$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa File: 36521694382D11EDB904E684C4F9AE02.roa (raw, json) Hash identifier: Y1jwtAzgprVW6BEbaFaKB/SaK1SHeC/3WFPWvQ/ID68= Subject key identifier: 0E:BD:4E:1F:A5:7E:51:AD:2C:8A:B2:40:F7:86:0A:7C:28:1F:81:AB Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4550 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:13 +0000 ROA not before: Thu 05 Sep 2024 03:32:13 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131414 IP address blocks: 45.118.144.0/22 maxlen: 24 103.97.132.0/22 maxlen: 24 103.237.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17744 (0x4550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:13 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9263d-bde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:34:d2:44:7f:96:43:a1:9b:be:e6:eb:11: e0:87:08:3f:1a:0c:8b:8c:1d:98:1c:3a:2f:9b:7d: 5e:a7:2d:33:e4:09:5f:3a:c4:9b:0b:db:49:3a:3a: 0c:a0:cc:8e:ec:ac:c7:01:b6:a8:a8:a6:0e:36:9a: 85:ab:de:5a:99:02:6c:58:e9:dd:65:36:93:4e:c7: 3b:81:71:f2:ae:40:31:94:cd:12:b7:f1:31:00:9a: 4c:c3:7e:52:7b:61:2f:38:38:cf:2d:63:e7:41:07: f0:d9:ee:85:bf:30:5d:ff:d2:e8:a8:b1:a4:56:76: c0:3c:7b:9b:f3:50:ce:d0:01:c0:6c:d2:d9:51:62: c4:99:14:4a:38:ad:3c:01:03:af:c6:4b:95:8a:ac: d1:8f:ef:f0:0d:6f:e3:f5:98:93:dc:3b:7e:b9:00: a6:cb:02:15:a9:a7:fd:b4:ec:b6:14:e1:fe:44:b8: f8:a7:73:9c:43:81:d3:28:e1:20:b4:8c:21:62:81: 53:3d:b9:f7:c4:1d:23:c8:1a:d4:a6:42:7f:d0:8e: ba:d4:29:64:06:6c:de:ab:2c:4f:9f:9d:e1:ad:8a: 6f:c7:dd:fc:ae:fb:95:fd:86:b6:e0:43:53:27:80: 75:22:fd:f5:78:a7:9f:a3:f1:e0:20:93:9a:e0:8a: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BD:4E:1F:A5:7E:51:AD:2C:8A:B2:40:F7:86:0A:7C:28:1F:81:AB X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.144.0/22 103.97.132.0/22 103.237.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:0c:16:90:ed:73:f3:99:43:64:3e:77:1c:8d:03:9a:3d:e6: 16:44:52:8c:ca:c5:4a:48:33:9d:ed:f6:0a:2b:59:91:b6:d5: f5:f2:38:e9:f0:d7:42:18:59:6d:ab:ed:c0:69:b3:96:4b:28: 2a:f9:7a:f6:ad:83:b6:7d:31:bc:1c:c2:20:de:40:72:08:92: f0:f0:8b:83:bd:88:04:ad:10:23:ef:03:5b:c8:0f:d4:cf:82: 03:01:1a:ba:3a:a0:e7:d3:5c:8b:5f:24:30:7f:34:f4:76:f4: f2:e7:53:29:2c:11:f8:e1:55:8d:e7:c3:99:a3:fe:de:5b:90: d9:a6:8f:ab:16:01:ad:76:2f:ee:b2:e9:92:ce:a1:75:ce:79: 5d:81:bf:5a:73:96:88:26:85:60:35:38:d5:93:3a:2b:da:b4: bf:c1:83:c4:c6:d5:e8:de:78:08:3a:ef:81:9b:c6:97:1d:53: f8:45:d7:59:00:78:8c:97:b4:80:37:ad:6d:6a:ca:1f:ec:a0: 3c:87:e2:8e:3c:d6:7a:7a:2e:77:47:fd:20:b9:a2:29:b0:9b: 7b:b7:ff:0e:bc:08:06:71:86:54:f3:3b:9d:76:65:ed:47:2e: 7f:c5:4b:8e:fc:30:98:70:15:f5:99:74:4e:98:c8:ac:45:0b: ed:7d:52:b4 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICRVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjEzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYzZC1iZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvag00kR/lkOhm77m6xHghwg/GgyLjB2YHDovm31epy0z5AlfOsSbC9tJOjoM oMyO7KzHAbaoqKYONpqFq95amQJsWOndZTaTTsc7gXHyrkAxlM0St/ExAJpMw35S e2EvODjPLWPnQQfw2e6FvzBd/9LoqLGkVnbAPHub81DO0AHAbNLZUWLEmRRKOK08 AQOvxkuViqzRj+/wDW/j9ZiT3Dt+uQCmywIVqaf9tOy2FOH+RLj4p3OcQ4HTKOEg tIwhYoFTPbn3xB0jyBrUpkJ/0I661ClkBmzeqyxPn53hrYpvx938rvuV/Ya24ENT J4B1Iv31eKefo/HgIJOa4IrGPwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFA69Th+l flGtLIqyQPeGCnwoH4GrMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzY1MjE2OTQz ODJEMTFFREI5MDRFNjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAItdpADBAJnYYQDBAJn7ZAwDQYJKoZIhvcNAQELBQADggEB AGwMFpDtc/OZQ2Q+dxyNA5o95hZEUozKxUpIM53t9gorWZG21fXyOOnw10IYWW2r 7cBps5ZLKCr5evatg7Z9MbwcwiDeQHIIkvDwi4O9iAStECPvA1vID9TPggMBGro6 oOfTXItfJDB/NPR29PLnUyksEfjhVY3nw5mj/t5bkNmmj6sWAa12L+6y6ZLOoXXO eV2Bv1pzlogmhWA1ONWTOivatL/Bg8TG1ejeeAg674GbxpcdU/hF11kAeIyXtIA3 rW1qyh/soDyH4o481np6LndH/SC5oimwm3u3/w68CAZxhlTzO512Ze1HLn/FS478 MJhwFfWZdE6YyKxFC+19UrQ= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org