$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/561B6CDA4BFE11ECBFCFD04AC4F9AE02.roa File: 561B6CDA4BFE11ECBFCFD04AC4F9AE02.roa (raw, json) Hash identifier: Mi9F54SYNWxSSZybsE7pb95PJV9Wa8YiQAOuyRJuCGc= Subject key identifier: 08:F8:04:1F:AE:D8:2A:63:F7:46:54:08:1C:7B:BD:E4:DB:C4:CB:39 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 45B1 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/561B6CDA4BFE11ECBFCFD04AC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:33:38 +0000 ROA not before: Thu 05 Sep 2024 03:33:38 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140831 IP address blocks: 103.175.198.0/23 maxlen: 24 2001:df7:fd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Dec 2024 04:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17841 (0x45b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:33:38 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92691-ff02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:23:46:3b:05:1b:9b:f2:48:ba:24:e3:35: 6e:6e:c6:dd:77:77:d1:5f:e7:dc:94:95:ef:32:40: cc:40:24:76:b4:b9:24:bb:86:1a:27:58:2e:e3:4a: e0:7d:84:3f:df:b1:43:32:18:e9:41:94:ef:e4:6d: 54:f9:7c:47:b9:5b:19:d1:1f:a8:9f:4f:cb:17:88: 9c:68:0d:69:cc:bc:72:64:66:00:48:e2:67:2a:68: 6a:31:45:c0:94:9e:bb:7a:f3:45:5c:8f:aa:05:27: 0d:1c:04:f8:9b:35:7a:93:fc:b4:65:05:65:cd:f1: 2b:5e:24:d9:9a:5a:bb:67:1b:56:f9:24:25:6f:4e: 8e:aa:28:f6:f7:03:c6:e7:56:e4:db:62:a4:f6:b9: b7:fb:61:2f:a1:7b:c2:c0:76:f2:5f:36:4e:82:31: fa:44:3e:d0:12:b4:49:99:30:47:ba:81:78:7f:a3: 8f:b2:5e:e0:2e:4f:7b:8f:7c:c2:1c:d9:bf:c1:95: 87:4a:5d:2e:be:fa:d6:f4:fe:23:c2:9e:a3:81:25: c6:1b:8d:c4:91:eb:3a:0f:d0:7f:6b:59:e7:ea:c5: 30:a9:94:7b:0f:e3:cc:39:73:82:cc:13:d2:69:56: d3:1d:78:e7:1e:e9:a0:71:6a:34:f2:98:64:31:33: 4c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F8:04:1F:AE:D8:2A:63:F7:46:54:08:1C:7B:BD:E4:DB:C4:CB:39 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/561B6CDA4BFE11ECBFCFD04AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.198.0/23 IPv6: 2001:df7:fd80::/48 Signature Algorithm: sha256WithRSAEncryption 54:2c:2e:54:23:01:d7:e0:be:8a:4d:f5:36:d6:cf:1e:ff:6d: fa:6c:a5:6a:0b:37:26:73:e0:43:50:83:61:58:31:e2:6c:03: 13:4e:fd:07:ce:f5:cf:6f:52:ac:87:32:b9:07:bf:2b:0a:d9: bc:05:d5:3b:c6:30:8e:31:67:3e:ec:9d:97:83:4c:28:22:71: 7f:c8:95:66:87:b3:e6:d4:62:65:4d:a7:10:49:96:18:93:fe: bc:91:2d:e8:95:73:3c:95:7b:22:54:fe:7a:9e:6a:a2:dd:6b: d5:e6:7b:b6:5b:59:d9:96:f0:e8:12:58:a9:38:13:44:27:39: ab:25:bc:2f:f3:5c:29:fc:a3:02:96:76:5f:56:f3:11:6d:68: 54:cf:9e:c9:d8:1c:66:ea:be:f9:10:1e:b2:29:29:3f:8b:cc: 80:0d:77:eb:b1:e5:a0:18:14:4c:63:2c:e2:7d:8b:98:21:5d: 97:77:2c:70:db:67:db:4b:8a:41:3e:2f:15:b0:d7:f1:11:68: e1:96:81:28:9b:31:20:7b:6d:ff:60:f2:26:2d:4e:7b:32:e1: fd:74:72:a1:a8:33:c4:a6:b4:9c:70:fb:8c:2e:f8:f2:5d:4e: b4:fc:93:c6:0b:f6:41:b0:2a:e4:84:92:14:5e:54:c1:e8:01: d1:c1:ca:c6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMzM4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY5MS1mZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmcjRjsFG5vySLok4zVubsbdd3fRX+fclJXvMkDMQCR2tLkku4YaJ1gu40rg fYQ/37FDMhjpQZTv5G1U+XxHuVsZ0R+on0/LF4icaA1pzLxyZGYASOJnKmhqMUXA lJ67evNFXI+qBScNHAT4mzV6k/y0ZQVlzfErXiTZmlq7ZxtW+SQlb06Oqij29wPG 51bk22Kk9rm3+2EvoXvCwHbyXzZOgjH6RD7QErRJmTBHuoF4f6OPsl7gLk97j3zC HNm/wZWHSl0uvvrW9P4jwp6jgSXGG43Ekes6D9B/a1nn6sUwqZR7D+PMOXOCzBPS aVbTHXjnHumgcWo08phkMTNMOQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAj4BB+u 2Cpj90ZUCBx7veTbxMs5MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNTYxQjZDREE0 QkZFMTFFQ0JGQ0ZEMDRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnr8YwDwQCAAIwCQMHACABDff9gDANBgkqhkiG9w0BAQsF AAOCAQEAVCwuVCMB1+C+ik31NtbPHv9t+mylags3JnPgQ1CDYVgx4mwDE079B871 z29SrIcyuQe/KwrZvAXVO8YwjjFnPuydl4NMKCJxf8iVZoez5tRiZU2nEEmWGJP+ vJEt6JVzPJV7IlT+ep5qot1r1eZ7tltZ2Zbw6BJYqTgTRCc5qyW8L/NcKfyjApZ2 X1bzEW1oVM+eydgcZuq++RAesikpP4vMgA1367HloBgUTGMs4n2LmCFdl3cscNtn 20uKQT4vFbDX8RFo4ZaBKJsxIHtt/2DyJi1OezLh/XRyoagzxKa0nHD7jC748l1O tPyTxgv2QbAq5ISSFF5UwegB0cHKxg== -----END CERTIFICATE-----Generated at Fri Nov 29 05:58:40 2024 by rpki-client on console-fra.rpki-client.org