$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AA709C8EDD9811ECA143AA87C4F9AE02.roa File: AA709C8EDD9811ECA143AA87C4F9AE02.roa (raw, json) Hash identifier: riygWa0/GrSD5XaXx9iMJ+Ods4C/Z8Lld9nBdOuF1Kw= Subject key identifier: 12:1F:8C:91:DE:5F:A7:56:69:05:02:A2:11:CC:D9:86:76:16:BE:93 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4555 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AA709C8EDD9811ECA143AA87C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:17 +0000 ROA not before: Thu 05 Sep 2024 03:32:17 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131428 IP address blocks: 45.117.76.0/22 maxlen: 24 45.117.172.0/22 maxlen: 24 103.99.228.0/22 maxlen: 24 103.238.212.0/24 maxlen: 24 103.238.213.0/24 maxlen: 24 103.254.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17749 (0x4555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:17 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92641-5255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:5b:ed:dd:e2:0d:3e:75:97:56:8b:9a:c4: a6:19:21:b1:f0:64:11:62:a8:9b:8a:e0:03:d8:ff: cf:1f:d4:f4:0a:da:57:f9:c7:f3:ea:52:62:38:20: 36:89:93:1f:bc:ca:99:0d:7f:2b:ec:51:a8:56:36: d6:fc:0c:e1:0c:40:9c:cb:50:82:dd:57:3b:50:27: 6d:fb:b7:fe:7e:85:cb:9a:5b:66:6e:a3:e1:63:29: 98:b5:0c:41:da:e3:62:d2:de:28:ae:13:7d:00:18: 60:a2:69:ca:e1:e4:22:e4:d6:07:cb:cd:94:05:b2: c5:d3:eb:2d:aa:ca:21:21:b4:ec:67:aa:31:30:ef: ca:02:c6:e8:dc:35:f8:8d:72:91:0d:85:3d:fd:0c: 59:70:d3:51:f6:73:e7:23:97:b7:f5:02:c1:7a:08: 24:68:f0:31:c4:0a:56:ae:16:20:2b:58:a0:e2:69: c9:9f:5a:a4:c5:d3:ed:2f:83:f1:a1:d6:15:d2:b0: 66:c6:07:72:b5:54:e1:d6:13:6d:e4:50:27:be:35: 35:9a:b2:cc:0c:57:ca:d0:a7:ca:25:d1:66:db:9c: 75:95:d2:81:e4:48:e3:39:06:d0:96:3d:6d:5a:9d: e6:a8:03:4e:7a:df:b2:78:6a:c9:4c:76:24:0c:38: 8f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1F:8C:91:DE:5F:A7:56:69:05:02:A2:11:CC:D9:86:76:16:BE:93 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AA709C8EDD9811ECA143AA87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.76.0/22 45.117.172.0/22 103.99.228.0/22 103.238.212.0/23 103.254.12.0/22 Signature Algorithm: sha256WithRSAEncryption 78:18:b5:85:c2:2a:25:ea:25:5d:55:44:ee:36:51:60:e8:5e: ef:d3:da:bd:03:57:f9:21:88:9a:a9:40:8a:ab:96:fe:fd:8e: a7:9f:b8:37:3d:f4:fb:2e:3d:83:86:6c:57:3d:d6:23:5c:7a: c7:39:cc:97:93:42:dc:79:76:a6:54:42:4b:fe:67:2b:8d:4b: 97:e5:50:18:55:c3:7f:2e:97:0b:d5:6e:72:ad:15:8d:15:79: 91:b3:78:80:88:92:0f:4b:6d:85:2d:8c:aa:41:ea:f3:aa:f3: 0d:3c:08:a0:17:7d:08:bd:04:19:ea:7a:53:2c:66:d1:5a:e0: ad:23:dc:87:39:20:33:1e:99:ae:25:54:d4:c8:53:8d:4b:4e: f5:d3:48:85:a8:fe:7a:24:35:ed:14:36:2a:6a:74:d0:53:44: fb:aa:0d:76:35:e5:0c:eb:7f:42:96:c1:e4:ab:6e:58:0c:59: 3b:ff:b5:6d:0e:78:6a:46:10:2c:bd:98:da:67:b1:4d:d4:21: f9:dc:a6:89:1e:24:94:30:27:74:c1:ea:e5:02:56:7a:cb:da: 42:aa:e6:92:12:0f:39:f6:5b:e2:a6:70:04:69:7f:3e:18:f2: b4:c5:54:ba:b7:a2:71:f1:c2:07:14:eb:58:cc:d9:8b:20:88: 28:f3:d7:74 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICRVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY0MS01MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm1b7d3iDT51l1aLmsSmGSGx8GQRYqibiuAD2P/PH9T0CtpX+cfz6lJiOCA2 iZMfvMqZDX8r7FGoVjbW/AzhDECcy1CC3Vc7UCdt+7f+foXLmltmbqPhYymYtQxB 2uNi0t4orhN9ABhgomnK4eQi5NYHy82UBbLF0+stqsohIbTsZ6oxMO/KAsbo3DX4 jXKRDYU9/QxZcNNR9nPnI5e39QLBeggkaPAxxApWrhYgK1ig4mnJn1qkxdPtL4Px odYV0rBmxgdytVTh1hNt5FAnvjU1mrLMDFfK0KfKJdFm25x1ldKB5EjjOQbQlj1t Wp3mqANOet+yeGrJTHYkDDiPXQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBIfjJHe X6dWaQUCohHM2YZ2Fr6TMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUE3MDlDOEVE RDk4MTFFQ0ExNDNBQTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAItdUwDBAItdawDBAJnY+QDBAFn7tQDBAJn/gwwDQYJKoZI hvcNAQELBQADggEBAHgYtYXCKiXqJV1VRO42UWDoXu/T2r0DV/khiJqpQIqrlv79 jqefuDc99PsuPYOGbFc91iNcesc5zJeTQtx5dqZUQkv+ZyuNS5flUBhVw38ulwvV bnKtFY0VeZGzeICIkg9LbYUtjKpB6vOq8w08CKAXfQi9BBnqelMsZtFa4K0j3Ic5 IDMema4lVNTIU41LTvXTSIWo/nokNe0UNipqdNBTRPuqDXY15Qzrf0KWweSrblgM WTv/tW0OeGpGECy9mNpnsU3UIfncpokeJJQwJ3TB6uUCVnrL2kKq5pISDzn2W+Km cARpfz4Y8rTFVLq3onHxwgcU61jM2YsgiCjz13Q= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org