$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/993EC4A6053A11EAAC92336CC4F9AE02.roa File: 993EC4A6053A11EAAC92336CC4F9AE02.roa (raw, json) Hash identifier: 3AmLDN9kUO0iJK4FUY7YrIWCTP4KQL12FC5b5uIw/po= Subject key identifier: BC:36:F9:B3:9A:5A:DA:62:70:7B:F1:C6:23:D6:BF:25:D1:25:5C:26 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0B00 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/993EC4A6053A11EAAC92336CC4F9AE02.roa Signing time: Fri 08 Sep 2023 19:06:47 +0000 ROA not before: Fri 08 Sep 2023 19:06:47 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 136911 IP address blocks: 103.98.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 19:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2816 (0xb00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Sep 8 19:06:47 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64fb70c7-2907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:bb:27:bd:f0:14:32:ba:dd:3f:57:09:01: bd:f4:02:e9:0b:8f:69:c2:06:e6:0c:65:2d:fc:e8: ad:f5:68:06:e3:1e:5f:83:cc:53:b4:89:b3:ad:31: 3e:6a:37:7f:6a:03:2b:fb:f3:52:e0:bf:c2:b8:d0: 16:75:a9:0b:26:73:af:bc:27:e3:2d:46:46:a9:28: 59:ad:e0:86:c2:41:57:67:bc:d6:1b:29:55:72:38: fa:73:22:3d:6b:ef:91:f1:db:b6:19:02:b7:b9:ee: 53:40:e1:e6:3e:d2:27:be:b2:ba:d2:3c:43:93:a2: 42:67:1a:7d:5c:63:29:a7:ee:2b:ff:42:77:4d:dc: f8:fd:9f:3c:51:a3:4d:d5:83:82:eb:fe:a1:c6:14: c0:da:01:c2:88:63:77:72:23:4b:f6:c8:4a:66:17: d1:86:f7:9c:48:2a:72:36:0b:d7:27:0f:85:9d:2b: 68:fb:9f:6e:b4:c1:a3:bf:5f:86:47:ac:6a:1d:79: 5a:1b:a7:23:33:da:3c:b4:b3:c2:f7:df:29:b3:83: dc:ec:9f:ba:57:4c:99:fb:62:34:98:26:42:a6:21: fd:c2:4e:6f:33:08:15:8d:c2:18:22:0a:64:4d:7b: 11:ef:60:85:1f:77:68:c1:e2:e8:8f:44:da:08:36: f2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:36:F9:B3:9A:5A:DA:62:70:7B:F1:C6:23:D6:BF:25:D1:25:5C:26 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/993EC4A6053A11EAAC92336CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.135.0/24 Signature Algorithm: sha256WithRSAEncryption 16:47:26:96:43:8d:55:c6:35:5a:c4:b6:fa:2f:78:eb:53:9e: 91:a3:20:99:b2:8d:d8:f9:af:64:77:66:65:5e:66:b2:71:29: c6:c1:67:11:8b:b0:cf:b7:1a:e4:39:20:36:e0:2c:e2:c0:c4: e0:f6:60:4e:eb:46:ba:b8:78:70:fe:72:76:af:2e:8c:3b:60: 70:a4:4c:97:15:7c:42:01:b5:15:fe:3b:fb:1e:fa:35:5e:11: 08:66:c3:32:e7:60:d4:93:d5:2c:12:45:e5:e4:72:c4:e9:a2: 40:25:99:bf:eb:b1:89:a6:06:1f:15:46:d2:55:08:f6:bc:ab: 9d:7f:b7:30:0a:34:35:43:09:5a:2d:d8:58:c7:a4:65:22:24: 6b:a1:bf:e9:e2:3f:99:44:ad:70:49:e7:f4:e8:1f:29:ab:a7: d7:b3:ba:1f:2b:83:62:bf:72:4d:5f:5f:c9:71:3f:3f:c8:b8: f6:09:ba:69:6e:71:6d:85:52:c3:87:a7:ad:d9:86:2f:56:98: 9c:e1:98:e7:dc:fb:ae:f6:15:74:24:7a:4a:c8:bd:22:4b:78: 4e:22:0c:4b:78:4b:07:fb:af:44:1d:31:1b:eb:d9:4d:6f:89: 9e:c4:51:38:13:bd:08:3e:06:49:d5:6c:87:a2:60:fd:a1:1a: d7:ef:25:3f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjMwOTA4MTkwNjQ3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZiNzBjNy0yOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxi7J73wFDK63T9XCQG99ALpC49pwgbmDGUt/Oit9WgG4x5fg8xTtImzrTE+ ajd/agMr+/NS4L/CuNAWdakLJnOvvCfjLUZGqShZreCGwkFXZ7zWGylVcjj6cyI9 a++R8du2GQK3ue5TQOHmPtInvrK60jxDk6JCZxp9XGMpp+4r/0J3Tdz4/Z88UaNN 1YOC6/6hxhTA2gHCiGN3ciNL9shKZhfRhvecSCpyNgvXJw+FnSto+59utMGjv1+G R6xqHXlaG6cjM9o8tLPC998ps4Pc7J+6V0yZ+2I0mCZCpiH9wk5vMwgVjcIYIgpk TXsR72CFH3doweLoj0TaCDbyKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLw2+bOa WtpicHvxxiPWvyXRJVwmMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkU0MEIvREM1RjFBQ0EwNTM5MTFFQUIxNzQyQzZCQzRGOUFFMDIvOTkzRUM0QTYw NTNBMTFFQUFDOTIzMzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYocwDQYJKoZIhvcNAQELBQADggEBABZHJpZDjVXGNVrE tvoveOtTnpGjIJmyjdj5r2R3ZmVeZrJxKcbBZxGLsM+3GuQ5IDbgLOLAxOD2YE7r Rrq4eHD+cnavLow7YHCkTJcVfEIBtRX+O/se+jVeEQhmwzLnYNST1SwSReXkcsTp okAlmb/rsYmmBh8VRtJVCPa8q51/tzAKNDVDCVot2FjHpGUiJGuhv+niP5lErXBJ 5/ToHymrp9ezuh8rg2K/ck1fX8lxPz/IuPYJumlucW2FUsOHp63Zhi9WmJzhmOfc +672FXQkekrIvSJLeE4iDEt4Swf7r0QdMRvr2U1viZ7EUTgTvQg+BknVbIeiYP2h GtfvJT8= -----END CERTIFICATE-----Generated at Wed Jun 12 22:42:45 2024 by rpki-client on console-ams.rpki-client.org