$ rpki-client -vvf rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/9157BBDACD0611EC9D520C1DC4F9AE02.roa File: 9157BBDACD0611EC9D520C1DC4F9AE02.roa (raw, json) Hash identifier: GyEQGNb6/HPOG/qVRsMzlLs+Kg9iPItUKUNxu4RTN0U= Subject key identifier: 2E:B7:91:E2:17:44:1E:6F:E7:20:10:58:02:EA:EE:7E:5C:67:EA:D6 Certificate issuer: /CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F Certificate serial: 01D0 Authority key identifier: 8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/9157BBDACD0611EC9D520C1DC4F9AE02.roa Signing time: Thu 17 Aug 2023 03:03:24 +0000 ROA not before: Thu 17 Aug 2023 03:03:24 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 135391 IP address blocks: 103.98.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 03:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F Validity Not Before: Aug 17 03:03:24 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64dd8dfb-abec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:9b:df:fc:70:e0:4b:9a:4e:c2:1e:fa:7f: c0:1c:3e:e1:90:52:95:dc:dc:61:b4:48:a0:ff:ff: ce:a2:4b:61:f3:fc:44:a2:e2:e8:c2:74:60:c7:a4: 04:20:0a:bf:0f:5c:11:40:77:26:a5:d3:5a:85:cc: 18:13:cd:69:df:4d:40:30:98:ef:0e:a2:5f:02:96: 4f:a0:a8:2b:94:43:42:7f:88:61:5b:72:b8:1e:33: a7:72:e1:76:66:85:71:0d:ed:7a:e7:45:40:c3:60: 4f:60:76:10:9d:5d:ee:e7:79:0a:5e:5c:b2:81:bd: bc:e3:e6:67:e6:06:bf:f0:d7:78:fc:47:6b:bf:b3: e2:b5:31:21:fa:1d:ab:07:4d:75:cb:98:02:42:fe: c1:7f:91:86:14:a1:c2:92:e7:cf:69:05:10:f2:e7: c2:2c:d0:58:74:ee:56:f1:89:bd:54:f7:19:98:3c: 3b:23:1b:1f:14:4b:da:e9:50:75:9d:fc:1a:de:f1: 6f:43:6e:bd:8e:60:dd:ea:af:0f:4a:c8:9c:fd:78: e0:bb:6d:31:02:5b:73:06:18:ca:4a:c8:6e:0b:50: 83:8a:13:61:f6:83:67:60:73:66:56:d1:32:33:f0: d0:b6:bc:6b:90:ba:fa:b3:7f:5b:7f:b0:6b:c0:b8: 18:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B7:91:E2:17:44:1E:6F:E7:20:10:58:02:EA:EE:7E:5C:67:EA:D6 X509v3 Authority Key Identifier: keyid:8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/9157BBDACD0611EC9D520C1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.8.0/22 Signature Algorithm: sha256WithRSAEncryption 16:83:c5:ae:48:df:43:66:6d:11:31:b5:a7:e6:c1:83:0c:c0: af:8c:7c:67:7a:74:19:83:a5:94:93:ef:43:39:3e:4f:eb:9f: cb:c6:29:d1:a8:0b:98:d7:5b:48:28:d4:fb:30:ed:37:fb:bb: 3b:57:e4:00:ba:37:f4:32:ce:15:6e:18:04:8e:e9:97:5b:97: 5b:5b:3b:28:95:7e:62:ea:72:f1:7b:74:1d:7d:1b:e4:be:c9: 01:36:a5:ed:84:e0:89:3f:64:90:2b:14:bd:bf:6c:8a:79:d9: d1:ea:80:33:8b:5d:3c:8a:40:30:f8:af:49:43:a7:c0:b2:7e: 75:fa:30:e3:ce:6a:f1:5d:17:9a:1b:49:12:ac:72:5f:37:3b: be:d7:7b:f1:68:3e:3a:ac:34:da:de:2e:39:ec:4f:52:cd:66: a6:1a:df:1d:46:df:ad:1b:25:0f:96:d3:af:f2:cb:cf:a5:e7: 79:e0:1a:cc:a1:f8:78:cb:3e:24:cd:48:61:47:65:4e:72:2a: b8:25:c9:53:c5:d6:cc:e2:51:ab:87:69:46:14:8c:02:45:4b: f3:95:96:bd:c5:f5:c0:74:ee:1e:0f:bb:8d:d2:17:d6:df:39: 59:70:1c:15:5a:93:76:5d:a4:f7:3f:88:7a:2f:c9:6e:6c:58: c5:3f:4f:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyM0UxMTAvBgNVBAUTKDhFN0U0QTAzNTgyMDM5RTQ2MUVDRUQ5MTAwMDhDOTgy NzM2MjM1OUYwHhcNMjMwODE3MDMwMzI0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkOGRmYi1hYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF2b3/xw4EuaTsIe+n/AHD7hkFKV3NxhtEig///Ookth8/xEouLownRgx6QE IAq/D1wRQHcmpdNahcwYE81p301AMJjvDqJfApZPoKgrlENCf4hhW3K4HjOncuF2 ZoVxDe1650VAw2BPYHYQnV3u53kKXlyygb284+Zn5ga/8Nd4/Edrv7PitTEh+h2r B011y5gCQv7Bf5GGFKHCkufPaQUQ8ufCLNBYdO5W8Ym9VPcZmDw7IxsfFEva6VB1 nfwa3vFvQ269jmDd6q8PSsic/Xjgu20xAltzBhjKSshuC1CDihNh9oNnYHNmVtEy M/DQtrxrkLr6s39bf7BrwLgYuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC63keIX RB5v5yAQWALq7n5cZ+rWMB8GA1UdIwQYMBaAFI5+SgNYIDnkYeztkQAIyYJzYjWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjIzRS81RjZCM0E1RUNE MDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09lUmg3TzJSQUFqSmduTmlO WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puNUtBMWdnT2VSaDdPMlJBQWpKZ25OaU5aOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIyM0UvNUY2QjNBNUVDRDA0MTFFQzg2MTM3RDFDQzRGOUFFMDIvOTE1N0JCREFD RDA2MTFFQzlENTIwQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnYggwDQYJKoZIhvcNAQELBQADggEBABaDxa5I30NmbREx tafmwYMMwK+MfGd6dBmDpZST70M5Pk/rn8vGKdGoC5jXW0go1Psw7Tf7uztX5AC6 N/QyzhVuGASO6Zdbl1tbOyiVfmLqcvF7dB19G+S+yQE2pe2E4Ik/ZJArFL2/bIp5 2dHqgDOLXTyKQDD4r0lDp8CyfnX6MOPOavFdF5obSRKscl83O77Xe/FoPjqsNNre LjnsT1LNZqYa3x1G360bJQ+W06/yy8+l53ngGsyh+HjLPiTNSGFHZU5yKrglyVPF 1sziUauHaUYUjAJFS/OVlr3F9cB07h4Pu43SF9bfOVlwHBVak3ZdpPc/iHovyW5s WMU/T5c= -----END CERTIFICATE-----Generated at Thu Apr 25 05:44:27 2024 by rpki-client on console-fra.rpki-client.org