$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa File: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (raw, json) Hash identifier: hM3qUUiNYNoC3wKuWEvZ5GtYbe5JprCUalUj0rmsmIQ= Subject key identifier: 18:FD:81:18:B8:32:88:EC:67:37:F1:2B:13:F6:82:66:9F:EF:22:6C Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Certificate serial: 02B9 Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa Signing time: Wed 27 Dec 2023 02:34:38 +0000 ROA not before: Wed 27 Dec 2023 02:34:38 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 132584 IP address blocks: 103.176.216.0/24 maxlen: 24 103.176.217.0/24 maxlen: 24 203.56.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Validity Not Before: Dec 27 02:34:38 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658b8d3e-5618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:9c:ca:15:b5:85:fc:1a:74:58:58:0e:30: 0a:8b:57:56:ed:d6:87:24:29:03:45:c9:e2:50:78: a2:1b:d7:9e:aa:1c:fa:b2:a0:ae:87:17:e3:51:f7: 06:42:52:69:dd:ee:5c:9d:c8:1a:b2:4a:42:1a:f0: b9:a0:21:d1:55:b6:c0:8d:3a:ee:b3:c0:05:53:61: 79:8e:22:33:15:9a:09:55:f4:b4:cf:31:d0:fc:55: b0:3b:b7:01:8f:ab:93:41:16:8a:32:aa:9e:5e:4c: 06:04:e9:03:5a:fa:96:14:65:40:dd:08:f8:55:98: d1:49:1f:48:d2:00:7f:b7:80:58:a3:5e:1c:16:2f: b1:9b:3c:8c:6f:f1:ff:50:4b:8b:c0:e5:bc:68:47: da:40:36:3f:0a:7e:de:8b:96:c1:8c:66:99:16:00: d6:0b:ba:1a:03:26:f6:e3:bd:e3:bc:8e:15:bb:2e: 7b:66:62:c2:5f:99:ed:41:d2:76:66:21:ae:6f:14: b4:ef:8b:56:02:35:63:29:d5:5c:92:ca:e5:d3:9c: 2f:d9:5a:5a:ac:b7:b3:7b:9a:d6:39:ec:f8:70:94: 78:8e:ff:b5:93:05:ca:60:fd:b1:17:50:63:e9:74: 83:a0:43:4c:90:d0:f4:a1:ce:19:8f:ba:d3:73:e2: d9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FD:81:18:B8:32:88:EC:67:37:F1:2B:13:F6:82:66:9F:EF:22:6C X509v3 Authority Key Identifier: keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.216.0/23 203.56.80.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:e8:07:3f:62:49:d4:4c:bf:68:f6:e8:75:44:02:aa:d5:cd: a6:c2:be:5b:3f:c1:73:c0:41:ef:79:50:29:78:40:01:e7:44: 94:cf:d7:e1:c9:53:3c:b3:9e:95:ee:59:4b:ce:ed:43:af:83: a0:3c:29:12:66:ae:7c:5f:8b:e7:c3:23:d2:c3:52:dd:7f:ec: 28:b4:55:74:28:7f:62:11:e6:44:83:ef:a9:db:84:5c:aa:1f: 22:27:7b:c6:49:eb:c3:8a:e0:c3:fc:46:b7:09:38:69:c7:ee: f4:09:b7:38:2d:6d:13:5d:78:7b:f5:42:aa:a6:b8:d9:ca:85: fa:66:cb:3d:c2:bb:62:6a:df:71:73:98:4e:8b:5f:5f:72:b8: 4a:61:93:08:6d:a4:2d:25:d2:3a:68:15:7c:c8:67:14:e8:cc: 90:89:48:81:64:55:a7:08:b1:54:26:14:88:73:53:3e:fd:b5: de:be:6c:f6:ef:ec:d3:8a:62:75:f2:53:8e:24:cb:f3:95:5f: 85:a0:34:21:54:ac:21:33:3c:5e:ab:0a:a8:8c:7d:38:40:31: 08:40:3d:81:fe:7f:14:f7:95:3f:e9:75:76:22:3a:2a:d7:8a: 65:93:17:35:94:9d:54:06:a5:b3:cd:18:03:bf:34:6b:7a:8e: e8:2c:20:04 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB MUE2RkVBM0EwHhcNMjMxMjI3MDIzNDM4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThiOGQzZS01NjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRqcyhW1hfwadFhYDjAKi1dW7daHJCkDRcniUHiiG9eeqhz6sqCuhxfjUfcG QlJp3e5cncgaskpCGvC5oCHRVbbAjTrus8AFU2F5jiIzFZoJVfS0zzHQ/FWwO7cB j6uTQRaKMqqeXkwGBOkDWvqWFGVA3Qj4VZjRSR9I0gB/t4BYo14cFi+xmzyMb/H/ UEuLwOW8aEfaQDY/Cn7ei5bBjGaZFgDWC7oaAyb2473jvI4Vuy57ZmLCX5ntQdJ2 ZiGubxS074tWAjVjKdVcksrl05wv2VparLeze5rWOez4cJR4jv+1kwXKYP2xF1Bj 6XSDoENMkND0oc4Zj7rTc+LZ/wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBj9gRi4 MojsZzfxKxP2gmaf7yJsMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg5QTIvRkI1MkY2NEU4RTYzMTFFQzlFMDE1RDZEQzRGOUFFMDIvOTdFOEFDRDY4 RTY2MTFFQzlFQkU2MjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnsNgDBADLOFAwDQYJKoZIhvcNAQELBQADggEBAIvoBz9i SdRMv2j26HVEAqrVzabCvls/wXPAQe95UCl4QAHnRJTP1+HJUzyznpXuWUvO7UOv g6A8KRJmrnxfi+fDI9LDUt1/7Ci0VXQof2IR5kSD76nbhFyqHyIne8ZJ68OK4MP8 RrcJOGnH7vQJtzgtbRNdeHv1QqqmuNnKhfpmyz3Cu2Jq33FzmE6LX19yuEphkwht pC0l0jpoFXzIZxTozJCJSIFkVacIsVQmFIhzUz79td6+bPbv7NOKYnXyU44ky/OV X4WgNCFUrCEzPF6rCqiMfThAMQhAPYH+fxT3lT/pdXYiOirXimWTFzWUnVQGpbPN GAO/NGt6jugsIAQ= -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:00 2024 by rpki-client on console-fra.rpki-client.org