$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/98D7330CA55011EFA7FFA969C4F9AE02.roa File: 98D7330CA55011EFA7FFA969C4F9AE02.roa (raw, json) Hash identifier: 5T5IW/urFKGSR1rD4ZpAxg1/U5kVp7QebPXagPruk4U= Subject key identifier: 3B:55:28:6A:E0:DF:85:0D:4E:A3:76:90:E0:67:F3:5A:4D:2E:35:2A Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Certificate serial: 07 Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/98D7330CA55011EFA7FFA969C4F9AE02.roa Signing time: Mon 18 Nov 2024 01:58:25 +0000 ROA not before: Mon 18 Nov 2024 01:58:25 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 63842 IP address blocks: 203.22.100.0/24 maxlen: 24 203.22.101.0/24 maxlen: 24 203.22.102.0/24 maxlen: 24 203.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Validity Not Before: Nov 18 01:58:25 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=673a9f41-1570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:60:ab:ea:c9:52:76:93:0a:63:b7:6d:15: 01:bd:12:82:7c:e9:9c:e5:a2:11:8e:da:6f:7d:d3: a0:08:b3:b7:e5:17:41:b9:be:a5:98:ab:7c:6d:8c: ff:48:66:83:61:f0:6d:ff:70:30:9f:1d:35:01:fd: df:5a:27:9b:e2:b2:6e:4b:09:49:6b:fb:55:e4:7e: 2e:2b:e3:7c:15:70:7e:ba:c8:6b:57:31:8a:85:b1: a5:bb:83:65:11:ef:5f:0d:40:a3:f1:ec:fd:f8:83: 7d:5a:44:da:da:df:9b:4b:44:55:56:42:e7:26:1d: 4b:a4:2a:da:98:df:ce:05:4b:60:e4:ab:5c:2c:3c: e7:8c:d9:8a:87:ff:42:f8:e9:e0:f9:b8:56:c0:02: 4c:52:a9:38:83:52:cc:fb:3a:01:8f:67:bb:ae:c4: 1e:32:a4:9e:f7:17:3f:b0:71:8c:3d:69:5a:7a:e9: e1:3c:91:4a:ce:3d:c5:09:94:1d:26:73:89:e6:4e: ee:0f:2e:70:a2:48:89:12:ad:10:2f:5e:31:61:5c: 44:cf:22:fa:65:ab:d7:b7:ad:d7:9c:f2:68:32:6a: 2d:d2:d3:5b:d3:a4:ad:01:38:55:76:d0:c7:18:79: 01:ed:d3:69:a6:d3:5d:dd:7e:9c:9d:6d:ec:e3:0d: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:55:28:6A:E0:DF:85:0D:4E:A3:76:90:E0:67:F3:5A:4D:2E:35:2A X509v3 Authority Key Identifier: keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/98D7330CA55011EFA7FFA969C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.22.100.0/22 Signature Algorithm: sha256WithRSAEncryption b2:c9:7a:23:19:79:14:ba:bf:f0:96:75:cb:fc:fe:e9:71:89: 64:2c:72:8a:7e:5b:47:5d:a7:e3:95:ce:93:23:0a:e9:fa:cf: 13:39:1e:15:9f:f5:d7:49:96:7f:0b:a3:0f:d6:6d:4e:51:08: 67:d5:e9:e7:d0:e1:2f:04:2e:e2:82:00:ff:d6:5e:83:9e:1e: 75:40:aa:a0:27:aa:82:d0:ac:80:8d:21:f8:01:34:d0:0f:e1: 37:18:f3:e6:3d:b9:23:49:1c:99:c8:c7:6f:c7:35:61:1b:89: 07:b0:95:50:4e:d8:b7:de:43:ad:34:08:90:57:39:f7:5c:f5: 87:45:bc:83:44:a0:0b:92:12:e5:8b:ba:f3:05:0f:9e:4e:0c: 12:90:32:72:8c:a0:e1:4a:25:78:db:38:71:96:21:04:39:4e: 94:14:c8:93:1f:17:47:bc:48:9c:3a:19:36:39:0a:c7:79:74: 6a:b7:88:a4:0c:0d:1a:30:5f:18:ba:35:19:d9:ee:c4:44:f5: 44:38:16:a8:96:fa:ce:64:79:f0:35:b6:2a:72:cd:d2:41:89: b9:c1:d1:af:23:53:88:de:54:d9:96:42:da:b3:d9:c8:c3:f8: 54:19:39:3a:00:0e:83:32:fa:dc:93:a0:55:e4:8b:c7:a3:72: ae:5b:65:98 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDg0MDExMC8GA1UEBRMoOUNGNzE0NzhCRjU5QjAwOEIxQjU0MkZBOTNBN0MxMEVG QjdGNEQ2MjAeFw0yNDExMTgwMTU4MjVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3M2E5ZjQxLTE1NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7g2Cr6slSdpMKY7dtFQG9EoJ86ZzlohGO2m9906AIs7flF0G5vqWYq3xtjP9I ZoNh8G3/cDCfHTUB/d9aJ5vism5LCUlr+1Xkfi4r43wVcH66yGtXMYqFsaW7g2UR 718NQKPx7P34g31aRNra35tLRFVWQucmHUukKtqY384FS2Dkq1wsPOeM2YqH/0L4 6eD5uFbAAkxSqTiDUsz7OgGPZ7uuxB4ypJ73Fz+wcYw9aVp66eE8kUrOPcUJlB0m c4nmTu4PLnCiSIkSrRAvXjFhXETPIvplq9e3rdec8mgyai3S01vTpK0BOFV20McY eQHt02mm013dfpydbezjDd8PAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUO1UoauDf hQ1Oo3aQ4GfzWk0uNSowHwYDVR0jBBgwFoAUnPcUeL9ZsAixtUL6k6fBDvt/TWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0ODQwLzM0MkY4MEQwOUZD NDExRUY5NjMxRjgzNkM0RjlBRTAyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvblBjVWVMOVpzQWl4dFVMNms2ZkJEdnRfVFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDg0MC8zNDJGODBEMDlGQzQxMUVGOTYzMUY4MzZDNEY5QUUwMi85OEQ3MzMwQ0E1 NTAxMUVGQTdGRkE5NjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAssWZDANBgkqhkiG9w0BAQsFAAOCAQEAssl6Ixl5FLq/8JZ1 y/z+6XGJZCxyin5bR12n45XOkyMK6frPEzkeFZ/110mWfwujD9ZtTlEIZ9Xp59Dh LwQu4oIA/9Zeg54edUCqoCeqgtCsgI0h+AE00A/hNxjz5j25I0kcmcjHb8c1YRuJ B7CVUE7Yt95DrTQIkFc591z1h0W8g0SgC5IS5Yu68wUPnk4MEpAycoyg4UoleNs4 cZYhBDlOlBTIkx8XR7xInDoZNjkKx3l0areIpAwNGjBfGLo1GdnuxET1RDgWqJb6 zmR58DW2KnLN0kGJucHRryNTiN5U2ZZC2rPZyMP4VBk5OgAOgzL63JOgVeSLx6Ny rltlmA== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org