$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa File: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (raw, json) Hash identifier: YYQgusC6hV6lCIy0+UZyBQsfZksmuMBdbmE+AEbFmxc= Subject key identifier: B5:E0:13:29:0B:37:ED:F7:D6:A6:14:6C:53:EA:AE:FF:96:4D:56:2C Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Certificate serial: 04 Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa Signing time: Thu 30 May 2024 05:41:12 +0000 ROA not before: Thu 30 May 2024 05:41:12 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 134456 IP address blocks: 103.160.60.0/23 maxlen: 23 103.160.60.0/24 maxlen: 24 103.160.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Validity Not Before: May 30 05:41:12 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66581177-90fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:75:37:77:76:db:e3:cc:30:1c:2d:07:76: 7e:43:8b:2f:d2:35:91:63:44:9b:b6:09:12:d9:1e: 3a:eb:d7:34:f6:ab:ae:e6:36:e7:d8:fe:f1:27:b1: cc:a5:80:5a:b1:95:b6:a4:40:07:32:ba:84:b9:d2: da:77:66:5e:61:e4:48:9f:93:4f:bd:fe:a0:ba:9e: 50:97:9d:c5:ed:cd:e6:d6:e1:80:82:02:7b:c7:bc: b2:b9:5c:0a:a3:4e:6a:76:0d:2f:f9:5b:6b:f2:2a: 7b:a6:29:88:d6:d8:9b:c8:6f:12:3c:48:40:f7:16: 94:6a:39:26:16:7e:d5:e8:66:c5:fd:3e:05:0f:ca: 9b:75:f3:61:fd:a2:67:80:f4:40:ee:ab:6c:6d:42: ef:bd:c9:79:f3:ed:1d:6c:11:df:b6:5d:9e:e6:8a: 93:c1:d4:97:a0:4a:4f:31:40:1a:c9:22:a6:ab:51: 1b:d2:3c:db:31:f7:04:3c:f8:a1:eb:80:80:29:16: 0e:29:01:83:49:b9:7c:20:86:23:23:c2:e6:23:70: 0a:35:4e:00:28:21:30:5e:7f:3f:6b:df:be:5e:c5: 95:ba:aa:e4:97:72:8a:05:0d:9b:28:ec:56:2a:32: 6e:05:e5:e9:dd:27:20:45:ae:d5:99:31:1b:a2:6b: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E0:13:29:0B:37:ED:F7:D6:A6:14:6C:53:EA:AE:FF:96:4D:56:2C X509v3 Authority Key Identifier: keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.60.0/23 Signature Algorithm: sha256WithRSAEncryption a3:28:b2:eb:f6:f2:81:f9:bb:90:ff:0c:54:07:88:07:51:0e: 41:9e:4b:c3:10:d4:d8:61:a0:bc:7a:8c:b2:bb:c3:87:99:03: dd:a3:7e:03:de:bd:27:f1:5d:1e:db:ca:92:7e:d2:ce:66:71: 1f:b6:d6:32:b1:d5:20:e2:a7:ff:cf:a9:c0:f5:37:d4:f3:2c: 9e:fb:8c:00:b2:a4:de:b5:cf:73:ef:a0:99:80:66:39:47:2d: 99:d1:b0:b1:63:c3:a6:40:c3:13:26:05:e6:61:3d:fa:2c:61: 2d:cf:0e:4a:20:04:49:4b:52:75:b7:d1:03:97:5a:7e:29:48: 5f:77:ce:fc:4c:b0:af:ab:5b:e5:ae:9b:70:b4:bc:19:67:94: 86:36:7d:37:70:57:f8:7a:0d:16:81:6e:7d:f4:ae:32:aa:3c: e0:cf:36:a2:52:a6:84:51:39:20:eb:80:28:74:8f:a2:ba:f2: 0f:71:30:50:41:1f:24:f1:11:ca:d0:09:f6:b7:3f:65:49:96: 39:72:50:03:71:e6:95:ec:34:4f:93:5f:6a:97:92:02:96:84: 5f:b5:8b:7a:cb:a8:0d:1d:90:08:02:48:e4:1e:f4:63:87:04: 21:85:a6:72:b3:a6:0a:55:07:90:39:85:93:13:0d:c4:de:de: fa:74:ec:c1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUFEMzExMC8GA1UEBRMoMzc0NUZCOUY3RUEyQzFFMjUyRDI5QkVGRDg2QTYxNTc3 NjBEODhDMDAeFw0yNDA1MzAwNTQxMTJaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NTgxMTc3LTkwZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ0HU3d3bb48wwHC0Hdn5Diy/SNZFjRJu2CRLZHjrr1zT2q67mNufY/vEnscyl gFqxlbakQAcyuoS50tp3Zl5h5Eifk0+9/qC6nlCXncXtzebW4YCCAnvHvLK5XAqj Tmp2DS/5W2vyKnumKYjW2JvIbxI8SED3FpRqOSYWftXoZsX9PgUPypt182H9omeA 9EDuq2xtQu+9yXnz7R1sEd+2XZ7mipPB1JegSk8xQBrJIqarURvSPNsx9wQ8+KHr gIApFg4pAYNJuXwghiMjwuYjcAo1TgAoITBefz9r375exZW6quSXcooFDZso7FYq Mm4F5endJyBFrtWZMRuia7JzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUteATKQs3 7ffWphRsU+qu/5ZNViwwHwYDVR0jBBgwFoAUN0X7n36iweJS0pvv2GphV3YNiMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQUQzL0Q2MjMxQTMyMUUy RDExRUY4M0Q5NTIyOUM0RjlBRTAyL04wWDduMzZpd2VKUzBwdnYyR3BoVjNZTmlN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjBYN24zNml3ZUpTMHB2djJHcGhWM1lOaU1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUFEMy9ENjIzMUEzMjFFMkQxMUVGODNEOTUyMjlDNEY5QUUwMi9FOTg5REUwQzFF MkUxMUVGQjhEMTJBMkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWegPDANBgkqhkiG9w0BAQsFAAOCAQEAoyiy6/bygfm7kP8M VAeIB1EOQZ5LwxDU2GGgvHqMsrvDh5kD3aN+A969J/FdHtvKkn7SzmZxH7bWMrHV IOKn/8+pwPU31PMsnvuMALKk3rXPc++gmYBmOUctmdGwsWPDpkDDEyYF5mE9+ixh Lc8OSiAESUtSdbfRA5dafilIX3fO/Eywr6tb5a6bcLS8GWeUhjZ9N3BX+HoNFoFu ffSuMqo84M82olKmhFE5IOuAKHSPorryD3EwUEEfJPERytAJ9rc/ZUmWOXJQA3Hm lew0T5NfapeSApaEX7WLesuoDR2QCAJI5B70Y4cEIYWmcrOmClUHkDmFkxMNxN7e +nTswQ== -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:34 2024 by rpki-client on console-fra.rpki-client.org