$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/99DF3B20183A11EBB9F78E80C4F9AE02.roa File: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (raw, json) Hash identifier: mIkYuwttFJpgB9YsMuKbAh+MnptYwT88r2mLUS8F6Bw= Subject key identifier: A9:1F:6E:24:DA:F0:D4:51:FC:C8:07:FE:BB:7C:3B:D6:70:31:30:83 Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740 Certificate serial: 06DA Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/99DF3B20183A11EBB9F78E80C4F9AE02.roa Signing time: Sat 01 Jun 2024 00:42:39 +0000 ROA not before: Sat 01 Jun 2024 00:42:39 +0000 ROA not after: Tue 01 Oct 2024 00:00:00 +0000 asID: 19905 IP address blocks: 103.225.112.0/24 maxlen: 24 103.225.113.0/24 maxlen: 24 103.225.114.0/24 maxlen: 24 103.225.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740 Validity Not Before: Jun 1 00:42:39 2024 GMT Not After : Oct 1 00:00:00 2024 GMT Subject: CN=665a6e7f-024f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:ce:9d:2c:dd:3f:1b:7e:dc:7b:71:9a:c9: 07:50:f1:5b:05:dc:8f:f1:d0:ea:d3:9f:6e:66:f6: 0e:60:e3:46:b3:45:ba:23:99:60:1a:a2:c2:9f:8b: 5f:da:0f:6e:d9:d4:82:ae:4b:a7:81:19:7e:2c:7c: e6:3a:7f:3b:5a:85:ab:29:99:fe:1b:43:a1:23:4b: 97:3e:16:66:6c:da:c8:12:c4:eb:00:66:29:92:fd: 74:67:cd:38:93:08:10:62:d0:67:46:98:70:05:a2: 82:a7:ad:f2:c5:6b:49:72:c6:9f:d3:ff:5a:b0:82: 03:7c:c0:c4:35:ca:78:71:6b:60:fd:45:35:05:5f: cf:d3:0c:bf:7e:5d:3c:6e:77:c3:76:8e:8a:b5:84: 29:09:2f:86:a5:42:46:95:36:ee:b1:fc:55:a1:4a: e0:c4:b2:9f:1d:eb:49:90:5a:96:ed:b9:79:ce:09: fb:38:74:8c:8c:c0:34:29:5d:e1:60:d9:52:f9:95: e7:f8:3d:d8:4b:00:06:8c:55:48:41:25:1c:ed:26: 10:60:71:1e:f8:f1:e0:21:b6:07:87:cc:26:b2:07: bf:29:98:94:f1:b3:25:fe:37:a8:7e:e9:0a:48:38: ed:30:d7:d4:f2:18:a7:82:f5:df:32:f8:42:a0:4d: 58:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1F:6E:24:DA:F0:D4:51:FC:C8:07:FE:BB:7C:3B:D6:70:31:30:83 X509v3 Authority Key Identifier: keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/99DF3B20183A11EBB9F78E80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.112.0/22 Signature Algorithm: sha256WithRSAEncryption 29:91:d4:59:24:8d:b0:64:72:38:39:5e:81:24:8a:2c:d7:b1: bf:99:b2:71:8d:e0:de:a3:6f:4a:25:32:f9:37:dc:f4:a3:66: c1:44:72:33:c5:ea:0f:db:d5:e5:9f:be:78:56:08:0e:b3:c7: 8b:42:19:5d:c1:5a:4e:dd:d5:fe:88:e1:0a:e9:2f:ea:65:17: 54:03:5e:60:63:c4:7b:85:00:b3:bc:77:34:40:89:32:4d:12: 3a:c4:fb:40:07:cb:58:5b:58:f1:f1:17:cf:1b:a2:07:c6:4f: d4:15:a7:ae:39:76:78:fd:d6:b5:4f:b1:db:e4:9a:c1:67:ee: 0c:d3:5e:86:b9:b5:1e:86:7e:fa:e7:f0:a4:e6:72:40:75:c8: e0:af:4c:cc:02:31:ab:69:4a:d8:bc:80:7b:21:85:c7:87:12: b8:36:9c:9b:0a:b3:60:0b:56:cb:2f:cb:95:f5:57:be:1a:3c: 7d:5a:d6:d3:c2:79:4a:99:70:0d:c4:eb:47:ec:71:f5:6b:2b: 6c:26:85:27:70:9e:5a:4d:b7:ee:ba:94:9c:09:53:28:db:cf: b7:6e:31:aa:20:1b:e8:9f:73:50:04:73:eb:21:a0:c2:69:57: 62:b6:15:91:5e:f2:c1:a2:21:5c:83:6e:cc:dc:94:13:ec:e6: 6b:f7:2d:99 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3NzkxMTAvBgNVBAUTKEJCMDNCOEQyNDQ3RUY4MTNBMzdBOTU4Nzc2NkEwMUY3 MzU5REQ3NDAwHhcNMjQwNjAxMDA0MjM5WhcNMjQxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVhNmU3Zi0wMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwTOnSzdPxt+3HtxmskHUPFbBdyP8dDq059uZvYOYONGs0W6I5lgGqLCn4tf 2g9u2dSCrkungRl+LHzmOn87WoWrKZn+G0OhI0uXPhZmbNrIEsTrAGYpkv10Z804 kwgQYtBnRphwBaKCp63yxWtJcsaf0/9asIIDfMDENcp4cWtg/UU1BV/P0wy/fl08 bnfDdo6KtYQpCS+GpUJGlTbusfxVoUrgxLKfHetJkFqW7bl5zgn7OHSMjMA0KV3h YNlS+ZXn+D3YSwAGjFVIQSUc7SYQYHEe+PHgIbYHh8wmsge/KZiU8bMl/jeofukK SDjtMNfU8hingvXfMvhCoE1YYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKkfbiTa 8NRR/MgH/rt8O9ZwMTCDMB8GA1UdIwQYMBaAFLsDuNJEfvgTo3qVh3ZqAfc1nddA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjc3OS84OTAyNDk5NDE4 MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1CT2plcFdIZG1vQjl6V2Qx MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V3TzQwa1ItLUJPamVwV0hkbW9COXpXZDEwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI3NzkvODkwMjQ5OTQxODM3MTFFQjgwNjRCMDdBQzRGOUFFMDIvOTlERjNCMjAx ODNBMTFFQkI5Rjc4RTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn4XAwDQYJKoZIhvcNAQELBQADggEBACmR1FkkjbBkcjg5 XoEkiizXsb+ZsnGN4N6jb0olMvk33PSjZsFEcjPF6g/b1eWfvnhWCA6zx4tCGV3B Wk7d1f6I4QrpL+plF1QDXmBjxHuFALO8dzRAiTJNEjrE+0AHy1hbWPHxF88bogfG T9QVp645dnj91rVPsdvkmsFn7gzTXoa5tR6Gfvrn8KTmckB1yOCvTMwCMatpSti8 gHshhceHErg2nJsKs2ALVssvy5X1V74aPH1a1tPCeUqZcA3E60fscfVrK2wmhSdw nlpNt+66lJwJUyjbz7duMaogG+ifc1AEc+shoMJpV2K2FZFe8sGiIVyDbszclBPs 5mv3LZk= -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:22 2024 by rpki-client on console-ams.rpki-client.org