$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67023924535F11EE9BC85F83C4F9AE02.roa File: 67023924535F11EE9BC85F83C4F9AE02.roa (raw, json) Hash identifier: +LqH7qOu9FS2c5HLQ/OQLe2VKZRqp/0/BJ1tqGjjag0= Subject key identifier: 96:1B:98:53:50:87:21:EF:4D:98:DF:83:79:74:26:76:32:BE:F9:CC Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0AEB Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67023924535F11EE9BC85F83C4F9AE02.roa Signing time: Mon 04 Dec 2023 20:08:08 +0000 ROA not before: Mon 04 Dec 2023 20:08:08 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 4202202155 IP address blocks: 202.162.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2795 (0xaeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Dec 4 20:08:08 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656e31a8-ed48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:b9:c7:b5:56:67:88:a2:0a:2d:ba:78:ad: a1:4c:60:bd:e9:93:1d:d9:98:65:3d:21:b8:75:fa: 2a:5b:e1:01:f1:42:43:07:24:d8:58:91:60:8a:4e: 6e:ba:ec:1d:66:d4:b3:17:07:64:52:2b:cb:37:f7: 05:41:b3:c4:89:c0:4e:b1:c8:1d:51:01:4d:c8:f0: f7:ca:05:96:fd:10:8d:4f:5b:0d:58:dc:df:7f:16: 57:17:a4:35:b2:8d:aa:ab:f5:e0:15:6d:fb:70:5a: 7c:04:76:94:e3:54:17:72:db:3c:34:c1:24:a1:4b: e3:10:ef:72:e4:d7:43:7c:26:a3:11:92:2a:00:d1: e2:4a:96:c7:4f:22:bd:05:3b:17:26:ae:6c:2b:e2: 9c:b9:aa:34:89:29:5a:65:2f:85:76:ae:57:14:5d: c0:d3:51:7e:16:2b:33:40:e8:31:a0:f0:ee:c9:e0: d4:41:85:78:db:8c:e5:67:fc:e9:b6:0c:e2:d8:97: 36:74:dd:27:39:b2:74:75:f9:78:8f:09:60:b9:be: 80:91:cc:ad:17:1d:ec:fd:07:9f:d7:7c:c6:ad:b8: 51:b6:a0:27:a0:ab:e6:48:8c:c5:a2:fc:19:2d:83: 17:2a:9c:3d:e9:e3:19:e7:02:6e:7c:6c:08:4a:7f: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1B:98:53:50:87:21:EF:4D:98:DF:83:79:74:26:76:32:BE:F9:CC X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67023924535F11EE9BC85F83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.162.23.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4a:5d:41:b8:a2:04:5c:ac:3a:a1:f5:15:a9:8a:ec:a3:50: 9a:28:75:34:5e:29:11:a1:f9:db:51:d6:c6:1d:83:a3:19:e7: 46:58:ae:84:85:ef:97:50:65:1d:4f:40:aa:cb:8b:fc:c1:25: 95:e2:af:36:81:5a:93:7e:b6:1c:d3:97:13:cf:36:ba:6d:2b: 14:df:de:5e:2b:f6:f0:d3:fe:cd:94:03:9e:75:e7:a6:68:59: 12:d8:78:e5:80:5f:c0:b5:e6:42:7b:b2:54:d3:cd:98:9e:84: 26:d8:ce:3e:f5:89:e8:99:8f:23:94:27:9a:b0:45:90:c6:cf: f3:7c:04:c6:c7:fa:3a:05:00:ec:53:7b:45:12:f6:8c:ab:6b: 9a:1b:a0:1a:14:21:d7:51:de:3b:86:59:a5:f4:ae:41:19:51: 64:00:77:83:2f:a6:53:31:ce:e3:24:67:21:6e:0d:40:f6:1c: a2:6f:d3:5c:c1:10:6d:be:7f:2f:3b:5d:8b:96:11:2a:3a:e8: 7b:22:b6:8f:d0:09:84:c0:1f:3c:6a:01:78:cb:39:1a:33:84: 04:91:ea:34:82:d6:c0:2c:4e:3f:e5:1c:ad:58:6d:23:4e:b0: bb:1f:0a:d6:ed:fc:a0:b8:d4:0e:da:83:13:3f:d6:a6:2c:96: 22:f9:6a:13 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjMxMjA0MjAwODA4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlMzFhOC1lZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8a5x7VWZ4iiCi26eK2hTGC96ZMd2ZhlPSG4dfoqW+EB8UJDByTYWJFgik5u uuwdZtSzFwdkUivLN/cFQbPEicBOscgdUQFNyPD3ygWW/RCNT1sNWNzffxZXF6Q1 so2qq/XgFW37cFp8BHaU41QXcts8NMEkoUvjEO9y5NdDfCajEZIqANHiSpbHTyK9 BTsXJq5sK+Kcuao0iSlaZS+Fdq5XFF3A01F+FiszQOgxoPDuyeDUQYV424zlZ/zp tgzi2Jc2dN0nObJ0dfl4jwlgub6AkcytFx3s/Qef13zGrbhRtqAnoKvmSIzFovwZ LYMXKpw96eMZ5wJufGwISn/fAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJYbmFNQ hyHvTZjfg3l0JnYyvvnMMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvNjcwMjM5MjQ1 MzVGMTFFRTlCQzg1RjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKohcwDQYJKoZIhvcNAQELBQADggEBAJNKXUG4ogRcrDqh 9RWpiuyjUJoodTReKRGh+dtR1sYdg6MZ50ZYroSF75dQZR1PQKrLi/zBJZXirzaB WpN+thzTlxPPNrptKxTf3l4r9vDT/s2UA55156ZoWRLYeOWAX8C15kJ7slTTzZie hCbYzj71ieiZjyOUJ5qwRZDGz/N8BMbH+joFAOxTe0US9oyra5oboBoUIddR3juG WaX0rkEZUWQAd4MvplMxzuMkZyFuDUD2HKJv01zBEG2+fy87XYuWESo66Hsito/Q CYTAHzxqAXjLORozhASR6jSC1sAsTj/lHK1YbSNOsLsfCtbt/KC41A7agxM/1qYs liL5ahM= -----END CERTIFICATE-----Generated at Fri May 31 22:13:02 2024 by rpki-client on console-fra.rpki-client.org