$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/98E30C12DCE411EDB446D65DC4F9AE02.roa File: 98E30C12DCE411EDB446D65DC4F9AE02.roa (raw, json) Hash identifier: 49FU6Pqskd0STwLV8L+AU1hOaoW163NMNfvwI6EbZ1I= Subject key identifier: 05:27:63:47:60:FF:E9:44:D1:4A:13:13:8B:BB:A7:9C:13:E6:1D:48 Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1AF6 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/98E30C12DCE411EDB446D65DC4F9AE02.roa Signing time: Fri 22 Sep 2023 16:33:26 +0000 ROA not before: Fri 22 Sep 2023 16:33:26 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 26506 IP address blocks: 114.10.32.0/24 maxlen: 24 114.10.33.0/25 maxlen: 25 114.10.33.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 16:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6902 (0x1af6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Sep 22 16:33:26 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=650dc1d5-4bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:57:95:87:6c:9e:a3:69:a7:6e:0d:91:31: c8:cb:f6:a9:80:26:7d:c3:cb:01:69:76:8e:f9:09: 7c:27:1d:53:c2:54:50:df:4a:21:4d:32:7c:ac:53: 50:8b:83:be:19:d3:70:9e:c3:41:95:66:45:18:b7: 36:f0:35:b3:ca:75:ea:af:11:fd:eb:8e:49:89:5d: 12:bf:aa:a6:31:03:b3:bb:af:c1:42:08:1a:1e:91: 68:f3:05:18:26:17:48:52:38:5f:aa:ea:c1:37:42: 22:9c:96:c0:c9:7e:b4:dc:a4:dc:94:f8:3f:01:ae: 0c:86:8b:55:2e:39:00:a6:92:04:bd:89:e7:cd:5e: d3:11:de:1d:b8:18:db:4a:c2:08:ed:da:3b:d9:f8: 6a:e2:31:f8:9d:83:cf:f9:4b:1e:f8:f8:0f:7e:13: 52:be:94:cf:1b:60:58:75:8f:22:f7:ea:a4:dd:51: 35:88:05:14:8d:89:10:8a:09:c0:a0:33:24:58:b7: 20:52:a8:b7:3c:78:63:a7:25:7d:2e:7f:41:16:a9: 3c:ac:a6:02:ba:f5:af:ef:bc:20:9b:f6:d8:a4:57: 83:27:66:39:99:cc:e8:67:d6:84:54:d3:25:3b:b2: 35:01:53:40:22:ed:49:77:6c:50:ff:05:db:f2:37: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:27:63:47:60:FF:E9:44:D1:4A:13:13:8B:BB:A7:9C:13:E6:1D:48 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/98E30C12DCE411EDB446D65DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.10.32.0/23 Signature Algorithm: sha256WithRSAEncryption d3:b7:02:79:3d:11:7e:80:8d:35:72:09:0d:cb:1e:4b:54:4c: 09:33:c5:6c:1f:80:17:3b:38:97:07:1e:e7:0b:ec:19:7b:33: 29:25:1b:62:21:fe:20:e8:96:d7:83:8b:90:61:44:2a:a4:d9: 73:c7:2e:92:d1:19:34:d9:f2:c1:fd:c7:35:54:3c:56:5f:4f: fb:0f:ce:45:89:23:78:3d:2c:30:67:f3:22:f6:1f:24:f0:4b: 55:e1:a0:44:3e:1a:a4:82:95:71:7d:bb:fc:80:eb:a7:d5:f6: f1:c5:c1:11:34:cf:fd:10:87:5c:d1:9b:43:74:78:03:63:b8: 43:78:9a:d9:d9:b3:c0:4e:20:04:50:99:80:c1:95:fe:3c:98: 35:ba:0c:e1:bb:e6:38:f5:fe:9a:f0:7d:9d:b8:b5:99:97:7d: 1d:b7:b3:0f:7c:da:1e:ac:e0:3e:1f:c9:69:64:98:e1:27:3a: 6a:f0:c9:9d:a3:01:1d:c2:3f:27:70:8c:98:ae:0a:38:ce:2a: 01:a9:10:8b:de:28:5c:3d:d4:87:6d:3c:d2:59:c5:5e:fa:72: 24:ec:93:ea:dd:a9:0f:9f:12:ac:65:51:4d:39:0c:bf:03:f0: 29:bd:e0:02:a2:88:f0:a8:df:08:41:17:52:1c:f3:32:2d:d1: 7c:cf:62:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjMwOTIyMTYzMzI2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBkYzFkNS00YmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQZXlYdsnqNpp24NkTHIy/apgCZ9w8sBaXaO+Ql8Jx1TwlRQ30ohTTJ8rFNQ i4O+GdNwnsNBlWZFGLc28DWzynXqrxH9645JiV0Sv6qmMQOzu6/BQggaHpFo8wUY JhdIUjhfqurBN0IinJbAyX603KTclPg/Aa4MhotVLjkAppIEvYnnzV7TEd4duBjb SsII7do72fhq4jH4nYPP+Use+PgPfhNSvpTPG2BYdY8i9+qk3VE1iAUUjYkQignA oDMkWLcgUqi3PHhjpyV9Ln9BFqk8rKYCuvWv77wgm/bYpFeDJ2Y5mczoZ9aEVNMl O7I1AVNAIu1Jd2xQ/wXb8jfpqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAUnY0dg /+lE0UoTE4u7p5wT5h1IMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk4QUQvNzBFRkI0QUNGRTJBMTFFNjhGMkM1QTEzQzRGOUFFMDIvOThFMzBDMTJE Q0U0MTFFREI0NDZENjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFyCiAwDQYJKoZIhvcNAQELBQADggEBANO3Ank9EX6AjTVy CQ3LHktUTAkzxWwfgBc7OJcHHucL7Bl7MyklG2Ih/iDolteDi5BhRCqk2XPHLpLR GTTZ8sH9xzVUPFZfT/sPzkWJI3g9LDBn8yL2HyTwS1XhoEQ+GqSClXF9u/yA66fV 9vHFwRE0z/0Qh1zRm0N0eANjuEN4mtnZs8BOIARQmYDBlf48mDW6DOG75jj1/prw fZ24tZmXfR23sw982h6s4D4fyWlkmOEnOmrwyZ2jAR3CPydwjJiuCjjOKgGpEIve KFw91IdtPNJZxV76ciTsk+rdqQ+fEqxlUU05DL8D8Cm94AKiiPCo3whBF1Ic8zIt 0XzPYtE= -----END CERTIFICATE-----Generated at Mon May 20 17:22:06 2024 by rpki-client on console-fra.rpki-client.org