$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FD1CD5801A411ECA8DEC47BC4F9AE02.roa File: 6FD1CD5801A411ECA8DEC47BC4F9AE02.roa (raw, json) Hash identifier: zOusfvmaXw8OM98NJ/vRfXlQScqe1Mcmt4RCYnpUtkI= Subject key identifier: 5A:AC:6F:7E:6D:CF:A2:6B:47:13:4B:32:3B:5D:5A:61:3C:2A:08:63 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4599 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FD1CD5801A411ECA8DEC47BC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:33:16 +0000 ROA not before: Thu 05 Sep 2024 03:33:16 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140774 IP address blocks: 103.161.120.0/23 maxlen: 24 2407:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17817 (0x4599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:33:16 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9267c-3e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:8e:f4:5c:f6:27:96:28:98:46:6c:18:cf: 0e:a2:f5:fc:8b:7b:42:58:1f:7a:a2:3f:81:8f:ad: c8:73:ef:58:26:bf:01:88:cc:bb:16:c1:14:56:61: e4:ab:48:ab:6f:e2:44:58:18:6e:d1:01:75:9b:cd: 2d:9c:36:78:ac:5a:1f:b1:51:3e:a2:29:14:29:ba: 70:60:28:cd:10:4e:ec:7f:a7:5d:25:0b:5a:41:8a: 04:bc:b2:22:ac:36:9c:4a:ff:56:20:05:bb:2b:84: 06:61:2f:a6:b8:7f:1a:0e:57:db:bc:9b:b8:3d:3b: 88:c1:4b:b2:77:f4:3b:60:9a:af:b0:d9:d2:48:b7: 23:81:15:fa:07:46:34:20:c7:5d:49:33:ea:c4:bb: 06:22:17:eb:da:98:16:75:b6:51:b6:3c:5b:01:a9: b6:a1:95:4e:79:07:18:8a:ab:a5:96:dc:76:1d:4b: 60:c0:a6:25:2c:98:9b:8e:56:da:9d:5d:ec:3b:ad: ed:8b:f2:38:53:d8:ce:73:c3:37:e9:bf:f8:6b:23: 0e:c3:fb:30:97:22:a0:cd:b2:54:1c:aa:f5:4d:02: 87:e9:39:c9:7d:4a:79:9d:13:f2:a8:ac:90:d5:ec: 4d:09:a2:10:09:d9:cc:4d:82:79:1c:43:52:8c:c8: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AC:6F:7E:6D:CF:A2:6B:47:13:4B:32:3B:5D:5A:61:3C:2A:08:63 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FD1CD5801A411ECA8DEC47BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.120.0/23 IPv6: 2407:c0::/48 Signature Algorithm: sha256WithRSAEncryption bf:f6:8f:07:32:3b:9b:c6:47:53:37:8d:4c:44:88:d6:ab:69: ec:fd:50:16:cc:2a:9c:db:b7:b4:0c:b4:53:7f:84:24:c8:d6: 0c:2d:08:1b:54:e3:b1:d5:db:bb:e3:a7:74:ff:0d:01:4e:0a: f3:a2:1f:f8:7a:36:08:0a:5a:4c:c2:a5:8c:df:6b:7a:de:54: 7e:cf:bc:18:21:0f:93:37:5c:18:6e:31:b3:a2:0b:84:25:db: d9:11:f6:9c:17:49:cf:cd:a7:47:93:ba:ed:24:fa:90:c9:f9: b3:56:aa:ad:7e:b6:14:56:51:52:97:af:89:f9:4c:cd:b1:26: ca:09:89:75:9d:07:5e:ec:51:9e:bd:fc:0f:b1:ea:cc:ad:a4: 69:1c:c5:5f:56:d0:56:94:a9:06:8c:ec:d6:59:10:d5:84:57: 45:2a:7f:27:6a:11:53:d2:15:1f:0f:c9:0d:d3:35:aa:6f:21: 46:72:5f:a2:b5:8f:83:0b:55:36:90:f6:11:52:ec:41:c3:a8: c0:27:bc:43:ba:27:ed:95:5a:40:a6:2d:36:0b:2a:61:f8:29: 35:a5:9e:d9:d0:9c:b3:b2:74:d8:03:53:70:af:3e:5a:23:7f: b2:4c:90:60:0f:0d:27:13:67:ed:51:6a:f5:2f:ab:d8:32:8f: e6:a5:0d:4a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMzE2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY3Yy0zZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNKO9Fz2J5YomEZsGM8OovX8i3tCWB96oj+Bj63Ic+9YJr8BiMy7FsEUVmHk q0irb+JEWBhu0QF1m80tnDZ4rFofsVE+oikUKbpwYCjNEE7sf6ddJQtaQYoEvLIi rDacSv9WIAW7K4QGYS+muH8aDlfbvJu4PTuIwUuyd/Q7YJqvsNnSSLcjgRX6B0Y0 IMddSTPqxLsGIhfr2pgWdbZRtjxbAam2oZVOeQcYiqulltx2HUtgwKYlLJibjlba nV3sO63ti/I4U9jOc8M36b/4ayMOw/swlyKgzbJUHKr1TQKH6TnJfUp5nRPyqKyQ 1exNCaIQCdnMTYJ5HENSjMhcHwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFqsb35t z6JrRxNLMjtdWmE8KghjMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNkZEMUNENTgw MUE0MTFFQ0E4REVDNDdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnoXgwDwQCAAIwCQMHACQHAMAAADANBgkqhkiG9w0BAQsF AAOCAQEAv/aPBzI7m8ZHUzeNTESI1qtp7P1QFswqnNu3tAy0U3+EJMjWDC0IG1Tj sdXbu+OndP8NAU4K86If+Ho2CApaTMKljN9ret5Ufs+8GCEPkzdcGG4xs6ILhCXb 2RH2nBdJz82nR5O67ST6kMn5s1aqrX62FFZRUpeviflMzbEmygmJdZ0HXuxRnr38 D7HqzK2kaRzFX1bQVpSpBozs1lkQ1YRXRSp/J2oRU9IVHw/JDdM1qm8hRnJforWP gwtVNpD2EVLsQcOowCe8Q7on7ZVaQKYtNgsqYfgpNaWe2dCcs7J02ANTcK8+WiN/ skyQYA8NJxNn7VFq9S+r2DKP5qUNSg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org