$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/99961F74315E11EC953A8215C4F9AE02.roa File: 99961F74315E11EC953A8215C4F9AE02.roa (raw, json) Hash identifier: +VGbXPgEMjbM44YtRZVvhAgjfsY3HNt2pKC/SE+Bb2w= Subject key identifier: 17:4B:E9:B2:05:CB:A8:15:A4:1F:A8:F7:C2:F2:9D:82:71:AB:27:8C Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Certificate serial: 03D9 Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/99961F74315E11EC953A8215C4F9AE02.roa Signing time: Fri 15 Mar 2024 02:04:32 +0000 ROA not before: Fri 15 Mar 2024 02:04:32 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 141709 IP address blocks: 103.162.127.0/24 maxlen: 24 103.180.50.0/24 maxlen: 24 2400:aea0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0 Validity Not Before: Mar 15 02:04:32 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f3acb0-34f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:fb:48:8f:c6:ff:92:64:0d:e7:8a:b2:dd: 38:c4:c9:69:51:ba:0b:86:26:bc:99:88:d9:28:a7: 32:a9:fa:b7:09:40:95:cf:55:ba:a3:4d:97:8c:43: cb:f4:b3:1d:0e:74:f8:a8:e7:c0:24:7d:a2:69:1d: ba:1a:ea:73:af:6f:a0:6a:3c:cb:b5:59:9f:1f:d7: 53:35:51:5f:3f:23:c4:b8:c5:9d:ec:77:a5:fd:70: c3:b5:72:10:e6:c4:21:84:6d:8a:df:17:59:df:bb: dd:94:8b:8d:09:37:8e:13:90:00:6f:59:88:9f:c1: 41:1e:64:ab:8f:64:ff:aa:7d:ba:53:99:df:3e:72: d3:1d:94:f4:72:44:af:71:e5:f6:d0:62:2b:60:b8: 12:3a:29:c0:d0:c6:1e:3a:65:e3:de:6f:16:82:a8: b4:f2:75:36:f2:da:2e:96:dc:00:b1:e9:cc:ba:25: 5f:b8:e3:94:67:f0:fd:58:25:92:5a:bd:52:a3:3c: 63:72:fc:d0:01:67:1e:b4:56:c4:e9:fc:7c:1e:96: 06:8e:75:0e:f2:80:2e:aa:76:a8:0e:9a:fb:ac:36: a4:91:a2:a7:0c:c3:ec:a1:0c:be:26:00:2c:4f:cd: ea:e6:8f:57:fd:7c:a0:f2:85:d5:f6:29:9a:75:5a: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4B:E9:B2:05:CB:A8:15:A4:1F:A8:F7:C2:F2:9D:82:71:AB:27:8C X509v3 Authority Key Identifier: keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/99961F74315E11EC953A8215C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.127.0/24 103.180.50.0/24 IPv6: 2400:aea0::/32 Signature Algorithm: sha256WithRSAEncryption bc:76:db:e2:f5:d6:40:ed:b9:02:03:87:f7:d3:fe:cf:e1:4c: 5c:a1:5d:d5:53:da:1c:d9:3d:fc:07:c9:3b:3a:fc:ff:39:f8: 7a:76:fe:ae:b3:8e:1a:aa:c3:f0:0b:fd:42:12:48:47:72:80: 2c:45:a8:4d:34:9d:98:67:0e:59:05:34:6a:07:b4:b9:8c:c7: 98:88:a3:d9:26:da:59:92:13:41:c5:9b:fc:75:19:86:a3:bd: 5f:5d:2e:77:44:1d:18:51:50:6e:b4:3d:45:4b:c6:1d:dd:12: ba:2f:fe:21:9d:dd:68:09:cd:75:73:3b:45:da:f2:af:8f:47: ef:af:c7:9f:60:b2:06:66:ce:ad:7b:5a:2f:45:22:ac:6a:0e: 5f:e7:73:f1:66:92:40:a0:3b:8f:8e:dc:0c:0f:e9:2c:73:c9: 34:63:7d:30:1c:ee:bb:44:0a:d9:b7:b6:ab:a3:06:45:44:4e: a4:c5:26:48:19:f3:60:07:d6:56:85:f8:70:c3:e9:d8:68:bf: 11:06:02:fa:27:e5:45:4f:66:28:f5:05:30:6d:14:5d:19:b5: cc:39:7b:b2:1f:66:65:73:f1:e2:77:fc:06:ec:93:83:e8:e3: fb:f6:31:95:4d:2b:1b:65:5d:98:12:90:8c:89:40:46:c1:4a: 38:95:5b:99 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwOTkxMTAvBgNVBAUTKEIwRjQ3QTY5NkFDRDc3Qzc0QTM0NzNDNENEMTcxREEz NzIxQ0VDRDAwHhcNMjQwMzE1MDIwNDMyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzYWNiMC0zNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vL7SI/G/5JkDeeKst04xMlpUboLhia8mYjZKKcyqfq3CUCVz1W6o02XjEPL 9LMdDnT4qOfAJH2iaR26Gupzr2+gajzLtVmfH9dTNVFfPyPEuMWd7Hel/XDDtXIQ 5sQhhG2K3xdZ37vdlIuNCTeOE5AAb1mIn8FBHmSrj2T/qn26U5nfPnLTHZT0ckSv ceX20GIrYLgSOinA0MYeOmXj3m8Wgqi08nU28toultwAsenMuiVfuOOUZ/D9WCWS Wr1SozxjcvzQAWcetFbE6fx8HpYGjnUO8oAuqnaoDpr7rDakkaKnDMPsoQy+JgAs T83q5o9X/Xyg8oXV9imadVowqQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBdL6bIF y6gVpB+o98LynYJxqyeMMB8GA1UdIwQYMBaAFLD0emlqzXfHSjRzxM0XHaNyHOzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA5OS9FQjRFRkJDNjMx NUMxMUVDQTlCNzNEMTVDNEY5QUUwMi9zUFI2YVdyTmQ4ZEtOSFBFelJjZG8zSWM3 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NQUjZhV3JOZDhkS05IUEV6UmNkbzNJYzdOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMwOTkvRUI0RUZCQzYzMTVDMTFFQ0E5QjczRDE1QzRGOUFFMDIvOTk5NjFGNzQz MTVFMTFFQzk1M0E4MjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnon8DBABntDIwDQQCAAIwBwMFACQArqAwDQYJKoZIhvcN AQELBQADggEBALx22+L11kDtuQIDh/fT/s/hTFyhXdVT2hzZPfwHyTs6/P85+Hp2 /q6zjhqqw/AL/UISSEdygCxFqE00nZhnDlkFNGoHtLmMx5iIo9km2lmSE0HFm/x1 GYajvV9dLndEHRhRUG60PUVLxh3dErov/iGd3WgJzXVzO0Xa8q+PR++vx59gsgZm zq17Wi9FIqxqDl/nc/FmkkCgO4+O3AwP6SxzyTRjfTAc7rtECtm3tqujBkVETqTF JkgZ82AH1laF+HDD6dhovxEGAvon5UVPZij1BTBtFF0Ztcw5e7IfZmVz8eJ3/Abs k4Po4/v2MZVNKxtlXZgSkIyJQEbBSjiVW5k= -----END CERTIFICATE-----Generated at Fri May 17 03:17:01 2024 by rpki-client on console-fra.rpki-client.org