$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D964379E4BC311EFA2A99028C4F9AE02.roa File: D964379E4BC311EFA2A99028C4F9AE02.roa (raw, json) Hash identifier: wS+jOz6FVe3wGD7OVTTEx+1dbmJHuOTwXp+jsdg6Uxk= Subject key identifier: D5:A3:9C:40:30:13:13:D1:9A:75:2C:72:90:46:43:9C:30:53:38:D1 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4586 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D964379E4BC311EFA2A99028C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:59 +0000 ROA not before: Thu 05 Sep 2024 03:32:59 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135983 IP address blocks: 36.50.26.0/24 maxlen: 24 36.50.27.0/24 maxlen: 24 103.127.198.0/24 maxlen: 24 103.127.199.0/24 maxlen: 24 103.167.86.0/23 maxlen: 24 103.241.42.0/23 maxlen: 23 2401:7c20::/48 maxlen: 48 2401:91a0::/48 maxlen: 48 2405:28c0::/48 maxlen: 48 2407:5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17798 (0x4586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:59 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9266a-c1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:09:1b:b8:a5:03:41:dd:05:82:aa:55:6a:37: e5:3b:02:02:24:76:d2:4c:39:b2:1f:8e:71:a9:c8: f2:01:d4:a1:f6:39:d9:cc:6b:bc:aa:e6:e7:f2:81: df:ae:7b:3d:a2:d6:d4:06:05:75:30:04:55:42:0e: 55:c6:d1:26:a5:92:32:ff:d4:aa:71:af:de:9f:f7: 9a:2e:13:58:d3:8d:b7:f7:c2:26:53:03:00:dc:d4: f6:df:83:f0:17:11:92:30:39:2b:c4:2c:33:c4:06: b8:9a:ca:28:cf:ea:a4:99:78:a1:c7:d7:66:c6:48: d7:3a:36:34:f4:c6:96:28:26:53:ba:d0:6f:f5:90: 42:40:bd:10:4f:68:5e:35:3f:5c:0d:de:51:e7:5d: e8:92:0e:f5:84:92:50:cb:ae:d7:c1:4f:0e:f6:d7: c3:cb:7c:f5:44:36:40:db:3c:0a:a1:5c:b0:7f:9b: af:ab:6d:79:10:51:4e:48:14:93:15:24:b9:d5:57: ff:14:78:9e:ad:0f:ac:cb:ec:f4:2d:ff:ff:5b:44: 87:d0:a0:c2:a2:96:c9:5f:9d:6c:14:ec:fa:fa:66: b8:c5:a0:1c:17:5e:4f:75:13:6a:13:a4:c3:ee:4e: fb:1b:5c:b4:cd:ee:b5:b9:58:0d:42:91:1e:0b:f6: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A3:9C:40:30:13:13:D1:9A:75:2C:72:90:46:43:9C:30:53:38:D1 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D964379E4BC311EFA2A99028C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.26.0/23 103.127.198.0/23 103.167.86.0/23 103.241.42.0/23 IPv6: 2401:7c20::/48 2401:91a0::/48 2405:28c0::/48 2407:5c0::/48 Signature Algorithm: sha256WithRSAEncryption ae:ce:08:c7:3e:ae:df:fc:2c:8d:0b:a0:35:12:ca:e3:8d:37: 79:53:39:fa:44:85:fe:ad:4a:6d:37:5a:5f:1e:7b:8f:43:db: e5:c1:ea:b4:99:2a:96:c4:69:09:2a:1d:3b:df:71:0d:ab:02: 34:bc:e4:e4:67:68:ad:7c:68:02:bc:e6:2f:ce:2b:5f:ab:b6: c5:91:d2:bf:ac:5f:60:6c:1e:4d:a9:45:e1:93:5d:9a:15:66: df:92:36:ce:cf:28:ab:00:a5:8b:2b:a7:80:92:af:7e:46:35: ab:ec:8d:03:23:14:6c:b0:88:9c:83:5c:b9:90:2a:2e:36:a1: 3a:6f:2f:57:f0:5d:bc:8e:0b:18:2d:5c:e5:1d:18:84:f2:44: 43:ea:e5:fc:b2:3a:90:52:5e:3d:80:e1:e6:3b:69:b6:1f:58: 2e:51:bd:94:17:d4:7c:21:68:1e:57:33:33:7a:95:a5:93:ee: 3a:ad:8f:f8:14:ea:eb:4d:84:6c:a6:c8:0f:1d:87:2f:03:e5: ba:1d:33:b1:a9:22:0e:f7:ad:36:a1:f5:35:4d:82:d7:de:21: 03:42:a7:78:69:7d:e4:75:bd:3b:6d:11:3b:1b:d5:04:c7:a9: 83:f9:1a:61:78:1e:4d:11:f6:3c:77:3b:42:cd:b6:ac:1d:40: d5:56:73:2c -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgICRYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjU5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY2YS1jMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngkbuKUDQd0FgqpVajflOwICJHbSTDmyH45xqcjyAdSh9jnZzGu8qubn8oHf rns9otbUBgV1MARVQg5VxtEmpZIy/9Sqca/en/eaLhNY042398ImUwMA3NT234Pw FxGSMDkrxCwzxAa4msooz+qkmXihx9dmxkjXOjY09MaWKCZTutBv9ZBCQL0QT2he NT9cDd5R513okg71hJJQy67XwU8O9tfDy3z1RDZA2zwKoVywf5uvq215EFFOSBST FSS51Vf/FHierQ+sy+z0Lf//W0SH0KDCopbJX51sFOz6+ma4xaAcF15PdRNqE6TD 7k77G1y0ze61uVgNQpEeC/bXZQIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFNWjnEAw ExPRmnUscpBGQ5wwUzjRMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDk2NDM3OUU0 QkMzMTFFRkEyQTk5MDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXQYIKwYBBQUHAQcBAf8E TjBMMB4EAgABMBgDBAEkMhoDBAFnf8YDBAFnp1YDBAFn8SowKgQCAAIwJAMHACQB fCAAAAMHACQBkaAAAAMHACQFKMAAAAMHACQHBcAAADANBgkqhkiG9w0BAQsFAAOC AQEArs4Ixz6u3/wsjQugNRLK4403eVM5+kSF/q1KbTdaXx57j0Pb5cHqtJkqlsRp CSodO99xDasCNLzk5GdorXxoArzmL84rX6u2xZHSv6xfYGweTalF4ZNdmhVm35I2 zs8oqwCliyungJKvfkY1q+yNAyMUbLCInINcuZAqLjahOm8vV/BdvI4LGC1c5R0Y hPJEQ+rl/LI6kFJePYDh5jtpth9YLlG9lBfUfCFoHlczM3qVpZPuOq2P+BTq602E bKbIDx2HLwPluh0zsakiDvetNqH1NU2C194hA0KneGl95HW9O20ROxvVBMepg/ka YXgeTRH2PHc7Qs22rB1A1VZzLA== -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org