$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa File: A98932365ED311EF9DE3E178C4F9AE02.roa (raw, json) Hash identifier: oF3VcsOsG2Zqk+IQ1vtZzq4bbG78CQjAlZHo1HK5yEg= Subject key identifier: 3F:EB:AA:DA:3D:14:08:AA:4F:79:D6:34:0B:D4:1C:3D:FA:BB:CB:B3 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: 15 Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa Signing time: Wed 04 Sep 2024 12:00:08 +0000 ROA not before: Wed 04 Sep 2024 12:00:08 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 59267 IP address blocks: 103.39.138.0/24 maxlen: 24 103.58.232.0/24 maxlen: 24 103.66.39.0/24 maxlen: 24 103.255.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Sep 4 12:00:08 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66d84bc7-bc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:fa:c8:54:8d:0f:13:1b:ff:fc:c7:a4:db: 9f:85:af:7d:93:69:e2:97:b0:84:d1:88:49:49:56: bb:5a:84:d0:d3:58:16:16:ea:97:26:bb:2c:03:3d: 88:c3:40:c3:6b:ea:9d:5f:08:f6:a1:54:7d:fe:46: 2a:d3:fd:37:56:a3:bc:f1:09:bd:02:75:1b:b8:16: 41:08:af:ee:e7:c7:39:64:8f:c0:fb:12:3d:60:9b: 92:72:62:bc:8f:38:4d:0f:df:c6:43:ae:1c:b2:1e: 7f:a1:b8:7e:86:79:21:b4:10:d6:c2:00:16:0b:82: 6b:4a:8b:2a:36:14:82:5d:2a:e0:2e:c5:c2:4e:32: 59:40:a1:b3:f6:a0:51:f7:f9:56:b9:df:e6:75:ce: e2:48:1d:dd:82:90:4a:0c:26:d1:fd:c1:ba:d7:74: 4f:3a:c4:aa:3c:3f:a4:01:70:3d:95:30:7d:91:cc: d6:2c:0e:d4:18:b2:22:a9:0e:52:e7:ae:81:49:e7: 58:db:81:e1:c0:08:4a:bb:1d:ee:35:33:57:87:64: e7:1f:2f:fc:79:d7:43:1f:f4:8a:88:7e:a7:9e:2d: 92:98:63:ab:1c:58:dd:54:a4:01:25:ca:b5:3e:0d: 38:33:82:2a:b7:e8:da:81:04:9e:f4:89:d9:47:18: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EB:AA:DA:3D:14:08:AA:4F:79:D6:34:0B:D4:1C:3D:FA:BB:CB:B3 X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.138.0/24 103.58.232.0/24 103.66.39.0/24 103.255.251.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:8a:5d:eb:d8:e1:c3:63:98:7b:9d:52:d1:69:20:fd:bc:a3: 83:0f:4d:2d:4e:ef:f9:6e:f3:93:23:8d:39:eb:dc:51:70:94: 5e:4b:9c:0f:46:d1:6b:14:d4:52:6c:1a:49:8b:ef:1f:f1:c2: fd:4e:32:15:12:c6:35:4e:2f:62:00:e8:6a:e9:b4:87:33:01: eb:52:67:12:55:80:32:3b:be:c8:67:1c:4f:45:12:50:76:db: 65:40:d6:c7:08:e5:88:0d:ea:cb:3a:b2:ff:ac:a0:fe:c0:4e: e2:7d:30:d6:08:ad:65:44:4a:cd:4a:50:0b:14:24:69:62:bc: ca:c5:8a:77:33:63:93:af:37:25:d0:20:15:a9:4a:4c:55:20: d6:56:a4:bf:5e:b8:aa:7b:4c:af:78:1e:6d:a0:a6:eb:dc:68: 94:16:70:b6:cb:f3:41:3a:20:a8:8c:21:60:12:0e:9f:21:d1: 51:b9:59:b1:be:02:d6:3a:0e:70:3e:31:f8:81:4c:98:15:5b: a4:b3:2a:69:31:66:ee:72:74:8f:9b:ce:76:a9:9a:29:2a:a1: 6e:a6:e3:4d:6c:ba:bd:5c:71:e4:65:9f:e8:db:47:2b:2e:a6: 2f:13:c6:56:d5:20:26:e4:18:f7:ad:eb:52:b3:28:6c:f1:0b: ea:4d:7c:56 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzcyQzExMC8GA1UEBRMoNEM2MkYxRTEwQjg4M0Y1RDU3ODRENjM1NzQwRkQyMzAz NENFQkZFMjAeFw0yNDA5MDQxMjAwMDhaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDg0YmM3LWJjNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1P/rIVI0PExv//Mek25+Fr32TaeKXsITRiElJVrtahNDTWBYW6pcmuywDPYjD QMNr6p1fCPahVH3+RirT/TdWo7zxCb0CdRu4FkEIr+7nxzlkj8D7Ej1gm5JyYryP OE0P38ZDrhyyHn+huH6GeSG0ENbCABYLgmtKiyo2FIJdKuAuxcJOMllAobP2oFH3 +Va53+Z1zuJIHd2CkEoMJtH9wbrXdE86xKo8P6QBcD2VMH2RzNYsDtQYsiKpDlLn roFJ51jbgeHACEq7He41M1eHZOcfL/x510Mf9IqIfqeeLZKYY6scWN1UpAElyrU+ DTgzgiq36NqBBJ70idlHGILBAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUP+uq2j0U CKpPedY0C9QcPfq7y7MwHwYDVR0jBBgwFoAUTGLx4QuIP11XhNY1dA/SMDTOv+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNzJDLzY3OTZEOEUyNUVD RTExRUZBOUE4QjAzRUM0RjlBRTAyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3Yt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEdMeDRRdUlQMTFYaE5ZMWRBX1NNRFRPdi1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9BOTg5MzIzNjVF RDMxMUVGOURFM0UxNzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQi MCAwHgQCAAEwGAMEAGcnigMEAGc66AMEAGdCJwMEAGf/+zANBgkqhkiG9w0BAQsF AAOCAQEADYpd69jhw2OYe51S0Wkg/byjgw9NLU7v+W7zkyONOevcUXCUXkucD0bR axTUUmwaSYvvH/HC/U4yFRLGNU4vYgDoaum0hzMB61JnElWAMju+yGccT0USUHbb ZUDWxwjliA3qyzqy/6yg/sBO4n0w1gitZURKzUpQCxQkaWK8ysWKdzNjk683JdAg FalKTFUg1lakv164qntMr3gebaCm69xolBZwtsvzQTogqIwhYBIOnyHRUblZsb4C 1joOcD4x+IFMmBVbpLMqaTFm7nJ0j5vOdqmaKSqhbqbjTWy6vVxx5GWf6NtHKy6m LxPGVtUgJuQY963rUrMobPEL6k18Vg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:06 2024 by rpki-client on console-ams.rpki-client.org