$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/F9A8F3561F3D11ECB2E88C32C4F9AE02.roa File: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (raw, json) Hash identifier: V0Ju3pd3n+IcbQEzHygiG/kTkhX/jsHG9G0e1qBxAxo= Subject key identifier: 21:54:EF:10:88:BA:E0:66:27:91:EB:04:D5:79:30:78:40:47:52:47 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 0417 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/F9A8F3561F3D11ECB2E88C32C4F9AE02.roa Signing time: Fri 19 Apr 2024 02:14:05 +0000 ROA not before: Fri 19 Apr 2024 02:14:05 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 141368 IP address blocks: 203.98.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Apr 19 02:14:05 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6621d36c-f894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:d6:f5:38:60:7d:53:a6:73:35:5a:db:d3: c8:a1:96:98:a1:8e:1c:9a:ad:d3:7b:14:66:6c:36: 21:3e:28:e3:1a:31:bb:5d:12:de:e0:df:63:21:07: 81:89:87:6f:98:03:2f:60:7f:73:52:c2:6e:29:bf: 4e:85:a8:57:fa:51:79:ad:5c:d1:55:7c:43:0a:e7: ba:26:80:ed:e2:18:0b:e9:2b:89:20:8a:95:ac:ef: 0e:73:57:09:8b:72:29:11:94:da:34:c9:c1:d5:03: a2:a6:bf:06:d4:8f:c0:dc:7e:35:ab:92:46:76:56: 2d:7a:68:03:a5:b5:f7:77:64:22:78:0f:12:3b:59: 55:68:89:e4:98:62:27:b1:6a:32:9d:35:0e:03:92: 00:d2:2f:7e:30:d2:16:ce:97:9b:4d:48:a6:34:f7: 38:7b:9e:25:cf:2c:60:54:d6:b9:94:e5:0b:99:9a: 2f:32:2f:a0:95:e7:e3:9e:90:9f:eb:c2:5e:22:7b: 48:df:e4:01:d8:13:13:eb:d2:a9:c9:c2:18:22:3a: 28:cd:a2:20:d7:1e:5c:55:11:87:05:a4:84:19:54: cc:7e:5b:8e:85:3d:90:67:49:91:62:96:0a:55:44: ab:9a:dc:6f:5f:18:c2:32:cc:4c:2d:18:e5:8b:7c: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:54:EF:10:88:BA:E0:66:27:91:EB:04:D5:79:30:78:40:47:52:47 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/F9A8F3561F3D11ECB2E88C32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.98.226.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:74:c1:a6:2b:2e:a5:31:03:67:2e:f1:64:81:b8:2a:aa:31: cc:97:20:f2:17:6b:bd:07:12:05:8d:32:f5:98:c3:96:19:0d: e0:c9:49:3f:fe:62:59:ba:ae:20:ca:a5:e0:11:23:ab:6b:df: 17:b0:78:5f:7b:4e:d8:2e:4b:da:12:9a:1a:c3:29:96:58:93: c1:dc:de:ff:64:33:8a:21:28:43:34:27:8f:a1:d3:db:89:03: 8e:ed:31:88:26:c8:06:76:70:05:23:c9:49:d0:4c:5f:17:b7: 67:9f:ff:11:bb:84:76:47:6f:79:29:35:04:a3:34:12:91:cf: 74:f7:f1:89:68:9c:57:d6:d1:54:87:11:64:0b:76:16:77:40: 36:48:9c:88:e9:4f:61:3b:8b:ad:21:6e:e0:b5:4e:74:37:46: 60:fa:ff:6f:aa:ca:60:1e:58:d0:f8:1e:c8:69:86:9e:d2:e1: a0:39:f7:26:08:71:07:0e:82:f3:c4:91:1a:47:39:bf:78:ea: 72:c9:78:ae:16:c4:c4:6e:48:5d:3f:0e:89:f3:95:4d:f0:02: 12:d5:c5:65:a5:c4:b2:2d:1f:1c:9f:b2:78:a1:7a:d2:88:c9: 9c:8b:9e:b9:33:61:82:44:b7:2f:de:36:47:25:f5:e7:2e:93: b3:b3:b5:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjQwNDE5MDIxNDA1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjIxZDM2Yy1mODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXLW9ThgfVOmczVa29PIoZaYoY4cmq3TexRmbDYhPijjGjG7XRLe4N9jIQeB iYdvmAMvYH9zUsJuKb9OhahX+lF5rVzRVXxDCue6JoDt4hgL6SuJIIqVrO8Oc1cJ i3IpEZTaNMnB1QOipr8G1I/A3H41q5JGdlYtemgDpbX3d2QieA8SO1lVaInkmGIn sWoynTUOA5IA0i9+MNIWzpebTUimNPc4e54lzyxgVNa5lOULmZovMi+glefjnpCf 68JeIntI3+QB2BMT69KpycIYIjoozaIg1x5cVRGHBaSEGVTMfluOhT2QZ0mRYpYK VUSrmtxvXxjCMsxMLRjli3zD2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCFU7xCI uuBmJ5HrBNV5MHhAR1JHMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I3NjUvQTREREZBOTQxRjNCMTFFQ0I3REM0NTJGQzRGOUFFMDIvRjlBOEYzNTYx RjNEMTFFQ0IyRTg4QzMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLYuIwDQYJKoZIhvcNAQELBQADggEBAIt0waYrLqUxA2cu 8WSBuCqqMcyXIPIXa70HEgWNMvWYw5YZDeDJST/+Ylm6riDKpeARI6tr3xeweF97 TtguS9oSmhrDKZZYk8Hc3v9kM4ohKEM0J4+h09uJA47tMYgmyAZ2cAUjyUnQTF8X t2ef/xG7hHZHb3kpNQSjNBKRz3T38YlonFfW0VSHEWQLdhZ3QDZInIjpT2E7i60h buC1TnQ3RmD6/2+qymAeWND4Hshphp7S4aA59yYIcQcOgvPEkRpHOb946nLJeK4W xMRuSF0/DonzlU3wAhLVxWWlxLItHxyfsnihetKIyZyLnrkzYYJEty/eNkcl9ecu k7OztZs= -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org