$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/99AB821E859C11E7A1FEC80AC4F9AE02.roa File: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (raw, json) Hash identifier: uCxWQpPYYwBOaQTgVdDXhazWZE/2wYLeVKs+vSiii6c= Subject key identifier: CC:A4:FC:F1:15:89:F2:4F:CF:83:66:5A:DF:B4:6A:2D:25:A2:61:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 17F2 Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/99AB821E859C11E7A1FEC80AC4F9AE02.roa Signing time: Mon 18 Sep 2023 16:53:55 +0000 ROA not before: Mon 18 Sep 2023 16:53:54 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 136909 IP address blocks: 103.98.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6130 (0x17f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Sep 18 16:53:54 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=650880a2-be88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:64:6c:b5:1b:1d:31:10:ef:62:f0:be:37: 49:6e:b5:a0:1c:f4:8e:da:f2:5f:f9:59:da:ac:6e: ae:cc:92:41:c1:62:3c:03:53:45:e7:64:45:f7:20: b1:de:ff:99:90:da:8d:8c:14:76:39:9a:b1:ce:a5: 57:74:8b:b0:25:c1:44:3e:8d:61:0c:5d:4e:83:98: fb:0b:60:6c:f2:ea:7e:ee:76:fb:65:d4:e0:6a:d3: cb:bc:1c:d4:1b:5d:1a:fa:d5:ae:47:0a:3c:e3:84: 01:e0:97:36:31:bd:fa:45:7a:de:59:3f:6f:14:4d: da:69:0f:b2:bd:a9:6e:4b:b4:7c:b8:67:99:16:e0: 9e:69:a1:2b:76:f2:c6:96:41:2a:0e:62:da:13:0c: 72:eb:fe:ba:00:6b:27:9c:ec:90:c5:89:d9:79:07: 74:fc:a8:d9:fd:4c:43:ff:73:a1:24:33:fb:f9:46: 52:f8:52:4b:0d:40:fc:f6:6a:5d:f9:07:58:d5:37: 61:80:8d:e1:cb:8f:1f:d7:f2:a9:ad:e8:74:ec:77: 3d:ee:f9:05:f0:9b:30:d0:47:38:29:bd:da:1e:6a: ba:fc:75:29:5f:bb:68:eb:fe:7e:20:eb:aa:3f:7e: 11:d7:85:b6:61:af:9b:2a:66:eb:f1:35:fb:32:3f: bd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A4:FC:F1:15:89:F2:4F:CF:83:66:5A:DF:B4:6A:2D:25:A2:61:0E X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/99AB821E859C11E7A1FEC80AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.200.0/22 Signature Algorithm: sha256WithRSAEncryption a9:39:fb:f2:f2:af:0c:d5:52:b2:3c:dd:ae:7e:f6:15:88:1d: 2f:58:36:ba:cb:13:32:4e:df:10:37:39:d6:18:69:c7:73:45: 9a:c5:5d:71:70:6f:5a:8b:57:18:16:64:d0:e2:c8:9d:19:04: 77:c5:78:55:52:c1:dc:a9:c9:9f:52:62:a0:bc:6f:4a:b1:d2: 9a:42:de:f3:03:e6:e3:40:db:36:bc:eb:0f:2f:f9:a8:fa:42: 3a:a4:e0:44:9a:3c:ce:27:af:00:b8:4a:c1:ee:38:2f:03:3c: 51:74:21:c8:9e:4b:a6:64:14:6e:6d:ac:26:75:e4:6c:45:fa: a5:c4:56:53:1e:d3:ea:d3:86:1c:ab:cc:83:ec:ce:07:f2:cc: 4e:28:02:b5:dd:43:aa:a6:94:f2:6b:97:71:8c:96:e6:55:d2: df:85:05:d1:4e:b7:19:e5:66:02:e1:f0:bc:c9:ab:3d:6d:4d: 87:42:7e:7d:44:78:6a:15:ad:2f:15:47:af:90:87:c5:38:0d: 86:a0:a6:ac:b4:c3:28:ca:78:61:b5:25:e6:44:84:55:44:85: 3e:64:75:83:ec:d9:e9:db:87:98:30:36:ef:a1:30:e9:f2:f6: 90:4e:23:b8:f2:df:fa:e7:7c:7f:56:0f:57:bc:0c:2a:77:9a: 78:60:9d:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICF/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjMwOTE4MTY1MzU0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTA4ODBhMi1iZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkxkbLUbHTEQ72LwvjdJbrWgHPSO2vJf+VnarG6uzJJBwWI8A1NF52RF9yCx 3v+ZkNqNjBR2OZqxzqVXdIuwJcFEPo1hDF1Og5j7C2Bs8up+7nb7ZdTgatPLvBzU G10a+tWuRwo844QB4Jc2Mb36RXreWT9vFE3aaQ+yvaluS7R8uGeZFuCeaaErdvLG lkEqDmLaEwxy6/66AGsnnOyQxYnZeQd0/KjZ/UxD/3OhJDP7+UZS+FJLDUD89mpd +QdY1TdhgI3hy48f1/Kpreh07Hc97vkF8Jsw0Ec4Kb3aHmq6/HUpX7to6/5+IOuq P34R14W2Ya+bKmbr8TX7Mj+9LQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMyk/PEV ifJPz4NmWt+0ai0lomEOMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg3OTkvMzI4N0JGQTI3RUM3MTFFNzg4M0UyRTU4QzRGOUFFMDIvOTlBQjgyMUU4 NTlDMTFFN0ExRkVDODBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnYsgwDQYJKoZIhvcNAQELBQADggEBAKk5+/LyrwzVUrI8 3a5+9hWIHS9YNrrLEzJO3xA3OdYYacdzRZrFXXFwb1qLVxgWZNDiyJ0ZBHfFeFVS wdypyZ9SYqC8b0qx0ppC3vMD5uNA2za86w8v+aj6Qjqk4ESaPM4nrwC4SsHuOC8D PFF0IcieS6ZkFG5trCZ15GxF+qXEVlMe0+rThhyrzIPszgfyzE4oArXdQ6qmlPJr l3GMluZV0t+FBdFOtxnlZgLh8LzJqz1tTYdCfn1EeGoVrS8VR6+Qh8U4DYagpqy0 wyjKeGG1JeZEhFVEhT5kdYPs2enbh5gwNu+hMOny9pBOI7jy3/rnfH9WD1e8DCp3 mnhgnSQ= -----END CERTIFICATE-----Generated at Wed May 8 17:46:58 2024 by rpki-client on console-ams.rpki-client.org