$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DC51A3BC20BD11EC8551B117C4F9AE02.roa File: DC51A3BC20BD11EC8551B117C4F9AE02.roa (raw, json) Hash identifier: 3pbAEVI7kzHHDtoRG5rsbUYu7oCBFx37916bCxC3kg4= Subject key identifier: 04:DE:8D:F6:B3:D6:8A:84:8A:88:77:E5:9A:EC:9B:19:D9:BE:8A:82 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 468D Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DC51A3BC20BD11EC8551B117C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:36:47 +0000 ROA not before: Thu 05 Sep 2024 03:36:46 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 63765 IP address blocks: 103.53.158.0/23 maxlen: 24 103.104.116.0/22 maxlen: 24 103.157.20.0/23 maxlen: 24 103.178.102.0/23 maxlen: 24 103.216.112.0/22 maxlen: 24 2001:df2:27c0::/48 maxlen: 48 2001:df3:2d00::/48 maxlen: 48 2400:e2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18061 (0x468d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:36:46 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9274e-0a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:33:78:24:69:8c:83:78:9d:fd:5a:09:b1: d1:2a:e9:e0:8f:75:20:e9:7e:c0:2a:08:08:ee:4c: 9c:2b:2f:e7:a6:3f:c9:a4:96:b6:5e:12:d8:65:a1: da:ca:bd:64:15:5e:b3:8b:ac:cf:e4:04:90:9c:f7: f5:9b:b4:90:a1:82:fb:a6:71:ff:b2:57:88:6b:03: 8c:d9:5a:2e:26:4c:bd:f4:db:93:da:5e:eb:42:cc: b3:9a:ee:99:14:fc:87:64:b0:f7:a1:7d:7e:16:61: d8:70:6f:82:9e:d1:1a:8f:6f:fa:70:8d:8f:4b:40: 2f:59:7e:e3:1f:ee:34:90:8c:56:4d:80:73:43:d1: 1e:bb:5e:d3:ca:8a:fb:40:22:b3:ab:dd:bc:aa:d0: 90:37:49:b4:fd:ca:01:08:9b:9c:a7:49:33:58:8b: e1:1b:32:b9:9a:57:f2:02:83:c5:c9:cd:a7:a2:fc: 1e:bf:a6:17:f5:a8:80:3b:07:c5:0d:0a:06:d4:a7: 3c:f8:a8:c9:e7:9e:ea:08:32:49:79:d0:31:a0:cc: 5b:df:ef:cc:33:b2:2b:e5:f1:20:c6:8b:16:0d:14: 2d:2d:65:3f:a1:6d:b8:41:68:86:9b:84:fb:64:e4: f7:27:b6:7f:0b:7b:d5:e6:26:c6:2f:2f:35:64:4c: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DE:8D:F6:B3:D6:8A:84:8A:88:77:E5:9A:EC:9B:19:D9:BE:8A:82 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DC51A3BC20BD11EC8551B117C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.158.0/23 103.104.116.0/22 103.157.20.0/23 103.178.102.0/23 103.216.112.0/22 IPv6: 2001:df2:27c0::/48 2001:df3:2d00::/48 2400:e2c0::/48 Signature Algorithm: sha256WithRSAEncryption 51:82:a7:89:ae:ef:e4:43:00:5d:21:66:aa:ae:eb:b8:52:c8: e2:6d:fa:3f:24:0f:89:b6:fa:41:00:ca:6d:e2:c6:8c:e2:c6: 13:2b:9d:ca:8a:48:12:4a:4c:a8:6a:9a:12:0b:ad:06:e7:72: 20:fe:d0:9b:91:1a:01:60:b0:46:1b:15:c6:a5:7f:5f:65:f3: 91:ca:e7:93:19:10:ae:1c:67:26:70:6a:2b:b2:c4:82:05:d5: d4:b4:f7:1e:8a:a8:86:18:bc:21:13:9d:9d:75:36:d7:eb:9d: 5e:0f:54:24:e5:a8:20:a7:7e:bf:f6:33:97:89:c6:f8:5d:16: 21:5b:46:f1:ba:c2:5a:0a:5e:c7:9f:60:ff:17:11:76:82:60: 16:a5:93:10:9c:cb:60:53:0b:5c:19:cb:65:1f:27:20:13:78: 83:5b:1b:a2:cd:03:f0:26:b3:c3:b7:d6:c3:be:51:d7:d8:21: 90:17:a0:9e:f6:8b:14:c3:58:22:f9:9e:1e:58:20:53:24:6a: a5:de:85:f4:5f:5a:98:69:65:13:8e:e5:44:f7:0d:54:8b:93: f7:55:ec:fd:42:fc:b3:b3:55:30:62:7e:00:13:d7:b6:eb:70: 0e:c0:08:44:61:d1:60:53:d5:cd:a9:b6:88:d4:34:d5:77:32: 1b:a7:2f:d4 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgICRo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNjQ2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5Mjc0ZS0wYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMwzeCRpjIN4nf1aCbHRKungj3Ug6X7AKggI7kycKy/npj/JpJa2XhLYZaHa yr1kFV6zi6zP5ASQnPf1m7SQoYL7pnH/sleIawOM2VouJky99NuT2l7rQsyzmu6Z FPyHZLD3oX1+FmHYcG+CntEaj2/6cI2PS0AvWX7jH+40kIxWTYBzQ9Eeu17Tyor7 QCKzq928qtCQN0m0/coBCJucp0kzWIvhGzK5mlfyAoPFyc2novwev6YX9aiAOwfF DQoG1Kc8+KjJ557qCDJJedAxoMxb3+/MM7Ir5fEgxosWDRQtLWU/oW24QWiGm4T7 ZOT3J7Z/C3vV5ibGLy81ZExyawIDAQABo4IC0DCCAswwHQYDVR0OBBYEFATejfaz 1oqEioh35ZrsmxnZvoqCMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvREM1MUEzQkMy MEJEMTFFQzg1NTFCMTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWgYIKwYBBQUHAQcBAf8E SzBJMCQEAgABMB4DBAFnNZ4DBAJnaHQDBAFnnRQDBAFnsmYDBAJn2HAwIQQCAAIw GwMHACABDfInwAMHACABDfMtAAMHACQA4sAAADANBgkqhkiG9w0BAQsFAAOCAQEA UYKnia7v5EMAXSFmqq7ruFLI4m36PyQPibb6QQDKbeLGjOLGEyudyopIEkpMqGqa EgutBudyIP7Qm5EaAWCwRhsVxqV/X2XzkcrnkxkQrhxnJnBqK7LEggXV1LT3Hoqo hhi8IROdnXU21+udXg9UJOWoIKd+v/Yzl4nG+F0WIVtG8brCWgpex59g/xcRdoJg FqWTEJzLYFMLXBnLZR8nIBN4g1sbos0D8Cazw7fWw75R19ghkBegnvaLFMNYIvme HlggUyRqpd6F9F9amGllE47lRPcNVIuT91Xs/UL8s7NVMGJ+ABPXtutwDsAIRGHR YFPVzam2iNQ01XcyG6cv1A== -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org