$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/34EF7D66995711ECA076C26CC4F9AE02.roa File: 34EF7D66995711ECA076C26CC4F9AE02.roa (raw, json) Hash identifier: rsQtKX6DJl9a25dVz+BfK8Z7iJ3XmriWYgF1j9+FKUc= Subject key identifier: 94:62:27:89:9F:F7:ED:1A:E4:52:3B:62:50:15:6F:21:48:AE:D7:03 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4541 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/34EF7D66995711ECA076C26CC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:31:58 +0000 ROA not before: Thu 05 Sep 2024 03:31:58 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131391 IP address blocks: 103.243.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17729 (0x4541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:31:58 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9262e-4568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:4b:00:a3:ec:5f:c8:e9:85:1a:34:be:09: 27:30:38:c6:ef:d7:4d:6c:c8:3f:74:d9:6f:bf:d9: 98:0c:b4:da:2a:ae:ca:be:4c:66:4a:b9:5f:9c:ac: 40:df:ce:f1:1b:63:f2:0d:01:83:7a:d9:57:58:a7: 22:db:be:27:2c:a9:04:d4:0b:41:ba:2c:0f:60:4d: 6a:05:c1:83:f5:0c:43:f4:df:68:26:50:6d:56:7a: cd:db:a9:43:a6:ee:23:a1:55:32:2b:85:a5:0b:9f: a3:67:5d:cf:07:a2:04:42:4f:97:83:d4:72:a9:b2: d3:a5:03:40:59:a3:e1:6d:c4:d1:d0:06:d0:53:d0: 0d:a8:8c:bc:41:12:5e:b9:5b:68:a7:58:a9:86:d9: 8f:c8:fe:76:e9:c7:ce:52:a9:06:80:df:ea:de:e6: 60:cc:6c:9e:a1:c0:15:0a:ec:5c:37:eb:8c:d8:9e: c4:36:f8:cd:a9:75:61:4a:c4:27:af:9c:f5:b1:91: 5b:fa:84:b2:9c:c7:94:34:1a:18:48:f8:be:01:96: ef:8a:91:cf:41:24:0c:31:b2:92:d5:1b:93:8b:ae: 75:4d:34:b3:ea:0b:7c:d5:e9:0e:64:1e:82:72:85: ec:92:b4:e9:be:dc:ea:20:55:ea:45:46:32:f9:57: a2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:62:27:89:9F:F7:ED:1A:E4:52:3B:62:50:15:6F:21:48:AE:D7:03 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/34EF7D66995711ECA076C26CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.216.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:ee:9d:2b:f2:67:43:77:56:8a:8d:6c:ea:31:2d:28:c7:df: d0:3f:b0:37:38:48:ec:f5:79:aa:2e:5c:6c:2a:75:8a:a7:19: 4f:43:00:55:4a:50:3c:8d:e4:53:95:dd:7d:ff:a1:11:a3:56: 97:b5:e0:bc:0d:4a:28:4c:33:75:9b:1c:92:d4:0e:8f:8e:0f: d5:5a:2d:36:2d:4b:22:f3:f5:bb:c3:a8:35:9b:1b:8c:7c:30: 3d:84:e4:72:82:de:22:71:23:26:d4:0b:9d:c8:14:b8:8f:17: 40:28:d9:6f:b0:3c:b2:ec:20:4e:83:93:6e:c5:b4:61:1b:2c: 03:84:db:e7:23:ad:1c:4f:2a:2b:d4:78:4d:0d:a0:e0:ca:1c: 2f:0c:c6:15:ef:ca:22:77:10:23:db:7d:1d:f2:68:0d:b5:be: 77:0d:72:d7:13:8f:86:6e:b0:ea:69:90:f0:97:27:92:92:7d: d4:64:31:f5:54:05:74:7f:b8:db:db:39:a0:f8:f2:68:74:27: 6c:69:af:10:94:7e:b3:bb:d4:48:ab:11:14:8f:73:7d:c8:ac: b2:fe:da:5f:65:4c:81:66:76:ba:08:56:3c:cb:34:74:74:0d: d5:54:9c:87:c2:b3:c4:a1:8f:ad:17:29:5b:a8:9f:63:aa:5a: ae:1b:85:38 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICRUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMTU4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYyZS00NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreBLAKPsX8jphRo0vgknMDjG79dNbMg/dNlvv9mYDLTaKq7KvkxmSrlfnKxA 387xG2PyDQGDetlXWKci274nLKkE1AtBuiwPYE1qBcGD9QxD9N9oJlBtVnrN26lD pu4joVUyK4WlC5+jZ13PB6IEQk+Xg9RyqbLTpQNAWaPhbcTR0AbQU9ANqIy8QRJe uVtop1iphtmPyP526cfOUqkGgN/q3uZgzGyeocAVCuxcN+uM2J7ENvjNqXVhSsQn r5z1sZFb+oSynMeUNBoYSPi+AZbvipHPQSQMMbKS1RuTi651TTSz6gt81ekOZB6C coXskrTpvtzqIFXqRUYy+VeiswIDAQABo4IClTCCApEwHQYDVR0OBBYEFJRiJ4mf 9+0a5FI7YlAVbyFIrtcDMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzRFRjdENjY5 OTU3MTFFQ0EwNzZDMjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn89gwDQYJKoZIhvcNAQELBQADggEBACvunSvyZ0N3VoqN bOoxLSjH39A/sDc4SOz1eaouXGwqdYqnGU9DAFVKUDyN5FOV3X3/oRGjVpe14LwN SihMM3WbHJLUDo+OD9VaLTYtSyLz9bvDqDWbG4x8MD2E5HKC3iJxIybUC53IFLiP F0Ao2W+wPLLsIE6Dk27FtGEbLAOE2+cjrRxPKivUeE0NoODKHC8MxhXvyiJ3ECPb fR3yaA21vncNctcTj4ZusOppkPCXJ5KSfdRkMfVUBXR/uNvbOaD48mh0J2xprxCU frO71EirERSPc33IrLL+2l9lTIFmdroIVjzLNHR0DdVUnIfCs8Shj60XKVuon2Oq Wq4bhTg= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org