$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/97C37F28224E11EFA102930CC4F9AE02.roa File: 97C37F28224E11EFA102930CC4F9AE02.roa (raw, json) Hash identifier: XEcOOUEz3Z7BOU8cKRk91rC7DEWF566W1gBPB6naKko= Subject key identifier: 8E:8A:D8:D0:45:04:0B:56:04:14:AB:72:B7:CC:08:FF:E3:37:67:8A Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Certificate serial: 05 Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/97C37F28224E11EFA102930CC4F9AE02.roa Signing time: Tue 04 Jun 2024 08:44:02 +0000 ROA not before: Tue 04 Jun 2024 08:44:02 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 141347 IP address blocks: 103.157.88.0/24 maxlen: 32 103.157.89.0/24 maxlen: 24 2401:a460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Validity Not Before: Jun 4 08:44:02 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=665ed3d2-be7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:f3:77:f3:c2:45:58:6c:16:70:08:59:4f: 6e:0e:e9:fb:2e:7e:c5:20:91:5e:87:f0:77:0c:9e: ad:30:6d:24:50:a6:26:5a:92:fe:72:98:45:f5:d3: e6:c4:ff:4c:83:2c:25:15:36:a6:27:77:fd:70:77: d0:80:09:a9:dd:b7:a9:60:be:50:ab:d2:8a:ef:d8: d5:5d:e5:85:ac:30:e1:b4:05:55:01:e0:1a:9e:bc: 01:1c:ac:d4:e3:d5:f9:d6:40:1f:a3:c7:0c:af:14: 85:e9:7a:cd:78:00:25:df:e9:5b:d4:1e:8a:7e:65: 48:32:c3:aa:92:b1:4f:6a:df:7b:4d:75:95:a3:5f: 15:4c:59:47:f7:35:e0:9b:d8:cb:c7:0f:5a:e8:18: 75:44:aa:53:ac:95:d0:e8:59:37:8a:ac:3b:82:e0: 74:a5:a2:6a:a0:e2:8b:aa:01:5a:5f:fb:6f:4f:48: 36:c2:ba:12:c4:7a:c8:4a:07:12:0a:f5:8f:c7:e3: e3:b1:97:0a:b8:ec:74:3a:85:8e:f3:69:83:e6:bd: 9c:0b:e5:7f:c0:7f:55:1b:d3:27:b4:80:9c:83:7a: fd:d0:b5:e7:33:7c:0f:b2:fa:02:29:3b:c6:08:3a: 72:3a:f5:1f:96:90:74:2b:0d:00:37:59:1f:80:33: 83:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8A:D8:D0:45:04:0B:56:04:14:AB:72:B7:CC:08:FF:E3:37:67:8A X509v3 Authority Key Identifier: keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/97C37F28224E11EFA102930CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.88.0/23 IPv6: 2401:a460::/32 Signature Algorithm: sha256WithRSAEncryption 89:96:60:ad:5d:73:89:1c:fc:4a:20:a5:f6:b8:cc:a8:6d:72: 3a:86:62:4d:34:b5:bf:38:84:3d:d0:d1:0f:ee:0c:e4:bf:62: 34:86:87:e7:b2:6a:ef:2b:d2:20:1b:79:2c:41:fd:2f:7d:39: c2:60:ee:38:23:95:2f:50:61:cf:d8:38:3d:76:5d:3a:20:d3: 82:99:6e:4c:38:7d:94:fe:25:94:1e:4f:73:2b:17:c7:98:60: 97:12:b9:c4:46:52:b5:98:9f:79:fe:71:4e:ad:00:57:d2:93: 64:95:07:a3:7d:f4:e0:fc:66:81:d0:50:67:3d:01:10:34:0e: af:d2:17:97:81:7e:76:64:97:9f:01:0e:32:25:b7:3f:90:f6: 29:1d:fc:4e:e3:6d:68:e9:42:14:39:4a:ce:d9:80:60:79:ab: 29:45:17:ce:35:1e:bb:9c:7f:58:95:8b:ab:71:b7:13:79:75: e3:c3:26:d0:29:e9:22:8b:db:e3:b8:0b:30:c1:a3:18:48:c6: 29:4e:30:3c:b7:49:6d:93:82:0a:0c:94:72:1a:6b:4a:aa:50: 6a:ca:3a:fa:26:66:4a:10:3f:af:3c:4b:eb:0b:6e:02:78:74: 05:42:a0:92:5c:6b:48:6e:d8:24:98:e6:b4:d6:fa:a2:6a:cb: 37:17:a2:e5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODgyQTExMC8GA1UEBRMoNkZBNjJCRTBBRDc5QTFCNEMzODY5QkExOTkwRjIxNERG NkIzQ0UyNzAeFw0yNDA2MDQwODQ0MDJaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NWVkM2QyLWJlN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmUvN388JFWGwWcAhZT24O6fsufsUgkV6H8HcMnq0wbSRQpiZakv5ymEX10+bE /0yDLCUVNqYnd/1wd9CACandt6lgvlCr0orv2NVd5YWsMOG0BVUB4BqevAEcrNTj 1fnWQB+jxwyvFIXpes14ACXf6VvUHop+ZUgyw6qSsU9q33tNdZWjXxVMWUf3NeCb 2MvHD1roGHVEqlOsldDoWTeKrDuC4HSlomqg4ouqAVpf+29PSDbCuhLEeshKBxIK 9Y/H4+Oxlwq47HQ6hY7zaYPmvZwL5X/Af1Ub0ye0gJyDev3QteczfA+y+gIpO8YI OnI69R+WkHQrDQA3WR+AM4NJAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUjorY0EUE C1YEFKtyt8wI/+M3Z4owHwYDVR0jBBgwFoAUb6Yr4K15obTDhpuhmQ8hTfazzicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4ODJBL0I5QzBDOTdBMjFB MjExRUZCOTA2OUE2QUM0RjlBRTAyL2I2WXI0SzE1b2JURGhwdWhtUThoVGZhenpp Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjZZcjRLMTVvYlREaHB1aG1ROGhUZmF6emljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODgyQS9COUMwQzk3QTIxQTIxMUVGQjkwNjlBNkFDNEY5QUUwMi85N0MzN0YyODIy NEUxMUVGQTEwMjkzMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWedWDANBAIAAjAHAwUAJAGkYDANBgkqhkiG9w0BAQsFAAOC AQEAiZZgrV1ziRz8SiCl9rjMqG1yOoZiTTS1vziEPdDRD+4M5L9iNIaH57Jq7yvS IBt5LEH9L305wmDuOCOVL1Bhz9g4PXZdOiDTgpluTDh9lP4llB5PcysXx5hglxK5 xEZStZifef5xTq0AV9KTZJUHo3304PxmgdBQZz0BEDQOr9IXl4F+dmSXnwEOMiW3 P5D2KR38TuNtaOlCFDlKztmAYHmrKUUXzjUeu5x/WJWLq3G3E3l148Mm0CnpIovb 47gLMMGjGEjGKU4wPLdJbZOCCgyUchprSqpQaso6+iZmShA/rzxL6wtuAnh0BUKg klxrSG7YJJjmtNb6omrLNxei5Q== -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:32 2024 by rpki-client on console-fra.rpki-client.org