:fd:56:a9: 1d:95:f2:71:5e:04:cb:6c:ad:b3:9a:2f:06:dc:19:48:58:57: 84:c6:85:62:35:f4:59:aa:97:af:34:4f:2b:34:3e:87:f9:8d: 7f:a3:34:65:bf:78:ef:ca:7f:cf:f5:31:d9:2a:3b:27:48:0e: 4b:43:78:12:95:ed:df:79:f4:6f:ed:bc:59:d0:36:77:fe:67: 2f:b6:73:f4:a8:eb:35:01:f0:89:5b:a9:ae:c8:f9:ab:ca:30: ff:df:1b:3d:4a:ac:aa:a5:e1:46:2c:77:17:c2:34:32:12:0d: df:4c:f3:4c:44:00:20:5b:0b:e8:19:26:1e:14:03:0f:56:b4: ed:7e:ae:9c:05:4e:23:73:74:b9:c4:70:9b:e4:a5:a8:55:50: 22:96:a5:a4:bf:58:15:cf:0b:ed:36:3a:87:2f:3c:63:11:09: 30:a2:68:ac:8b:8a:7f:e0:ed:f0:c1:4b:04:0e:29:db:aa:e4: fe:dc:b6:ab:2e:90:65:7a:21:e3:5d:09:72:2e:0b:cc:a2:5b: 49:92:48:8f:a2:7b:0b:76:5f:c7:c7:e6:66:8e:1c:cb:fc:37: 7e:75:e0:76 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICReYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNDIzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjZiZi1jNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13vIb0/q/OavCr2MAmvLFZYtyAi2IVCSOYDTP6c51y8OEnqgGijgNhY9P7uI j3MeJMuyumLlO5HY0sxqurdrFOMIPMiBH2bgJ0veFTayai9GXwyMTzsfCf1dcJoT siCmJfSxpmlOPMUZYr36C3/FKsnVSUTR+pCWE5y+HiInHjQcJCGSWNaPYQHzqa+W DDR57+FnIOalUP7hvio5bJQG7RUe0GP+TT7bmzO7g2a65ZLgok4Rk5DHdWfRIYi7 GjcuxSTDwMt3y+wIikZKWErqbb9qBELov1c+qP/dfbCtiExDLcP53elsoPgI3lzM Wxr1zlezCnl97aerSTXlPhAPCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFITpEqvl 1jKH5AEO2NkfZBKWPy2ZMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzM1MjE1NDZC N0VCMTFFRDlDRjZBNjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnW6owDQYJKoZIhvcNAQELBQADggEBAKXVFDDnYS4eZev+ X9AWmIWEdRRnDMbOMOxyl09ycPso2P1WqR2V8nFeBMtsrbOaLwbcGUhYV4TGhWI1 9Fmql680Tys0Pof5jX+jNGW/eO/Kf8/1MdkqOydIDktDeBKV7d959G/tvFnQNnf+ Zy+2c/So6zUB8Ilbqa7I+avKMP/fGz1KrKql4UYsdxfCNDISDd9M80xEACBbC+gZ Jh4UAw9WtO1+rpwFTiNzdLnEcJvkpahVUCKWpaS/WBXPC+02OocvPGMRCTCiaKyL in/g7fDBSwQOKduq5P7ctqsukGV6IeNdCXIuC8yiW0mSSI+iewt2X8fH5maOHMv8 N3514HY= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org