$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa File: 6091D05229FC11EB861CCA7FC4F9AE02.roa (raw, json) Hash identifier: XwziNkWK08F4hzx4s4+EgNWlJBJ2Ct7s2nnIkH1ghzw= Subject key identifier: 5B:3B:73:CA:6F:CF:4B:D8:74:10:AF:4F:6A:9D:AC:0F:C3:68:37:FF Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Certificate serial: 061F Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa Signing time: Thu 02 Nov 2023 23:31:25 +0000 ROA not before: Thu 02 Nov 2023 23:31:25 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139751 IP address blocks: 103.158.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Validity Not Before: Nov 2 23:31:25 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6544314d-1a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:a1:6f:9d:66:38:4c:dd:cf:e5:d0:c3:d5: 61:d3:40:08:49:07:59:16:c5:1f:c2:af:00:23:18: 0d:b6:3b:7f:aa:24:a9:fc:60:c0:14:b4:45:98:77: 8f:43:41:57:16:e6:a9:30:5c:97:e1:79:8a:63:c8: 64:0d:27:9f:9c:ce:74:a8:3a:78:e7:53:8d:fe:96: c8:ff:e3:51:aa:2e:84:41:95:9e:10:e2:ef:63:19: b2:7b:dd:cd:ac:ba:14:3f:1e:39:cb:e8:14:93:9d: a6:f9:8f:54:73:ce:cf:ca:a9:47:61:ae:a6:08:83: aa:56:a4:b4:e4:4e:62:ad:33:3e:14:ad:f5:08:12: 63:04:1f:13:13:96:c4:b1:22:86:57:09:a0:42:14: bf:c6:6e:08:29:a7:4f:66:98:99:5f:87:46:7b:b3: bc:2f:ae:b2:6c:5e:2c:59:53:c6:f4:ce:72:76:d6: c7:d9:28:74:28:d9:5c:af:19:31:be:b4:a0:39:0a: 0e:65:e4:b2:21:fa:a0:fe:08:35:54:5f:e8:30:66: 73:a6:10:d9:82:2b:8b:60:df:8f:c6:4f:a2:1f:9c: 1c:67:81:61:3c:f5:9f:6a:2c:f4:99:c6:f5:99:cc: fc:bb:70:1f:11:de:20:49:76:7c:ea:b1:7b:d6:b8: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3B:73:CA:6F:CF:4B:D8:74:10:AF:4F:6A:9D:AC:0F:C3:68:37:FF X509v3 Authority Key Identifier: keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.34.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:68:8c:55:f6:21:0c:f5:26:78:20:68:00:85:e8:1b:df:4b: f0:42:05:35:12:4a:60:21:28:16:a6:2e:a4:ae:e7:af:40:e8: 4c:c9:a1:2e:65:2e:49:eb:6f:e4:37:a7:d0:5f:f3:20:dc:bb: 0a:1a:2d:6b:30:bd:67:b5:a4:90:30:c7:ce:87:22:9a:6a:d6: 91:11:e9:75:ca:22:9a:66:fc:19:72:44:9c:fd:7b:6f:c0:af: b5:c5:b3:49:e2:2b:45:f4:1a:bf:e1:02:26:03:75:01:90:21: 1f:50:65:a9:4a:fb:21:34:30:9b:95:9f:65:53:c8:d6:54:62: 75:6c:78:54:ea:0e:3a:6b:2a:76:67:77:f3:ff:01:83:c3:75: 18:a7:56:6c:53:16:fc:e1:04:04:aa:3a:09:dd:15:30:9d:40: 2e:c2:13:d9:cf:2d:40:c6:e6:88:1e:d7:06:3f:0e:9d:52:7b: 2f:2f:d1:e4:6c:5b:66:cc:d6:80:92:41:52:b1:51:ff:a1:cd: 1c:bd:38:d6:4e:ce:db:bf:a5:23:e0:95:3d:41:83:cf:00:6a: f8:ee:bb:70:e0:b8:e4:9a:ba:9d:10:7a:71:2b:93:ac:0f:91: 86:61:84:85:8d:f9:f7:cc:b5:ee:62:d8:28:0b:fd:e1:49:52: 2e:87:0b:e0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzNkUxMTAvBgNVBAUTKEY3MzQzMzNCNUJCNTRGQkE4ODJCMjMyRkQyNTMyNTJF N0VBMEJCQzAwHhcNMjMxMTAyMjMzMTI1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ0MzE0ZC0xYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDKhb51mOEzdz+XQw9Vh00AISQdZFsUfwq8AIxgNtjt/qiSp/GDAFLRFmHeP Q0FXFuapMFyX4XmKY8hkDSefnM50qDp451ON/pbI/+NRqi6EQZWeEOLvYxmye93N rLoUPx45y+gUk52m+Y9Uc87PyqlHYa6mCIOqVqS05E5irTM+FK31CBJjBB8TE5bE sSKGVwmgQhS/xm4IKadPZpiZX4dGe7O8L66ybF4sWVPG9M5ydtbH2Sh0KNlcrxkx vrSgOQoOZeSyIfqg/gg1VF/oMGZzphDZgiuLYN+Pxk+iH5wcZ4FhPPWfaiz0mcb1 mcz8u3AfEd4gSXZ86rF71rhSowIDAQABo4IClTCCApEwHQYDVR0OBBYEFFs7c8pv z0vYdBCvT2qdrA/DaDf/MB8GA1UdIwQYMBaAFPc0MztbtU+6iCsjL9JTJS5+oLvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTM2RS9BNkQ3NDhGQTI5 RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3cUlLeU12MGxNbExuNmd1 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl6UXpPMXUxVDdxSUt5TXYwbE1sTG42Z3U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUzNkUvQTZENzQ4RkEyOUZBMTFFQkJDNjVBRjdEQzRGOUFFMDIvNjA5MUQwNTIy OUZDMTFFQjg2MUNDQTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnniIwDQYJKoZIhvcNAQELBQADggEBAB1ojFX2IQz1Jngg aACF6BvfS/BCBTUSSmAhKBamLqSu569A6EzJoS5lLknrb+Q3p9Bf8yDcuwoaLWsw vWe1pJAwx86HIppq1pER6XXKIppm/BlyRJz9e2/Ar7XFs0niK0X0Gr/hAiYDdQGQ IR9QZalK+yE0MJuVn2VTyNZUYnVseFTqDjprKnZnd/P/AYPDdRinVmxTFvzhBASq OgndFTCdQC7CE9nPLUDG5oge1wY/Dp1Sey8v0eRsW2bM1oCSQVKxUf+hzRy9ONZO ztu/pSPglT1Bg88Aavjuu3DguOSaup0QenErk6wPkYZhhIWN+ffMte5i2CgL/eFJ Ui6HC+A= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org