$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/861D1DB82C4411EC9539C124C4F9AE02.roa File: 861D1DB82C4411EC9539C124C4F9AE02.roa (raw, json) Hash identifier: mlEN5bJ+FkD4YJ3My4U7v77uikC4HD2CG3Mq+sZbkIg= Subject key identifier: 77:33:D4:1D:39:0E:9C:9C:A8:2E:3C:C5:0C:CA:03:85:C1:50:AA:06 Certificate issuer: /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Certificate serial: 0372 Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/861D1DB82C4411EC9539C124C4F9AE02.roa Signing time: Tue 29 Aug 2023 01:22:42 +0000 ROA not before: Tue 29 Aug 2023 01:22:42 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 136910 IP address blocks: 103.98.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Jun 2024 02:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Validity Not Before: Aug 29 01:22:42 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ed4862-46a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:9a:8e:3f:51:e2:61:cf:51:7d:a6:21:83: 24:f3:21:46:97:a5:24:e4:dd:95:47:b2:86:48:13: 76:88:bf:70:cc:f6:c4:24:86:70:2f:b3:b4:77:7c: 00:be:10:f7:de:5e:8c:aa:e9:b1:5f:13:08:24:bb: ec:41:35:b5:f5:64:22:9b:b6:dc:12:0f:12:c0:85: 1d:af:44:0c:e0:e3:e1:1b:92:68:0a:41:3a:87:ac: 23:66:4d:2d:7c:65:57:78:9f:bd:56:df:cd:59:e0: 53:5b:d6:3e:79:06:4f:bd:6a:51:2b:20:34:c2:b4: e0:91:3b:61:f3:a9:bc:a1:c3:41:6b:09:8c:05:b7: 3b:00:0b:cb:3f:04:2b:62:73:fc:b9:2c:50:74:d0: 8b:4f:f0:df:ee:90:18:96:6f:20:2b:90:07:24:50: d2:1f:07:b0:f4:2b:71:0b:55:de:40:fa:ce:e4:c0: d8:39:16:09:3b:e9:88:72:89:10:cf:9d:f2:b6:f6: 98:ca:af:58:fa:40:c7:e1:2e:3c:f8:eb:24:73:5b: 6c:b5:eb:3c:ca:b7:37:59:9e:30:7d:ef:72:6a:9b: 8c:b8:c3:61:33:ef:40:72:ae:76:cb:f3:b2:b8:9e: 4c:c9:83:68:ce:08:7e:17:91:ac:07:1e:39:2e:de: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:33:D4:1D:39:0E:9C:9C:A8:2E:3C:C5:0C:CA:03:85:C1:50:AA:06 X509v3 Authority Key Identifier: keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/861D1DB82C4411EC9539C124C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.204.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:29:58:e2:ea:06:20:2e:ba:73:3d:eb:b4:c5:77:ae:9b:5a: 3e:30:8e:5f:a7:55:b4:71:19:2c:33:9f:44:32:01:36:c3:48: 8f:4b:a4:60:32:81:d5:af:9e:89:fa:45:60:d6:72:52:40:cd: ad:27:e9:3c:d0:02:79:32:d2:fc:03:29:32:5d:4e:f2:46:b6: 66:40:87:4d:13:4b:d3:3b:28:83:ea:e1:f6:66:85:55:8d:a9: dc:e1:bf:f4:e1:d1:1f:8c:72:83:e6:51:1a:59:df:25:8a:9f: a8:66:ba:0b:b2:ef:8c:e2:cb:99:e5:d9:4e:17:8a:d9:9d:19: 0c:52:f7:12:6f:a2:d1:84:d7:3d:53:3a:55:11:19:6f:9f:a3: 13:42:f3:fe:31:86:70:60:9c:50:12:16:fc:25:09:85:1f:26: e7:9f:15:d3:e4:05:70:39:2c:48:72:4d:c4:40:4d:34:94:f9: dd:1a:d9:00:cb:60:f7:13:d4:df:03:04:f6:31:fa:3b:4d:e3: a5:5a:21:2d:62:0c:62:3a:27:fd:b8:9d:24:56:8a:1d:88:27: a5:64:dd:f4:3b:54:7c:b8:31:80:ed:fc:6f:92:6f:62:29:87: ae:af:12:e4:65:e0:76:8b:15:b2:0d:bc:be:6c:bb:4b:f0:e7: 46:0d:67:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5ODQxMTAvBgNVBAUTKEMwNEM4MUE2NTE1RTUwMjZFMjFCRTY4Q0I5RDUxRDQx MzlBODVBOTIwHhcNMjMwODI5MDEyMjQyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVkNDg2Mi00NmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fiajj9R4mHPUX2mIYMk8yFGl6Uk5N2VR7KGSBN2iL9wzPbEJIZwL7O0d3wA vhD33l6MqumxXxMIJLvsQTW19WQim7bcEg8SwIUdr0QM4OPhG5JoCkE6h6wjZk0t fGVXeJ+9Vt/NWeBTW9Y+eQZPvWpRKyA0wrTgkTth86m8ocNBawmMBbc7AAvLPwQr YnP8uSxQdNCLT/Df7pAYlm8gK5AHJFDSHwew9CtxC1XeQPrO5MDYORYJO+mIcokQ z53ytvaYyq9Y+kDH4S48+Oskc1tstes8yrc3WZ4wfe9yapuMuMNhM+9Acq52y/Oy uJ5MyYNozgh+F5GsBx45Lt5PAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHcz1B05 DpycqC48xQzKA4XBUKoGMB8GA1UdIwQYMBaAFMBMgaZRXlAm4hvmjLnVHUE5qFqS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDk4NC80MEU4MjY2QTJD M0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVDYmlHLWFNdWRVZFFUbW9X cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dFeUJwbEZlVUNiaUctYU11ZFVkUVRtb1dwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA5ODQvNDBFODI2NkEyQzNCMTFFQ0I0RDUzMDE4QzRGOUFFMDIvODYxRDFEQjgy QzQ0MTFFQzk1MzlDMTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnYswwDQYJKoZIhvcNAQELBQADggEBAI8pWOLqBiAuunM9 67TFd66bWj4wjl+nVbRxGSwzn0QyATbDSI9LpGAygdWvnon6RWDWclJAza0n6TzQ Anky0vwDKTJdTvJGtmZAh00TS9M7KIPq4fZmhVWNqdzhv/Th0R+McoPmURpZ3yWK n6hmuguy74ziy5nl2U4XitmdGQxS9xJvotGE1z1TOlURGW+foxNC8/4xhnBgnFAS FvwlCYUfJuefFdPkBXA5LEhyTcRATTSU+d0a2QDLYPcT1N8DBPYx+jtN46VaIS1i DGI6J/24nSRWih2IJ6Vk3fQ7VHy4MYDt/G+Sb2Iph66vEuRl4HaLFbINvL5su0vw 50YNZ4g= -----END CERTIFICATE-----Generated at Mon Jun 3 03:37:20 2024 by rpki-client on console-fra.rpki-client.org