$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/1B22E756D37711EC9A8FF526C4F9AE02.roa File: 1B22E756D37711EC9A8FF526C4F9AE02.roa (raw, json) Hash identifier: n3tV3xCdGKrXtayf300FEN17BZ98v1+YuTGqNoc8EF8= Subject key identifier: A3:58:65:34:E8:16:50:90:02:85:C8:F4:B1:98:21:C3:D1:44:CB:18 Certificate issuer: /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC Certificate serial: 025D Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/1B22E756D37711EC9A8FF526C4F9AE02.roa Signing time: Mon 03 Jun 2024 04:32:46 +0000 ROA not before: Mon 03 Jun 2024 04:32:46 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139009 IP address blocks: 103.187.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC Validity Not Before: Jun 3 04:32:46 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665d476e-ca93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:fe:11:0d:43:45:65:2a:bc:ca:e1:a5:3b: 61:d0:92:56:52:2a:ad:33:d9:ea:8a:f3:5a:fa:b8: b1:e5:58:c9:59:62:a0:0c:fd:78:29:4d:a3:8f:7a: 09:3c:c5:36:6e:96:0b:48:28:41:19:57:8a:a6:f3: 3a:e4:7c:f0:e9:7e:19:e5:a1:42:2d:33:97:ec:e4: 64:99:8b:8d:62:7c:35:9d:7e:15:ef:94:87:44:2d: 20:bf:dd:d8:69:e2:86:25:70:bd:98:92:d5:64:a0: f7:c8:16:ca:9c:20:df:c8:b5:72:ba:fe:d3:56:9d: 63:e2:56:fa:86:43:ad:b3:ea:67:fb:c1:14:99:18: 68:24:83:e4:9e:d4:25:c5:6e:b4:f0:d3:50:79:bd: 43:ca:54:ad:84:c1:11:a5:bb:2e:ad:2a:c2:22:d8: f4:1f:1d:64:6f:c8:04:6a:b5:40:ec:75:47:f9:78: 88:fb:04:36:7d:89:bb:9e:67:54:c1:e3:3a:9c:03: 45:de:f6:2d:d0:4f:1b:27:d6:6f:96:aa:a1:f0:ad: 81:98:de:6e:6a:8f:d8:72:b9:7f:a1:ef:69:ad:ab: 28:d3:1f:64:e8:62:6f:54:85:05:e8:7c:96:d4:ba: 98:72:16:20:46:4a:29:f2:32:bf:73:3b:d9:5a:14: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:58:65:34:E8:16:50:90:02:85:C8:F4:B1:98:21:C3:D1:44:CB:18 X509v3 Authority Key Identifier: keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/1B22E756D37711EC9A8FF526C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.98.0/23 Signature Algorithm: sha256WithRSAEncryption 01:78:10:5b:38:23:f2:8a:89:55:46:90:3f:35:a0:2a:80:18: d8:f6:67:2c:08:4d:08:09:75:a2:0a:6c:8f:49:6f:69:09:b9: f8:67:76:7d:21:ab:a1:09:e9:79:47:a4:93:a1:c2:09:ad:d3: 91:cd:69:24:35:00:ed:50:84:a3:2c:9d:a5:8a:43:ce:93:2f: b8:49:48:a1:dd:5f:1c:a3:00:4a:05:84:e6:45:22:3b:9d:19: a7:05:f7:45:4f:e7:6b:39:54:a0:fa:e8:76:9a:2c:00:e7:91: 25:4a:72:64:36:f3:fa:3d:d0:bc:f5:94:a6:24:ad:fa:e4:a0: cd:6e:6d:a5:b5:02:03:74:66:a3:45:4a:b9:77:6a:08:1a:84: 85:65:04:ad:bd:b0:a6:0d:9c:dd:60:39:28:0c:a7:ad:98:33: 1f:8c:58:40:77:6b:d6:c8:be:96:7a:39:5b:be:16:3e:83:09: 86:a7:1a:ca:4d:0e:bb:9d:60:1d:a3:20:fc:6d:18:de:75:3d: 81:19:89:59:a4:6c:a6:4b:4f:70:71:b3:f1:14:63:8f:a5:af: 11:48:4e:33:19:bb:b1:8d:fa:80:49:5f:0b:6c:80:c5:40:4e: e6:03:58:6b:9a:7a:24:af:d3:3b:f3:c5:d2:e4:0f:d9:16:30: 07:e0:14:67 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3NTgxMTAvBgNVBAUTKEFGNTU1ODFCQTEyN0UyMDkwQTBBNTQ2MkZFN0JDRTcw NjE2RjJDREMwHhcNMjQwNjAzMDQzMjQ2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVkNDc2ZS1jYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OD+EQ1DRWUqvMrhpTth0JJWUiqtM9nqivNa+rix5VjJWWKgDP14KU2jj3oJ PMU2bpYLSChBGVeKpvM65Hzw6X4Z5aFCLTOX7ORkmYuNYnw1nX4V75SHRC0gv93Y aeKGJXC9mJLVZKD3yBbKnCDfyLVyuv7TVp1j4lb6hkOts+pn+8EUmRhoJIPkntQl xW608NNQeb1DylSthMERpbsurSrCItj0Hx1kb8gEarVA7HVH+XiI+wQ2fYm7nmdU weM6nANF3vYt0E8bJ9Zvlqqh8K2BmN5uao/Ycrl/oe9praso0x9k6GJvVIUF6HyW 1LqYchYgRkop8jK/czvZWhR5KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKNYZTTo FlCQAoXI9LGYIcPRRMsYMB8GA1UdIwQYMBaAFK9VWBuhJ+IJCgpUYv57znBhbyzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc1OC80QzdBMjg2OEQz NkUxMUVDQjI2MTQ0NTNDNEY5QUUwMi9yMVZZRzZFbjRna0tDbFJpX252T2NHRnZM TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IxVllHNkVuNGdrS0NsUmlfbnZPY0dGdkxOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI3NTgvNEM3QTI4NjhEMzZFMTFFQ0IyNjE0NDUzQzRGOUFFMDIvMUIyMkU3NTZE Mzc3MTFFQzlBOEZGNTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnu2IwDQYJKoZIhvcNAQELBQADggEBAAF4EFs4I/KKiVVG kD81oCqAGNj2ZywITQgJdaIKbI9Jb2kJufhndn0hq6EJ6XlHpJOhwgmt05HNaSQ1 AO1QhKMsnaWKQ86TL7hJSKHdXxyjAEoFhOZFIjudGacF90VP52s5VKD66HaaLADn kSVKcmQ28/o90Lz1lKYkrfrkoM1ubaW1AgN0ZqNFSrl3aggahIVlBK29sKYNnN1g OSgMp62YMx+MWEB3a9bIvpZ6OVu+Fj6DCYanGspNDrudYB2jIPxtGN51PYEZiVmk bKZLT3Bxs/EUY4+lrxFITjMZu7GN+oBJXwtsgMVATuYDWGuaeiSv0zvzxdLkD9kW MAfgFGc= -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:55 2024 by rpki-client on console-fra.rpki-client.org