$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3D937A30EBB211EEA93D9B14C4F9AE02.roa File: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (raw, json) Hash identifier: FZ/xUhIM7zfvbjrlaNBg5R71VpWXVWpefCmFbBzTTVk= Subject key identifier: FE:1B:98:4E:CC:3B:C6:E6:15:9B:F6:0F:AC:E1:B1:5F:41:46:A0:2C Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 05 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3D937A30EBB211EEA93D9B14C4F9AE02.roa Signing time: Tue 26 Mar 2024 21:09:03 +0000 ROA not before: Tue 26 Mar 2024 21:09:03 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 14618 IP address blocks: 167.103.90.0/24 maxlen: 24 167.103.91.0/24 maxlen: 24 167.103.92.0/24 maxlen: 24 167.103.93.0/24 maxlen: 24 167.103.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Mar 26 21:09:03 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6603396f-c70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:ba:f9:a5:03:64:b6:f1:89:8a:41:61:35: 4c:3f:ec:9b:70:3d:2a:64:07:0a:ec:c5:ff:1a:72: 44:33:23:dd:e8:f2:d1:31:63:cb:e7:dc:ca:ee:a3: bf:35:c9:65:62:08:9a:ad:26:8d:f6:92:a9:f5:65: 6c:7b:95:f0:4c:72:05:59:03:a6:37:a9:a7:2f:7e: 25:2b:30:36:6d:b0:00:ac:7f:ab:84:f4:fe:b2:02: 0a:22:95:e1:71:7f:79:1a:8f:ec:20:63:73:89:6e: 85:5e:f3:77:8e:07:c3:a3:40:96:81:34:5e:08:b6: f0:ba:d1:43:03:1d:a2:00:a0:51:8f:60:34:c9:5c: e5:31:c9:38:28:0f:7c:60:dd:2a:44:ad:5b:b8:d8: 67:47:78:89:05:9d:a8:f2:f6:ad:88:fe:8d:5f:42: 46:6a:3b:29:65:ef:ba:1b:c0:37:62:6b:17:70:cb: 6d:32:f0:4e:9e:9b:8c:da:f7:64:31:aa:cf:e5:76: 46:0e:a9:ca:27:c2:68:56:8f:e1:0a:75:4c:dd:ef: 14:48:e9:db:f1:6f:d8:59:da:76:f7:c0:5d:09:bb: c3:7e:2b:8f:4d:d0:01:3e:c3:5b:d3:06:5d:f5:08: bb:d6:34:eb:e2:d8:b1:04:a3:d2:6a:c4:e5:e9:01: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1B:98:4E:CC:3B:C6:E6:15:9B:F6:0F:AC:E1:B1:5F:41:46:A0:2C X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3D937A30EBB211EEA93D9B14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.103.90.0-167.103.94.255 Signature Algorithm: sha256WithRSAEncryption 28:0f:2e:3a:e0:23:74:ab:3c:9d:99:2c:cf:74:48:42:af:a4: 4e:7b:58:9e:e0:78:0e:85:4a:5e:7a:cb:bd:2a:36:86:eb:68: 5f:e6:55:6e:23:49:f1:70:81:7e:50:61:fc:cc:e1:8d:57:61: 7d:e6:35:09:83:ca:5e:c0:23:a1:75:ab:3b:e5:36:b1:07:8a: 24:37:6e:e2:fa:1e:87:83:b5:bb:4e:d7:9a:3b:ab:17:2b:b3: 40:07:ca:c0:9c:24:c5:68:99:a1:4a:a3:74:f5:35:d4:63:b3: d8:50:3f:95:a9:e7:10:cc:3c:c2:1f:c5:03:e3:5a:18:99:dc: bf:55:51:3c:02:de:3d:a9:6f:56:1f:26:96:c8:ff:69:a1:86: e7:12:9b:3e:73:99:00:63:3b:98:48:9d:fe:e1:af:66:6d:bc: 61:f6:6d:ed:da:4a:8a:db:3d:2d:79:57:e5:61:fc:f5:bb:65: d4:6e:dd:5a:26:53:d4:52:a2:b0:5d:71:dd:60:3c:16:a7:4b: 30:fd:a0:cc:c5:67:23:12:93:30:5b:d6:19:7b:56:f1:db:bc: 52:07:5b:f1:1f:4a:5f:a8:d0:49:e2:41:0d:dd:af:b0:e8:f4: 87:46:c3:cf:1f:07:a9:cc:70:be:a3:2f:38:5f:f8:cf:d5:2d: 6e:a6:d4:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzE2OTExMC8GA1UEBRMoNDA0MkMyNDkwRDdEQUZFQzMzMjAzMTZFRDVBQTc0RTBC RUNBQTlBOTAeFw0yNDAzMjYyMTA5MDNaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MDMzOTZmLWM3MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGt7r5pQNktvGJikFhNUw/7JtwPSpkBwrsxf8ackQzI93o8tExY8vn3Mruo781 yWViCJqtJo32kqn1ZWx7lfBMcgVZA6Y3qacvfiUrMDZtsACsf6uE9P6yAgoileFx f3kaj+wgY3OJboVe83eOB8OjQJaBNF4ItvC60UMDHaIAoFGPYDTJXOUxyTgoD3xg 3SpErVu42GdHeIkFnajy9q2I/o1fQkZqOyll77obwDdiaxdwy20y8E6em4za92Qx qs/ldkYOqconwmhWj+EKdUzd7xRI6dvxb9hZ2nb3wF0Ju8N+K49N0AE+w1vTBl31 CLvWNOvi2LEEo9JqxOXpAZYnAgMBAAGjggKdMIICmTAdBgNVHQ4EFgQU/huYTsw7 xuYVm/YPrOGxX0FGoCwwHwYDVR0jBBgwFoAUQELCSQ19r+wzIDFu1ap04L7Kqakw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MTY5LzYyMzNERDNFRUJB RTExRUU4QTBFRDk2NEM0RjlBRTAyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fh ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUVMQ1NRMTlyLXd6SURGdTFhcDA0TDdLcWFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi8zRDkzN0EzMEVC QjIxMUVFQTkzRDlCMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQBp2daAwQAp2deMA0GCSqGSIb3DQEBCwUAA4IBAQAoDy46 4CN0qzydmSzPdEhCr6ROe1ie4HgOhUpeesu9KjaG62hf5lVuI0nxcIF+UGH8zOGN V2F95jUJg8pewCOhdas75TaxB4okN27i+h6Hg7W7TteaO6sXK7NAB8rAnCTFaJmh SqN09TXUY7PYUD+VqecQzDzCH8UD41oYmdy/VVE8At49qW9WHyaWyP9poYbnEps+ c5kAYzuYSJ3+4a9mbbxh9m3t2kqK2z0teVflYfz1u2XUbt1aJlPUUqKwXXHdYDwW p0sw/aDMxWcjEpMwW9YZe1bx27xSB1vxH0pfqNBJ4kEN3a+w6PSHRsPPHwepzHC+ oy84X/jP1S1uptQN -----END CERTIFICATE-----Generated at Wed May 1 10:10:57 2024 by rpki-client on console-ams.rpki-client.org