$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa File: 655A393E89DB11EEA4226580C4F9AE02.roa (raw, json) Hash identifier: AYdIAc/KnLKialOwx7mFgfmniXTK68b6Roaj0VkftuU= Subject key identifier: 86:7D:26:49:10:D9:D3:C9:88:60:80:ED:3F:48:3E:5F:1D:62:50:58 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4572 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:41 +0000 ROA not before: Thu 05 Sep 2024 03:32:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135938 IP address blocks: 103.111.244.0/22 maxlen: 24 2001:df4:9500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17778 (0x4572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:41 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92659-45a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ad:fe:14:7a:92:1e:3c:ee:4d:2c:9f:da:53: cd:08:99:0b:63:56:06:94:35:7c:cd:1c:81:76:d0: c6:f1:ad:0e:bf:cc:d8:17:9f:b9:0e:5a:6f:45:46: a1:41:33:86:2a:62:f8:da:d2:6e:0a:67:78:84:ce: cb:ed:76:86:bc:8d:f2:66:38:9b:15:c1:bd:55:73: 01:a8:62:61:21:a9:ba:86:d3:f7:30:9e:50:2e:a5: 5c:8d:cd:00:9d:79:cc:e8:3e:b2:93:9b:3a:5e:55: c4:7b:78:fc:d9:38:dd:cc:f4:ec:da:e0:77:ec:9e: 96:07:26:92:26:d1:8d:a9:cb:fd:67:ec:4a:35:ce: e8:9c:bc:04:51:ff:d1:67:c9:74:99:88:24:02:c9: 69:ae:cb:63:81:15:2e:5c:02:d9:a8:eb:b6:af:4b: f9:a6:32:23:84:9b:1b:f9:92:81:00:48:1f:eb:02: 0a:c9:c0:b2:77:70:37:39:04:45:b4:33:db:5f:a4: 1e:d0:ad:10:1c:ce:f7:0a:2c:b4:b6:eb:1f:8c:52: 68:1e:bc:9f:ba:18:f8:4d:16:8c:04:ca:e4:79:83: 7f:57:e5:37:25:56:dc:fa:ad:7b:c4:01:11:06:70: a0:ef:4c:17:02:41:de:b9:50:b0:28:7f:a1:19:fe: 33:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7D:26:49:10:D9:D3:C9:88:60:80:ED:3F:48:3E:5F:1D:62:50:58 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.244.0/22 IPv6: 2001:df4:9500::/48 Signature Algorithm: sha256WithRSAEncryption 77:2c:65:30:cd:b6:2c:29:1a:7d:e7:20:b2:03:18:7c:a1:72: f3:28:cb:74:ee:90:86:45:b3:d4:15:43:ac:4a:60:1b:44:1e: 1c:d4:6c:19:01:7f:46:0a:ad:67:36:c1:8b:62:f8:0b:bc:d4: 81:af:31:8e:3d:f6:e5:5e:6c:5f:3e:e1:49:2d:4a:0b:6b:f7: ad:6c:ca:06:ff:02:f1:d0:69:12:68:78:cb:52:1b:06:d3:92: 2f:f4:f8:11:4a:7d:e5:21:7b:09:47:a7:6f:12:8a:cc:fd:40: 2a:61:fc:c3:19:5f:e9:7d:94:8a:26:fe:96:25:0d:38:7f:0b: 38:b6:dc:e1:32:84:1f:c3:9f:94:a1:0b:3b:8c:46:85:a5:0e: e2:95:1a:51:0d:66:5c:15:32:e7:76:2f:c3:e9:54:f7:03:ee: 38:70:f1:70:40:10:98:1c:ad:2b:ea:2f:3e:44:ab:b2:81:ed: 45:17:22:18:b8:b9:df:9a:8b:86:ef:0d:d6:af:88:a3:63:31: 35:00:0e:4a:f3:db:7b:c5:91:50:1d:3d:c9:30:5f:44:7e:3f: 17:19:26:43:75:68:b6:6c:96:00:17:39:de:d2:bf:fd:02:0f: 7e:61:5d:1f:d0:f3:d1:cf:17:58:02:6b:c6:53:a1:c8:36:f5: dc:2f:8f:86 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY1OS00NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3K3+FHqSHjzuTSyf2lPNCJkLY1YGlDV8zRyBdtDG8a0Ov8zYF5+5DlpvRUah QTOGKmL42tJuCmd4hM7L7XaGvI3yZjibFcG9VXMBqGJhIam6htP3MJ5QLqVcjc0A nXnM6D6yk5s6XlXEe3j82TjdzPTs2uB37J6WByaSJtGNqcv9Z+xKNc7onLwEUf/R Z8l0mYgkAslprstjgRUuXALZqOu2r0v5pjIjhJsb+ZKBAEgf6wIKycCyd3A3OQRF tDPbX6Qe0K0QHM73Ciy0tusfjFJoHryfuhj4TRaMBMrkeYN/V+U3JVbc+q17xAER BnCg70wXAkHeuVCwKH+hGf4zZQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIZ9JkkQ 2dPJiGCA7T9IPl8dYlBYMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNjU1QTM5M0U4 OURCMTFFRUE0MjI2NTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnb/QwDwQCAAIwCQMHACABDfSVADANBgkqhkiG9w0BAQsF AAOCAQEAdyxlMM22LCkafecgsgMYfKFy8yjLdO6QhkWz1BVDrEpgG0QeHNRsGQF/ RgqtZzbBi2L4C7zUga8xjj325V5sXz7hSS1KC2v3rWzKBv8C8dBpEmh4y1IbBtOS L/T4EUp95SF7CUenbxKKzP1AKmH8wxlf6X2Uiib+liUNOH8LOLbc4TKEH8OflKEL O4xGhaUO4pUaUQ1mXBUy53Yvw+lU9wPuOHDxcEAQmBytK+ovPkSrsoHtRRciGLi5 35qLhu8N1q+Io2MxNQAOSvPbe8WRUB09yTBfRH4/FxkmQ3VotmyWABc53tK//QIP fmFdH9Dz0c8XWAJrxlOhyDb13C+Phg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org