$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa File: 3D8EDEB442FB11ED8178A936C4F9AE02.roa (raw, json) Hash identifier: Lqdkn47dlAI3uSNo4mAeusoxymwKh8j5AB8z4hkZ3to= Subject key identifier: 60:60:76:15:9E:52:2E:07:06:FD:69:6C:29:3D:F8:CB:07:43:E5:F2 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4530 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:31:44 +0000 ROA not before: Thu 05 Sep 2024 03:31:44 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131358 IP address blocks: 103.9.0.0/24 maxlen: 24 103.9.1.0/24 maxlen: 24 103.9.2.0/24 maxlen: 24 103.9.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17712 (0x4530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:31:44 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92620-8a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:d8:aa:19:eb:6a:3c:d6:ca:b6:00:71:1e: 26:8a:1a:df:d2:74:e3:ad:b0:e9:a8:9a:9a:1d:cc: e6:c5:fd:9d:cd:c8:51:62:10:b0:43:7c:fd:60:7f: d3:56:27:4f:b4:3a:be:0f:07:51:6e:14:12:a7:12: 6a:34:d2:87:15:5a:60:60:50:4a:1a:30:dc:00:60: 9c:a7:cd:43:69:89:22:b0:dd:82:74:00:a9:c7:08: 70:26:c2:e0:69:fb:3f:cb:2e:2c:e3:53:5b:51:f0: e7:2d:96:aa:40:ef:0b:13:00:aa:ef:ee:85:77:12: 9e:0f:7c:88:c0:92:46:15:36:de:c0:8b:8c:00:c8: 68:98:6e:22:c2:42:e9:a2:4f:78:f5:b9:85:41:6c: c0:1d:e8:3b:18:04:ac:f2:bb:23:a0:4d:65:74:24: e3:3d:94:b8:dc:72:b8:83:f2:15:b1:5d:3d:14:40: c1:b0:98:19:b2:4e:8a:d7:dd:c9:68:7e:81:fa:36: ec:ed:ff:16:7f:a9:eb:92:71:d3:de:83:b8:a3:4b: 78:d6:c9:aa:ec:63:0c:b6:a6:04:98:6b:63:4c:3c: f5:c0:42:42:f2:18:3a:a2:d8:e7:3e:2e:d1:8f:16: 6c:0c:64:88:91:45:b2:73:9f:7c:0d:d3:71:ac:81: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:60:76:15:9E:52:2E:07:06:FD:69:6C:29:3D:F8:CB:07:43:E5:F2 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.0.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:c7:29:c8:4f:72:51:89:88:5f:9e:46:55:fb:48:b1:0e:b3: d3:43:77:80:69:d4:48:da:89:49:ca:f8:33:ef:af:8f:21:4b: 06:e1:d4:43:6c:f6:d2:3b:2e:5a:a9:a8:58:f0:e4:35:dd:e4: 6c:43:70:63:62:87:c5:5f:f6:24:43:40:3b:27:aa:e4:9b:f0: cc:b2:55:00:79:06:c2:84:7b:28:e6:99:d5:05:3d:d5:71:24: 44:b4:3b:37:69:0e:d4:d4:58:d0:60:1a:3d:74:f3:88:2f:cc: 28:2d:b2:57:10:7f:47:3d:f1:f5:d8:06:89:a8:06:82:8f:4e: 7f:0a:4c:bd:57:c9:b9:f6:f4:e1:e3:59:b0:02:05:d3:ca:72: c7:c1:6b:0a:16:66:2a:f2:9e:37:0e:6e:16:9c:27:c6:fb:7d: a6:d8:41:33:db:33:7e:d0:3e:26:25:27:9f:53:02:9d:4b:b7: 53:3d:42:ec:8a:91:e9:7e:3d:df:5c:52:69:da:9f:40:0e:de: 83:a9:30:a3:43:d5:93:88:48:d4:07:ca:25:34:63:42:70:8d: cd:b1:c9:b6:29:8c:d5:94:df:cd:39:95:0b:19:fe:09:63:cf: 02:6a:95:87:8c:46:d0:cd:31:53:ae:1b:ea:6a:e2:62:0e:2c: 74:b0:4c:de -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICRTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMTQ0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYyMC04YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTnYqhnrajzWyrYAcR4mihrf0nTjrbDpqJqaHczmxf2dzchRYhCwQ3z9YH/T VidPtDq+DwdRbhQSpxJqNNKHFVpgYFBKGjDcAGCcp81DaYkisN2CdACpxwhwJsLg afs/yy4s41NbUfDnLZaqQO8LEwCq7+6FdxKeD3yIwJJGFTbewIuMAMhomG4iwkLp ok949bmFQWzAHeg7GASs8rsjoE1ldCTjPZS43HK4g/IVsV09FEDBsJgZsk6K193J aH6B+jbs7f8Wf6nrknHT3oO4o0t41smq7GMMtqYEmGtjTDz1wEJC8hg6otjnPi7R jxZsDGSIkUWyc598DdNxrIH/EwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGBgdhWe Ui4HBv1pbCk9+MsHQ+XyMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0Q4RURFQjQ0 MkZCMTFFRDgxNzhBOTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnCQAwDQYJKoZIhvcNAQELBQADggEBAI3HKchPclGJiF+e RlX7SLEOs9NDd4Bp1EjaiUnK+DPvr48hSwbh1ENs9tI7LlqpqFjw5DXd5GxDcGNi h8Vf9iRDQDsnquSb8MyyVQB5BsKEeyjmmdUFPdVxJES0OzdpDtTUWNBgGj1084gv zCgtslcQf0c98fXYBomoBoKPTn8KTL1Xybn29OHjWbACBdPKcsfBawoWZirynjcO bhacJ8b7fabYQTPbM37QPiYlJ59TAp1Lt1M9QuyKkel+Pd9cUmnan0AO3oOpMKND 1ZOISNQHyiU0Y0Jwjc2xybYpjNWU3805lQsZ/gljzwJqlYeMRtDNMVOuG+pq4mIO LHSwTN4= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org