$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3D937A30EBB211EEA93D9B14C4F9AE02.roa File: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (raw, json) Hash identifier: 4IAC/jSQTXj2MYLQMkt3TE5hsCOe0XFD7gTvlHGKKzs= Subject key identifier: 75:69:2A:DA:CB:6D:1B:6F:07:10:8E:81:54:F8:DE:CD:20:5C:D5:2A Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 41 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3D937A30EBB211EEA93D9B14C4F9AE02.roa Signing time: Fri 05 Jul 2024 07:28:19 +0000 ROA not before: Fri 05 Jul 2024 07:28:19 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 14618 IP address blocks: 167.103.90.0/24 maxlen: 24 167.103.91.0/24 maxlen: 24 167.103.92.0/24 maxlen: 24 167.103.93.0/24 maxlen: 24 167.103.94.0/24 maxlen: 24 167.103.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169 Validity Not Before: Jul 5 07:28:19 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6687a093-a081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:40:c9:3d:fc:df:10:91:e7:dc:f6:c7:7e: e5:d6:19:56:c4:ad:90:32:97:6a:d9:90:17:35:07: fb:02:8b:3c:bc:7c:b7:fd:81:00:b6:91:62:87:11: 7b:4f:76:58:07:04:9b:95:19:54:c2:7a:c1:a5:1b: 2c:e2:d6:2f:a1:b1:2b:b0:9c:37:96:f9:4e:a4:6c: fa:67:6c:01:65:2d:34:60:60:67:e8:aa:7c:18:af: 23:72:77:dc:a9:43:52:f4:98:a9:f3:e1:35:17:d6: 04:5b:8a:ad:5c:14:27:cf:d4:41:73:ae:40:64:d4: df:4a:74:e1:c0:0f:06:85:34:4f:fc:1f:85:08:ed: 1a:8e:38:66:06:4b:73:a5:cb:b4:83:cb:c0:d2:f9: 88:6d:ce:73:fe:7a:15:13:32:37:50:dd:72:cd:37: fb:b8:bf:e5:52:a2:92:0c:87:4c:b2:af:9d:ec:45: cf:9e:41:76:49:f1:5e:4c:ea:02:f8:d8:b2:36:11: ec:b5:0f:1c:5b:53:26:bc:1a:28:fd:92:cd:36:d9: c5:86:78:d0:7e:98:4c:c2:b9:e3:cc:ff:37:67:86: c0:07:1a:78:b7:7d:33:78:a7:b3:22:a6:ec:c1:48: 10:6c:c2:64:2f:e4:05:58:1b:f1:f6:53:03:db:33: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:69:2A:DA:CB:6D:1B:6F:07:10:8E:81:54:F8:DE:CD:20:5C:D5:2A X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3D937A30EBB211EEA93D9B14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.103.90.0-167.103.95.255 Signature Algorithm: sha256WithRSAEncryption 01:13:d1:f1:e0:b1:55:3b:86:a8:f4:58:57:8e:64:64:12:e5: 8b:37:36:20:cf:e3:db:28:0b:46:dc:3f:82:39:9a:f4:fc:d3: 5a:ce:38:87:ce:bb:55:e3:9e:36:ea:14:06:84:ae:aa:10:a9: f1:a6:15:97:fa:e6:ca:af:4f:76:32:96:4a:26:27:6f:d7:13: e7:c6:31:15:38:a2:c3:25:66:73:27:29:47:dc:54:ac:d7:7c: 99:41:37:bf:b9:cd:8b:03:a4:8a:87:05:84:d0:9f:83:74:9c: bb:83:0d:18:d1:bc:89:fc:d2:34:7a:ec:f4:b6:d1:81:05:f7: 09:76:f4:6c:f3:51:2c:8d:9b:5f:bf:83:2b:8c:9f:6d:ef:4b: 1f:18:7c:c3:16:46:0b:3f:15:0a:40:14:55:d6:0e:84:d7:47: 22:0f:9c:bc:05:53:75:3b:c3:ac:93:82:11:bd:a4:01:62:bc: 2e:04:81:7a:d6:91:73:93:4f:56:11:33:de:a0:1f:23:5e:69: e5:86:a3:b1:3b:7a:eb:58:6e:b1:7e:7b:4f:58:4c:19:2b:9e: 2f:39:ff:e4:ad:5d:8b:a5:2f:f4:ca:8b:ed:81:48:78:8b:64: 4d:32:30:17:75:af:e1:b1:98:0b:1a:0e:88:f1:4b:17:d7:64: 41:64:bf:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzE2OTExMC8GA1UEBRMoNDA0MkMyNDkwRDdEQUZFQzMzMjAzMTZFRDVBQTc0RTBC RUNBQTlBOTAeFw0yNDA3MDUwNzI4MTlaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODdhMDkzLWEwODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjU0DJPfzfEJHn3PbHfuXWGVbErZAyl2rZkBc1B/sCizy8fLf9gQC2kWKHEXtP dlgHBJuVGVTCesGlGyzi1i+hsSuwnDeW+U6kbPpnbAFlLTRgYGfoqnwYryNyd9yp Q1L0mKnz4TUX1gRbiq1cFCfP1EFzrkBk1N9KdOHADwaFNE/8H4UI7RqOOGYGS3Ol y7SDy8DS+YhtznP+ehUTMjdQ3XLNN/u4v+VSopIMh0yyr53sRc+eQXZJ8V5M6gL4 2LI2Eey1DxxbUya8Gij9ks022cWGeNB+mEzCuePM/zdnhsAHGni3fTN4p7MipuzB SBBswmQv5AVYG/H2UwPbM2m9AgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUdWkq2stt G28HEI6BVPjezSBc1SowHwYDVR0jBBgwFoAUQELCSQ19r+wzIDFu1ap04L7Kqakw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MTY5LzYyMzNERDNFRUJB RTExRUU4QTBFRDk2NEM0RjlBRTAyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fh ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUVMQ1NRMTlyLXd6SURGdTFhcDA0TDdLcWFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi8zRDkzN0EzMEVC QjIxMUVFQTkzRDlCMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQBp2daAwQFp2dAMA0GCSqGSIb3DQEBCwUAA4IBAQABE9Hx 4LFVO4ao9FhXjmRkEuWLNzYgz+PbKAtG3D+COZr0/NNazjiHzrtV45426hQGhK6q EKnxphWX+ubKr092MpZKJidv1xPnxjEVOKLDJWZzJylH3FSs13yZQTe/uc2LA6SK hwWE0J+DdJy7gw0Y0byJ/NI0euz0ttGBBfcJdvRs81EsjZtfv4MrjJ9t70sfGHzD FkYLPxUKQBRV1g6E10ciD5y8BVN1O8Osk4IRvaQBYrwuBIF61pFzk09WETPeoB8j XmnlhqOxO3rrWG6xfntPWEwZK54vOf/krV2LpS/0yovtgUh4i2RNMjAXda/hsZgL Gg6I8UsX12RBZL81 -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:34 2025 by rpki-client