$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/98D4C15C51A811EC9B4EC93CC4F9AE02.roa File: 98D4C15C51A811EC9B4EC93CC4F9AE02.roa (raw, json) Hash identifier: bNg1nPkHTi5qhKljMxc7OcbzdU8DfruLexW5/cfcCms= Subject key identifier: 0B:51:B8:02:68:5F:D0:13:41:A7:39:E5:EB:22:3F:C1:48:B4:7C:C4 Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 039E Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/98D4C15C51A811EC9B4EC93CC4F9AE02.roa Signing time: Wed 29 Nov 2023 02:13:34 +0000 ROA not before: Wed 29 Nov 2023 02:13:34 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 147179 IP address blocks: 103.174.44.0/24 maxlen: 24 103.174.45.0/24 maxlen: 24 2407:fa40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Nov 29 02:13:34 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65669e4e-c70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:09:9a:a4:fa:32:97:42:d6:23:08:c0:db:a1: 0f:5f:0f:9c:c7:46:44:35:98:e7:44:33:d0:6e:71: 71:f3:23:5b:c7:79:1d:b8:b9:26:5b:9e:c2:bc:a9: 1a:65:b0:5d:67:8a:cb:57:ec:59:57:f4:e9:4a:07: 47:8c:78:db:99:7d:3f:6d:dd:ba:58:31:f4:b4:1e: 03:2c:92:6d:85:f0:f5:77:eb:0f:3a:f2:ce:84:e5: 79:12:8a:0c:50:6c:06:2d:4c:3a:79:3d:7c:74:12: 95:49:2d:49:b6:68:09:fa:c9:67:8c:fa:5c:21:19: 8c:bd:35:50:94:1f:e4:d7:0d:c6:31:8f:61:4b:76: 64:d7:18:eb:d6:a2:d8:44:fd:4e:98:f4:05:d7:2a: cb:62:59:0c:25:8f:81:94:84:79:13:0c:35:a4:dd: 11:8c:29:df:7c:4a:40:9f:af:2b:2e:c3:58:4e:4b: 0f:e0:cd:85:16:f7:9f:cc:59:f6:5c:2e:30:5c:51: bd:69:8d:cd:48:3d:bb:90:cb:92:c6:bd:5f:88:bb: 78:2f:d8:13:f7:8a:0e:be:2c:fb:d2:83:5b:91:86: 5f:ba:9a:02:6c:c8:91:43:ee:b9:34:e0:8b:e9:93: 59:df:d0:93:2d:fe:78:14:c7:b3:a7:9f:eb:ad:77: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:51:B8:02:68:5F:D0:13:41:A7:39:E5:EB:22:3F:C1:48:B4:7C:C4 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/98D4C15C51A811EC9B4EC93CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.44.0/23 IPv6: 2407:fa40::/32 Signature Algorithm: sha256WithRSAEncryption af:40:80:03:2b:01:17:e7:95:9c:9a:42:03:c2:6e:aa:ff:26: 98:23:a6:20:ef:b9:2e:53:2c:6f:f9:09:22:38:69:68:ef:82: 2d:8b:27:51:73:0d:b2:9b:ec:4e:d4:81:fb:ed:10:da:e5:1b: d5:23:85:7b:ca:a3:77:83:fa:ba:c6:2d:e9:59:a1:e7:a2:6b: 16:dc:57:e8:1e:cf:0b:6e:b8:10:3f:79:3a:cc:8c:b6:12:9c: 7d:02:b2:e0:a2:f1:e5:21:e4:d0:5d:41:d0:62:3b:44:7d:ae: 04:85:f2:47:60:82:ce:51:9d:3b:90:0c:90:f1:23:4f:68:60: a2:46:d5:d2:67:9c:31:e6:2e:bd:03:d2:3c:62:2c:49:5b:bb: 64:53:40:7c:29:d3:db:1c:37:dd:f0:ee:ad:70:83:30:25:34: 8f:d9:1a:99:53:dd:13:61:9d:31:f5:4d:5b:36:e6:8e:8d:cd: 25:6c:16:70:06:b8:f9:91:79:35:cb:39:f8:f1:07:a5:39:f0: 7b:d8:45:43:cc:4c:c0:00:05:ed:06:47:4c:28:5d:1d:9a:e3: 8e:65:16:76:59:1a:e3:6d:af:54:af:f4:5c:cb:ed:29:5c:21: 7b:31:6b:7e:ad:fd:1c:32:df:ff:24:87:fe:85:ed:10:4a:06: d7:96:73:87 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjMxMTI5MDIxMzM0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2OWU0ZS1jNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wmapPoyl0LWIwjA26EPXw+cx0ZENZjnRDPQbnFx8yNbx3kduLkmW57CvKka ZbBdZ4rLV+xZV/TpSgdHjHjbmX0/bd26WDH0tB4DLJJthfD1d+sPOvLOhOV5EooM UGwGLUw6eT18dBKVSS1JtmgJ+slnjPpcIRmMvTVQlB/k1w3GMY9hS3Zk1xjr1qLY RP1OmPQF1yrLYlkMJY+BlIR5Eww1pN0RjCnffEpAn68rLsNYTksP4M2FFvefzFn2 XC4wXFG9aY3NSD27kMuSxr1fiLt4L9gT94oOviz70oNbkYZfupoCbMiRQ+65NOCL 6ZNZ39CTLf54FMezp5/rrXfa8wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAtRuAJo X9ATQac55esiP8FItHzEMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVEMEMvODkxQjRFQ0EzMjM2MTFFQzg5ODM4NzU2QzRGOUFFMDIvOThENEMxNUM1 MUE4MTFFQzlCNEVDOTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnriwwDQQCAAIwBwMFACQH+kAwDQYJKoZIhvcNAQELBQAD ggEBAK9AgAMrARfnlZyaQgPCbqr/JpgjpiDvuS5TLG/5CSI4aWjvgi2LJ1FzDbKb 7E7UgfvtENrlG9UjhXvKo3eD+rrGLelZoeeiaxbcV+gezwtuuBA/eTrMjLYSnH0C suCi8eUh5NBdQdBiO0R9rgSF8kdggs5RnTuQDJDxI09oYKJG1dJnnDHmLr0D0jxi LElbu2RTQHwp09scN93w7q1wgzAlNI/ZGplT3RNhnTH1TVs25o6NzSVsFnAGuPmR eTXLOfjxB6U58HvYRUPMTMAABe0GR0woXR2a445lFnZZGuNtr1Sv9FzL7SlcIXsx a36t/Rwy3/8kh/6F7RBKBteWc4c= -----END CERTIFICATE-----Generated at Fri May 17 03:06:34 2024 by rpki-client on console-ams.rpki-client.org