$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/491FFA9A177011ECA96DF680C4F9AE02.roa File: 491FFA9A177011ECA96DF680C4F9AE02.roa (raw, json) Hash identifier: FQSR/4MkVHjr7ZGyEAAE3IKAOkg+KAmFlH0Otg4j2as= Subject key identifier: B2:04:E6:C3:B8:CC:E6:24:CB:DA:84:66:5E:1B:1D:BC:0F:B6:DA:D7 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 03E2 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/491FFA9A177011ECA96DF680C4F9AE02.roa Signing time: Tue 19 Dec 2023 01:33:26 +0000 ROA not before: Tue 19 Dec 2023 01:33:26 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 131242 IP address blocks: 103.173.90.0/23 maxlen: 23 103.173.90.0/24 maxlen: 24 103.173.91.0/24 maxlen: 24 2001:df7:9380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Dec 19 01:33:26 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6580f2e6-32b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:8c:07:5e:2b:b0:25:5d:04:19:35:34:d4: 19:ea:72:c8:80:b4:fe:c7:63:30:18:56:38:00:38: 81:f3:24:5c:41:2f:77:8e:f3:9a:cd:dd:08:5e:e5: dc:df:28:07:bb:e9:96:46:32:47:ca:70:3a:32:24: 8a:82:51:26:c7:6e:77:7a:4d:80:d0:d4:c9:13:c5: 48:ed:cc:bc:3a:8d:26:9a:80:66:e0:61:1c:37:7f: 54:ac:31:37:90:d8:b2:ae:72:9a:71:72:08:21:45: 37:0b:6a:a0:3f:00:df:2c:cb:2f:71:ce:07:04:a8: 1d:59:3a:4e:73:e3:cb:f4:8e:84:16:b6:e9:31:2d: 72:6d:35:26:10:d4:3c:ea:f3:09:6e:ef:6a:81:31: 86:de:25:a8:3b:88:88:28:5b:31:4c:9d:d0:fc:9e: 7f:f0:f8:2f:a4:96:03:d7:35:3b:03:2d:71:71:ce: 30:25:90:4d:4e:39:f3:03:3d:f8:37:09:92:88:e6: 09:02:3a:c5:2e:c6:ff:58:a0:bd:99:de:32:20:1c: 8b:72:ac:8a:58:84:00:90:d2:1e:15:89:1e:1a:c0: bb:b2:fe:d5:36:b1:e3:7c:90:e2:7f:e0:8b:fb:b1: 9c:47:35:00:3e:8c:a9:db:54:b5:06:c3:7d:0b:2a: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:04:E6:C3:B8:CC:E6:24:CB:DA:84:66:5E:1B:1D:BC:0F:B6:DA:D7 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/491FFA9A177011ECA96DF680C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.90.0/23 IPv6: 2001:df7:9380::/48 Signature Algorithm: sha256WithRSAEncryption 2e:4c:e9:20:a2:4b:a7:6a:bf:b1:64:8e:15:07:e8:f1:27:fc: 6f:e5:27:dd:3a:11:66:3e:fb:c2:ea:1f:7f:2a:32:f1:48:ce: 51:1c:37:e1:c4:ab:b4:70:63:7a:65:15:95:ec:2a:47:79:2f: 69:db:b2:ed:de:ca:35:3d:1d:1d:43:39:8b:45:5f:21:32:11: c5:2f:03:8e:cb:88:c0:ec:9a:13:25:32:60:9e:1d:1b:38:5a: 17:65:b5:df:cd:50:3b:7f:5d:db:6f:cc:5e:6a:75:dc:4c:1e: d8:53:26:41:4e:38:4c:44:2f:d0:a4:a0:ee:4a:2a:5c:bd:d1: 0b:30:be:c3:6c:69:fa:59:d8:bd:a6:a1:cf:b0:f5:2e:50:da: b2:6c:57:93:e3:7b:40:62:c8:73:24:9f:43:02:27:b2:01:66: 90:6e:00:3f:93:0c:61:1b:53:bc:d9:50:2a:ed:e5:27:94:4b: a4:52:f1:e8:64:67:75:03:e1:47:f9:29:02:17:d9:03:10:63: c0:7f:15:2a:31:87:6e:a9:41:a3:ec:f0:e1:09:57:2e:ce:e4: fa:9f:c9:12:0a:95:82:e8:de:44:71:0c:2b:07:e4:a9:07:50: 2b:17:1c:e2:fd:ca:d6:ae:ce:14:8c:0b:13:5a:d0:57:43:58: 3c:1a:b6:9d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjMxMjE5MDEzMzI2WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgwZjJlNi0zMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCuMB14rsCVdBBk1NNQZ6nLIgLT+x2MwGFY4ADiB8yRcQS93jvOazd0IXuXc 3ygHu+mWRjJHynA6MiSKglEmx253ek2A0NTJE8VI7cy8Oo0mmoBm4GEcN39UrDE3 kNiyrnKacXIIIUU3C2qgPwDfLMsvcc4HBKgdWTpOc+PL9I6EFrbpMS1ybTUmENQ8 6vMJbu9qgTGG3iWoO4iIKFsxTJ3Q/J5/8PgvpJYD1zU7Ay1xcc4wJZBNTjnzAz34 NwmSiOYJAjrFLsb/WKC9md4yIByLcqyKWIQAkNIeFYkeGsC7sv7VNrHjfJDif+CL +7GcRzUAPoyp21S1BsN9CyrWywIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLIE5sO4 zOYky9qEZl4bHbwPttrXMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQzQUUvNDExMkNCNTgxNzY1MTFFQzhCMTZBMzcxQzRGOUFFMDIvNDkxRkZBOUEx NzcwMTFFQ0E5NkRGNjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrVowDwQCAAIwCQMHACABDfeTgDANBgkqhkiG9w0BAQsF AAOCAQEALkzpIKJLp2q/sWSOFQfo8Sf8b+Un3ToRZj77wuoffyoy8UjOURw34cSr tHBjemUVlewqR3kvaduy7d7KNT0dHUM5i0VfITIRxS8DjsuIwOyaEyUyYJ4dGzha F2W1381QO39d22/MXmp13Ewe2FMmQU44TEQv0KSg7koqXL3RCzC+w2xp+lnYvaah z7D1LlDasmxXk+N7QGLIcySfQwInsgFmkG4AP5MMYRtTvNlQKu3lJ5RLpFLx6GRn dQPhR/kpAhfZAxBjwH8VKjGHbqlBo+zw4QlXLs7k+p/JEgqVgujeRHEMKwfkqQdQ Kxcc4v3K1q7OFIwLE1rQV0NYPBq2nQ== -----END CERTIFICATE-----Generated at Fri May 17 03:06:34 2024 by rpki-client on console-ams.rpki-client.org