$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa File: 1D98617687B311EFB4972044C4F9AE02.roa (raw, json) Hash identifier: r/dMMrrKfi7HksKacltJHyMKyJEPPTZYtDJB071cZ6I= Subject key identifier: F4:61:4D:28:71:F0:EC:C1:45:3B:8C:4D:F0:C5:85:35:03:DA:4E:4C Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: E4 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa Signing time: Fri 11 Oct 2024 09:28:04 +0000 ROA not before: Fri 11 Oct 2024 09:28:04 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 137453 IP address blocks: 203.99.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Oct 11 09:28:04 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6708efa4-3bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:d8:50:36:cc:53:d0:45:56:d7:b5:1b:89: 7a:76:a4:f5:e6:51:56:03:d1:94:d4:72:32:6d:40: b1:4c:42:04:ed:42:86:a3:c3:15:66:dd:d4:fa:fa: ed:33:b3:5a:a9:f2:e3:50:f5:8c:e0:e1:3d:ba:fc: f9:f3:76:fa:16:23:bc:fb:88:67:c3:11:ef:ec:53: f6:dd:6a:a8:94:4c:3b:6a:08:70:ff:f2:0b:84:7e: 27:87:40:c4:5a:57:cd:c4:c1:d9:d6:43:86:c0:bf: ba:53:a6:23:5d:ed:e5:58:58:0d:ec:42:d5:68:13: 8b:e1:99:36:e4:ba:07:7c:28:68:1f:4d:44:ca:45: 81:bd:ff:ce:95:77:26:f9:4c:7f:98:81:25:6a:dc: 3f:f8:73:64:c6:83:b9:90:3d:b1:6e:78:86:40:aa: f2:ca:f4:63:95:0f:f6:d6:eb:dc:8f:5b:de:9c:32: 51:68:dc:b1:d8:9f:19:1e:6c:99:44:fd:3f:31:04: c5:09:f8:73:7f:4b:fa:30:c2:16:55:b4:ed:19:3f: 8d:5d:71:09:b6:52:96:1c:87:dd:fa:2d:36:e7:fd: 20:3d:06:79:9c:14:ae:3b:a5:e1:ca:59:c2:94:a7: 1d:ad:1c:0f:1f:e5:68:10:b1:1e:44:be:d2:75:9b: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:61:4D:28:71:F0:EC:C1:45:3B:8C:4D:F0:C5:85:35:03:DA:4E:4C X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.99.145.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:0f:80:7d:05:c3:82:0a:5a:c2:67:7b:42:48:e5:47:12:a9: 89:55:52:4c:46:88:8d:b3:3d:62:84:09:2b:ed:47:67:91:14: 75:c4:44:b9:35:ee:c1:ab:d4:a3:28:57:04:ca:21:88:b9:5c: 67:bd:c9:0d:43:4f:40:4b:a0:83:66:a6:d7:4d:17:14:17:95: 7c:b7:fd:0b:9b:bb:b8:d7:9b:59:7b:89:7f:dc:10:56:dd:68: 2f:de:fb:e4:e0:d2:bf:be:23:e3:d3:d0:e6:bd:3b:13:b1:bd: 4f:78:37:19:9a:4f:73:74:51:4b:44:b9:ab:52:e5:14:2d:2d: e3:2d:b8:64:6c:38:c0:0c:0f:12:fd:cf:5a:6b:8d:f9:5a:29: ee:bc:ff:22:1c:8a:90:f5:00:58:9a:15:24:95:e4:a0:ce:0c: f2:02:0c:00:8a:b2:18:36:3a:01:43:13:f0:09:58:61:04:70: b0:48:fb:b1:a7:b7:24:8c:a7:a6:1b:b0:66:14:43:2d:ad:43: 1e:fa:90:e9:9e:df:27:6a:15:cc:43:70:90:c6:46:86:26:0e: 3a:2d:b9:83:49:1f:80:f4:4c:c2:10:f4:ee:a0:02:51:bc:59: 25:66:f1:6d:d7:fe:55:2b:ab:23:03:79:18:f8:41:be:36:3d: d2:00:a9:7d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjQxMDExMDkyODA0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA4ZWZhNC0zYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArU7YUDbMU9BFVte1G4l6dqT15lFWA9GU1HIybUCxTEIE7UKGo8MVZt3U+vrt M7NaqfLjUPWM4OE9uvz583b6FiO8+4hnwxHv7FP23WqolEw7aghw//ILhH4nh0DE WlfNxMHZ1kOGwL+6U6YjXe3lWFgN7ELVaBOL4Zk25LoHfChoH01EykWBvf/OlXcm +Ux/mIElatw/+HNkxoO5kD2xbniGQKryyvRjlQ/21uvcj1venDJRaNyx2J8ZHmyZ RP0/MQTFCfhzf0v6MMIWVbTtGT+NXXEJtlKWHIfd+i025/0gPQZ5nBSuO6XhylnC lKcdrRwPH+VoELEeRL7SdZvt3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPRhTShx 8OzBRTuMTfDFhTUD2k5MMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwOUMvRUVGNzYyQzA5MDc1MTFFRTg3RDI2NjgwQzRGOUFFMDIvMUQ5ODYxNzY4 N0IzMTFFRkI0OTcyMDQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLY5EwDQYJKoZIhvcNAQELBQADggEBAG4PgH0Fw4IKWsJn e0JI5UcSqYlVUkxGiI2zPWKECSvtR2eRFHXERLk17sGr1KMoVwTKIYi5XGe9yQ1D T0BLoINmptdNFxQXlXy3/Qubu7jXm1l7iX/cEFbdaC/e++Tg0r++I+PT0Oa9OxOx vU94NxmaT3N0UUtEuatS5RQtLeMtuGRsOMAMDxL9z1prjflaKe68/yIcipD1AFia FSSV5KDODPICDACKshg2OgFDE/AJWGEEcLBI+7GntySMp6YbsGYUQy2tQx76kOme 3ydqFcxDcJDGRoYmDjotuYNJH4D0TMIQ9O6gAlG8WSVm8W3X/lUrqyMDeRj4Qb42 PdIAqX0= -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org