$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E5E11D4093BD11EC8B2D9A58C4F9AE02.roa File: E5E11D4093BD11EC8B2D9A58C4F9AE02.roa (raw, json) Hash identifier: Lm4O2mt2PXXXAh6Rq3+u4zewO88r90R0X+u8/WRLLb0= Subject key identifier: CD:04:C1:2F:21:FB:B2:3C:33:2B:97:DF:DA:12:5A:49:22:3D:40:1C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4571 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E5E11D4093BD11EC8B2D9A58C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:40 +0000 ROA not before: Thu 05 Sep 2024 03:32:40 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135936 IP address blocks: 103.109.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Dec 2024 04:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17777 (0x4571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:40 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92658-48eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:00:ab:e3:d8:ac:dc:ff:9d:e1:74:64:57: 49:bd:62:18:dd:2e:d2:48:f7:6e:c0:e7:c1:8b:62: ce:07:26:d7:93:b7:00:0b:22:2e:97:48:75:af:d0: 8a:ba:a7:5e:bd:4d:48:f6:9b:b9:a9:ea:6f:e2:af: 09:4b:cf:7e:dd:c0:26:a5:be:97:05:fa:df:ac:18: bc:72:31:3f:cb:e5:ad:f2:a5:41:4a:d9:6b:c9:3e: 17:53:71:85:bf:5b:eb:d1:18:d6:e0:39:4f:22:b4: 8c:ea:cc:d6:00:55:d1:08:9f:4e:33:64:14:01:8b: a3:c0:08:7d:bc:7a:55:44:24:d7:b2:52:3c:55:d2: c8:14:8f:8d:9b:e0:56:d3:bb:cf:19:91:14:37:be: 8d:2d:07:8d:6b:14:14:28:8a:2c:69:d0:a2:5a:b1: 4d:d6:79:ac:52:34:3b:20:27:16:34:3f:13:0e:12: 24:8d:30:b4:b1:46:c1:6c:df:05:3d:02:b2:30:9b: 76:df:7b:dc:59:99:98:b4:fa:ef:3b:f4:ef:61:34: ef:01:5f:e2:49:81:93:00:50:b3:1b:d5:77:d3:09: 2a:e1:da:07:54:ce:8b:c1:82:be:ed:14:c0:a3:fc: fb:79:3f:d2:59:f1:3e:b5:39:c0:55:39:76:93:a1: 81:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:04:C1:2F:21:FB:B2:3C:33:2B:97:DF:DA:12:5A:49:22:3D:40:1C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E5E11D4093BD11EC8B2D9A58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.28.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:73:00:ea:db:32:33:6c:58:6f:31:17:a5:ed:27:e1:f4:e0: 36:0b:df:d5:d2:11:65:b6:34:ab:a0:0b:fe:d8:82:1e:3a:b9: 0b:5f:4a:38:bc:4c:34:6a:bc:b9:a8:6b:bb:f9:52:49:2b:3a: 2d:a5:0c:71:60:d8:71:b5:64:09:c4:d1:7c:63:8f:72:47:e7: 8b:9a:43:6d:4a:30:e3:7c:78:7a:d1:69:18:99:e3:6d:1a:bc: 37:51:36:f7:3e:ae:b2:75:92:0d:d3:40:16:19:2f:4c:18:a4: dd:21:84:4c:ba:69:64:14:c6:3d:a0:41:01:c9:34:37:25:1e: d9:ac:09:80:66:bd:b0:b1:ba:38:4e:bf:19:af:a5:55:e8:d8: 2c:c3:4a:53:9e:9e:b3:ce:2d:50:e2:22:01:ba:ac:2e:8b:46: 86:e4:0e:c5:6f:b4:c7:be:05:44:3e:96:c5:59:0c:5c:8b:9d: 29:32:39:72:6d:e7:eb:e7:ae:3c:fb:7c:ca:03:af:26:ec:29: 4d:ff:6e:83:01:4e:a5:f2:f8:67:27:6c:8d:42:0c:6e:69:1c: 24:36:78:77:2d:fe:28:62:69:00:31:c1:d2:ea:a1:5b:b2:7f: 7d:5e:99:5c:1f:a6:c0:5f:26:9f:12:34:f4:85:f2:50:d3:8b: 3c:f5:0e:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICRXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjQwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY1OC00OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubwAq+PYrNz/neF0ZFdJvWIY3S7SSPduwOfBi2LOBybXk7cACyIul0h1r9CK uqdevU1I9pu5qepv4q8JS89+3cAmpb6XBfrfrBi8cjE/y+Wt8qVBStlryT4XU3GF v1vr0RjW4DlPIrSM6szWAFXRCJ9OM2QUAYujwAh9vHpVRCTXslI8VdLIFI+Nm+BW 07vPGZEUN76NLQeNaxQUKIosadCiWrFN1nmsUjQ7ICcWND8TDhIkjTC0sUbBbN8F PQKyMJt233vcWZmYtPrvO/TvYTTvAV/iSYGTAFCzG9V30wkq4doHVM6LwYK+7RTA o/z7eT/SWfE+tTnAVTl2k6GBlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM0EwS8h +7I8MyuX39oSWkkiPUAcMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTVFMTFENDA5 M0JEMTFFQzhCMkQ5QTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnbRwwDQYJKoZIhvcNAQELBQADggEBAI1zAOrbMjNsWG8x F6XtJ+H04DYL39XSEWW2NKugC/7Ygh46uQtfSji8TDRqvLmoa7v5UkkrOi2lDHFg 2HG1ZAnE0Xxjj3JH54uaQ21KMON8eHrRaRiZ420avDdRNvc+rrJ1kg3TQBYZL0wY pN0hhEy6aWQUxj2gQQHJNDclHtmsCYBmvbCxujhOvxmvpVXo2CzDSlOenrPOLVDi IgG6rC6LRobkDsVvtMe+BUQ+lsVZDFyLnSkyOXJt5+vnrjz7fMoDrybsKU3/boMB TqXy+GcnbI1CDG5pHCQ2eHct/ihiaQAxwdLqoVuyf31emVwfpsBfJp8SNPSF8lDT izz1Drs= -----END CERTIFICATE-----Generated at Fri Nov 29 05:58:41 2024 by rpki-client on console-fra.rpki-client.org