$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/598BD2E268D111ED99477B87C4F9AE02.roa File: 598BD2E268D111ED99477B87C4F9AE02.roa (raw, json) Hash identifier: CC9X+3CcYjfvDOG+Jd491zfowlADhabzoyJw/gqJGUg= Subject key identifier: 3E:FB:C7:29:3C:FA:FF:FA:D2:7A:BA:D9:41:D2:5B:8D:12:BC:9F:A8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0BA6 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/598BD2E268D111ED99477B87C4F9AE02.roa Signing time: Fri 16 Aug 2024 19:37:15 +0000 ROA not before: Fri 16 Aug 2024 19:37:15 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 10075 IP address blocks: 103.118.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Aug 16 19:37:15 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bfaa6b-9f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:88:64:69:f3:f5:8a:53:2f:2a:a2:ae:a3: 86:5b:e2:70:a9:f0:9d:e8:d9:04:58:cf:4d:f8:a3: 9c:46:df:8e:c6:be:1d:18:79:46:77:06:9a:e9:58: 0a:72:de:14:51:9f:a4:f0:85:76:fa:ad:88:ed:db: e7:fc:6f:fa:be:52:eb:bf:1e:6e:29:c1:f1:f0:b2: 8f:5e:3b:c3:fe:70:2b:2e:7b:c2:76:6e:c6:61:3d: e5:49:68:3f:11:0e:c4:6a:ec:e5:0d:4d:7a:80:77: 14:7a:38:fe:fc:77:df:89:b4:f0:19:a9:18:90:24: 56:53:7f:c1:aa:ce:c6:d8:3d:e8:c7:a5:d9:39:50: 15:d4:27:8b:a4:28:03:44:c6:81:c2:b6:70:b0:10: 22:0d:64:65:57:9d:d6:7c:27:8e:54:39:9d:77:44: b5:d7:54:93:a4:ec:8f:2f:55:64:1e:2b:5f:e4:c7: b6:bc:47:d8:76:4b:08:53:3b:8f:f1:3c:d9:86:53: 54:d4:b5:6c:dd:56:1f:00:24:72:61:66:b0:5a:b2: 62:f3:ae:ec:d5:22:4d:e3:c3:b4:56:b3:20:cb:c5: e4:12:02:29:a3:6a:1c:1e:65:f3:c9:2f:5b:0d:56: 7b:ba:bc:f1:ed:60:1f:e4:5b:da:17:f5:19:d0:0c: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FB:C7:29:3C:FA:FF:FA:D2:7A:BA:D9:41:D2:5B:8D:12:BC:9F:A8 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/598BD2E268D111ED99477B87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.87.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:df:52:ee:fb:5b:d4:3c:13:d0:e0:ee:17:db:55:df:21:bc: 5b:dc:fa:1a:4c:1f:71:26:6d:d6:fd:9e:dc:ce:e9:10:c2:34: 0b:75:e5:a1:5b:3c:6e:c9:04:09:0d:b6:27:a4:3b:93:eb:f1: 8c:53:3f:01:61:2d:b1:db:dc:d2:9f:0f:ee:2a:50:e3:f5:d1: ab:cd:ab:ac:3b:41:16:a7:a2:a6:32:9e:47:7d:f4:dd:dd:46: 19:5d:45:99:6c:58:9e:84:4f:7e:a9:5b:55:27:09:7d:97:ea: ee:a4:50:28:88:dd:75:e3:da:17:94:61:ca:3e:8a:0e:a1:a1: cc:0e:82:67:60:05:1c:04:ac:a1:82:fd:54:f8:74:8a:e7:2f: 9b:fb:4f:08:52:ad:77:5e:cf:84:c1:20:7f:4b:c6:aa:df:81: 50:72:d1:fe:5e:2f:ee:73:16:b6:78:bb:67:29:c1:6d:73:c6: 0b:84:54:84:08:a0:31:fc:f2:a9:fb:92:00:fd:eb:d9:0c:d0: 4b:b7:78:92:eb:d3:fa:e3:73:5a:20:8e:50:5a:da:14:39:60: a2:50:04:8f:13:93:db:e2:9b:e5:16:f6:26:9c:95:4f:b4:28: bd:30:98:e0:e0:51:c7:78:c9:bf:dd:42:cf:5b:dc:53:3d:09: 0e:0d:fa:67 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjQwODE2MTkzNzE1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmYWE2Yi05ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucGIZGnz9YpTLyqirqOGW+JwqfCd6NkEWM9N+KOcRt+Oxr4dGHlGdwaa6VgK ct4UUZ+k8IV2+q2I7dvn/G/6vlLrvx5uKcHx8LKPXjvD/nArLnvCdm7GYT3lSWg/ EQ7EauzlDU16gHcUejj+/HffibTwGakYkCRWU3/Bqs7G2D3ox6XZOVAV1CeLpCgD RMaBwrZwsBAiDWRlV53WfCeOVDmdd0S111STpOyPL1VkHitf5Me2vEfYdksIUzuP 8TzZhlNU1LVs3VYfACRyYWawWrJi867s1SJN48O0VrMgy8XkEgIpo2ocHmXzyS9b DVZ7urzx7WAf5FvaF/UZ0AxeGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD77xyk8 +v/60nq62UHSW40SvJ+oMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzIzREMvMDY2MzlGODYwQTkzMTFFQTg1QUQ4ODZBQzRGOUFFMDIvNTk4QkQyRTI2 OEQxMTFFRDk5NDc3Qjg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABndlcwDQYJKoZIhvcNAQELBQADggEBAHzfUu77W9Q8E9Dg 7hfbVd8hvFvc+hpMH3Embdb9ntzO6RDCNAt15aFbPG7JBAkNtiekO5Pr8YxTPwFh LbHb3NKfD+4qUOP10avNq6w7QRanoqYynkd99N3dRhldRZlsWJ6ET36pW1UnCX2X 6u6kUCiI3XXj2heUYco+ig6hocwOgmdgBRwErKGC/VT4dIrnL5v7TwhSrXdez4TB IH9LxqrfgVBy0f5eL+5zFrZ4u2cpwW1zxguEVIQIoDH88qn7kgD969kM0Eu3eJLr 0/rjc1ogjlBa2hQ5YKJQBI8Tk9vim+UW9iaclU+0KL0wmODgUcd4yb/dQs9b3FM9 CQ4N+mc= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org