$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/98DBD8B660D311EEA9C80344C4F9AE02.roa File: 98DBD8B660D311EEA9C80344C4F9AE02.roa (raw, json) Hash identifier: qobh4w9osO4ki3CXJVAypXeKLZL/LsHsyelYml99k+0= Subject key identifier: 6E:D3:A7:48:CD:9F:82:B7:96:37:7C:DA:64:7E:F4:31:67:02:B8:43 Certificate issuer: /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D Certificate serial: 09EA Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/98DBD8B660D311EEA9C80344C4F9AE02.roa Signing time: Sat 02 Mar 2024 20:58:54 +0000 ROA not before: Sat 02 Mar 2024 20:58:54 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 140213 IP address blocks: 103.148.172.0/23 maxlen: 23 103.148.173.0/24 maxlen: 24 2001:df2:df80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D Validity Not Before: Mar 2 20:58:54 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e3930d-97b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5d:44:0e:30:99:e9:dd:ff:0d:6b:71:15:ef: 69:d8:e8:6a:32:c7:83:66:80:58:89:cf:10:a5:fd: e1:d8:25:17:27:85:46:70:2b:9e:52:eb:b6:c1:7e: 90:09:18:ec:56:55:ba:89:b4:39:81:f7:31:c7:e7: c9:99:7e:53:82:f9:9f:f4:a6:97:85:24:d2:e8:75: 24:e5:43:d3:c0:7c:a4:52:4e:3f:60:c2:9c:02:6e: 4f:f1:ed:6d:4f:a9:65:2c:44:b0:80:74:11:26:0c: 24:52:e6:f1:c9:aa:38:99:15:1e:2a:b8:a7:14:e4: 06:3b:90:ad:59:09:12:b9:4f:6f:08:a0:c5:ad:f1: 82:68:5b:24:a0:f1:77:83:df:bb:04:d0:55:81:d7: 60:a4:74:d0:35:e2:3e:d2:68:25:36:ec:8a:81:0d: 57:0f:c6:67:fa:04:a0:d4:85:9a:c4:9a:87:23:af: 0c:62:55:1e:a2:0c:df:fd:7b:43:41:49:ef:4c:e4: 42:34:66:f7:f2:d9:59:1f:4d:a5:c4:3e:e1:68:0a: 8a:5e:ef:0b:b5:79:71:4a:5f:bb:4f:00:c2:9c:23: ff:7a:ef:83:1d:8e:d8:71:03:41:1d:d6:14:16:e8: 77:8f:e3:2e:0e:06:06:41:2c:42:d2:38:f4:34:52: 59:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D3:A7:48:CD:9F:82:B7:96:37:7C:DA:64:7E:F4:31:67:02:B8:43 X509v3 Authority Key Identifier: keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/98DBD8B660D311EEA9C80344C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.172.0/23 IPv6: 2001:df2:df80::/48 Signature Algorithm: sha256WithRSAEncryption 21:e6:41:68:48:fd:f8:d5:3f:bc:d3:b1:18:60:c7:53:1b:d2: 25:33:e4:ac:7e:80:c1:0b:8f:91:ac:3c:0d:0f:77:2a:fb:5e: e3:ab:06:92:99:23:d1:d3:7b:11:d6:fb:32:ec:8f:37:c1:64: 0b:d2:5a:e7:d6:2a:f0:6d:a7:c0:0f:62:23:df:93:ec:4c:05: b3:0f:96:c4:15:9c:64:23:0e:7b:8c:b0:f7:22:c8:6b:0e:30: 1c:9e:60:93:be:85:45:66:a4:bb:91:f9:8a:1a:09:15:fe:75: 58:2e:2f:47:90:24:2e:c4:96:af:b3:63:67:aa:40:92:8d:35: 19:ae:a5:d1:1c:36:2d:f3:a1:78:04:ec:af:65:8a:76:46:68: 68:4a:03:c1:bf:01:81:90:bb:e4:0c:dd:d4:0b:b5:ce:7a:2c: 1b:e3:eb:7e:41:17:dc:19:d1:72:cb:6f:2d:56:40:d8:be:48: 00:e5:d8:c2:06:8d:95:1c:0e:52:e5:62:a4:12:c5:08:41:59: 65:a1:c9:12:d5:6e:9a:7c:d8:8b:bd:6a:c5:5e:1e:7d:be:92: af:37:77:ae:ac:95:c3:6c:86:55:db:cb:3c:d2:6e:c6:73:1c: cf:be:3b:6d:53:2f:b9:e1:3a:da:5b:bd:8a:0a:6c:3a:b5:7f: 28:23:4e:e8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3MjYxMTAvBgNVBAUTKEQ3NEFDMUI4QTMzMzUyNDNGQ0IyRjk5MDVCQzUxREJE Q0IwRTIzNkQwHhcNMjQwMzAyMjA1ODU0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzOTMwZC05N2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV1EDjCZ6d3/DWtxFe9p2OhqMseDZoBYic8Qpf3h2CUXJ4VGcCueUuu2wX6Q CRjsVlW6ibQ5gfcxx+fJmX5Tgvmf9KaXhSTS6HUk5UPTwHykUk4/YMKcAm5P8e1t T6llLESwgHQRJgwkUubxyao4mRUeKrinFOQGO5CtWQkSuU9vCKDFrfGCaFskoPF3 g9+7BNBVgddgpHTQNeI+0mglNuyKgQ1XD8Zn+gSg1IWaxJqHI68MYlUeogzf/XtD QUnvTORCNGb38tlZH02lxD7haAqKXu8LtXlxSl+7TwDCnCP/eu+DHY7YcQNBHdYU Fuh3j+MuDgYGQSxC0jj0NFJZGwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG7Tp0jN n4K3ljd82mR+9DFnArhDMB8GA1UdIwQYMBaAFNdKwbijM1JD/LL5kFvFHb3LDiNt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTcyNi82REJGQTM4QTUy RDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVrUDhzdm1RVzhVZHZjc09J MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwckJ1S016VWtQOHN2bVFXOFVkdmNzT0kyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U3MjYvNkRCRkEzOEE1MkQ5MTFFQTgyN0REMDgyQzRGOUFFMDIvOThEQkQ4QjY2 MEQzMTFFRUE5QzgwMzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlKwwDwQCAAIwCQMHACABDfLfgDANBgkqhkiG9w0BAQsF AAOCAQEAIeZBaEj9+NU/vNOxGGDHUxvSJTPkrH6AwQuPkaw8DQ93Kvte46sGkpkj 0dN7Edb7MuyPN8FkC9Ja59Yq8G2nwA9iI9+T7EwFsw+WxBWcZCMOe4yw9yLIaw4w HJ5gk76FRWaku5H5ihoJFf51WC4vR5AkLsSWr7NjZ6pAko01Ga6l0Rw2LfOheATs r2WKdkZoaEoDwb8BgZC75Azd1Au1znosG+PrfkEX3BnRcstvLVZA2L5IAOXYwgaN lRwOUuVipBLFCEFZZaHJEtVumnzYi71qxV4efb6Srzd3rqyVw2yGVdvLPNJuxnMc z747bVMvueE62lu9igpsOrV/KCNO6A== -----END CERTIFICATE-----Generated at Thu May 16 21:45:28 2024 by rpki-client on console-fra.rpki-client.org