$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/0298821631FB11EEB97E483EC4F9AE02.roa File: 0298821631FB11EEB97E483EC4F9AE02.roa (raw, json) Hash identifier: rsnx5gDqHfQMEBzM69bnYRq+kA6gFFOVVmEDVjF3FZg= Subject key identifier: 90:07:EE:CA:C8:E4:70:26:6A:FA:7B:B3:52:E8:9C:41:ED:E9:59:6E Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 08E9 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/0298821631FB11EEB97E483EC4F9AE02.roa Signing time: Mon 28 Aug 2023 13:36:34 +0000 ROA not before: Mon 28 Aug 2023 13:36:34 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 140900 IP address blocks: 103.203.45.0/24 maxlen: 24 103.203.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Aug 28 13:36:34 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64eca2e2-e17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:1c:e3:3f:19:a8:6d:29:c3:46:23:9c:9c: 25:a6:6b:b5:0c:d3:ea:19:d2:0e:30:21:da:51:c2: 2a:4e:f3:10:12:e7:d4:ef:bd:7b:0a:77:c4:d8:1b: d1:ed:66:63:66:37:b6:14:71:24:37:f6:58:95:c7: 8a:80:12:88:4c:d6:92:f2:ca:00:f1:bb:15:80:9d: 25:6b:05:15:62:3d:f7:01:24:e0:31:e0:59:67:d5: 79:a1:08:1b:35:17:8c:be:51:45:b3:df:31:e5:de: 18:31:b3:b3:da:f7:7c:5f:9b:56:c4:9a:ba:2d:58: cb:0f:02:d8:d0:94:b8:d7:74:78:1c:d9:45:31:b6: 33:43:e9:f3:10:9f:5b:16:57:d0:64:40:4b:6a:51: 7c:19:47:9b:16:59:e2:27:03:8f:cf:70:37:a4:7c: cc:55:fe:34:1a:dc:81:15:25:f2:bc:fe:c7:b9:6c: ea:26:55:e6:29:e1:f5:ef:b9:f6:9a:94:7b:c2:58: 3b:58:79:f6:73:1c:52:e0:4f:69:02:94:85:1b:44: 3c:9b:3c:cd:22:ad:3d:9e:97:eb:56:76:8d:f3:da: 80:5a:f9:e0:d3:e1:8d:c5:c4:d9:5c:20:25:8f:21: 10:25:f7:3c:09:fc:e8:8a:2b:ad:10:e6:58:7e:68: b0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:07:EE:CA:C8:E4:70:26:6A:FA:7B:B3:52:E8:9C:41:ED:E9:59:6E X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/0298821631FB11EEB97E483EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.45.0-103.203.46.255 Signature Algorithm: sha256WithRSAEncryption 86:fd:94:a8:97:e2:ac:4d:06:b0:b8:f6:ed:8a:a7:7e:21:e8: 16:30:77:57:a1:61:99:93:48:f0:2c:62:ff:9a:5b:7a:d6:e9: d3:80:ec:1b:70:ea:8c:68:bc:fe:51:d8:50:be:3b:43:28:ec: 79:20:48:e0:79:5e:ef:40:14:01:7b:42:c3:48:cb:5d:7a:08: a8:5e:63:30:53:a6:ef:de:5a:68:f4:10:e0:6a:31:e5:39:00: 1b:ac:36:ce:8c:e5:b4:57:3c:68:ea:73:c6:4e:04:27:7e:9b: 2f:8d:00:da:4b:a8:13:97:d5:91:90:0a:dc:94:88:49:bc:1c: 2b:b1:95:4a:bf:07:e8:c3:e6:b8:6b:f7:f7:75:33:d0:c1:70: 06:7f:24:74:fc:22:ac:7b:0f:03:7d:9c:74:26:66:d3:8d:a2: f0:2b:93:bd:cb:51:ec:4d:f5:10:84:1c:4e:7c:0b:56:e6:74: ad:af:22:c7:b0:41:01:2f:2a:2f:40:fb:d1:19:e0:88:8f:68: 58:5f:85:07:77:db:6b:55:09:e9:a3:85:00:f0:5f:bd:cc:70: 06:b5:90:ff:ec:bc:75:5e:16:31:f6:9c:fa:c5:df:b6:da:ad: 88:d2:f1:bb:77:4d:82:5f:86:33:d0:01:22:14:4c:db:0c:a7: 60:67:45:19 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjMwODI4MTMzNjM0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVjYTJlMi1lMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6Yc4z8ZqG0pw0YjnJwlpmu1DNPqGdIOMCHaUcIqTvMQEufU7717CnfE2BvR 7WZjZje2FHEkN/ZYlceKgBKITNaS8soA8bsVgJ0lawUVYj33ASTgMeBZZ9V5oQgb NReMvlFFs98x5d4YMbOz2vd8X5tWxJq6LVjLDwLY0JS413R4HNlFMbYzQ+nzEJ9b FlfQZEBLalF8GUebFlniJwOPz3A3pHzMVf40GtyBFSXyvP7HuWzqJlXmKeH177n2 mpR7wlg7WHn2cxxS4E9pApSFG0Q8mzzNIq09npfrVnaN89qAWvng0+GNxcTZXCAl jyEQJfc8CfzoiiutEOZYfmiwEQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJAH7srI 5HAmavp7s1LonEHt6VluMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFGQ0MvQ0RCQzU5ODY3MzA5MTFFQUE4ODIwMDMwQzRGOUFFMDIvMDI5ODgyMTYz MUZCMTFFRUI5N0U0ODNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfLLQMEAGfLLjANBgkqhkiG9w0BAQsFAAOCAQEAhv2U qJfirE0GsLj27YqnfiHoFjB3V6FhmZNI8Cxi/5pbetbp04DsG3DqjGi8/lHYUL47 QyjseSBI4Hle70AUAXtCw0jLXXoIqF5jMFOm795aaPQQ4Gox5TkAG6w2zozltFc8 aOpzxk4EJ36bL40A2kuoE5fVkZAK3JSISbwcK7GVSr8H6MPmuGv393Uz0MFwBn8k dPwirHsPA32cdCZm042i8CuTvctR7E31EIQcTnwLVuZ0ra8ix7BBAS8qL0D70Rng iI9oWF+FB3fba1UJ6aOFAPBfvcxwBrWQ/+y8dV4WMfac+sXfttqtiNLxu3dNgl+G M9ABIhRM2wynYGdFGQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:25 2024 by rpki-client on console-ams.rpki-client.org