$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/98DC875C050111EA9BDD372BC4F9AE02.roa File: 98DC875C050111EA9BDD372BC4F9AE02.roa (raw, json) Hash identifier: tUTz8eY+t4ddLMBAcdiLEQQ0A3k/C+6KL0Lp4wdaHaA= Subject key identifier: E2:82:5F:1D:E1:EF:BF:D3:91:C1:8E:A4:CC:04:6A:68:30:EF:66:72 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0BC8 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/98DC875C050111EA9BDD372BC4F9AE02.roa Signing time: Thu 12 Sep 2024 19:57:12 +0000 ROA not before: Thu 12 Sep 2024 19:57:12 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 136813 IP address blocks: 103.97.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3016 (0xbc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Sep 12 19:57:12 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e34798-8896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:6d:4b:b7:14:9f:28:d4:2c:ba:d7:61:04: 4d:a2:ba:2f:6e:6e:82:76:4f:d1:78:1e:38:6b:10: 8e:7c:9c:53:a9:25:c7:fc:5c:04:fe:8b:22:17:e1: a8:60:be:89:71:fc:97:fd:d2:b0:46:84:a2:73:50: 22:07:27:6a:2d:00:e6:7a:75:80:4c:ec:ed:b1:1f: 62:39:79:85:b4:28:01:47:ce:9a:cc:9d:3e:43:11: 72:61:51:6d:2e:2b:52:a3:0b:39:e0:46:00:67:3e: fa:c9:1d:b2:c1:6d:df:e4:f9:49:0c:7b:85:b0:11: eb:a8:3b:59:ed:47:1b:02:15:e7:e5:dd:64:4b:8a: 18:57:c8:f3:af:59:86:58:08:d9:23:02:7f:5d:92: 83:a7:ec:aa:84:b2:4a:b4:b0:d3:f0:48:4a:3b:82: 51:e2:4b:f9:87:16:62:72:32:a7:aa:68:41:b3:65: 8d:86:b8:d5:f8:da:42:26:44:0c:f9:8e:d3:63:da: 3d:c0:50:4a:59:7b:f2:b3:20:fb:14:21:6a:e8:5d: 8f:10:1b:30:e6:bc:bd:d2:da:75:92:f7:c8:83:b6: 72:b7:52:c6:74:01:dc:17:14:1a:a2:30:4f:2f:47: 30:8c:b5:75:57:54:f6:ea:11:ac:35:6c:e1:f0:2e: 44:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:82:5F:1D:E1:EF:BF:D3:91:C1:8E:A4:CC:04:6A:68:30:EF:66:72 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/98DC875C050111EA9BDD372BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.120.0/22 Signature Algorithm: sha256WithRSAEncryption b6:04:01:fa:bb:17:31:05:06:07:c7:31:f3:c3:ea:46:66:b7: de:46:64:4a:58:63:68:c0:7c:7c:25:0b:63:1c:be:0d:ac:63: c1:ac:99:dd:b6:28:af:f2:e1:95:90:a4:46:0b:01:40:11:55: 97:ed:3b:53:6b:c9:81:3c:0a:56:1a:31:0d:be:4f:6d:ff:7a: 4e:09:57:bd:0e:7b:c0:d4:db:f2:63:3e:27:8a:d8:8b:2e:04: ce:e5:8f:8b:cc:02:38:b8:03:44:42:0b:87:95:d4:21:d7:8a: 01:d7:e5:b9:10:01:99:57:59:bf:79:ee:7a:4c:a1:c9:c1:ec: 5e:6a:df:29:4b:16:44:c9:1a:73:2f:b3:2a:b3:09:6f:ca:11: ed:87:03:59:b8:3a:6c:a6:a2:af:7c:31:96:c3:3f:60:d5:b4: 6a:07:c2:ce:00:75:37:6d:ce:74:04:b0:2a:84:da:e6:38:dd: 8e:51:fa:fd:94:47:96:80:83:94:ed:bd:9e:00:67:96:7b:ab: 27:41:e1:79:b2:8f:d4:20:2f:5e:2c:29:fe:77:75:5f:fe:06: 2e:bc:df:bb:f8:5d:0b:1e:73:4f:f7:f0:64:ec:46:04:4e:89: fc:12:2f:68:1a:58:bf:e5:ba:e0:2b:46:5c:e6:27:88:85:7d: f8:95:40:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjQwOTEyMTk1NzEyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUzNDc5OC04ODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/JtS7cUnyjULLrXYQRNorovbm6Cdk/ReB44axCOfJxTqSXH/FwE/osiF+Go YL6JcfyX/dKwRoSic1AiBydqLQDmenWATOztsR9iOXmFtCgBR86azJ0+QxFyYVFt LitSows54EYAZz76yR2ywW3f5PlJDHuFsBHrqDtZ7UcbAhXn5d1kS4oYV8jzr1mG WAjZIwJ/XZKDp+yqhLJKtLDT8EhKO4JR4kv5hxZicjKnqmhBs2WNhrjV+NpCJkQM +Y7TY9o9wFBKWXvysyD7FCFq6F2PEBsw5ry90tp1kvfIg7Zyt1LGdAHcFxQaojBP L0cwjLV1V1T26hGsNWzh8C5E3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOKCXx3h 77/TkcGOpMwEamgw72ZyMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODU2QzQvQTNCQUQ4RTIwNEZGMTFFQTkzRUU5QTIzQzRGOUFFMDIvOThEQzg3NUMw NTAxMTFFQTlCREQzNzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnYXgwDQYJKoZIhvcNAQELBQADggEBALYEAfq7FzEFBgfH MfPD6kZmt95GZEpYY2jAfHwlC2Mcvg2sY8Gsmd22KK/y4ZWQpEYLAUARVZftO1Nr yYE8ClYaMQ2+T23/ek4JV70Oe8DU2/JjPieK2IsuBM7lj4vMAji4A0RCC4eV1CHX igHX5bkQAZlXWb957npMocnB7F5q3ylLFkTJGnMvsyqzCW/KEe2HA1m4Omymoq98 MZbDP2DVtGoHws4AdTdtznQEsCqE2uY43Y5R+v2UR5aAg5TtvZ4AZ5Z7qydB4Xmy j9QgL14sKf53dV/+Bi6837v4XQsec0/38GTsRgROifwSL2gaWL/luuArRlzmJ4iF ffiVQG8= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org