$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/F15E709A880611ECAF18133AC4F9AE02.roa File: F15E709A880611ECAF18133AC4F9AE02.roa (raw, json) Hash identifier: r+2gczfolioxdOOu1jOVrEWd+Ns5v4HYtipze2KFuFw= Subject key identifier: 5F:96:0A:31:15:CD:80:F5:E3:7F:F5:FF:3F:3C:69:B7:1F:EB:95:68 Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 0346 Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/F15E709A880611ECAF18133AC4F9AE02.roa Signing time: Thu 29 Aug 2024 02:04:46 +0000 ROA not before: Thu 29 Aug 2024 02:04:46 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 136903 IP address blocks: 103.98.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Validity Not Before: Aug 29 02:04:46 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66cfd73e-df02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:04:1c:a7:02:75:b5:3c:4b:d2:b8:96:4a: 0d:e2:3c:99:21:2e:9e:b2:05:7e:a9:14:20:02:1d: 3a:44:ef:a5:ee:da:0f:a8:bb:b2:84:f2:c9:03:f2: 32:aa:44:81:b7:de:98:3c:68:a2:d5:be:f3:6b:32: 1f:c8:71:70:89:21:a2:7d:dd:4b:b2:ba:ca:93:f6: b0:8a:bd:3a:b7:d3:4f:8a:ca:7f:b7:bd:0f:a7:46: 84:0e:56:83:8d:54:29:a6:4e:29:af:01:a2:32:3d: 05:7f:8e:65:d3:0c:7e:cb:08:23:88:42:81:4e:fd: 41:ca:d3:01:4b:38:49:3e:38:5c:0a:65:b2:cb:a7: be:5c:e5:e1:34:07:64:18:15:87:02:eb:1e:b5:1e: 02:47:8d:47:ed:32:36:d7:9b:23:33:2e:d4:15:6e: 7d:fd:51:5b:6d:83:b6:4d:c8:4b:1c:35:6e:30:0b: 02:fd:52:d7:65:50:95:84:a4:52:fd:4c:17:72:1c: 74:05:0a:0b:4f:42:1e:6a:40:90:2b:96:70:d3:91: 28:da:e3:50:9e:be:13:d3:6b:b3:c7:ff:4c:25:43: 98:01:c7:29:e8:2f:22:7f:51:b0:35:8b:85:f1:12: b4:c6:ea:a2:b6:83:a1:d7:d9:cc:21:a5:84:ef:82: 5f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:96:0A:31:15:CD:80:F5:E3:7F:F5:FF:3F:3C:69:B7:1F:EB:95:68 X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/F15E709A880611ECAF18133AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.106.0/23 Signature Algorithm: sha256WithRSAEncryption 60:41:bd:bc:64:62:2d:5b:e5:1d:44:fd:ef:56:e4:e4:b0:fb: 01:db:ca:da:23:36:bc:11:4f:c2:49:51:3e:82:30:9c:04:de: cd:8f:54:6a:3d:a7:3f:c8:e1:74:e3:4f:65:8d:8f:2c:d3:dd: b7:8b:6a:71:35:ec:6a:d0:2f:a0:03:fa:9b:e7:38:cc:d7:b9: a1:54:d3:1f:f8:e9:06:4b:4c:eb:54:0d:22:99:04:72:78:d3: fb:e6:7c:f9:bb:0a:ba:6a:94:b8:60:4f:92:f2:aa:a3:1d:ae: a5:23:19:23:99:1b:3c:9c:e3:73:27:c7:99:23:9d:90:ea:14: 1e:4f:fb:4f:b6:cc:10:f8:1e:70:d3:b2:6f:7f:cb:da:af:2d: 8d:6a:1b:fa:4b:5e:0e:4e:f3:4a:01:87:96:80:97:93:f0:cf: f0:79:df:ff:1d:89:4e:19:dc:f1:69:71:b4:e1:c8:28:20:b6: 99:37:b2:78:c5:87:95:7d:48:fd:2d:69:99:37:85:4f:3f:1a: c8:67:9c:fa:30:40:a5:6d:d7:8b:5e:b7:10:40:8d:80:33:d8: 70:c1:f3:69:07:51:ed:42:be:1f:1d:ca:97:ce:6b:98:17:08: af:18:85:2c:16:3f:84:94:53:43:8c:1d:ff:af:f4:08:27:1b: d6:1a:48:f5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjQwODI5MDIwNDQ2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNmZDczZS1kZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTwEHKcCdbU8S9K4lkoN4jyZIS6esgV+qRQgAh06RO+l7toPqLuyhPLJA/Iy qkSBt96YPGii1b7zazIfyHFwiSGifd1LsrrKk/awir06t9NPisp/t70Pp0aEDlaD jVQppk4prwGiMj0Ff45l0wx+ywgjiEKBTv1BytMBSzhJPjhcCmWyy6e+XOXhNAdk GBWHAusetR4CR41H7TI215sjMy7UFW59/VFbbYO2TchLHDVuMAsC/VLXZVCVhKRS /UwXchx0BQoLT0IeakCQK5Zw05Eo2uNQnr4T02uzx/9MJUOYAccp6C8if1GwNYuF 8RK0xuqitoOh19nMIaWE74JfowIDAQABo4IClTCCApEwHQYDVR0OBBYEFF+WCjEV zYD143/1/z88abcf65VoMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk0RjAvRTRCMUJEMzg4ODAyMTFFQ0JGM0MxRDMyQzRGOUFFMDIvRjE1RTcwOUE4 ODA2MTFFQ0FGMTgxMzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnYmowDQYJKoZIhvcNAQELBQADggEBAGBBvbxkYi1b5R1E /e9W5OSw+wHbytojNrwRT8JJUT6CMJwE3s2PVGo9pz/I4XTjT2WNjyzT3beLanE1 7GrQL6AD+pvnOMzXuaFU0x/46QZLTOtUDSKZBHJ40/vmfPm7CrpqlLhgT5LyqqMd rqUjGSOZGzyc43Mnx5kjnZDqFB5P+0+2zBD4HnDTsm9/y9qvLY1qG/pLXg5O80oB h5aAl5Pwz/B53/8diU4Z3PFpcbThyCggtpk3snjFh5V9SP0taZk3hU8/GshnnPow QKVt14tetxBAjYAz2HDB82kHUe1Cvh8dypfOa5gXCK8YhSwWP4SUU0OMHf+v9Agn G9YaSPU= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org