$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/B91AACE86C8A11EEA934912FC4F9AE02.roa File: B91AACE86C8A11EEA934912FC4F9AE02.roa (raw, json) Hash identifier: 3Z5IT3rC9rL27wLRJC3RRhK9Cn9t3ZeX+3ETxJ5au8E= Subject key identifier: 6F:A5:93:1E:8B:53:C8:A4:FD:15:5B:08:69:C9:AC:05:D3:09:D6:3B Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 0562 Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/B91AACE86C8A11EEA934912FC4F9AE02.roa Signing time: Tue 17 Oct 2023 01:15:56 +0000 ROA not before: Tue 17 Oct 2023 01:15:56 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 209854 IP address blocks: 118.99.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: Oct 17 01:15:56 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=652de04c-5524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:49:3e:f0:da:87:1d:09:4d:08:20:62:cc: 86:a6:79:8c:51:ae:49:21:ba:f5:ec:47:9c:15:68: f5:d2:ba:96:9a:2b:c6:10:25:4c:4e:32:7e:28:f0: a7:7a:7a:37:95:86:a0:13:34:68:f4:ff:64:c5:55: d5:9f:39:08:9e:75:7d:44:3e:65:df:31:2c:68:f6: 26:c2:ba:17:23:b5:b9:4b:6a:d4:d5:2d:28:4a:6e: d3:8d:e4:78:ec:fb:c0:d0:84:ae:3b:b5:b4:98:e1: 3e:bc:dd:48:5f:35:86:4a:ff:8b:90:de:02:f6:e6: 1f:9f:db:a0:7a:95:a1:d1:df:db:54:21:47:63:ba: 1b:27:60:1a:89:93:4a:c4:00:35:60:c8:8d:15:ae: 87:7a:e8:b0:6a:ea:50:7c:99:ea:ee:95:56:e1:7d: 68:0f:f4:cd:94:44:4a:1e:42:27:47:93:29:0c:ce: e6:c3:6f:7f:25:03:fe:bf:d4:a9:75:f4:33:76:10: c5:f3:73:98:bf:af:34:63:95:73:43:ae:dc:5a:35: 7a:fb:d3:58:c6:c1:8f:88:8a:d8:6a:90:5f:02:e4: 76:fb:37:fc:14:15:bd:d0:c8:46:fd:bc:f0:6a:0b: 64:af:85:e1:24:39:10:87:98:76:ef:18:93:87:f1: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A5:93:1E:8B:53:C8:A4:FD:15:5B:08:69:C9:AC:05:D3:09:D6:3B X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/B91AACE86C8A11EEA934912FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.99.2.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:d4:71:c6:58:1f:15:c6:14:63:f7:76:42:41:65:d0:7e:82: e7:8a:27:81:61:d7:7d:eb:df:e8:f3:aa:38:d3:91:84:09:af: 29:a6:9b:3b:17:0f:e6:16:22:45:3d:6d:7f:ce:0d:fa:c7:b7: 3a:0a:5d:3c:e2:58:57:6f:bf:07:e6:88:fb:17:32:41:3f:7a: d2:0e:59:42:2d:8a:3e:9a:e4:0c:7c:0d:16:16:10:b1:25:d4: 2d:f0:95:2b:48:f0:cd:48:ed:dc:39:91:e9:52:15:7b:a3:ab: 75:a5:f6:a1:04:5b:b9:0d:84:e7:e9:53:7a:5c:77:5b:37:0b: 60:38:15:c7:ac:70:29:5c:f6:8c:21:e8:92:c3:ab:f9:7a:88: 45:82:22:66:19:ca:d3:52:a0:7a:97:1b:09:b7:83:1d:25:92: 3e:f2:bd:44:d4:86:ab:b4:d0:26:eb:c2:3e:45:af:97:b3:92: 1b:06:ad:9c:44:9b:33:e2:0e:2e:15:68:b4:39:ed:fc:cd:ec: 57:6c:17:1e:45:77:d9:d3:59:4f:38:b2:39:88:83:8b:ac:5a: 17:4a:d1:58:dc:c8:65:7c:b8:19:d1:da:39:d6:76:44:59:37: bb:c3:15:63:ab:58:30:b0:04:f4:8f:c8:c5:8b:d6:3c:f8:96: 9b:1d:77:84 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjMxMDE3MDExNTU2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJkZTA0Yy01NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbJJPvDahx0JTQggYsyGpnmMUa5JIbr17EecFWj10rqWmivGECVMTjJ+KPCn eno3lYagEzRo9P9kxVXVnzkInnV9RD5l3zEsaPYmwroXI7W5S2rU1S0oSm7TjeR4 7PvA0ISuO7W0mOE+vN1IXzWGSv+LkN4C9uYfn9ugepWh0d/bVCFHY7obJ2AaiZNK xAA1YMiNFa6HeuiwaupQfJnq7pVW4X1oD/TNlERKHkInR5MpDM7mw29/JQP+v9Sp dfQzdhDF83OYv680Y5VzQ67cWjV6+9NYxsGPiIrYapBfAuR2+zf8FBW90MhG/bzw agtkr4XhJDkQh5h27xiTh/EuQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG+lkx6L U8ik/RVbCGnJrAXTCdY7MB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjRENjAvOUUwREUzOTJCNDVGMTFFQkI2MUI3NjBDQzRGOUFFMDIvQjkxQUFDRTg2 QzhBMTFFRUE5MzQ5MTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB2YwIwDQYJKoZIhvcNAQELBQADggEBAE3UccZYHxXGFGP3 dkJBZdB+gueKJ4Fh133r3+jzqjjTkYQJrymmmzsXD+YWIkU9bX/ODfrHtzoKXTzi WFdvvwfmiPsXMkE/etIOWUItij6a5Ax8DRYWELEl1C3wlStI8M1I7dw5kelSFXuj q3Wl9qEEW7kNhOfpU3pcd1s3C2A4FcescClc9owh6JLDq/l6iEWCImYZytNSoHqX Gwm3gx0lkj7yvUTUhqu00Cbrwj5Fr5ezkhsGrZxEmzPiDi4VaLQ57fzN7FdsFx5F d9nTWU84sjmIg4usWhdK0VjcyGV8uBnR2jnWdkRZN7vDFWOrWDCwBPSPyMWL1jz4 lpsdd4Q= -----END CERTIFICATE-----Generated at Tue May 7 01:58:19 2024 by rpki-client on console-fra.rpki-client.org