$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa File: 99D18D463C0211EAA729693AC4F9AE02.roa (raw, json) Hash identifier: tLtn7CFG0HbQ9XWzYKgOAxAROG1jTzb9mpWP5oMuzzI= Subject key identifier: 55:67:BD:88:F9:EA:C8:0B:67:26:00:3C:5F:24:F4:FB:5D:1A:AA:5D Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Certificate serial: 0A83 Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa Signing time: Wed 31 Jan 2024 15:41:00 +0000 ROA not before: Wed 31 Jan 2024 15:41:00 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 56038 IP address blocks: 137.83.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2691 (0xa83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Validity Not Before: Jan 31 15:41:00 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65ba6a0c-e3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:63:9c:b7:fc:0d:16:63:c5:93:68:51:eb:79: 93:2a:68:39:c0:8d:f3:c4:b1:d2:cd:44:00:61:eb: e5:f6:39:74:5f:e2:07:7c:c6:50:a7:38:f0:b0:bc: 77:48:41:29:c0:fc:21:6c:88:02:f8:75:30:a5:e5: 1a:e3:88:e7:a4:67:4d:fa:64:ae:f0:20:3b:01:a4: a4:73:34:ec:68:ef:49:77:df:e7:12:a5:c9:d6:96: 12:38:d0:64:39:09:c9:89:49:95:6e:28:cc:52:75: 9c:b6:95:57:bd:a2:bf:8d:36:fe:e6:72:62:a6:07: 22:15:31:52:99:eb:c9:a4:e9:38:bd:2c:15:ad:1e: 7d:46:77:34:30:19:1d:30:64:b8:2c:78:a6:a6:78: 3c:65:65:c5:09:4e:de:f7:c5:83:ed:a6:81:43:54: 12:f9:ca:37:23:90:9c:5b:cd:b4:4e:0c:ab:b1:c7: 23:c7:ea:f5:37:6b:71:91:71:1c:ab:df:09:70:96: 3d:c2:42:3a:ff:e3:f2:a9:00:4b:9a:4f:15:1e:ff: 0a:1a:08:dc:12:af:53:54:9c:73:65:11:d5:dc:6c: 2c:b6:a3:1c:f1:32:c2:01:c3:4e:76:f8:a9:1d:3f: 66:1d:b4:18:50:12:0f:d4:6d:32:99:eb:f8:7e:90: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:67:BD:88:F9:EA:C8:0B:67:26:00:3C:5F:24:F4:FB:5D:1A:AA:5D X509v3 Authority Key Identifier: keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.83.12.0/24 Signature Algorithm: sha256WithRSAEncryption a3:f8:38:ce:d2:34:8e:84:e3:26:b5:57:6c:93:cb:ba:8d:99: 8e:83:45:8f:e4:37:33:31:0a:f2:bf:fc:56:7e:41:86:63:a0: 9b:94:43:64:37:7f:67:98:cc:bb:c2:69:dd:b4:5d:99:c7:fc: 98:ab:71:37:b6:cd:9c:99:1b:15:e7:ad:b5:a7:c5:98:f9:10: 5b:22:c8:8b:9a:47:b5:69:90:73:1c:c4:64:99:9b:1d:76:9a: 4b:63:2a:e0:8d:ad:a0:59:d9:65:43:95:7b:c0:60:94:53:c0: a2:35:73:ed:31:2e:32:8e:4d:67:f9:42:b3:8f:5d:9b:e2:97: 3c:05:38:64:40:78:ce:ca:72:7a:19:f0:c9:74:e2:19:23:ff: bf:9c:ff:60:2a:04:ca:64:32:e0:f4:f8:df:20:6e:db:ac:98: 8c:ef:5b:96:c9:41:b5:28:d2:b8:b6:1e:00:75:7c:95:62:5c: 98:30:64:f1:a0:78:b1:42:1e:77:91:b7:32:dd:ad:4b:56:7a: 0f:f2:48:06:92:50:4e:59:38:e5:4a:c6:ca:c2:4a:17:e6:44: 59:27:0d:84:e8:33:8e:aa:e2:23:8f:85:5e:9f:f4:25:86:38: d7:28:f5:35:f0:ce:63:c4:42:86:5a:3f:57:84:dd:e8:f8:f3: 90:21:8e:5e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKDdEMDQ1MTY1QjI5QTY4QUZDQjhCQTgxNTk5Q0UzMDY3 NDU0NEZEOEYwHhcNMjQwMTMxMTU0MTAwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJhNmEwYy1lM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GOct/wNFmPFk2hR63mTKmg5wI3zxLHSzUQAYevl9jl0X+IHfMZQpzjwsLx3 SEEpwPwhbIgC+HUwpeUa44jnpGdN+mSu8CA7AaSkczTsaO9Jd9/nEqXJ1pYSONBk OQnJiUmVbijMUnWctpVXvaK/jTb+5nJipgciFTFSmevJpOk4vSwVrR59Rnc0MBkd MGS4LHimpng8ZWXFCU7e98WD7aaBQ1QS+co3I5CcW820Tgyrsccjx+r1N2txkXEc q98JcJY9wkI6/+PyqQBLmk8VHv8KGgjcEq9TVJxzZRHV3GwstqMc8TLCAcNOdvip HT9mHbQYUBIP1G0ymev4fpA8bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFVnvYj5 6sgLZyYAPF8k9PtdGqpdMB8GA1UdIwQYMBaAFH0EUWWymmivy4uoFZnOMGdFRP2P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi83QTc1MEEwQTJE RDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFLX0xpNmdWbWM0d1owVkVf WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZRUlJaYkthYUtfTGk2Z1ZtYzR3WjBWRV9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcxQ0IvN0E3NTBBMEEyREQ4MTFFQTlDMzUyMDVEQzRGOUFFMDIvOTlEMThENDYz QzAyMTFFQUE3Mjk2OTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACJUwwwDQYJKoZIhvcNAQELBQADggEBAKP4OM7SNI6E4ya1 V2yTy7qNmY6DRY/kNzMxCvK//FZ+QYZjoJuUQ2Q3f2eYzLvCad20XZnH/JircTe2 zZyZGxXnrbWnxZj5EFsiyIuaR7VpkHMcxGSZmx12mktjKuCNraBZ2WVDlXvAYJRT wKI1c+0xLjKOTWf5QrOPXZvilzwFOGRAeM7KcnoZ8Ml04hkj/7+c/2AqBMpkMuD0 +N8gbtusmIzvW5bJQbUo0ri2HgB1fJViXJgwZPGgeLFCHneRtzLdrUtWeg/ySAaS UE5ZOOVKxsrCShfmRFknDYToM46q4iOPhV6f9CWGONco9TXwzmPEQoZaP1eE3ej4 85Ahjl4= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org