$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/989343848E3711EF9CB51A80C4F9AE02.roa File: 989343848E3711EF9CB51A80C4F9AE02.roa (raw, json) Hash identifier: PDTLqF0kZqIGYGOg4w8aCYAhixw8Qt9ns8CDPisjcVU= Subject key identifier: 24:06:3C:E9:08:22:E0:30:90:DE:29:E6:39:BC:C7:60:1C:C5:AC:56 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4776 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/989343848E3711EF9CB51A80C4F9AE02.roa Signing time: Sat 19 Oct 2024 16:32:33 +0000 ROA not before: Sat 19 Oct 2024 16:32:33 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135939 IP address blocks: 103.111.236.0/22 maxlen: 24 2001:df4:9700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18294 (0x4776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 19 16:32:33 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6713df20-2e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:18:2c:30:35:e4:cb:02:6b:0f:b8:2d:70: d7:ac:99:70:13:04:45:af:cb:9c:f5:19:12:f7:57: cb:aa:b6:1c:a0:9d:7d:c4:92:b9:b6:76:10:42:ba: eb:50:14:9a:fe:30:19:81:5a:b6:38:e6:84:7d:95: f6:a5:a9:b9:c1:63:c8:b5:e1:b1:bc:c5:2e:b7:8c: 98:d3:bd:ae:10:f2:99:96:69:bc:6f:ac:b7:8b:7a: 8b:cd:e2:4d:ac:e1:69:77:68:5b:ea:b8:21:c9:e9: 3d:e9:51:65:b1:16:a2:e3:e0:73:95:de:36:a4:3d: bf:40:ad:c2:32:46:8f:ce:6a:7a:2e:ff:bb:f5:0d: 86:22:40:0a:8d:13:d3:81:fa:c3:4b:3f:17:e7:dd: c8:6b:7c:04:b5:b8:c6:fb:16:f5:16:8a:a6:a6:90: 93:3c:a4:dd:5f:6d:c9:15:76:58:5c:c2:6d:87:10: d1:77:73:5e:9f:59:8f:ba:25:cc:ef:3e:54:2b:ac: 04:5e:7b:16:cd:c5:a4:7f:72:05:9f:62:b2:f5:a0: d2:c4:60:52:40:a9:5e:09:73:82:a9:7b:b6:7d:f7: 91:04:ce:8d:21:52:d3:44:6b:b9:d0:68:3d:3c:5a: cf:b9:fc:f0:d7:29:08:cb:bf:df:2c:65:aa:83:30: 01:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:06:3C:E9:08:22:E0:30:90:DE:29:E6:39:BC:C7:60:1C:C5:AC:56 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/989343848E3711EF9CB51A80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.236.0/22 IPv6: 2001:df4:9700::/48 Signature Algorithm: sha256WithRSAEncryption 25:d3:d9:37:9d:25:12:44:95:b6:a5:ab:a8:d9:57:d2:75:a1: 3d:8f:35:d7:79:32:40:5c:9d:7e:e2:90:ea:ea:aa:f0:07:0f: b8:ec:7d:e4:e1:e9:53:d9:21:bf:8e:65:3b:d9:a3:04:e8:dd: 7d:05:08:85:57:f1:53:44:27:90:03:d9:9a:fa:45:f6:f4:f4: 18:06:88:06:98:b1:53:f8:45:4e:0c:bc:8a:a6:00:60:30:14: 6d:c6:44:cd:a1:99:06:48:bc:35:0c:5b:dd:88:4a:08:f8:f1: bc:9e:1e:4b:56:a0:83:82:d1:58:bd:53:b7:a0:ee:a4:89:4d: 91:31:16:45:29:bc:bd:2b:26:7b:47:d8:05:1d:f9:0f:03:ec: 9e:aa:b5:d4:b3:21:a4:90:3d:0f:c9:ca:f3:c3:3c:64:d8:6f: 37:86:3e:b9:48:87:09:29:98:a8:b1:f9:21:c9:3a:fd:0c:04: 94:e3:0f:bc:b7:f1:fe:90:43:47:8b:4d:a7:59:8f:27:59:8c: fa:11:e2:29:d3:43:94:a9:a9:2e:f6:d8:3f:3d:59:dd:ae:bc: ec:d0:23:86:60:2f:81:bd:38:65:47:99:81:1e:2e:a0:7a:a4: 70:c4:0f:52:bc:33:f1:ba:28:e2:ea:c7:e6:20:e7:82:d6:90: 47:06:f2:29 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICR3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMDE5MTYzMjMzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEzZGYyMC0yZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3MYLDA15MsCaw+4LXDXrJlwEwRFr8uc9RkS91fLqrYcoJ19xJK5tnYQQrrr UBSa/jAZgVq2OOaEfZX2pam5wWPIteGxvMUut4yY072uEPKZlmm8b6y3i3qLzeJN rOFpd2hb6rghyek96VFlsRai4+Bzld42pD2/QK3CMkaPzmp6Lv+79Q2GIkAKjRPT gfrDSz8X593Ia3wEtbjG+xb1FoqmppCTPKTdX23JFXZYXMJthxDRd3Nen1mPuiXM 7z5UK6wEXnsWzcWkf3IFn2Ky9aDSxGBSQKleCXOCqXu2ffeRBM6NIVLTRGu50Gg9 PFrPufzw1ykIy7/fLGWqgzABTwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCQGPOkI IuAwkN4p5jm8x2AcxaxWMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOTg5MzQzODQ4 RTM3MTFFRjlDQjUxQTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnb+wwDwQCAAIwCQMHACABDfSXADANBgkqhkiG9w0BAQsF AAOCAQEAJdPZN50lEkSVtqWrqNlX0nWhPY8113kyQFydfuKQ6uqq8AcPuOx95OHp U9khv45lO9mjBOjdfQUIhVfxU0QnkAPZmvpF9vT0GAaIBpixU/hFTgy8iqYAYDAU bcZEzaGZBki8NQxb3YhKCPjxvJ4eS1agg4LRWL1Tt6DupIlNkTEWRSm8vSsme0fY BR35DwPsnqq11LMhpJA9D8nK88M8ZNhvN4Y+uUiHCSmYqLH5Ick6/QwElOMPvLfx /pBDR4tNp1mPJ1mM+hHiKdNDlKmpLvbYPz1Z3a687NAjhmAvgb04ZUeZgR4uoHqk cMQPUrwz8boo4urH5iDngtaQRwbyKQ== -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org