$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/39087D74951411EF97138B40C4F9AE02.roa File: 39087D74951411EF97138B40C4F9AE02.roa (raw, json) Hash identifier: 6a1zRNSSOAtNd7SVF0+koIux7rBDle662JpebFeCNKA= Subject key identifier: 53:65:E2:DA:03:E6:11:8F:36:7A:77:1B:09:C2:B2:76:E5:34:2D:84 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 47CB Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/39087D74951411EF97138B40C4F9AE02.roa Signing time: Mon 28 Oct 2024 10:15:27 +0000 ROA not before: Mon 28 Oct 2024 10:15:27 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140742 IP address blocks: 103.152.162.0/23 maxlen: 24 2400:f3a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18379 (0x47cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 28 10:15:27 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=671f643f-6bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:dd:ce:ec:81:05:a9:67:af:c9:97:23:83: 82:8f:74:44:47:04:28:ee:f5:a8:1d:8d:73:d5:5a: e4:50:41:2f:b6:1e:2b:1c:0d:b0:8a:e5:34:37:da: d8:e8:9b:83:fc:63:31:cd:5b:bc:1e:7d:37:23:61: 8d:b3:1e:a9:e7:47:c3:cd:73:64:13:39:ac:93:b8: bd:b5:27:4e:9f:a9:9f:6c:25:ed:c2:29:ab:21:a6: 2c:20:e2:b1:f5:52:bc:b3:ca:1c:17:9b:77:5d:4d: c7:e0:9b:49:69:8a:8a:e2:bb:c9:eb:56:cb:4b:ef: 42:ad:a2:ea:12:a1:bd:94:60:e4:44:c9:9a:1c:ab: a2:7b:b6:e3:c9:41:76:93:bd:a6:5d:6d:e0:fc:7a: 8e:66:5e:99:40:b6:45:9b:3d:84:4b:fb:d3:c7:eb: b6:04:b3:c7:8a:4e:8f:df:09:fe:14:05:72:fc:4e: 4e:4f:cb:15:5d:14:96:89:95:5f:5b:62:45:1c:04: 5f:d4:1e:5a:ff:a7:47:c0:b6:09:bd:c4:33:8a:4e: 9a:fc:7d:83:98:ff:36:e8:2e:b7:00:72:30:20:68: af:e9:8a:39:cc:f0:a6:da:db:d6:b4:a1:83:0e:86: ab:c2:c5:95:3e:12:59:0b:b0:06:97:d6:cd:c7:d5: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:65:E2:DA:03:E6:11:8F:36:7A:77:1B:09:C2:B2:76:E5:34:2D:84 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/39087D74951411EF97138B40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.162.0/23 IPv6: 2400:f3a0::/48 Signature Algorithm: sha256WithRSAEncryption 5e:e6:84:42:3b:f1:48:9d:0a:23:ee:d1:f8:b2:9b:46:dc:64: f8:1a:65:a4:a6:f6:40:c3:90:7e:22:de:78:a1:74:85:92:9e: e6:72:e9:b6:eb:d2:74:98:fd:61:ec:43:69:70:2e:86:f2:88: 0d:a7:84:7f:fe:88:d8:fe:55:d3:bc:99:70:c6:7f:64:ae:4d: 2a:98:4a:ca:93:cd:64:d9:47:13:1b:1e:b6:fa:b5:53:fc:1a: 6a:6f:ab:c4:36:2e:17:de:99:57:31:ce:60:9b:11:0f:50:be: 37:2c:bf:d4:87:f1:d7:3f:26:9a:6f:ad:f1:f5:d9:be:18:fd: 0e:32:be:e0:9f:84:8c:e0:1b:7b:fa:76:75:82:51:4c:b6:ef: a1:05:10:86:c9:17:cf:e5:ac:4b:4f:d8:ad:cf:88:a6:e3:a8: c3:ee:eb:38:94:02:90:bb:ff:c7:e5:cd:2b:ab:7b:f0:35:22: fd:9e:32:23:67:78:89:92:3c:c3:d5:f6:c1:1f:47:53:c0:cc: 5a:aa:7a:2d:e4:3b:5e:db:80:92:8a:cf:a3:2b:4c:0d:5b:18: 89:bd:02:1e:b9:d3:14:7c:97:d8:93:e4:c5:52:d1:1e:72:8d: 98:60:40:9c:2c:77:f1:67:a9:ee:36:06:2b:ad:2d:0d:49:0e: d4:09:fb:0c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICR8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMDI4MTAxNTI3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmNjQzZi02YmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy23dzuyBBalnr8mXI4OCj3RERwQo7vWoHY1z1VrkUEEvth4rHA2wiuU0N9rY 6JuD/GMxzVu8Hn03I2GNsx6p50fDzXNkEzmsk7i9tSdOn6mfbCXtwimrIaYsIOKx 9VK8s8ocF5t3XU3H4JtJaYqK4rvJ61bLS+9CraLqEqG9lGDkRMmaHKuie7bjyUF2 k72mXW3g/HqOZl6ZQLZFmz2ES/vTx+u2BLPHik6P3wn+FAVy/E5OT8sVXRSWiZVf W2JFHARf1B5a/6dHwLYJvcQzik6a/H2DmP826C63AHIwIGiv6Yo5zPCm2tvWtKGD DoarwsWVPhJZC7AGl9bNx9UHLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFNl4toD 5hGPNnp3GwnCsnblNC2EMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzkwODdENzQ5 NTE0MTFFRjk3MTM4QjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmKIwDwQCAAIwCQMHACQA86AAADANBgkqhkiG9w0BAQsF AAOCAQEAXuaEQjvxSJ0KI+7R+LKbRtxk+BplpKb2QMOQfiLeeKF0hZKe5nLptuvS dJj9YexDaXAuhvKIDaeEf/6I2P5V07yZcMZ/ZK5NKphKypPNZNlHExsetvq1U/wa am+rxDYuF96ZVzHOYJsRD1C+Nyy/1Ifx1z8mmm+t8fXZvhj9DjK+4J+EjOAbe/p2 dYJRTLbvoQUQhskXz+WsS0/Yrc+IpuOow+7rOJQCkLv/x+XNK6t78DUi/Z4yI2d4 iZI8w9X2wR9HU8DMWqp6LeQ7XtuAkorPoytMDVsYib0CHrnTFHyX2JPkxVLRHnKN mGBAnCx38Wep7jYGK60tDUkO1An7DA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org