$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/99D9487EEAFE11EE9EFB1977C4F9AE02.roa File: 99D9487EEAFE11EE9EFB1977C4F9AE02.roa (raw, json) Hash identifier: RRLgpLDgXiTQ7L68SuQ4iS9X7bZjxq91nht1ytUqDP4= Subject key identifier: 1F:00:5B:9B:EE:25:56:3D:C7:63:76:5B:D3:37:F5:4A:6D:CF:F9:31 Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Certificate serial: 0119 Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/99D9487EEAFE11EE9EFB1977C4F9AE02.roa Signing time: Mon 25 Mar 2024 23:22:52 +0000 ROA not before: Mon 25 Mar 2024 23:22:52 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 151487 IP address blocks: 123.108.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 04:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Validity Not Before: Mar 25 23:22:52 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6602074c-cacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:97:c7:81:49:5c:56:f2:7e:e9:3a:54:31: 4c:78:f5:ca:1f:45:4c:4f:b1:e9:c7:ab:5d:c8:ed: 5c:c5:b6:54:74:b5:d4:cc:bc:92:b4:b8:4c:fc:7a: 38:8e:2a:7e:b7:60:c9:36:00:da:aa:69:e6:ed:c7: 2e:1a:de:a4:1c:4b:23:28:72:cc:a3:59:e2:27:5c: f8:ff:13:37:63:f7:4c:14:f9:30:8c:3a:4c:eb:85: 0a:6d:fa:cc:e7:b9:3a:de:14:67:b9:40:ce:b8:b6: 50:4f:8c:cd:63:5e:c8:00:a9:4b:8c:64:80:06:ca: 1c:b1:ce:43:ad:47:4a:0d:1f:23:77:20:e7:81:31: fe:36:07:5f:5c:44:55:76:39:fc:c6:fa:6d:ff:ad: 96:6d:69:0e:b5:59:06:db:8b:51:e5:f9:43:ec:9a: 65:cb:7c:23:27:fa:2e:5e:68:dc:aa:a6:9e:7b:79: 19:c7:63:de:44:a4:6d:9c:2e:e9:e5:9c:68:12:7b: 24:53:c3:25:5a:da:be:6c:47:4b:0f:7f:04:71:e8: 25:0c:31:d7:2a:77:de:65:48:2d:1d:b5:02:f3:71: 0e:18:c2:48:e5:08:94:79:e2:d2:19:b3:93:e8:00: 68:af:65:16:14:c2:e3:31:9a:35:da:72:af:e4:6f: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:5B:9B:EE:25:56:3D:C7:63:76:5B:D3:37:F5:4A:6D:CF:F9:31 X509v3 Authority Key Identifier: keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/99D9487EEAFE11EE9EFB1977C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.108.70.0/24 Signature Algorithm: sha256WithRSAEncryption c6:10:2c:da:db:57:b6:09:1c:9c:1e:89:ae:10:f2:7f:5d:ca: 1c:cb:d7:b7:5d:44:86:52:00:8d:16:19:31:f7:2a:64:33:2c: fc:09:55:20:e3:f4:94:0b:19:4b:9e:e1:f4:7e:25:c5:a2:b4: 48:52:59:0a:46:ae:97:55:c8:8f:40:db:02:5e:40:7e:0b:0f: df:2e:8a:b1:56:10:28:58:43:b1:06:80:0f:8b:96:85:3e:95: f7:73:a4:39:c2:a5:b5:b6:a7:be:56:f2:99:a6:81:75:c1:cd: 01:74:c0:9e:73:09:1d:96:32:d3:a0:8f:24:78:72:a9:e1:e7: f4:95:0a:87:db:54:f8:31:d8:ee:ce:f3:25:5f:b4:0e:c1:3c: 6f:f8:2b:9e:ee:2f:7a:1c:20:a0:70:ca:07:02:34:75:05:87: 24:e1:84:69:87:9c:c4:b2:e4:8f:cd:48:1a:34:63:29:67:63: 37:c1:16:d9:0a:03:3b:a3:ee:00:84:22:e8:21:6d:eb:d8:62: a2:3f:96:f9:61:f6:11:4f:1a:55:04:6b:dc:fb:a9:c9:b2:65: 02:6b:ca:a7:ff:5f:a7:1c:b0:4b:2a:24:1f:b2:42:36:79:78: 6b:6d:41:b0:ee:9f:3d:d1:85:34:ca:fb:8b:ee:8e:eb:9c:98: 26:09:03:9c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE Q0Q3ODMzMDUwHhcNMjQwMzI1MjMyMjUyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjAyMDc0Yy1jYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTqXx4FJXFbyfuk6VDFMePXKH0VMT7Hpx6tdyO1cxbZUdLXUzLyStLhM/Ho4 jip+t2DJNgDaqmnm7ccuGt6kHEsjKHLMo1niJ1z4/xM3Y/dMFPkwjDpM64UKbfrM 57k63hRnuUDOuLZQT4zNY17IAKlLjGSABsocsc5DrUdKDR8jdyDngTH+NgdfXERV djn8xvpt/62WbWkOtVkG24tR5flD7Jply3wjJ/ouXmjcqqaee3kZx2PeRKRtnC7p 5ZxoEnskU8MlWtq+bEdLD38EceglDDHXKnfeZUgtHbUC83EOGMJI5QiUeeLSGbOT 6ABor2UWFMLjMZo12nKv5G9nUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB8AW5vu JVY9x2N2W9M39Uptz/kxMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvOTlEOTQ4N0VF QUZFMTFFRTlFRkIxOTc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB7bEYwDQYJKoZIhvcNAQELBQADggEBAMYQLNrbV7YJHJwe ia4Q8n9dyhzL17ddRIZSAI0WGTH3KmQzLPwJVSDj9JQLGUue4fR+JcWitEhSWQpG rpdVyI9A2wJeQH4LD98uirFWEChYQ7EGgA+LloU+lfdzpDnCpbW2p75W8pmmgXXB zQF0wJ5zCR2WMtOgjyR4cqnh5/SVCofbVPgx2O7O8yVftA7BPG/4K57uL3ocIKBw ygcCNHUFhyThhGmHnMSy5I/NSBo0YylnYzfBFtkKAzuj7gCEIughbevYYqI/lvlh 9hFPGlUEa9z7qcmyZQJryqf/X6ccsEsqJB+yQjZ5eGttQbDunz3RhTTK+4vujuuc mCYJA5w= -----END CERTIFICATE-----Generated at Thu May 23 06:54:45 2024 by rpki-client on console-fra.rpki-client.org