$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/43F7D8B29F2011EB84479343C4F9AE02.roa File: 43F7D8B29F2011EB84479343C4F9AE02.roa (raw, json) Hash identifier: InUCnpwuHID+w/5DgZFSxCnHtNAeoihOwtXlguK1z1s= Subject key identifier: CF:06:44:B8:C7:64:2D:27:D7:36:58:38:BE:BA:A3:03:6F:CD:7E:92 Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 0558 Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/43F7D8B29F2011EB84479343C4F9AE02.roa Signing time: Tue 07 May 2024 01:03:40 +0000 ROA not before: Tue 07 May 2024 01:03:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142053 IP address blocks: 103.165.184.0/23 maxlen: 23 103.165.184.0/24 maxlen: 24 103.165.185.0/24 maxlen: 24 2001:df6:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: May 7 01:03:40 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66397deb-47a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:fc:c3:45:0d:c1:be:62:c0:0f:ae:02:75: cc:99:26:fb:60:56:ca:3c:e0:43:2b:71:e1:17:4d: 5e:56:5b:0d:17:65:47:9c:0a:82:8f:c7:14:a3:17: ae:d5:73:e2:95:77:73:64:05:2b:f7:dd:9f:8b:28: d7:9d:d3:65:fc:74:4d:a6:67:4f:1c:b9:7e:93:a4: e5:ff:4b:65:58:e1:f4:0c:45:50:a5:c2:27:ef:57: 60:68:45:3d:69:e0:d4:d1:be:8a:e9:db:db:9a:5d: e5:8b:15:a1:d3:ff:36:c3:43:ca:c7:44:56:72:11: 49:03:7f:d7:62:1d:ac:43:9b:76:b8:0d:cf:62:50: 5f:10:bc:33:b6:0c:bf:c9:da:64:73:e4:1d:3b:97: d7:c2:0a:77:f9:40:e6:3c:dd:04:57:d2:5b:9f:8f: db:5b:47:df:c5:b2:4f:f5:d1:8f:f6:17:47:ee:03: 3f:41:49:05:20:2e:0b:7c:f3:6e:cc:33:41:61:5e: 3b:57:64:8b:3f:51:54:ab:4b:af:5d:eb:7f:88:00: 7f:64:4e:f8:68:15:40:8f:d0:21:b0:8c:12:72:8a: c6:9c:4f:85:80:f1:d2:97:23:30:35:7a:51:28:63: 97:c6:90:0b:15:6a:86:4b:2b:ff:8f:c7:f0:b8:21: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:44:B8:C7:64:2D:27:D7:36:58:38:BE:BA:A3:03:6F:CD:7E:92 X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/43F7D8B29F2011EB84479343C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.184.0/23 IPv6: 2001:df6:7080::/48 Signature Algorithm: sha256WithRSAEncryption 56:62:89:d5:af:be:5f:9d:20:ba:60:56:90:15:77:f7:f4:82: 26:4a:d7:3d:9d:6a:63:1b:dd:52:25:3f:92:55:13:fb:e7:f6: fd:c1:fb:c2:23:27:63:42:22:68:d7:b8:f2:ac:36:a8:d9:fa: 40:8a:4f:2e:00:b3:b9:8a:67:e8:20:38:56:b1:40:6f:46:d0: 42:71:2b:e9:f7:cf:0d:65:dd:9d:dc:ce:03:87:38:6a:b0:af: 09:66:a2:6b:f3:28:df:91:16:e4:f2:f8:c1:b2:a2:e5:91:8f: 12:4d:1d:2c:3f:37:84:e1:9e:d1:18:27:dc:5b:be:b2:e8:c4: b5:48:9e:2d:46:2a:2b:5a:7f:f0:b2:44:96:86:3d:e4:44:14: 9c:de:8e:92:c4:c9:0d:d9:2e:ea:1b:cb:2a:af:0c:b8:fd:ba: 51:b3:00:e7:79:8a:89:51:50:2d:ae:a7:71:d4:7d:db:58:cf: 58:7d:b4:50:c9:32:a3:c6:93:25:84:b5:13:1d:83:09:6e:b8: f0:a7:c6:c3:b3:73:ff:b3:3f:82:d9:33:f2:de:33:72:c8:88: eb:7b:a8:38:74:99:46:31:ec:96:42:c6:28:ab:bf:c1:b4:42: 29:3e:3d:39:24:16:bd:91:5b:f8:e4:c1:25:71:10:e0:2d:e9: 97:5a:ce:07 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjQwNTA3MDEwMzQwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM5N2RlYi00N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq778w0UNwb5iwA+uAnXMmSb7YFbKPOBDK3HhF01eVlsNF2VHnAqCj8cUoxeu 1XPilXdzZAUr992fiyjXndNl/HRNpmdPHLl+k6Tl/0tlWOH0DEVQpcIn71dgaEU9 aeDU0b6K6dvbml3lixWh0/82w0PKx0RWchFJA3/XYh2sQ5t2uA3PYlBfELwztgy/ ydpkc+QdO5fXwgp3+UDmPN0EV9Jbn4/bW0ffxbJP9dGP9hdH7gM/QUkFIC4LfPNu zDNBYV47V2SLP1FUq0uvXet/iAB/ZE74aBVAj9AhsIwScorGnE+FgPHSlyMwNXpR KGOXxpALFWqGSyv/j8fwuCGauQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM8GRLjH ZC0n1zZYOL66owNvzX6SMB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU5OTgvMkM1OTJFMjg5RjFGMTFFQkIzMEQ1NzQzQzRGOUFFMDIvNDNGN0Q4QjI5 RjIwMTFFQjg0NDc5MzQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpbgwDwQCAAIwCQMHACABDfZwgDANBgkqhkiG9w0BAQsF AAOCAQEAVmKJ1a++X50gumBWkBV39/SCJkrXPZ1qYxvdUiU/klUT++f2/cH7wiMn Y0IiaNe48qw2qNn6QIpPLgCzuYpn6CA4VrFAb0bQQnEr6ffPDWXdndzOA4c4arCv CWaia/Mo35EW5PL4wbKi5ZGPEk0dLD83hOGe0Rgn3Fu+sujEtUieLUYqK1p/8LJE loY95EQUnN6OksTJDdku6hvLKq8MuP26UbMA53mKiVFQLa6ncdR921jPWH20UMky o8aTJYS1Ex2DCW648KfGw7Nz/7M/gtkz8t4zcsiI63uoOHSZRjHslkLGKKu/wbRC KT49OSQWvZFb+OTBJXEQ4C3pl1rOBw== -----END CERTIFICATE-----Generated at Fri May 17 02:01:46 2024 by rpki-client on console-ams.rpki-client.org