$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa File: 261A4C3432B611EBBB18F11EC4F9AE02.roa (raw, json) Hash identifier: jLETSgP+BBiNgHQWnELyI/5SSWT6c6N4U6vnmqcVGjA= Subject key identifier: 1F:A0:4B:CA:25:F9:14:66:09:A6:FD:83:D3:D6:6C:1E:ED:BB:2F:96 Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 06A8 Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa Signing time: Thu 06 Jun 2024 23:52:51 +0000 ROA not before: Thu 06 Jun 2024 23:52:51 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 139006 IP address blocks: 103.91.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Jun 6 23:52:51 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66624bd2-3807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:f9:0b:f1:ad:a4:05:0b:7f:a7:7a:02:3b: f5:e2:f1:02:c8:0b:e6:08:53:bf:2e:56:10:9c:7f: 15:e2:e7:31:6b:a3:84:83:4c:60:52:5c:45:42:43: 3a:17:e7:91:89:b6:68:9f:28:e6:6f:f5:c5:54:df: 75:c1:92:0f:79:00:ca:97:0d:08:dc:cb:33:64:cc: db:02:d5:b9:d3:ad:02:fa:8d:62:ac:35:2b:1c:78: 24:b6:e9:af:6a:40:16:7f:5b:55:01:d7:16:9f:2c: 1f:5f:88:a7:e7:83:96:c4:b0:28:f0:a4:33:98:20: a7:9f:06:cd:f9:aa:e6:2a:36:c5:04:72:63:1d:51: 76:eb:fa:13:b9:5b:7b:44:26:20:44:5a:d5:b2:d2: dc:34:b4:15:1f:0e:92:a0:85:e6:80:9d:f8:b0:13: 61:63:7a:40:46:93:32:5d:f7:7b:65:22:8c:a1:79: c1:09:b9:18:2b:61:69:ef:69:40:7a:39:bb:69:94: 40:c2:66:c0:e8:22:ca:00:c5:18:92:31:12:12:9d: 0b:58:66:1f:9b:09:1f:fa:e2:b9:5e:80:90:0c:0d: cb:ec:8b:86:12:25:24:43:6a:7f:b4:e6:95:37:da: 1e:f9:7e:ad:e8:13:8b:e4:e1:a8:07:64:ce:c3:e6: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A0:4B:CA:25:F9:14:66:09:A6:FD:83:D3:D6:6C:1E:ED:BB:2F:96 X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.166.0/24 Signature Algorithm: sha256WithRSAEncryption 72:c3:ca:77:06:7c:a4:e6:0e:a9:2e:82:a8:a0:94:11:de:c8: 85:f0:0a:96:26:aa:cc:66:51:f1:3b:6a:9a:21:26:56:77:95: 21:31:96:4c:f5:d0:a2:36:28:89:b0:e7:50:65:86:d1:96:2d: 5f:2e:b5:7f:3a:ce:f2:31:02:fd:87:fa:eb:e0:7d:5e:cb:fd: 90:fe:e9:21:1f:8a:a1:98:52:67:64:fa:ab:eb:e0:ec:d1:9f: 31:a6:84:66:51:d5:29:65:0a:dc:5c:2b:bf:ab:a3:84:47:c7: 0b:70:50:89:69:43:88:1d:b6:cd:ba:d9:54:f7:c4:40:24:9c: 28:16:76:9a:1a:f7:ad:fd:3f:9e:c6:e1:74:81:11:a4:f6:e0: 17:7c:73:89:67:b4:18:c5:67:cc:95:68:82:b1:df:b8:b2:f8: c2:87:ea:83:5b:e6:da:9b:2c:f9:01:16:5a:98:74:13:af:41: df:3e:38:22:78:bb:15:8d:bc:17:3c:93:9a:d9:7b:9c:49:23: 4e:d8:fc:1f:87:1a:07:bc:c2:6d:44:20:8a:23:60:0c:62:8e: d2:3f:e5:a8:ea:e1:11:c6:f3:4c:bf:63:c2:10:ec:7c:f7:60: d2:1d:90:91:5c:6f:81:eb:fa:51:19:6c:d3:d0:4a:e8:07:c0: 86:20:4d:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjQwNjA2MjM1MjUxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYyNGJkMi0zODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTz5C/GtpAULf6d6Ajv14vECyAvmCFO/LlYQnH8V4ucxa6OEg0xgUlxFQkM6 F+eRibZonyjmb/XFVN91wZIPeQDKlw0I3MszZMzbAtW5060C+o1irDUrHHgktumv akAWf1tVAdcWnywfX4in54OWxLAo8KQzmCCnnwbN+armKjbFBHJjHVF26/oTuVt7 RCYgRFrVstLcNLQVHw6SoIXmgJ34sBNhY3pARpMyXfd7ZSKMoXnBCbkYK2Fp72lA ejm7aZRAwmbA6CLKAMUYkjESEp0LWGYfmwkf+uK5XoCQDA3L7IuGEiUkQ2p/tOaV N9oe+X6t6BOL5OGoB2TOw+bbTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB+gS8ol +RRmCab9g9PWbB7tuy+WMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBRjEvOEZFN0E4QjgyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvMjYxQTRDMzQz MkI2MTFFQkJCMThGMTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnW6YwDQYJKoZIhvcNAQELBQADggEBAHLDyncGfKTmDqku gqiglBHeyIXwCpYmqsxmUfE7apohJlZ3lSExlkz10KI2KImw51BlhtGWLV8utX86 zvIxAv2H+uvgfV7L/ZD+6SEfiqGYUmdk+qvr4OzRnzGmhGZR1SllCtxcK7+ro4RH xwtwUIlpQ4gdts262VT3xEAknCgWdpoa9639P57G4XSBEaT24Bd8c4lntBjFZ8yV aIKx37iy+MKH6oNb5tqbLPkBFlqYdBOvQd8+OCJ4uxWNvBc8k5rZe5xJI07Y/B+H Gge8wm1EIIojYAxijtI/5ajq4RHG80y/Y8IQ7Hz3YNIdkJFcb4Hr+lEZbNPQSugH wIYgTTs= -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:01 2024 by rpki-client on console-ams.rpki-client.org