$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/99D9487EEAFE11EE9EFB1977C4F9AE02.roa File: 99D9487EEAFE11EE9EFB1977C4F9AE02.roa (raw, json) Hash identifier: zFW6A+VsWeVd5y9V/Grmt529yD9xy9nMp+dz1bU8Fj0= Subject key identifier: 9F:10:A7:2D:B0:BB:61:40:38:79:D9:27:BE:64:1D:3B:0D:A0:BB:69 Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Certificate serial: 0142 Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/99D9487EEAFE11EE9EFB1977C4F9AE02.roa Signing time: Mon 03 Jun 2024 06:55:19 +0000 ROA not before: Mon 03 Jun 2024 06:55:19 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 151487 IP address blocks: 123.108.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Validity Not Before: Jun 3 06:55:19 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665d68d6-a049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:76:8e:e0:96:ea:fd:84:0a:1d:d7:17:29: 9c:6b:c0:bb:da:10:06:4c:1a:82:9b:e3:1a:ad:74: 1e:2e:8f:db:e0:d0:b5:72:d6:7d:f5:ea:ff:c7:88: 28:bb:1b:bc:35:28:44:1b:7d:52:48:5c:d1:f0:b4: 08:d1:61:dc:8f:de:43:71:f9:d1:19:79:4b:f9:ff: 70:07:82:2b:d7:17:be:1c:2f:d2:7b:9e:af:0c:64: ec:b5:e8:24:c5:78:fa:15:09:9c:48:3f:49:aa:2c: e6:db:6f:4b:7a:04:02:e8:59:05:fb:9f:19:04:d5: f8:a7:7f:ae:0f:ca:3d:d9:e0:e4:e9:74:8f:04:f8: 1b:7f:56:72:7d:af:74:74:1d:0a:36:24:fd:dc:27: 54:6e:37:b1:ea:6d:5f:35:b7:01:b7:3c:f4:b9:d4: 5f:5a:8a:d8:ab:df:d1:36:47:e7:c7:1f:51:f5:64: 4c:e4:d7:af:2d:ee:77:17:57:46:d9:61:0d:98:d2: 4b:99:d5:c3:c1:45:e2:03:68:8a:be:81:25:90:b1: 9d:2a:36:79:e6:e3:6a:49:bb:0f:a7:bd:0d:85:34: 92:98:a8:89:7c:43:a0:c9:15:15:d6:5e:72:5c:57: d7:f2:9e:cc:06:32:e1:66:83:a2:cd:6f:93:e8:8c: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:10:A7:2D:B0:BB:61:40:38:79:D9:27:BE:64:1D:3B:0D:A0:BB:69 X509v3 Authority Key Identifier: keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/99D9487EEAFE11EE9EFB1977C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.108.70.0/24 Signature Algorithm: sha256WithRSAEncryption 31:33:0d:94:38:f2:b2:34:9b:08:e5:e3:dc:41:fb:84:3d:fd: c3:f1:aa:85:01:23:51:b9:ae:40:46:cd:6c:99:a3:97:bc:eb: b7:18:2c:72:55:17:be:92:5a:16:8d:ed:4a:13:4d:0c:46:ec: ac:be:1e:d9:8c:1d:6b:fd:36:71:e7:bd:4d:85:48:85:01:e1: 36:80:c9:db:c0:be:50:41:3e:48:6b:94:d0:50:0d:86:2f:a2: 99:d5:5b:90:aa:ee:b8:ab:cc:df:a7:02:4f:52:ad:cc:5e:14: 4c:4f:0e:92:8c:85:14:3c:ae:9d:c3:91:93:e7:97:ec:ea:49: 63:61:a4:91:12:c6:9b:d2:78:80:3a:59:51:9c:8c:23:2d:65: 07:e7:0c:ff:7a:a3:de:35:7c:3f:cc:10:a3:b7:d4:2f:b1:de: 1f:db:4a:a2:86:53:bf:9f:83:bb:12:26:85:aa:af:ab:99:19: 0b:aa:6e:64:df:9e:69:b5:8b:3f:10:e4:34:12:59:27:7d:24: bd:d0:95:93:c0:b8:79:1a:b6:72:3f:cf:a2:b6:bd:85:e0:5c: d1:4b:53:04:fd:95:34:03:9d:ac:be:1e:cc:15:5f:a6:ce:43: 46:56:86:24:7d:ef:87:29:99:8c:dd:8c:b1:50:94:8e:9d:13: 07:85:40:b9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE Q0Q3ODMzMDUwHhcNMjQwNjAzMDY1NTE5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVkNjhkNi1hMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtF12juCW6v2ECh3XFymca8C72hAGTBqCm+MarXQeLo/b4NC1ctZ99er/x4go uxu8NShEG31SSFzR8LQI0WHcj95DcfnRGXlL+f9wB4Ir1xe+HC/Se56vDGTstegk xXj6FQmcSD9Jqizm229LegQC6FkF+58ZBNX4p3+uD8o92eDk6XSPBPgbf1Zyfa90 dB0KNiT93CdUbjex6m1fNbcBtzz0udRfWorYq9/RNkfnxx9R9WRM5NevLe53F1dG 2WENmNJLmdXDwUXiA2iKvoElkLGdKjZ55uNqSbsPp70NhTSSmKiJfEOgyRUV1l5y XFfX8p7MBjLhZoOizW+T6Iz6NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ8Qpy2w u2FAOHnZJ75kHTsNoLtpMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvOTlEOTQ4N0VF QUZFMTFFRTlFRkIxOTc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB7bEYwDQYJKoZIhvcNAQELBQADggEBADEzDZQ48rI0mwjl 49xB+4Q9/cPxqoUBI1G5rkBGzWyZo5e867cYLHJVF76SWhaN7UoTTQxG7Ky+HtmM HWv9NnHnvU2FSIUB4TaAydvAvlBBPkhrlNBQDYYvopnVW5Cq7rirzN+nAk9Srcxe FExPDpKMhRQ8rp3DkZPnl+zqSWNhpJESxpvSeIA6WVGcjCMtZQfnDP96o941fD/M EKO31C+x3h/bSqKGU7+fg7sSJoWqr6uZGQuqbmTfnmm1iz8Q5DQSWSd9JL3QlZPA uHkatnI/z6K2vYXgXNFLUwT9lTQDnay+HswVX6bOQ0ZWhiR974cpmYzdjLFQlI6d EweFQLk= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:16 2024 by rpki-client on console-ams.rpki-client.org