$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/E6D6D72E1B3E11EBBC57067AC4F9AE02.roa File: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (raw, json) Hash identifier: ggnPzvv3qd1Nj2UZ19i5QZeSlHSatF+uNOmRUyudW3w= Subject key identifier: 3A:29:6A:69:16:01:68:2F:65:07:9E:8B:E5:5B:F3:E1:A9:DE:A3:95 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0A8B Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/E6D6D72E1B3E11EBBC57067AC4F9AE02.roa Signing time: Mon 18 Sep 2023 19:36:51 +0000 ROA not before: Mon 18 Sep 2023 19:36:51 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 58504 IP address blocks: 103.98.128.0/23 maxlen: 24 103.98.130.0/24 maxlen: 24 103.98.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 19:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Sep 18 19:36:51 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6508a6d3-756b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:af:2f:f2:99:1c:f7:3e:a2:e1:7d:d9:d9:9d: e7:d4:cc:28:5b:79:8e:9d:51:31:26:a6:93:55:ee: 9d:a8:6b:21:27:9b:a7:f9:54:d7:13:c9:12:25:52: 20:ec:1a:00:d0:6e:5c:40:63:0f:6a:fb:d6:f4:21: 84:1f:87:43:2e:aa:81:81:98:29:27:42:fd:77:b9: b5:c2:82:29:f8:04:1a:15:8b:c7:f3:d8:64:5e:c2: 31:63:6a:37:2d:75:fb:12:7a:2e:04:1e:ed:e3:77: 6e:61:d9:9c:ec:5d:f4:bf:fa:94:ca:e0:85:f2:74: e9:fb:b4:fa:e7:24:45:b9:f1:c7:9d:ab:85:05:8f: a1:f3:6a:8b:d1:3a:72:67:5b:8b:55:f3:35:c6:e8: 99:80:ee:89:6b:c9:3b:5a:dd:d7:fe:c7:03:73:d4: 28:ec:30:5b:c9:f8:ff:22:89:af:b6:58:d7:e2:44: 00:6d:3d:b0:e0:a1:f5:e0:9c:70:ab:36:bc:56:d7: 59:b9:4b:44:37:61:0f:23:49:17:a9:9d:99:c6:13: 6b:a3:e8:ca:b6:42:1e:69:49:0c:a3:14:19:8d:cd: 60:01:48:3f:cf:40:76:e9:f5:d3:cf:17:39:13:c7: 56:b1:92:89:b0:91:a3:1d:49:1b:7b:6a:ba:19:11: 57:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:29:6A:69:16:01:68:2F:65:07:9E:8B:E5:5B:F3:E1:A9:DE:A3:95 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/E6D6D72E1B3E11EBBC57067AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.128.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:91:38:24:13:30:3b:30:85:ee:e2:cb:41:fc:73:40:eb:ef: 81:3a:f5:42:da:aa:6e:4b:60:1a:65:d6:6a:be:d4:8a:bc:76: 7c:b1:09:a4:2a:56:68:a4:93:a9:8a:f9:32:89:12:2b:68:18: 9c:55:38:03:76:6d:48:4e:75:66:8a:05:b6:88:bc:c6:9e:79: 3e:11:53:24:20:4e:16:bd:97:ec:58:89:95:18:b7:a2:db:2e: ad:85:63:29:4c:84:40:fe:9e:ff:c9:94:55:03:2d:a4:24:51: 3a:71:ab:50:02:54:b7:81:69:28:ea:2c:a8:22:19:c1:5f:94: bc:09:f8:53:3c:0c:9c:6a:11:ec:3a:53:43:fe:f4:27:3e:4c: 59:a4:4d:d4:53:1e:d4:d4:5b:3c:55:a6:2c:ca:ea:11:6c:39: b7:90:c3:71:a5:a5:45:86:88:c5:38:98:81:5e:b4:b4:f3:1b: 69:ce:56:29:62:70:06:53:2a:14:53:0f:b3:1e:3f:8e:06:1e: 8d:f6:ad:cb:bf:a3:81:0a:42:b7:b4:01:8b:b9:19:e1:49:02: eb:2e:cb:6f:35:5a:4f:01:3e:65:02:a4:be:ca:a2:0d:fe:c8: ba:ec:6f:3d:2b:c8:8f:dd:a4:9f:6c:ff:59:65:8e:66:8c:90: 51:5e:9b:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjMwOTE4MTkzNjUxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTA4YTZkMy03NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3a8v8pkc9z6i4X3Z2Z3n1MwoW3mOnVExJqaTVe6dqGshJ5un+VTXE8kSJVIg 7BoA0G5cQGMPavvW9CGEH4dDLqqBgZgpJ0L9d7m1woIp+AQaFYvH89hkXsIxY2o3 LXX7EnouBB7t43duYdmc7F30v/qUyuCF8nTp+7T65yRFufHHnauFBY+h82qL0Tpy Z1uLVfM1xuiZgO6Ja8k7Wt3X/scDc9Qo7DBbyfj/IomvtljX4kQAbT2w4KH14Jxw qza8VtdZuUtEN2EPI0kXqZ2ZxhNro+jKtkIeaUkMoxQZjc1gAUg/z0B26fXTzxc5 E8dWsZKJsJGjHUkbe2q6GRFXuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDopamkW AWgvZQeei+Vb8+Gp3qOVMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkZBMTUvNzAxRjUzRDIxRDg3MTFFQUE4MTY5QjZDQzRGOUFFMDIvRTZENkQ3MkUx QjNFMTFFQkJDNTcwNjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnYoAwDQYJKoZIhvcNAQELBQADggEBAE6ROCQTMDswhe7i y0H8c0Dr74E69ULaqm5LYBpl1mq+1Iq8dnyxCaQqVmikk6mK+TKJEitoGJxVOAN2 bUhOdWaKBbaIvMaeeT4RUyQgTha9l+xYiZUYt6LbLq2FYylMhED+nv/JlFUDLaQk UTpxq1ACVLeBaSjqLKgiGcFflLwJ+FM8DJxqEew6U0P+9Cc+TFmkTdRTHtTUWzxV pizK6hFsObeQw3GlpUWGiMU4mIFetLTzG2nOVilicAZTKhRTD7MeP44GHo32rcu/ o4EKQre0AYu5GeFJAusuy281Wk8BPmUCpL7Kog3+yLrsbz0ryI/dpJ9s/1lljmaM kFFem0Y= -----END CERTIFICATE-----Generated at Mon May 20 21:17:42 2024 by rpki-client on console-ams.rpki-client.org