$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A147B9B48CCD11ED93B2703DC4F9AE02.roa File: A147B9B48CCD11ED93B2703DC4F9AE02.roa (raw, json) Hash identifier: LjR2J6s61ptbuPzJEAy+lrcPJ0two3y2/9CI9EYqoC0= Subject key identifier: 8F:9B:7F:12:8B:62:0F:34:8F:F6:CA:23:B7:27:07:AF:49:B7:25:9A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 45E0 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A147B9B48CCD11ED93B2703DC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:34:19 +0000 ROA not before: Thu 05 Sep 2024 03:34:19 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 149161 IP address blocks: 103.60.242.0/23 maxlen: 24 103.139.102.0/23 maxlen: 24 2400:cfe0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17888 (0x45e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:34:19 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d926bb-af82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:88:ce:e9:4a:dc:a7:4d:9d:d6:b7:b4:c3: c8:ef:72:21:3a:0c:ad:73:e6:dc:36:d2:ae:d2:3a: 51:0b:e2:ee:1c:40:fb:ab:0c:a7:60:b6:47:69:62: 26:b8:38:1b:a1:49:b4:2b:09:ef:bf:66:25:06:e5: de:f7:53:6e:f9:ba:ad:5f:fd:11:77:20:39:76:1a: 94:9f:7c:5d:e0:de:34:20:17:80:dc:ff:10:97:47: 4e:b6:89:9e:42:34:38:15:39:3a:01:df:42:11:ac: 50:72:bb:41:1e:c1:a3:a4:27:f6:b1:91:34:7b:b2: 97:79:f4:40:fb:b6:ec:aa:67:c3:b0:12:7d:a2:38: 4c:65:a1:f0:ac:94:05:89:fd:90:cf:58:20:54:a3: 2b:f7:cc:b6:81:72:fd:a6:e5:3c:54:ff:1c:23:cc: 21:d8:13:25:c7:72:0d:61:ce:b3:7b:fe:61:d4:91: d8:2e:b5:d6:32:86:8f:3e:4b:3a:8d:7b:0a:08:02: d9:5d:38:98:9f:1a:d7:47:19:78:60:22:03:11:5c: b4:7c:da:5a:9e:2f:b5:30:56:fd:e5:2a:ba:d6:dd: 6a:5b:27:67:20:02:97:b7:1c:8d:9e:7b:f2:cd:15: 5d:a1:be:f7:73:51:1c:3f:02:2e:b8:40:f5:60:40: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9B:7F:12:8B:62:0F:34:8F:F6:CA:23:B7:27:07:AF:49:B7:25:9A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A147B9B48CCD11ED93B2703DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.242.0/23 103.139.102.0/23 IPv6: 2400:cfe0::/48 Signature Algorithm: sha256WithRSAEncryption 37:0a:33:83:4f:d0:ef:50:f3:6f:f7:0f:de:cf:e8:57:72:1d: 76:e3:4f:e8:7e:a1:a4:46:c0:51:ff:dc:fe:d6:34:7a:8a:34: d7:64:d4:80:af:7e:d7:92:30:26:03:01:0b:ed:63:51:0c:f0: 14:68:5e:1f:bf:5c:01:db:29:7e:fa:f3:6b:52:a5:a5:14:69: 63:fb:0d:9d:51:77:3f:cc:4a:0f:f9:7a:fb:3a:18:b9:53:f7: 3e:89:73:fd:66:86:33:e0:e0:55:0f:9c:3b:4e:08:a5:aa:1b: 25:b2:a6:79:72:aa:87:b0:d9:d7:c7:08:79:df:e5:c6:ea:90: 75:f9:46:3e:a4:97:ad:d2:7b:9a:93:4c:95:a3:1e:63:8e:ba: 87:07:ce:aa:cc:e1:13:8e:a1:6a:a2:47:e8:5f:20:71:a2:9b: 6b:7b:82:c5:1a:f0:e3:cf:5c:3a:57:df:47:d8:ac:78:e3:b4: 7f:f8:5f:00:ab:98:ac:41:46:65:eb:07:4b:f5:3b:f3:c3:77: 5f:d0:bd:f7:48:e3:7c:46:cc:80:2e:51:74:d1:e6:c0:b3:3b: 9a:e4:d0:7b:ce:a0:08:9f:1c:1e:c7:a9:85:b4:8e:a7:d3:02: 2a:f1:fd:08:5d:e1:ab:84:16:37:da:f7:98:56:23:39:54:db: 0d:5d:cf:dc -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICReAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNDE5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjZiYi1hZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8iIzulK3KdNnda3tMPI73IhOgytc+bcNtKu0jpRC+LuHED7qwynYLZHaWIm uDgboUm0Kwnvv2YlBuXe91Nu+bqtX/0RdyA5dhqUn3xd4N40IBeA3P8Ql0dOtome QjQ4FTk6Ad9CEaxQcrtBHsGjpCf2sZE0e7KXefRA+7bsqmfDsBJ9ojhMZaHwrJQF if2Qz1ggVKMr98y2gXL9puU8VP8cI8wh2BMlx3INYc6ze/5h1JHYLrXWMoaPPks6 jXsKCALZXTiYnxrXRxl4YCIDEVy0fNpani+1MFb95Sq61t1qWydnIAKXtxyNnnvy zRVdob73c1EcPwIuuED1YEBgJwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFI+bfxKL Yg80j/bKI7cnB69JtyWaMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTE0N0I5QjQ4 Q0NEMTFFRDkzQjI3MDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnPPIDBAFni2YwDwQCAAIwCQMHACQAz+AAADANBgkqhkiG 9w0BAQsFAAOCAQEANwozg0/Q71Dzb/cP3s/oV3IdduNP6H6hpEbAUf/c/tY0eoo0 12TUgK9+15IwJgMBC+1jUQzwFGheH79cAdspfvrza1KlpRRpY/sNnVF3P8xKD/l6 +zoYuVP3Polz/WaGM+DgVQ+cO04IpaobJbKmeXKqh7DZ18cIed/lxuqQdflGPqSX rdJ7mpNMlaMeY466hwfOqszhE46haqJH6F8gcaKba3uCxRrw489cOlffR9iseOO0 f/hfAKuYrEFGZesHS/U788N3X9C990jjfEbMgC5RdNHmwLM7muTQe86gCJ8cHsep hbSOp9MCKvH9CF3hq4QWN9r3mFYjOVTbDV3P3A== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org