$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa File: 994A883AE06511EEA8CEC61EC4F9AE02.roa (raw, json) Hash identifier: 4m6kTWNBLLt0DnQcKadWEAp+oA7dK3KvjMhOBiVTN1o= Subject key identifier: 77:AF:32:18:C3:FC:FD:50:EA:8F:34:D0:CD:9F:E5:A4:AB:52:DE:33 Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD Certificate serial: 02 Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa Signing time: Tue 12 Mar 2024 11:42:26 +0000 ROA not before: Tue 12 Mar 2024 11:42:26 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 55501 IP address blocks: 103.155.4.0/23 maxlen: 23 103.155.4.0/24 maxlen: 24 103.155.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD Validity Not Before: Mar 12 11:42:26 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65f03fa2-86a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4f:34:1c:e6:b6:26:8b:7e:b7:a0:15:cc:30: 81:72:8f:c2:0b:35:2c:30:2e:04:39:6a:4d:89:a7: 5f:7b:e8:b7:6d:f5:72:21:eb:14:1e:c7:99:ef:d4: ab:2c:fe:ef:63:8f:3d:77:c9:59:7c:fd:ae:d8:e2: 71:5e:e7:15:80:5d:6b:a0:4e:4a:36:e5:c4:a1:7c: 4d:e1:74:de:24:eb:19:eb:86:ee:76:83:f2:0e:1a: db:27:fc:4d:24:0c:b1:a5:e3:2d:8f:a0:81:76:c3: 09:23:67:1d:6a:b4:05:2e:c5:f8:aa:46:a5:b2:bb: be:86:c1:be:a6:c8:a9:03:4d:c4:06:5f:81:b9:3b: 20:d3:a4:4b:e1:7c:df:b5:34:61:24:73:bb:d1:46: 31:7f:1a:8e:bb:b1:9f:83:52:42:71:6a:da:f2:ad: 96:7d:d7:34:37:fc:3e:69:ec:5b:4a:ff:9b:b7:d7: 7b:aa:58:6b:2e:6b:0a:60:6e:f0:83:dc:da:64:c9: d2:55:3a:a3:52:5a:b2:23:20:3d:35:df:f3:ec:49: 32:88:11:14:4a:e9:95:a4:96:7f:d3:1f:34:f3:10: 5d:a3:b5:54:52:26:98:13:00:b0:06:03:94:90:cd: 1d:75:e5:ac:ef:fb:2a:48:06:c0:b1:50:91:b1:2c: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AF:32:18:C3:FC:FD:50:EA:8F:34:D0:CD:9F:E5:A4:AB:52:DE:33 X509v3 Authority Key Identifier: keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.4.0/23 Signature Algorithm: sha256WithRSAEncryption 11:0b:a8:ce:ba:9d:1e:cc:8f:b2:aa:f8:42:a5:3a:4e:92:c6: d7:bc:cd:d6:6e:06:6b:0e:65:fa:ca:9c:6e:c7:7b:46:94:f6: 48:12:6e:7c:d7:f5:e7:5f:d3:67:33:df:fa:45:ea:46:76:b3: 65:66:f0:28:80:a5:9e:26:09:38:af:4a:f6:79:fe:18:09:79: 3a:d6:f5:7c:53:76:f8:12:ec:94:7e:f2:6e:93:fb:d2:21:43: 8d:4b:38:8d:61:99:58:09:f1:f4:c2:0f:b4:64:90:c3:1e:da: 68:3e:ee:f0:88:57:6b:d7:8d:e0:e2:4a:1b:bf:e6:95:f6:75: 94:21:71:63:f0:1a:b8:b1:1d:d6:65:9c:2d:53:75:c9:9f:35: cd:8f:8f:86:13:06:a3:e8:48:f5:18:c8:17:4c:88:4d:96:61: b5:b1:36:df:e2:d0:16:1e:59:40:b8:8d:34:60:2c:ba:82:6b: be:2f:48:05:bb:0d:a5:a6:dc:09:9f:27:4b:99:5d:d6:ef:f9: bd:86:4b:e9:8b:7f:5c:8a:f4:fb:05:f8:98:d4:d7:d3:9d:88: d1:9b:91:af:3e:d5:0a:7c:d9:fe:4b:6d:c0:5f:a8:9d:7d:df: ca:83:dd:5d:ff:12:b0:6c:a8:da:fe:a7:29:b5:ee:2d:af:69: 3f:21:be:2a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEQ5NTExMC8GA1UEBRMoRkVEODE3MkY4QTk1QTM1MjAyRDUxQzZGNzVGQTk0N0RF ODQ0RjRDRDAeFw0yNDAzMTIxMTQyMjZaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjAzZmEyLTg2YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWTzQc5rYmi363oBXMMIFyj8ILNSwwLgQ5ak2Jp1976Ldt9XIh6xQex5nv1Kss /u9jjz13yVl8/a7Y4nFe5xWAXWugTko25cShfE3hdN4k6xnrhu52g/IOGtsn/E0k DLGl4y2PoIF2wwkjZx1qtAUuxfiqRqWyu76Gwb6myKkDTcQGX4G5OyDTpEvhfN+1 NGEkc7vRRjF/Go67sZ+DUkJxatryrZZ91zQ3/D5p7FtK/5u313uqWGsuawpgbvCD 3NpkydJVOqNSWrIjID013/PsSTKIERRK6ZWkln/THzTzEF2jtVRSJpgTALAGA5SQ zR115azv+ypIBsCxUJGxLFVFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUd68yGMP8 /VDqjzTQzZ/lpKtS3jMwHwYDVR0jBBgwFoAU/tgXL4qVo1IC1RxvdfqUfehE9M0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RDk1LzQ4RUQyOTZBRTA2 NTExRUVCMzVGNDIxRUM0RjlBRTAyL190Z1hMNHFWbzFJQzFSeHZkZnFVZmVoRTlN MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3RnWEw0cVZvMUlDMVJ4dmRmcVVmZWhFOU0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ5NS80OEVEMjk2QUUwNjUxMUVFQjM1RjQyMUVDNEY5QUUwMi85OTRBODgzQUUw NjUxMUVFQThDRUM2MUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWebBDANBgkqhkiG9w0BAQsFAAOCAQEAEQuozrqdHsyPsqr4 QqU6TpLG17zN1m4Gaw5l+sqcbsd7RpT2SBJufNf151/TZzPf+kXqRnazZWbwKICl niYJOK9K9nn+GAl5Otb1fFN2+BLslH7ybpP70iFDjUs4jWGZWAnx9MIPtGSQwx7a aD7u8IhXa9eN4OJKG7/mlfZ1lCFxY/AauLEd1mWcLVN1yZ81zY+PhhMGo+hI9RjI F0yITZZhtbE23+LQFh5ZQLiNNGAsuoJrvi9IBbsNpabcCZ8nS5ld1u/5vYZL6Yt/ XIr0+wX4mNTX052I0ZuRrz7VCnzZ/kttwF+onX3fyoPdXf8SsGyo2v6nKbXuLa9p PyG+Kg== -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:30 2024 by rpki-client on console-fra.rpki-client.org