$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa File: D992FDD49B4811EFA17EB17FC4F9AE02.roa (raw, json) Hash identifier: 1gtmRzqYdhmA8CchuwScykbthJY4rmebTYSAnt6uzqg= Subject key identifier: 96:77:D0:B8:16:9E:42:4E:F2:1A:D4:2E:A2:34:02:E7:CB:0D:D0:A0 Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0AEF Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa Signing time: Tue 05 Nov 2024 07:37:46 +0000 ROA not before: Tue 05 Nov 2024 07:37:46 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 23686 IP address blocks: 101.97.48.0/23 maxlen: 23 101.97.50.0/23 maxlen: 23 2404:4f01::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Nov 5 07:37:46 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6729cb4a-0341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:f3:d8:a1:5c:88:16:c0:b0:88:b5:cf:34: 9f:e8:04:65:e3:6d:0e:d6:32:d5:0a:07:ee:66:dc: 25:0a:e4:9e:f6:ae:8e:c6:16:86:b1:31:a1:15:83: d2:64:7b:4b:25:b2:98:cb:76:01:92:67:2d:83:e6: 3b:5d:3b:c0:07:09:6c:35:96:fd:df:f3:94:c1:97: 35:27:43:63:8d:dc:dc:3d:1c:a4:61:91:7f:0f:d8: ac:53:18:5c:f7:9f:f5:3e:1d:65:11:6c:db:11:65: 83:6e:fe:94:f8:d1:8f:e1:a2:8d:fc:b4:5c:72:c6: 4e:51:37:ee:ba:07:66:88:0c:f1:3c:67:1e:38:0e: a4:b0:7e:62:34:26:48:6d:77:36:62:ed:22:02:8a: 9c:d6:47:96:50:ec:6d:9f:1c:f5:f4:94:f3:ec:6c: 00:17:2c:e7:d8:11:bd:a5:6d:77:39:ee:7a:02:5b: 57:3b:ac:9a:c2:04:f8:3b:19:48:7b:e2:aa:94:4c: 15:42:7e:43:61:25:4a:94:cf:c9:44:a1:51:d7:bb: 94:65:c7:65:79:a2:bb:f3:5e:2c:ba:8a:55:a0:a2: f3:aa:da:fb:75:a5:c6:5b:b1:7f:a9:d6:cb:c9:99: cc:54:40:fe:b7:80:9c:2f:75:48:34:e8:e8:4e:80: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:77:D0:B8:16:9E:42:4E:F2:1A:D4:2E:A2:34:02:E7:CB:0D:D0:A0 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.97.48.0/22 IPv6: 2404:4f01::/33 Signature Algorithm: sha256WithRSAEncryption ba:3b:05:12:6c:c2:db:f5:01:72:e6:96:fd:04:d1:c3:aa:63: 02:33:09:9e:7b:fa:da:9c:61:d4:56:24:ac:49:72:19:a9:51: 94:78:0f:8f:7a:96:d9:b0:5a:5f:50:25:b0:db:3d:12:20:b0: d2:7e:68:95:fd:82:90:21:06:bc:d3:75:a3:bf:fe:e1:49:00: 8e:6b:f9:fe:6a:5c:2b:ca:3f:0d:cd:75:8e:48:0a:53:bf:aa: 3a:42:1c:d8:9c:07:df:42:ff:4d:a2:8c:a0:31:4e:4f:03:8b: 73:c5:9b:53:b4:f9:97:a3:b8:ff:dd:19:b6:67:ec:96:6e:69: 5b:89:ec:59:f6:0a:6f:5f:8a:d3:e8:09:67:76:4d:40:5f:a2: cb:6b:51:7f:e8:88:f0:42:10:c8:47:ea:7a:ee:8c:67:0c:c1: 79:77:25:59:c8:ba:b8:81:1d:e6:46:a9:8b:21:2c:d2:31:9a: b3:0c:1d:4f:4f:39:b3:2c:62:70:c6:bc:d0:73:7b:8f:14:cf: 39:15:64:b0:fd:3b:e3:00:b7:d5:cb:ee:c6:7f:cf:5b:0a:2f: 6a:1e:a6:79:86:f4:66:9a:4c:83:b7:56:3a:b9:05:8f:4f:d6: e0:37:10:67:2d:8a:7b:c6:a0:5c:a6:bc:55:13:8c:8d:9b:23: 6e:57:82:cf -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjQxMTA1MDczNzQ2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI5Y2I0YS0wMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mTz2KFciBbAsIi1zzSf6ARl420O1jLVCgfuZtwlCuSe9q6OxhaGsTGhFYPS ZHtLJbKYy3YBkmctg+Y7XTvABwlsNZb93/OUwZc1J0NjjdzcPRykYZF/D9isUxhc 95/1Ph1lEWzbEWWDbv6U+NGP4aKN/LRccsZOUTfuugdmiAzxPGceOA6ksH5iNCZI bXc2Yu0iAoqc1keWUOxtnxz19JTz7GwAFyzn2BG9pW13Oe56AltXO6yawgT4OxlI e+KqlEwVQn5DYSVKlM/JRKFR17uUZcdleaK7814suopVoKLzqtr7daXGW7F/qdbL yZnMVED+t4CcL3VINOjoToBzyQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJZ30LgW nkJO8hrULqI0AufLDdCgMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U1NTgvM0RGMTRGMDg1Mzk0MTFFQUJGNkI0RjVGQzRGOUFFMDIvRDk5MkZERDQ5 QjQ4MTFFRkExN0VCMTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAJlYTAwDgQCAAIwCAMGByQETwEAMA0GCSqGSIb3DQEBCwUA A4IBAQC6OwUSbMLb9QFy5pb9BNHDqmMCMwmee/ranGHUViSsSXIZqVGUeA+PepbZ sFpfUCWw2z0SILDSfmiV/YKQIQa803Wjv/7hSQCOa/n+alwryj8NzXWOSApTv6o6 QhzYnAffQv9NooygMU5PA4tzxZtTtPmXo7j/3Rm2Z+yWbmlbiexZ9gpvX4rT6Aln dk1AX6LLa1F/6IjwQhDIR+p67oxnDMF5dyVZyLq4gR3mRqmLISzSMZqzDB1PTzmz LGJwxrzQc3uPFM85FWSw/TvjALfVy+7Gf89bCi9qHqZ5hvRmmkyDt1Y6uQWPT9bg NxBnLYp7xqBcprxVE4yNmyNuV4LP -----END CERTIFICATE-----Generated at Wed Nov 20 21:35:02 2024 by rpki-client on console-ams.rpki-client.org