$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa File: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (raw, json) Hash identifier: rIojZvN+6LuwrQImXREvas11U+DY0c75UvVMYniRtPk= Subject key identifier: 64:4D:39:A5:D5:64:97:59:23:63:25:65:D8:E5:ED:2D:3F:8E:15:6E Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Certificate serial: C0 Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa Signing time: Tue 05 Mar 2024 05:47:55 +0000 ROA not before: Tue 05 Mar 2024 05:47:55 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 150723 IP address blocks: 103.99.35.0/24 maxlen: 24 2001:df1:e7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Validity Not Before: Mar 5 05:47:55 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e6b20b-5fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:65:38:fd:24:28:0b:48:b5:1b:e8:4b:6f: f5:e4:e3:1c:b6:98:fc:6c:3b:3e:b6:ad:ac:65:a2: 6a:3f:2c:48:b8:c0:cb:15:a6:18:7a:c5:90:0f:04: 67:9d:8f:2c:8a:f1:18:63:ca:8a:6c:2c:6e:c4:76: b3:49:20:4c:a3:fd:fd:1b:a1:c1:40:cf:03:23:be: a0:6f:6a:f7:0e:0d:eb:ff:25:b5:54:47:a3:aa:b0: 7c:23:3c:7f:b5:2d:c6:3d:eb:65:ee:a2:a2:5f:37: f6:98:56:a5:0a:3a:98:1e:b8:8b:83:32:22:09:af: 08:e6:49:65:8e:81:31:f7:5a:e3:f7:5f:38:ff:2a: 64:4b:72:63:70:e0:f0:50:bb:59:85:da:32:a8:8c: 23:d1:90:7a:c1:40:7b:b0:f0:bf:26:b4:01:e2:32: 52:d2:73:5c:cd:6a:b4:42:ba:a8:2d:98:bd:f2:dd: 37:3b:da:2f:20:d6:17:32:c5:21:96:0f:ea:10:49: 1e:89:94:39:c9:e0:07:cd:55:e0:b3:df:cd:be:9f: 06:c6:7f:d8:84:c3:60:2b:6a:c4:92:b1:ba:e1:20: 41:59:ea:19:ce:79:5b:a9:ff:4b:d8:dc:a1:20:8d: 88:70:18:72:6a:56:93:a4:96:00:b3:6e:90:27:71: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4D:39:A5:D5:64:97:59:23:63:25:65:D8:E5:ED:2D:3F:8E:15:6E X509v3 Authority Key Identifier: keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.35.0/24 IPv6: 2001:df1:e7c0::/48 Signature Algorithm: sha256WithRSAEncryption 4a:af:40:c1:42:3c:51:97:4a:88:52:77:0e:0e:ff:8e:1b:58: e3:fb:c4:53:a2:4c:ea:b4:3d:26:0f:26:2e:15:be:c5:db:1a: 54:06:c6:eb:0f:7c:d8:c2:0e:d5:fc:8c:cd:aa:db:36:eb:91: d5:82:94:39:cb:1f:62:8f:17:2d:38:e8:9d:ad:db:44:83:ce: 5d:65:09:b2:88:ef:f3:62:62:1f:99:51:5f:b0:a9:8e:92:a3: fd:6c:41:7c:dd:94:c6:4a:a4:c3:8e:09:55:0e:2d:69:8e:d7: 57:18:2d:d1:9a:18:04:e3:4e:e9:0a:16:30:f2:06:48:cd:40: 5b:75:9a:f2:14:9a:6e:ce:af:28:f3:eb:34:84:fa:51:d2:83: 05:24:a8:8f:10:d5:62:9d:ab:c1:da:10:ec:67:ca:f1:52:2d: 10:e0:d1:92:c8:09:af:ab:1b:96:9e:ed:5b:d9:d2:7f:35:4b: 26:c9:c4:03:4b:ac:ae:9f:3e:73:53:5e:0a:37:7d:64:84:b2: 09:53:ff:5b:08:68:3e:88:7b:52:b4:53:09:d8:84:b3:f2:ae: 3a:92:2d:84:b8:ec:2e:ab:57:aa:05:43:22:b4:f8:81:fc:a0: 09:a9:e0:de:67:30:af:30:81:6b:57:05:96:b8:ff:b6:11:34: ae:e4:dc:06 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG MDVEMEU5RkEwHhcNMjQwMzA1MDU0NzU1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU2YjIwYi01ZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQJlOP0kKAtItRvoS2/15OMctpj8bDs+tq2sZaJqPyxIuMDLFaYYesWQDwRn nY8sivEYY8qKbCxuxHazSSBMo/39G6HBQM8DI76gb2r3Dg3r/yW1VEejqrB8Izx/ tS3GPetl7qKiXzf2mFalCjqYHriLgzIiCa8I5klljoEx91rj9184/ypkS3JjcODw ULtZhdoyqIwj0ZB6wUB7sPC/JrQB4jJS0nNczWq0QrqoLZi98t03O9ovINYXMsUh lg/qEEkeiZQ5yeAHzVXgs9/Nvp8Gxn/YhMNgK2rEkrG64SBBWeoZznlbqf9L2Nyh II2IcBhyalaTpJYAs26QJ3FMhQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGRNOaXV ZJdZI2MlZdjl7S0/jhVuMB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUI5MkQvNkJFMkNBRDBCRDMyMTFFRDg0QTgyODA5QzRGOUFFMDIvOTlCMTBFQzRC RDM1MTFFRDgzN0RFRDBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnYyMwDwQCAAIwCQMHACABDfHnwDANBgkqhkiG9w0BAQsF AAOCAQEASq9AwUI8UZdKiFJ3Dg7/jhtY4/vEU6JM6rQ9Jg8mLhW+xdsaVAbG6w98 2MIO1fyMzarbNuuR1YKUOcsfYo8XLTjona3bRIPOXWUJsojv82JiH5lRX7CpjpKj /WxBfN2Uxkqkw44JVQ4taY7XVxgt0ZoYBONO6QoWMPIGSM1AW3Wa8hSabs6vKPPr NIT6UdKDBSSojxDVYp2rwdoQ7GfK8VItEODRksgJr6sblp7tW9nSfzVLJsnEA0us rp8+c1NeCjd9ZISyCVP/WwhoPoh7UrRTCdiEs/KuOpIthLjsLqtXqgVDIrT4gfyg Cang3mcwrzCBa1cFlrj/thE0ruTcBg== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:47 2024 by rpki-client on console-ams.rpki-client.org