$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D93DA9C0C93411ED9A315E3DC4F9AE02.roa File: D93DA9C0C93411ED9A315E3DC4F9AE02.roa (raw, json) Hash identifier: xcmw2FkEVDMyuULMK835nTx10G4Tn2DCe17wg1+2uSI= Subject key identifier: A9:58:14:F7:14:B6:CD:E2:B4:E1:C9:19:37:30:8E:83:40:57:BF:C4 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 45E9 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D93DA9C0C93411ED9A315E3DC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:34:26 +0000 ROA not before: Thu 05 Sep 2024 03:34:26 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150828 IP address blocks: 36.50.232.0/24 maxlen: 24 36.50.233.0/24 maxlen: 24 103.116.8.0/23 maxlen: 23 103.252.122.0/24 maxlen: 24 103.252.123.0/24 maxlen: 24 2400:eca0::/48 maxlen: 48 2401:4ae0::/48 maxlen: 48 2401:5e20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17897 (0x45e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:34:26 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d926c1-ed6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7a:6a:0c:5b:ca:1f:05:00:ca:7d:1d:47:75: 1b:98:eb:fb:f4:d8:22:33:d8:a3:6d:0f:ae:0c:ae: 3c:d3:62:78:ff:5e:57:64:7a:f1:97:ef:7a:6f:c7: a6:8a:2a:de:ff:f7:0d:36:50:a5:75:9f:2f:7a:7f: e8:5f:a2:13:d4:17:9f:5e:a5:2e:05:d8:17:ab:13: 04:07:20:c8:94:bf:3c:c3:3d:6a:1c:e9:6d:36:5c: b8:4d:49:40:58:d3:a6:9c:88:c3:96:b8:ad:38:28: 20:b1:b5:d8:36:a7:52:9d:5a:b4:53:fd:ba:59:64: c7:ca:82:89:3e:ab:55:83:f4:b3:f9:db:fd:4f:3b: 5f:e5:e2:7c:8a:9a:e8:1f:9a:c4:38:13:a3:b7:47: 99:f0:56:d8:7f:5d:01:ee:be:86:23:e4:54:fd:94: 2b:5c:d1:26:eb:4b:e7:a6:58:bb:44:cc:92:30:55: 72:b0:d7:20:e6:99:02:e6:7e:91:90:a6:fc:6a:fe: 30:31:df:1c:b7:82:fb:4f:51:56:82:bd:52:d6:df: e6:a0:3f:6f:9a:e0:5e:a8:40:28:3c:94:38:41:7a: 19:7a:fc:80:81:1f:fe:26:4f:60:d9:71:6a:f5:99: 4c:97:55:aa:53:2a:c2:4b:3f:e5:a6:20:04:8f:a9: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:58:14:F7:14:B6:CD:E2:B4:E1:C9:19:37:30:8E:83:40:57:BF:C4 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D93DA9C0C93411ED9A315E3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.232.0/23 103.116.8.0/23 103.252.122.0/23 IPv6: 2400:eca0::/48 2401:4ae0::/48 2401:5e20::/48 Signature Algorithm: sha256WithRSAEncryption 9f:c4:2e:eb:43:4d:8e:20:80:51:76:33:9b:9a:a7:08:aa:29: 14:c3:9f:7a:e2:fe:60:c6:ff:43:6f:33:97:02:17:44:a4:0e: 80:a4:9b:39:45:c3:72:af:fa:95:76:6f:c1:60:eb:60:64:83: 52:e2:7e:4e:a8:58:ad:9c:36:ee:d1:3d:57:a8:76:9d:b2:04: 3b:3c:e9:58:b8:af:ed:c0:1c:0e:9f:06:18:db:cb:42:1a:17: 14:ae:ec:a3:37:5d:74:aa:cb:c1:77:10:4e:b2:18:7b:ba:49: e8:d1:29:7c:0f:f6:2c:de:f5:0d:6e:0c:b3:9e:40:86:a3:bb: c2:0e:b4:a8:0e:e1:a1:d2:ae:48:82:62:4c:92:b1:a4:1d:5c: de:5c:21:54:81:81:fc:eb:88:31:7e:1f:92:8b:ba:b6:ef:ca: 91:36:94:56:a0:43:a3:2b:25:6a:e7:b7:01:a6:c7:53:c5:59: 3d:35:9d:83:05:47:53:59:6a:6c:20:45:5e:68:47:88:4a:c9: 93:f3:67:3d:ea:d6:9b:9b:8e:72:f2:a1:c4:a5:9c:7e:25:90: ef:55:12:73:94:1f:86:45:b6:2f:9a:22:67:8a:41:c2:de:aa: ec:74:31:16:21:a5:15:ab:22:15:f7:27:f6:bf:3c:21:d5:ef: d3:dd:98:fe -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICRekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNDI2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjZjMS1lZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XpqDFvKHwUAyn0dR3UbmOv79NgiM9ijbQ+uDK4802J4/15XZHrxl+96b8em iire//cNNlCldZ8ven/oX6IT1BefXqUuBdgXqxMEByDIlL88wz1qHOltNly4TUlA WNOmnIjDlritOCggsbXYNqdSnVq0U/26WWTHyoKJPqtVg/Sz+dv9Tztf5eJ8ipro H5rEOBOjt0eZ8FbYf10B7r6GI+RU/ZQrXNEm60vnpli7RMySMFVysNcg5pkC5n6R kKb8av4wMd8ct4L7T1FWgr1S1t/moD9vmuBeqEAoPJQ4QXoZevyAgR/+Jk9g2XFq 9ZlMl1WqUyrCSz/lpiAEj6kK5wIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFKlYFPcU ts3itOHJGTcwjoNAV7/EMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDkzREE5QzBD OTM0MTFFRDlBMzE1RTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MBgEAgABMBIDBAEkMugDBAFndAgDBAFn/HowIQQCAAIwGwMHACQA7KAAAAMH ACQBSuAAAAMHACQBXiAAADANBgkqhkiG9w0BAQsFAAOCAQEAn8Qu60NNjiCAUXYz m5qnCKopFMOfeuL+YMb/Q28zlwIXRKQOgKSbOUXDcq/6lXZvwWDrYGSDUuJ+TqhY rZw27tE9V6h2nbIEOzzpWLiv7cAcDp8GGNvLQhoXFK7sozdddKrLwXcQTrIYe7pJ 6NEpfA/2LN71DW4Ms55AhqO7wg60qA7hodKuSIJiTJKxpB1c3lwhVIGB/OuIMX4f kou6tu/KkTaUVqBDoyslaue3AabHU8VZPTWdgwVHU1lqbCBFXmhHiErJk/NnPerW m5uOcvKhxKWcfiWQ71USc5QfhkW2L5oiZ4pBwt6q7HQxFiGlFasiFfcn9r88IdXv 092Y/g== -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org