$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa File: C1C6BCEE96CB11EF8176AD43C4F9AE02.roa (raw, json) Hash identifier: z6WLkH/Jwa5LKXDy3pbmgIhQHaqhnvi5dc9tRR9RE7U= Subject key identifier: F3:1D:04:16:03:73:AF:76:23:33:A6:43:C8:3C:4A:76:10:FD:B5:4D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 47D3 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa Signing time: Wed 30 Oct 2024 14:32:15 +0000 ROA not before: Wed 30 Oct 2024 14:32:14 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135963 IP address blocks: 103.194.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18387 (0x47d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 30 14:32:14 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6722436e-929d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c8:1a:d8:77:e2:b1:b3:60:dd:0a:1f:22:cd: e3:77:7e:ad:2a:04:ce:f2:41:cb:b2:8d:52:09:2f: 4a:17:fd:a0:7b:79:4c:c3:b5:dc:76:10:1a:6a:4f: 16:53:96:d1:2c:05:ec:b4:26:09:a2:5d:64:ab:2a: 66:9e:c6:12:af:91:66:12:83:53:ac:a0:f0:8b:93: a2:c6:5f:f0:53:52:20:71:8f:10:0a:89:e4:bf:b0: c7:fb:ed:c7:a1:ce:7d:04:36:6e:d3:36:3f:ca:5a: 5f:d0:fd:a1:64:f0:05:29:dd:13:8d:86:e4:2d:62: 40:6f:1c:67:da:18:72:f2:43:83:ed:bd:77:cd:67: fe:85:8e:23:bf:48:5b:92:8d:b1:25:53:b8:72:54: ce:67:d0:d6:77:2e:db:78:bb:79:29:f9:97:5a:56: e8:fb:61:48:71:15:79:00:e9:85:82:5e:49:1c:74: 02:36:2e:b1:2a:f1:6d:56:79:14:37:10:6d:b3:8d: 39:d8:a4:19:33:97:2d:99:91:6a:32:bb:c3:bc:6b: bb:3b:3b:c4:db:25:ee:01:f2:3c:51:ea:3e:1a:d3: d5:2b:9d:02:cd:ba:46:0b:78:c1:73:98:88:06:a2: 59:b7:ed:33:c6:2b:c4:c4:0c:72:d1:8e:6e:1a:92: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1D:04:16:03:73:AF:76:23:33:A6:43:C8:3C:4A:76:10:FD:B5:4D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.194.188.0/22 Signature Algorithm: sha256WithRSAEncryption b9:97:6d:2e:72:e1:24:c4:8c:a9:7e:7a:08:2a:75:08:56:f0: ad:3c:95:99:48:37:6c:fa:bc:9a:2d:e4:86:5b:e6:fe:87:67: 15:37:10:ff:e0:8a:0c:e2:8d:e3:04:cb:eb:84:9b:de:af:cd: d1:65:33:0d:d2:2a:49:d7:e4:ab:82:62:e0:ef:f7:ba:0e:97: 2d:0c:10:bb:50:94:d6:e8:d6:83:bf:8e:8a:ad:ac:25:d2:a3: 76:78:f3:17:b4:64:ca:8a:33:94:e0:1e:20:d8:ca:f3:40:79: 87:dc:08:14:93:bb:54:e6:bf:c9:c5:41:7e:83:80:90:f1:aa: d9:29:11:35:0d:20:88:f7:95:42:b1:2a:61:af:f6:89:28:e2: e4:90:a0:3a:fd:a8:56:d7:d3:ab:fa:ba:0c:19:5b:f5:bb:12: f0:14:cc:15:36:d6:36:bb:e8:bf:07:c9:97:8e:67:85:4e:d0: be:52:a4:6f:f2:32:b0:8e:4a:57:b9:e7:21:25:a4:6b:17:81: 73:21:50:86:95:9c:49:5d:c5:f1:76:27:13:4b:b6:e6:3a:3b: 87:14:18:fc:84:69:73:9e:43:6a:81:a7:86:bd:d7:1c:fc:fd: 3a:13:58:57:f0:a4:1b:98:2b:b1:c8:45:9b:ba:e5:d3:1a:bc: e0:0d:3b:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICR9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMDMwMTQzMjE0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIyNDM2ZS05MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Mga2HfisbNg3QofIs3jd36tKgTO8kHLso1SCS9KF/2ge3lMw7XcdhAaak8W U5bRLAXstCYJol1kqypmnsYSr5FmEoNTrKDwi5Oixl/wU1IgcY8QConkv7DH++3H oc59BDZu0zY/ylpf0P2hZPAFKd0TjYbkLWJAbxxn2hhy8kOD7b13zWf+hY4jv0hb ko2xJVO4clTOZ9DWdy7beLt5KfmXWlbo+2FIcRV5AOmFgl5JHHQCNi6xKvFtVnkU NxBts4052KQZM5ctmZFqMrvDvGu7OzvE2yXuAfI8Ueo+GtPVK50CzbpGC3jBc5iI BqJZt+0zxivExAxy0Y5uGpK4QwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPMdBBYD c692IzOmQ8g8SnYQ/bVNMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzFDNkJDRUU5 NkNCMTFFRjgxNzZBRDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnwrwwDQYJKoZIhvcNAQELBQADggEBALmXbS5y4STEjKl+ eggqdQhW8K08lZlIN2z6vJot5IZb5v6HZxU3EP/gigzijeMEy+uEm96vzdFlMw3S KknX5KuCYuDv97oOly0MELtQlNbo1oO/joqtrCXSo3Z48xe0ZMqKM5TgHiDYyvNA eYfcCBSTu1Tmv8nFQX6DgJDxqtkpETUNIIj3lUKxKmGv9oko4uSQoDr9qFbX06v6 ugwZW/W7EvAUzBU21ja76L8HyZeOZ4VO0L5SpG/yMrCOSle55yElpGsXgXMhUIaV nEldxfF2JxNLtuY6O4cUGPyEaXOeQ2qBp4a91xz8/ToTWFfwpBuYK7HIRZu65dMa vOANO0A= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org