$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A291634816B711ECBD752D47C4F9AE02.roa File: A291634816B711ECBD752D47C4F9AE02.roa (raw, json) Hash identifier: Ctq7IqjnfC2JklzmQsi0+l8pKomLg5k/LbwaF/nwW84= Subject key identifier: AF:AD:94:1B:C1:66:AD:58:58:7F:68:BC:C5:1A:1E:4A:46:A7:F4:7A Certificate issuer: /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Certificate serial: 0461 Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A291634816B711ECBD752D47C4F9AE02.roa Signing time: Wed 24 Jul 2024 22:41:08 +0000 ROA not before: Wed 24 Jul 2024 22:41:08 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 134520 IP address blocks: 103.113.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Validity Not Before: Jul 24 22:41:08 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66a18303-34fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:27:80:6f:e2:ad:f5:0e:13:9d:2d:d2:f1: b5:f6:b7:d6:68:b0:80:ac:16:51:28:84:35:cd:08: 80:e3:7b:53:aa:43:d8:bb:24:14:d7:0b:0a:5c:88: 54:9f:89:04:2a:99:93:9b:7f:35:44:5e:38:a4:97: 7f:28:d3:2b:64:2b:4c:4b:9f:b8:19:27:ab:d7:38: 01:fa:2e:27:fa:65:db:fe:e7:6d:bf:18:f4:4b:4d: 50:ea:94:1b:b2:53:c6:d6:44:75:b3:9c:b2:49:13: a8:f2:b5:04:f6:3c:9e:30:40:d9:0c:bc:6b:1e:7a: 4c:e3:ef:8c:e6:98:4e:4b:a7:5a:cf:1f:db:5b:57: e5:e2:2b:05:fd:07:62:42:19:03:a7:c1:ac:b2:fa: ee:60:3e:93:bd:2d:1e:bd:9f:39:f5:0a:52:b2:b1: 58:04:93:01:d4:2d:04:a7:81:25:11:29:dd:74:fb: 9a:82:a7:06:e0:eb:9e:f8:92:28:b8:b1:dd:ef:7c: ab:0f:99:25:ab:0a:44:d6:a3:d2:a0:33:12:f3:83: 8d:06:16:e7:fb:a3:1f:e9:e4:1f:da:de:30:c1:2e: d1:31:54:62:f0:6f:92:fa:72:ea:6d:70:fa:38:d6: d8:29:af:3c:97:29:17:90:53:e5:3a:83:ad:b4:ec: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AD:94:1B:C1:66:AD:58:58:7F:68:BC:C5:1A:1E:4A:46:A7:F4:7A X509v3 Authority Key Identifier: keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A291634816B711ECBD752D47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.156.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:b6:22:0c:1a:40:27:b9:ae:b5:d4:e8:23:87:a7:6d:f7:08: 1f:c7:0c:13:a4:16:0a:15:da:13:53:da:15:02:7b:78:59:2b: e5:5b:56:02:dc:38:89:e2:06:15:e5:04:f2:2a:e1:da:68:e7: 35:bd:c5:22:e2:49:40:8d:45:74:eb:5a:4b:a8:73:58:9d:73: c8:98:6a:87:c6:82:ec:58:22:49:cc:6a:f9:ec:dc:65:76:96: dd:7c:39:d8:bc:77:09:6c:e6:f7:fc:1d:64:58:50:52:a3:12: 46:f0:34:4f:28:ef:95:3c:90:59:3d:a3:1e:d7:7c:82:fa:bf: 0b:f7:e4:d3:ad:a4:bf:62:a4:62:f9:99:b5:da:66:33:dd:ec: 30:40:69:16:f1:94:86:0e:da:80:49:00:70:c7:8b:d1:1d:bf: f5:13:e4:bb:74:71:3b:ae:0f:29:7a:a3:1e:a8:da:cf:6d:25: 13:77:86:59:25:8f:cc:42:8f:fe:d5:ee:04:4c:4e:58:89:8c: 98:50:1d:0b:81:60:7b:fd:e2:c2:1f:aa:2a:22:c8:34:41:b7: e5:40:45:e3:e3:35:17:6f:37:96:0c:79:b1:cb:54:08:c3:04: a2:74:7b:08:b5:a9:06:6a:88:8e:d9:14:73:42:62:75:a0:4f: f6:5a:3d:43 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKDQxRDI2OEM1MTEzRUYzRUQ3QjE3M0I3ODBFMDE3RUQz RkU4NTU1RjcwHhcNMjQwNzI0MjI0MTA4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmExODMwMy0zNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybgngG/irfUOE50t0vG19rfWaLCArBZRKIQ1zQiA43tTqkPYuyQU1wsKXIhU n4kEKpmTm381RF44pJd/KNMrZCtMS5+4GSer1zgB+i4n+mXb/udtvxj0S01Q6pQb slPG1kR1s5yySROo8rUE9jyeMEDZDLxrHnpM4++M5phOS6dazx/bW1fl4isF/Qdi QhkDp8GssvruYD6TvS0evZ859QpSsrFYBJMB1C0Ep4ElESnddPuagqcG4Oue+JIo uLHd73yrD5klqwpE1qPSoDMS84ONBhbn+6Mf6eQf2t4wwS7RMVRi8G+S+nLqbXD6 ONbYKa88lykXkFPlOoOttOxSGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK+tlBvB Zq1YWH9ovMUaHkpGp/R6MB8GA1UdIwQYMBaAFEHSaMURPvPtexc7eA4BftP+hVX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgtMTdGenQ0RGdGLTBfNkZW ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FkSm94UkUtOC0xN0Z6dDREZ0YtMF82RlZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg5MUQvMzgxQThGMkExQ0MyMTFFQjgyQjU3MTc4QzRGOUFFMDIvQTI5MTYzNDgx NkI3MTFFQ0JENzUyRDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncZwwDQYJKoZIhvcNAQELBQADggEBAJq2IgwaQCe5rrXU 6COHp233CB/HDBOkFgoV2hNT2hUCe3hZK+VbVgLcOIniBhXlBPIq4dpo5zW9xSLi SUCNRXTrWkuoc1idc8iYaofGguxYIknMavns3GV2lt18Odi8dwls5vf8HWRYUFKj EkbwNE8o75U8kFk9ox7XfIL6vwv35NOtpL9ipGL5mbXaZjPd7DBAaRbxlIYO2oBJ AHDHi9Edv/UT5Lt0cTuuDyl6ox6o2s9tJRN3hlklj8xCj/7V7gRMTliJjJhQHQuB YHv94sIfqioiyDRBt+VARePjNRdvN5YMebHLVAjDBKJ0ewi1qQZqiI7ZFHNCYnWg T/ZaPUM= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org