$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0A02E45FAA11EF87B18D31C4F9AE02.roa File: AF0A02E45FAA11EF87B18D31C4F9AE02.roa (raw, json) Hash identifier: C3FCghS5XFZIzCE9Mm32FqOiqpbnRiCUgNevbLHxudA= Subject key identifier: 5F:7A:11:1F:79:9C:42:45:15:F1:8C:C8:0B:9D:2A:73:6D:22:BC:7D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 455A Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0A02E45FAA11EF87B18D31C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:21 +0000 ROA not before: Thu 05 Sep 2024 03:32:21 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135900 IP address blocks: 103.205.100.0/22 maxlen: 22 2001:df3:a980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17754 (0x455a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:21 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92645-d938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:49:f7:46:3d:2f:d6:26:3e:1e:92:d2:59:d8: 87:70:ed:cc:c1:f4:d4:05:17:07:e1:e8:34:af:13: ca:fd:80:d4:cb:62:1f:77:1f:96:60:51:53:28:e2: a7:ad:b3:17:b9:ef:61:4c:2a:e5:b1:35:fc:62:a0: 7b:ec:59:50:60:76:1a:52:18:13:f1:da:bf:d4:9c: e8:36:15:3a:e6:4d:c9:aa:59:db:42:3f:db:85:fe: ad:b3:92:f4:40:34:82:4b:a8:59:9a:4d:9e:d6:bf: 5f:b7:d2:87:aa:c6:a9:cc:ff:82:30:02:46:1d:1c: 8c:a5:ba:6c:bd:73:1c:d3:99:37:fa:a3:f6:9c:42: 09:4e:52:02:55:50:d7:ae:bc:c5:ce:49:1b:cf:e7: 2d:2c:9a:6c:12:76:27:14:21:31:25:61:9c:01:5f: ba:1a:50:53:81:09:3b:26:be:70:da:f3:90:44:a4: f2:dc:7a:b9:61:c1:7e:7d:ef:e1:0a:68:54:fb:d8: 7d:db:d6:6c:02:c7:fa:ab:ae:ce:44:f9:c4:63:ab: 34:d0:ba:54:7f:d0:ef:ed:af:ad:64:73:6c:17:9f: f6:f3:84:0e:df:83:5c:54:3e:56:9e:8d:e6:21:1c: c0:4f:73:b3:4c:49:46:6e:b3:fc:41:cb:1e:9a:86: 5a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7A:11:1F:79:9C:42:45:15:F1:8C:C8:0B:9D:2A:73:6D:22:BC:7D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0A02E45FAA11EF87B18D31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.205.100.0/22 IPv6: 2001:df3:a980::/48 Signature Algorithm: sha256WithRSAEncryption 92:bf:94:8e:12:7c:1b:8e:0e:f3:3b:25:c8:0d:68:e3:e4:c9: 5b:af:c7:67:11:a7:cd:13:51:8a:71:b4:09:d2:80:24:96:f8: 8a:18:c5:b4:c3:09:bd:1f:85:b7:4c:3e:6e:ca:ca:96:3f:d2: 09:28:5e:f3:70:71:0b:b2:dc:53:1a:6e:25:5d:02:c0:d7:0b: 04:34:4c:9d:8b:59:53:43:f1:70:00:5a:8a:d4:ea:51:af:cf: 4c:37:d7:eb:4a:35:85:5b:9c:6b:c0:fd:aa:05:b3:73:d0:18: c8:45:28:d3:ee:94:3a:ec:a4:c8:db:3a:26:91:b0:69:e0:44: 1a:60:f2:ae:2c:47:c6:32:bc:8b:3f:00:bb:77:a8:d2:d8:80: 74:a9:c7:90:ea:7e:6e:5f:29:7f:da:43:2d:45:c3:6c:ea:e0: 7f:e3:e7:6c:57:7f:b6:b9:29:1d:5d:9e:16:c7:c2:e8:23:95: 4f:13:74:f0:b0:f2:4f:cb:4e:78:f1:ba:bc:de:50:17:e0:cb: 29:ad:39:f0:8c:83:31:69:20:e9:fb:72:ed:83:79:8a:3f:57: 91:aa:dd:2e:f7:fe:3b:d7:6e:51:88:49:89:97:a2:4a:93:6b: 77:be:68:cf:0c:8c:bd:d4:93:71:a0:c1:dc:6c:1f:8b:66:1b: e9:1b:e7:6a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjIxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY0NS1kOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kn3Rj0v1iY+HpLSWdiHcO3MwfTUBRcH4eg0rxPK/YDUy2Ifdx+WYFFTKOKn rbMXue9hTCrlsTX8YqB77FlQYHYaUhgT8dq/1JzoNhU65k3JqlnbQj/bhf6ts5L0 QDSCS6hZmk2e1r9ft9KHqsapzP+CMAJGHRyMpbpsvXMc05k3+qP2nEIJTlICVVDX rrzFzkkbz+ctLJpsEnYnFCExJWGcAV+6GlBTgQk7Jr5w2vOQRKTy3Hq5YcF+fe/h CmhU+9h929ZsAsf6q67ORPnEY6s00LpUf9Dv7a+tZHNsF5/284QO34NcVD5Wno3m IRzAT3OzTElGbrP8QcsemoZaHwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFF96ER95 nEJFFfGMyAudKnNtIrx9MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUYwQTAyRTQ1 RkFBMTFFRjg3QjE4RDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnzWQwDwQCAAIwCQMHACABDfOpgDANBgkqhkiG9w0BAQsF AAOCAQEAkr+UjhJ8G44O8zslyA1o4+TJW6/HZxGnzRNRinG0CdKAJJb4ihjFtMMJ vR+Ft0w+bsrKlj/SCShe83BxC7LcUxpuJV0CwNcLBDRMnYtZU0PxcABaitTqUa/P TDfX60o1hVuca8D9qgWzc9AYyEUo0+6UOuykyNs6JpGwaeBEGmDyrixHxjK8iz8A u3eo0tiAdKnHkOp+bl8pf9pDLUXDbOrgf+PnbFd/trkpHV2eFsfC6COVTxN08LDy T8tOePG6vN5QF+DLKa058IyDMWkg6fty7YN5ij9XkardLvf+O9duUYhJiZeiSpNr d75ozwyMvdSTcaDB3Gwfi2Yb6Rvnag== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org