$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/AEDAFB9EFF6011ED90C62C26C4F9AE02.roa File: AEDAFB9EFF6011ED90C62C26C4F9AE02.roa (raw, json) Hash identifier: v/WWCkD1ele/YQlExGl7sKquTqG2XjHeLSWUO+AuW9g= Subject key identifier: 47:05:F2:E1:81:C8:8E:54:37:EA:DA:04:CF:15:40:B2:09:72:5C:23 Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 3403 Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/AEDAFB9EFF6011ED90C62C26C4F9AE02.roa Signing time: Thu 30 May 2024 14:50:30 +0000 ROA not before: Thu 30 May 2024 14:50:30 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 10232 IP address blocks: 202.4.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13315 (0x3403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: May 30 14:50:30 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66589236-9c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:58:a9:3e:d9:94:8d:28:53:c8:50:73:5a: 4c:d8:44:1a:dc:0d:e4:db:ce:44:77:ac:79:b5:da: ca:b7:70:34:b4:93:2a:29:b1:9d:a2:41:e4:87:82: 8b:ce:aa:76:0a:3f:3e:2d:e3:56:ef:3e:cd:18:db: 01:f8:a4:36:01:1f:8e:b7:a2:88:a9:dc:9a:67:96: f2:03:ef:08:fc:ca:7e:1f:6c:af:5a:ac:f8:cf:37: 3b:d6:db:7a:f2:4d:36:90:aa:d9:47:e0:45:9f:77: 82:db:04:83:7e:ca:ea:8a:ca:ec:9d:1e:c5:24:30: 18:42:c2:56:2f:2f:e5:6b:5e:ec:4e:49:a9:ee:56: cf:c8:f4:4f:eb:bf:6e:45:05:ef:ae:c3:d4:09:95: 2a:76:bd:d6:f0:88:20:5d:e2:3d:07:99:b0:cd:80: c8:8f:45:40:73:47:eb:39:3d:74:e0:b6:83:d4:74: 70:82:98:4c:99:8d:df:d1:ea:87:36:64:12:bf:3d: 18:50:42:1a:3e:7c:0a:71:36:91:c2:f7:86:ec:e5: b9:58:1a:88:39:fb:ed:72:5f:cf:6b:db:35:ea:ab: 4d:9b:47:d8:5f:e6:18:d9:19:41:dc:09:55:72:6f: e1:88:fa:75:fb:2c:f4:f7:a3:fe:bd:94:9c:01:1c: 1c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:F2:E1:81:C8:8E:54:37:EA:DA:04:CF:15:40:B2:09:72:5C:23 X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/AEDAFB9EFF6011ED90C62C26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.4.26.0/23 Signature Algorithm: sha256WithRSAEncryption 54:7b:4e:7c:53:74:90:21:9f:92:cd:0b:cc:65:f6:d8:60:25: 7e:b5:48:3b:9a:85:a6:e2:3c:07:f9:b0:05:f8:7e:a6:c4:a2: f4:f1:87:b3:7a:c3:99:b1:2d:74:15:67:2d:dd:98:70:d3:d7: 5f:6e:26:0c:1c:f2:30:bf:2f:7b:aa:ff:b1:6a:7b:54:77:9a: 25:1e:32:1b:db:c9:0a:17:97:11:b1:bd:07:50:55:b7:c0:7f: af:7f:86:27:f2:8f:d2:c6:b6:76:77:f3:59:af:89:af:ce:e6: 9d:d9:f6:98:28:3b:75:56:2d:3b:8a:dd:b5:91:7c:f2:cc:de: 2b:a8:a1:e6:82:ad:80:45:40:38:30:93:97:36:35:26:f4:c7: 50:7c:21:6a:64:94:60:3b:a1:28:40:e9:7f:9c:c8:aa:c2:0d: b6:11:16:66:d1:49:73:7e:67:92:02:d1:5d:99:0c:60:c0:81: 47:29:ee:8d:08:97:fe:69:b8:fb:f1:87:46:c7:34:aa:92:3e: 45:a3:9e:d5:de:10:c6:61:0f:83:df:dd:af:69:29:ee:75:ec: 19:64:a6:b3:59:f3:ad:3f:ab:0e:31:67:c2:a4:3a:62:df:89: c3:07:3e:50:e2:c2:aa:0b:4d:e1:1a:e1:a7:92:9e:3d:82:e7: e6:b4:59:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjQwNTMwMTQ1MDMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4OTIzNi05Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWhYqT7ZlI0oU8hQc1pM2EQa3A3k285Ed6x5tdrKt3A0tJMqKbGdokHkh4KL zqp2Cj8+LeNW7z7NGNsB+KQ2AR+Ot6KIqdyaZ5byA+8I/Mp+H2yvWqz4zzc71tt6 8k02kKrZR+BFn3eC2wSDfsrqisrsnR7FJDAYQsJWLy/la17sTkmp7lbPyPRP679u RQXvrsPUCZUqdr3W8IggXeI9B5mwzYDIj0VAc0frOT104LaD1HRwgphMmY3f0eqH NmQSvz0YUEIaPnwKcTaRwveG7OW5WBqIOfvtcl/Pa9s16qtNm0fYX+YY2RlB3AlV cm/hiPp1+yz096P+vZScARwc4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEcF8uGB yI5UN+raBM8VQLIJclwjMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBCOTkvRDNGOTA1MUMxRDgzMTFFMkI0RUQ1Q0Q5MDhCMDJDRDIvQUVEQUZCOUVG RjYwMTFFRDkwQzYyQzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKBBowDQYJKoZIhvcNAQELBQADggEBAFR7TnxTdJAhn5LN C8xl9thgJX61SDuahabiPAf5sAX4fqbEovTxh7N6w5mxLXQVZy3dmHDT119uJgwc 8jC/L3uq/7Fqe1R3miUeMhvbyQoXlxGxvQdQVbfAf69/hifyj9LGtnZ381mvia/O 5p3Z9pgoO3VWLTuK3bWRfPLM3iuooeaCrYBFQDgwk5c2NSb0x1B8IWpklGA7oShA 6X+cyKrCDbYRFmbRSXN+Z5IC0V2ZDGDAgUcp7o0Il/5puPvxh0bHNKqSPkWjntXe EMZhD4Pf3a9pKe517BlkprNZ860/qw4xZ8KkOmLficMHPlDiwqoLTeEa4aeSnj2C 5+a0WYc= -----END CERTIFICATE-----Generated at Fri May 31 16:40:53 2024 by rpki-client on console-ams.rpki-client.org