$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa File: 3442C35A995711ECA076C26CC4F9AE02.roa (raw, json) Hash identifier: ElYFGEi2U1ZpePpM0wUNASO/xJQqZGteXQcliiwZX+A= Subject key identifier: 0C:2F:85:1E:39:B6:73:C1:65:9F:A0:E0:3C:BF:E2:F7:22:2F:18:35 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4529 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:31:37 +0000 ROA not before: Thu 05 Sep 2024 03:31:37 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131345 IP address blocks: 103.5.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17705 (0x4529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:31:37 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92619-6981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:bf:2c:02:a8:55:c1:68:5c:eb:fc:23:d6: 39:e1:75:9e:9b:53:f2:7f:fc:9d:c0:c7:0a:04:ac: 10:12:4a:f6:f0:31:a7:84:0e:45:d3:26:8c:42:47: 49:06:86:d3:90:67:f4:bd:bb:aa:10:2a:2a:fc:32: a5:c5:dc:c6:e6:5d:ce:94:25:7e:5a:1d:56:3f:87: b2:e8:e1:1b:48:d4:5d:6e:45:8b:64:2a:a4:39:64: 77:cf:4a:8d:65:f5:b9:4b:dc:1d:19:bb:fa:9d:fc: 7c:2b:4a:4e:d9:80:e7:ed:ea:bc:d0:62:ad:3a:04: 9e:2e:c3:c6:1e:37:0a:3f:b9:f8:cf:82:28:df:18: 55:a1:62:81:15:e8:b0:f5:b4:65:2a:26:a7:4b:75: bd:1a:42:f1:3d:a5:d0:cd:1e:8a:6e:cf:b3:23:19: 24:84:34:c1:a4:d6:98:af:8d:8a:8f:d2:47:ae:3b: 0c:02:28:92:a1:3d:29:b2:6b:b3:2c:c4:95:0c:f2: 55:14:59:f9:27:b0:22:23:e1:78:63:3b:01:3b:5c: 38:49:a5:97:d5:5f:aa:b4:67:4b:fa:db:84:d9:81: c3:29:14:a6:85:d8:87:8c:78:78:70:22:b2:4b:95: b4:6b:eb:96:ee:f6:0a:44:65:70:c1:0f:95:9f:75: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:85:1E:39:B6:73:C1:65:9F:A0:E0:3C:BF:E2:F7:22:2F:18:35 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.30.0/23 Signature Algorithm: sha256WithRSAEncryption 72:89:ba:54:27:80:dd:18:50:3e:a8:90:a8:9d:c3:1f:45:78: b2:db:f0:01:38:aa:42:b3:94:d6:3a:56:ab:8f:ae:cd:a0:b3: 84:6b:b9:2e:30:fe:69:7f:57:e8:26:a4:24:2a:64:96:f8:00: 77:4c:24:b4:33:00:13:54:3f:ea:e1:7a:7b:a6:e2:21:9c:4a: cc:06:f7:b1:24:5b:67:cb:7e:85:e8:9b:0f:8e:f3:9b:c2:ba: 46:81:14:d3:63:5d:de:94:19:f8:6f:36:a1:28:ff:d5:33:c7: 66:3a:75:b6:b1:ec:de:14:c1:cb:2f:3a:ae:76:bc:10:09:a7: b7:d8:55:6b:fe:ce:2d:9c:18:db:78:69:36:ca:e5:1b:34:81: a3:07:c8:29:26:da:91:2e:b2:6c:2b:98:c6:67:fc:3a:d8:da: d7:54:a0:e3:f4:d0:c4:a1:dd:06:d0:ca:11:c0:e2:d7:4c:4b: 16:52:4d:d8:8a:a9:5c:d0:1b:0e:35:fd:0b:f8:6e:f0:e8:d3: f2:ae:bf:4f:b4:84:71:1c:ea:bd:4a:cd:75:80:bd:bb:b5:34: dd:f5:50:92:9f:77:ea:3d:74:1f:8b:4a:1f:17:cb:88:30:5c: 1b:60:a0:c6:9e:76:8d:f7:0e:05:6d:91:57:56:69:b8:b6:11: a7:d5:2d:45 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICRSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMTM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYxOS02OTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygu/LAKoVcFoXOv8I9Y54XWem1Pyf/ydwMcKBKwQEkr28DGnhA5F0yaMQkdJ BobTkGf0vbuqECoq/DKlxdzG5l3OlCV+Wh1WP4ey6OEbSNRdbkWLZCqkOWR3z0qN ZfW5S9wdGbv6nfx8K0pO2YDn7eq80GKtOgSeLsPGHjcKP7n4z4Io3xhVoWKBFeiw 9bRlKianS3W9GkLxPaXQzR6Kbs+zIxkkhDTBpNaYr42Kj9JHrjsMAiiSoT0psmuz LMSVDPJVFFn5J7AiI+F4YzsBO1w4SaWX1V+qtGdL+tuE2YHDKRSmhdiHjHh4cCKy S5W0a+uW7vYKRGVwwQ+Vn3VYxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAwvhR45 tnPBZZ+g4Dy/4vciLxg1MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzQ0MkMzNUE5 OTU3MTFFQ0EwNzZDMjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnBR4wDQYJKoZIhvcNAQELBQADggEBAHKJulQngN0YUD6o kKidwx9FeLLb8AE4qkKzlNY6VquPrs2gs4RruS4w/ml/V+gmpCQqZJb4AHdMJLQz ABNUP+rhenum4iGcSswG97EkW2fLfoXomw+O85vCukaBFNNjXd6UGfhvNqEo/9Uz x2Y6dbax7N4UwcsvOq52vBAJp7fYVWv+zi2cGNt4aTbK5Rs0gaMHyCkm2pEusmwr mMZn/DrY2tdUoOP00MSh3QbQyhHA4tdMSxZSTdiKqVzQGw41/Qv4bvDo0/Kuv0+0 hHEc6r1KzXWAvbu1NN31UJKfd+o9dB+LSh8Xy4gwXBtgoMaedo33DgVtkVdWabi2 EafVLUU= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org