$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/98BDF7128E6911ECAF7B3B79C4F9AE02.roa File: 98BDF7128E6911ECAF7B3B79C4F9AE02.roa (raw, json) Hash identifier: 7J9Af3gQkR4w/RoVrtO+lFZx3WrmU6kpOzTUw33NWcE= Subject key identifier: 97:2A:DA:6B:FA:A7:88:31:56:26:D0:03:51:C1:52:45:2C:E6:FD:5C Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 02B8 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/98BDF7128E6911ECAF7B3B79C4F9AE02.roa Signing time: Fri 29 Dec 2023 02:44:27 +0000 ROA not before: Fri 29 Dec 2023 02:44:27 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 149013 IP address blocks: 103.176.84.0/23 maxlen: 23 103.176.84.0/24 maxlen: 24 103.176.85.0/24 maxlen: 24 2001:df0:bc0::/48 maxlen: 48 2001:df0:bc0:84::/64 maxlen: 64 2001:df0:bc0:85::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Dec 29 02:44:27 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658e328b-07b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:f1:94:d9:c4:9e:35:89:ae:fe:ec:15:17: 58:5f:3d:04:9f:7b:5b:82:be:1d:5c:33:45:84:4d: a5:8e:4f:0e:bc:1b:8c:ca:f8:f3:80:3a:df:7f:56: df:9e:8f:8e:77:b2:89:e6:8e:25:28:e6:53:25:61: c5:a3:db:d0:04:bb:53:77:e1:4b:83:68:50:c1:41: 7a:1e:e8:e1:a4:f0:d9:40:c8:30:46:dc:76:67:1f: a6:15:5e:7c:7b:26:46:75:8c:f9:52:b6:86:46:5e: 0d:01:60:9b:90:0f:e3:f1:4e:5c:53:72:fd:08:1e: 7e:77:84:f8:32:b1:ec:b3:68:e3:39:81:aa:cd:89: d8:8c:fc:de:04:cf:87:6f:4c:ed:33:a8:70:6d:35: d9:78:f2:aa:1e:ad:d2:fc:f7:a6:c9:09:12:25:a3: db:b8:9d:c2:47:37:d9:43:26:32:c6:37:21:24:c9: 71:b9:dd:52:fb:0f:9d:c4:27:63:e9:ed:9a:83:c8: 19:39:67:98:de:08:0f:d5:62:4a:ee:d2:89:73:0e: 1b:10:f4:fa:e9:24:0a:cf:40:9f:bf:4b:6d:96:c1: 61:2d:40:e7:32:0e:88:c7:b3:30:75:ca:2c:ac:88: 0a:3e:60:76:b6:63:8a:69:9c:ea:3b:2c:63:81:00: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2A:DA:6B:FA:A7:88:31:56:26:D0:03:51:C1:52:45:2C:E6:FD:5C X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/98BDF7128E6911ECAF7B3B79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.84.0/23 IPv6: 2001:df0:bc0::/48 Signature Algorithm: sha256WithRSAEncryption 6e:75:78:50:14:79:f8:a2:d0:32:b3:9d:52:84:d6:35:fa:c3: ee:d0:e2:4a:2c:2d:f6:05:1c:4c:ec:bb:0a:55:67:34:84:04: c8:4b:4d:a1:61:9b:22:0b:3b:16:31:51:0f:58:19:e4:64:b9: 34:16:4c:89:6f:a9:79:c4:a6:2a:15:da:02:2d:17:4e:2b:91: ab:70:8d:a8:97:72:67:f5:e1:58:83:1b:78:f9:92:1b:8a:bd: 36:5a:b7:35:49:bd:e8:39:a2:64:ad:79:c4:aa:7c:a7:1f:7c: d3:86:b9:38:16:ea:e5:30:ef:9b:dd:5e:1a:2c:55:cf:b4:e6: 9d:a8:21:53:53:e5:96:a9:7b:a0:d6:f6:b9:00:51:62:f1:17: 58:22:23:9f:f6:d5:2c:da:f8:fa:a2:58:83:1b:37:94:76:6b: f7:29:15:92:97:fb:ee:cc:52:0c:dd:80:7f:25:dd:d1:82:a9: b5:68:e8:26:8d:9a:ad:e1:3d:bb:13:c0:b2:b5:1e:c3:49:8c: 51:06:59:c9:e5:04:29:46:eb:a1:b6:cf:11:3e:d9:88:d7:83: 09:bc:87:20:91:da:62:19:28:46:31:c5:f9:54:14:e5:40:ad: 51:0f:5c:ed:be:b8:49:bb:a9:0b:0f:45:60:6e:55:93:68:ba: af:26:4a:d7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjMxMjI5MDI0NDI3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThlMzI4Yi0wN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/HxlNnEnjWJrv7sFRdYXz0En3tbgr4dXDNFhE2ljk8OvBuMyvjzgDrff1bf no+Od7KJ5o4lKOZTJWHFo9vQBLtTd+FLg2hQwUF6HujhpPDZQMgwRtx2Zx+mFV58 eyZGdYz5UraGRl4NAWCbkA/j8U5cU3L9CB5+d4T4MrHss2jjOYGqzYnYjPzeBM+H b0ztM6hwbTXZePKqHq3S/PemyQkSJaPbuJ3CRzfZQyYyxjchJMlxud1S+w+dxCdj 6e2ag8gZOWeY3ggP1WJK7tKJcw4bEPT66SQKz0Cfv0ttlsFhLUDnMg6Ix7Mwdcos rIgKPmB2tmOKaZzqOyxjgQB25QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJcq2mv6 p4gxVibQA1HBUkUs5v1cMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTc4NDIvNzZBOEM2QkE4RTY1MTFFQ0E2RUVFQjcwQzRGOUFFMDIvOThCREY3MTI4 RTY5MTFFQ0FGN0IzQjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsFQwDwQCAAIwCQMHACABDfALwDANBgkqhkiG9w0BAQsF AAOCAQEAbnV4UBR5+KLQMrOdUoTWNfrD7tDiSiwt9gUcTOy7ClVnNIQEyEtNoWGb Igs7FjFRD1gZ5GS5NBZMiW+pecSmKhXaAi0XTiuRq3CNqJdyZ/XhWIMbePmSG4q9 Nlq3NUm96DmiZK15xKp8px9804a5OBbq5TDvm91eGixVz7TmnaghU1Pllql7oNb2 uQBRYvEXWCIjn/bVLNr4+qJYgxs3lHZr9ykVkpf77sxSDN2AfyXd0YKptWjoJo2a reE9uxPAsrUew0mMUQZZyeUEKUbrobbPET7ZiNeDCbyHIJHaYhkoRjHF+VQU5UCt UQ9c7b64SbupCw9FYG5Vk2i6ryZK1w== -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:05 2024 by rpki-client on console-fra.rpki-client.org