$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa File: 456D4CD41E0111ED858FE624C4F9AE02.roa (raw, json) Hash identifier: tbj81kQSnZ+fi1HS4k6gB/DI74luAhMZ8j17YVGp26g= Subject key identifier: 99:90:8F:C9:0C:54:C4:5F:B4:D2:43:1F:E5:95:FE:AA:79:86:52:B1 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4565 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:30 +0000 ROA not before: Thu 05 Sep 2024 03:32:30 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135916 IP address blocks: 103.94.16.0/24 maxlen: 24 103.94.17.0/24 maxlen: 24 103.94.18.0/24 maxlen: 24 103.94.19.0/24 maxlen: 24 202.47.87.0/24 maxlen: 24 202.56.57.0/24 maxlen: 24 202.94.82.0/24 maxlen: 24 203.8.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Dec 2024 04:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17765 (0x4565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:30 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9264e-edd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:04:be:04:30:f0:74:4a:b4:af:a2:b1:31: 75:4b:bc:f0:46:2c:31:96:17:46:cf:e6:5f:96:46: a3:23:64:81:fd:01:26:cc:c7:ec:d3:4b:05:1f:00: 98:52:b2:ac:34:df:d3:10:8a:ca:1d:8f:2b:33:4d: 9b:89:a9:3f:40:9a:00:b3:87:d4:1a:1e:f0:be:48: e2:ce:af:c0:8b:d4:9f:aa:2b:f6:9f:71:2b:f8:d7: b3:72:b9:82:fb:da:85:b9:15:0c:6c:e2:d6:72:e0: ed:91:36:4c:a6:a9:1b:74:a3:6c:f0:cc:7b:35:9f: 6d:3f:3e:33:1b:35:00:b4:dd:f3:13:4f:a6:b9:85: d2:bd:15:59:4d:c2:a8:d2:0a:92:4b:a2:7b:71:c4: 89:d0:9c:b6:d7:3f:72:38:f2:16:04:3d:ca:f0:90: ce:fe:57:89:14:b5:96:94:c4:11:07:63:22:4d:e7: 01:c2:14:a2:55:a3:27:a5:b8:21:ac:a3:b7:8f:5a: 26:1e:94:c1:5f:9d:12:46:32:4b:56:14:bf:12:d9: b3:b1:2d:31:46:17:ef:e8:8f:b2:72:8b:74:45:c2: 90:09:ee:8e:35:21:ae:fd:61:04:cc:5a:88:4a:21: 2a:46:0c:78:b9:7f:e9:d8:23:4e:27:a6:fe:27:cc: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:90:8F:C9:0C:54:C4:5F:B4:D2:43:1F:E5:95:FE:AA:79:86:52:B1 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.16.0/22 202.47.87.0/24 202.56.57.0/24 202.94.82.0/24 203.8.172.0/24 Signature Algorithm: sha256WithRSAEncryption 51:d0:6b:73:fa:e8:e8:6f:0d:0b:9f:70:bf:61:28:2a:dd:bd: fd:d2:ff:c3:14:25:5c:67:7b:94:88:4f:af:96:3f:b8:35:23: 92:02:9c:99:6e:05:ec:18:5f:6b:46:53:36:47:8e:aa:9e:8a: 2d:80:53:c6:10:6e:69:d8:87:ab:9c:8c:92:d3:de:3d:9b:f2: 74:3b:05:03:63:42:82:25:83:21:8d:04:0c:cb:87:91:9d:cf: e6:77:94:65:1f:1c:5d:3b:c9:83:c2:a2:a0:9a:2f:44:bc:3c: 30:54:d0:e2:2e:0a:d7:ba:99:c3:73:df:07:56:27:9d:a0:e3: 0a:ad:00:3d:8e:40:10:9a:a9:65:f3:14:67:43:9d:37:d8:47: b3:5e:10:0d:1c:4b:50:9a:af:61:33:40:4a:37:04:09:f6:f9: b2:cf:e9:2e:3a:5a:64:a6:0b:e1:d1:2c:35:72:34:6d:0d:60: 58:ce:e7:bb:0a:51:16:06:00:d8:b4:0c:0c:5c:b0:9b:da:c8: a9:59:46:b9:a1:f7:a5:41:53:3d:c2:a5:1a:35:a6:4e:40:83: 74:da:f0:bc:e4:99:e1:9b:46:a8:a1:22:b4:8f:85:a2:a6:c4: d1:10:9a:93:b1:b0:11:e5:12:93:40:be:f0:47:40:f1:2b:51: 3c:fb:d5:dd -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICRWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjMwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY0ZS1lZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11IEvgQw8HRKtK+isTF1S7zwRiwxlhdGz+ZflkajI2SB/QEmzMfs00sFHwCY UrKsNN/TEIrKHY8rM02biak/QJoAs4fUGh7wvkjizq/Ai9Sfqiv2n3Er+NezcrmC +9qFuRUMbOLWcuDtkTZMpqkbdKNs8Mx7NZ9tPz4zGzUAtN3zE0+muYXSvRVZTcKo 0gqSS6J7ccSJ0Jy21z9yOPIWBD3K8JDO/leJFLWWlMQRB2MiTecBwhSiVaMnpbgh rKO3j1omHpTBX50SRjJLVhS/EtmzsS0xRhfv6I+ycot0RcKQCe6ONSGu/WEEzFqI SiEqRgx4uX/p2CNOJ6b+J8zNiQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJmQj8kM VMRftNJDH+WV/qp5hlKxMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDU2RDRDRDQx RTAxMTFFRDg1OEZFNjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAJnXhADBADKL1cDBADKODkDBADKXlIDBADLCKwwDQYJKoZI hvcNAQELBQADggEBAFHQa3P66OhvDQufcL9hKCrdvf3S/8MUJVxne5SIT6+WP7g1 I5ICnJluBewYX2tGUzZHjqqeii2AU8YQbmnYh6ucjJLT3j2b8nQ7BQNjQoIlgyGN BAzLh5Gdz+Z3lGUfHF07yYPCoqCaL0S8PDBU0OIuCte6mcNz3wdWJ52g4wqtAD2O QBCaqWXzFGdDnTfYR7NeEA0cS1Car2EzQEo3BAn2+bLP6S46WmSmC+HRLDVyNG0N YFjO57sKURYGANi0DAxcsJvayKlZRrmh96VBUz3CpRo1pk5Ag3Ta8LzkmeGbRqih IrSPhaKmxNEQmpOxsBHlEpNAvvBHQPErUTz71d0= -----END CERTIFICATE-----Generated at Fri Nov 29 05:58:40 2024 by rpki-client on console-fra.rpki-client.org