$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DB1456CD86A11ED8C149E7DC4F9AE02.roa File: 3DB1456CD86A11ED8C149E7DC4F9AE02.roa (raw, json) Hash identifier: QdhdSADAYJp863h0I6QY4SELmIkHRJFIgIwv1G8PTqQ= Subject key identifier: C8:DF:58:4F:0F:09:82:D3:14:2E:EA:1B:88:5F:6A:C3:A8:5A:8E:76 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 454C Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DB1456CD86A11ED8C149E7DC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:09 +0000 ROA not before: Thu 05 Sep 2024 03:32:09 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131409 IP address blocks: 103.149.254.0/23 maxlen: 24 2406:23c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17740 (0x454c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:09 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92639-66aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:13:54:84:65:f7:67:4a:94:1c:46:8b:8f:87: f7:a1:73:18:5a:ca:33:94:f0:e8:ca:ed:9f:3e:71: 11:0f:fa:98:9a:26:da:25:09:9e:c4:5c:29:4c:29: 1a:c2:46:53:c4:20:fa:63:67:ed:64:c8:98:f7:ee: 8b:b6:81:25:11:b9:ab:0e:68:f5:d1:74:0d:fb:6f: 76:3d:7d:70:0a:5d:88:bd:d4:0d:15:ad:56:b4:62: a5:07:9d:85:14:af:0c:af:54:44:09:5c:56:86:84: eb:02:71:0b:ec:00:a7:ae:29:0f:e4:ff:ae:80:5c: 20:9c:92:00:8f:1f:af:13:30:be:da:a5:9f:b0:c4: 7b:ab:c1:dd:87:41:84:3c:f9:90:cf:3d:9d:c0:6c: 8f:ac:46:ed:f1:fc:d8:3b:e3:e0:82:ab:19:f9:89: e1:84:2c:d3:c2:61:76:cb:ea:c0:73:96:17:c7:7a: 3a:f7:55:3e:02:fa:2f:4a:43:d0:00:af:6c:26:8d: cd:bb:a7:03:be:5f:c1:5a:3f:14:67:12:2f:6d:4e: 65:32:7d:33:10:d0:d2:df:27:d2:d1:56:5d:53:b2: a7:36:98:87:e7:bd:aa:61:01:26:0c:4d:f3:36:4e: 22:b3:66:a2:59:3a:73:4b:da:58:f1:38:7d:73:61: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DF:58:4F:0F:09:82:D3:14:2E:EA:1B:88:5F:6A:C3:A8:5A:8E:76 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DB1456CD86A11ED8C149E7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.254.0/23 IPv6: 2406:23c0::/48 Signature Algorithm: sha256WithRSAEncryption 1d:63:69:7c:06:62:cc:cc:f1:2f:32:10:02:a2:bf:22:41:85: c8:5c:d3:86:2e:ba:54:b8:9a:c7:03:ce:fd:60:a8:0c:52:15: 9d:f4:b6:4d:e1:83:82:bc:af:c1:9c:69:07:b3:df:dd:4e:96: 15:2e:55:8e:ac:10:d8:62:ad:3b:7a:4b:74:c8:02:0c:e6:44: a6:43:25:1a:29:ec:71:35:4f:b0:93:5c:9f:ce:60:4f:12:02: 6f:6a:ab:d7:e7:21:62:3a:f8:07:ac:da:ae:39:da:d2:7c:2e: fb:0e:46:b8:60:d8:ca:e5:95:6f:81:12:c0:fb:c4:d4:f5:50: 41:12:53:89:f0:94:41:42:cd:5f:ad:da:92:c3:da:bc:17:75: d1:1f:8c:2f:97:df:63:94:3d:e8:86:a3:2d:99:30:86:d5:73: 65:d4:52:32:e5:6b:9a:1c:7c:f3:9c:35:d3:11:fc:e6:f1:d7: df:6f:be:e2:10:9f:be:cd:45:24:9e:af:8a:af:d2:00:4f:60: f4:c9:d1:65:5d:3f:08:dd:d4:e8:2d:4f:33:3b:a8:56:89:34: 0a:bc:eb:f7:93:fa:ae:47:37:48:92:33:1f:45:db:27:f9:26: 63:f9:70:19:7f:3a:e9:b6:93:a8:21:51:93:49:58:c6:ae:66: b8:db:d7:79 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjA5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYzOS02NmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xNUhGX3Z0qUHEaLj4f3oXMYWsozlPDoyu2fPnERD/qYmibaJQmexFwpTCka wkZTxCD6Y2ftZMiY9+6LtoElEbmrDmj10XQN+292PX1wCl2IvdQNFa1WtGKlB52F FK8Mr1RECVxWhoTrAnEL7ACnrikP5P+ugFwgnJIAjx+vEzC+2qWfsMR7q8Hdh0GE PPmQzz2dwGyPrEbt8fzYO+PggqsZ+YnhhCzTwmF2y+rAc5YXx3o691U+AvovSkPQ AK9sJo3Nu6cDvl/BWj8UZxIvbU5lMn0zENDS3yfS0VZdU7KnNpiH572qYQEmDE3z Nk4is2aiWTpzS9pY8Th9c2FysQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMjfWE8P CYLTFC7qG4hfasOoWo52MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0RCMTQ1NkNE ODZBMTFFRDhDMTQ5RTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlf4wDwQCAAIwCQMHACQGI8AAADANBgkqhkiG9w0BAQsF AAOCAQEAHWNpfAZizMzxLzIQAqK/IkGFyFzThi66VLiaxwPO/WCoDFIVnfS2TeGD gryvwZxpB7Pf3U6WFS5VjqwQ2GKtO3pLdMgCDOZEpkMlGinscTVPsJNcn85gTxIC b2qr1+chYjr4B6zarjna0nwu+w5GuGDYyuWVb4ESwPvE1PVQQRJTifCUQULNX63a ksPavBd10R+ML5ffY5Q96IajLZkwhtVzZdRSMuVrmhx885w10xH85vHX32++4hCf vs1FJJ6viq/SAE9g9MnRZV0/CN3U6C1PMzuoVok0Crzr95P6rkc3SJIzH0XbJ/km Y/lwGX866baTqCFRk0lYxq5muNvXeQ== -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org