$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa File: 8698CD28A42211EB91621734C4F9AE02.roa (raw, json) Hash identifier: JASfvNQGueVGvvI4vyDMOa1HuqKYc3UAFhDDUGxJcdo= Subject key identifier: 30:64:96:AA:32:18:24:78:5E:C5:A2:02:35:74:45:18:B6:CB:55:49 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 07D4 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa Signing time: Tue 12 Dec 2023 21:49:20 +0000 ROA not before: Tue 12 Dec 2023 21:49:20 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 137990 IP address blocks: 103.104.100.0/22 maxlen: 22 103.104.100.0/24 maxlen: 24 103.104.101.0/24 maxlen: 24 103.104.102.0/24 maxlen: 24 103.104.103.0/24 maxlen: 24 202.43.224.0/24 maxlen: 24 2402:940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Dec 12 21:49:20 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6578d560-dbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:cf:30:3b:f6:99:1a:b6:12:d9:e0:1f:3a: 7d:a4:ac:d3:f2:fc:9e:bf:d4:76:7e:41:55:8d:12: e0:cc:e4:ef:2a:eb:fe:d1:48:75:2e:a1:25:15:67: 42:3c:77:d1:f6:55:13:b7:dc:53:dd:68:4b:1f:32: c6:6c:66:b2:f6:64:69:8e:86:f2:3d:73:4d:89:29: bc:6b:43:13:3c:49:99:21:d0:94:70:b8:19:23:f1: a1:ac:38:3b:37:46:69:5d:5b:5f:02:bf:4e:09:d0: b3:60:82:ec:40:81:b0:7c:cd:32:bf:87:5e:84:f5: 78:f0:51:f1:ac:69:8a:e4:45:8f:78:e5:de:92:dd: 39:63:bc:eb:ff:0b:38:10:17:cb:7c:93:a8:73:f5: be:08:d0:1c:cb:a7:6f:34:88:74:0a:15:18:7b:c6: 77:01:f3:8c:3d:d8:ad:45:da:72:3e:69:d8:a9:9a: 74:f7:70:99:24:25:6c:2e:1f:02:d4:51:7b:44:21: b2:88:18:58:0f:1d:25:7f:de:ac:b5:d2:9f:15:b0: 01:11:4d:e9:aa:e4:b2:e0:f4:6a:b6:87:3a:1d:45: 5b:98:25:90:8a:21:5f:7c:af:5e:b6:f6:59:8c:a9: 21:1a:83:02:99:ec:ac:e2:73:c8:ca:1b:b4:1a:16: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:64:96:AA:32:18:24:78:5E:C5:A2:02:35:74:45:18:B6:CB:55:49 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.100.0/22 202.43.224.0/24 IPv6: 2402:940::/32 Signature Algorithm: sha256WithRSAEncryption 97:d9:a4:07:e1:69:95:2c:8f:34:5c:10:eb:74:72:65:5f:23: 73:64:89:2a:d0:ed:ba:98:d8:54:d4:20:29:1e:1d:4a:7e:ab: d1:ee:e2:f3:82:b2:06:0f:2b:41:63:9c:4a:4b:8a:8b:e7:d6: b5:4d:96:86:e1:56:32:44:55:59:4b:be:df:78:9d:02:78:1e: 66:0d:17:b3:6f:ae:ad:07:d1:f0:72:ac:8d:d4:d6:72:85:75: 23:7a:8a:96:70:ef:98:ac:27:fe:fe:88:0c:6e:28:b4:af:c3: f6:4a:a9:30:79:62:71:d1:a2:bc:31:4b:66:fb:5d:f5:7d:92: 7e:69:35:cf:6c:90:50:fc:77:d8:50:86:00:d2:21:a9:c9:27: aa:41:2d:ba:da:1e:27:71:4d:75:51:af:37:7e:96:aa:a7:df: 52:57:94:9d:9b:77:42:ae:b8:7d:d6:c4:4b:4d:3d:6c:09:62: 08:bc:32:bc:1b:9a:84:00:b3:bb:d7:b6:10:d5:91:32:69:d0: 6c:a0:15:42:7a:37:45:83:f0:eb:dc:ca:25:33:67:00:ab:9d: f8:e9:b1:89:f7:48:bd:66:90:c7:2a:b1:51:4e:85:94:00:fd: fc:12:a3:09:23:38:86:12:b9:39:e9:a1:ff:85:8b:9f:7e:9c: 48:06:b2:7c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjMxMjEyMjE0OTIwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc4ZDU2MC1kYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl/PMDv2mRq2EtngHzp9pKzT8vyev9R2fkFVjRLgzOTvKuv+0Uh1LqElFWdC PHfR9lUTt9xT3WhLHzLGbGay9mRpjobyPXNNiSm8a0MTPEmZIdCUcLgZI/GhrDg7 N0ZpXVtfAr9OCdCzYILsQIGwfM0yv4dehPV48FHxrGmK5EWPeOXekt05Y7zr/ws4 EBfLfJOoc/W+CNAcy6dvNIh0ChUYe8Z3AfOMPditRdpyPmnYqZp093CZJCVsLh8C 1FF7RCGyiBhYDx0lf96stdKfFbABEU3pquSy4PRqtoc6HUVbmCWQiiFffK9etvZZ jKkhGoMCmeys4nPIyhu0GhZujwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDBklqoy GCR4XsWiAjV0RRi2y1VJMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg5Q0QvM0MwRDRBMTZCMDU1MTFFQUEwNDVCODBFQzRGOUFFMDIvODY5OENEMjhB NDIyMTFFQjkxNjIxNzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnaGQDBADKK+AwDQQCAAIwBwMFACQCCUAwDQYJKoZIhvcN AQELBQADggEBAJfZpAfhaZUsjzRcEOt0cmVfI3NkiSrQ7bqY2FTUICkeHUp+q9Hu 4vOCsgYPK0FjnEpLiovn1rVNlobhVjJEVVlLvt94nQJ4HmYNF7Nvrq0H0fByrI3U 1nKFdSN6ipZw75isJ/7+iAxuKLSvw/ZKqTB5YnHRorwxS2b7XfV9kn5pNc9skFD8 d9hQhgDSIanJJ6pBLbraHidxTXVRrzd+lqqn31JXlJ2bd0KuuH3WxEtNPWwJYgi8 MrwbmoQAs7vXthDVkTJp0GygFUJ6N0WD8OvcyiUzZwCrnfjpsYn3SL1mkMcqsVFO hZQA/fwSowkjOIYSuTnpof+Fi59+nEgGsnw= -----END CERTIFICATE-----Generated at Fri Jun 14 22:37:19 2024 by rpki-client on console-fra.rpki-client.org