$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/28D70012A14F11EC8FF76A62C4F9AE02.roa File: 28D70012A14F11EC8FF76A62C4F9AE02.roa (raw, json) Hash identifier: SXN7oBmV+w4XnMVL3L0/Yz3gfhO1sBlz1yce/Wi7I28= Subject key identifier: 31:98:27:B5:9D:D5:41:E3:42:D0:5C:E7:37:31:52:95:FE:01:7E:14 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2272 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/28D70012A14F11EC8FF76A62C4F9AE02.roa Signing time: Thu 20 Jul 2023 16:12:51 +0000 ROA not before: Thu 20 Jul 2023 16:12:51 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139350 IP address blocks: 112.198.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 16:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8818 (0x2272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 20 16:12:51 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b95d02-522a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:17:39:0e:94:9e:ca:47:e6:89:f1:da:29: f7:6c:33:83:e0:ff:d8:fb:e3:60:b5:da:c9:4e:4e: 2a:d6:de:a3:c3:c0:4b:e7:5b:ea:3f:a5:1c:f1:98: b8:86:74:67:00:3a:2b:da:f0:78:68:06:2f:86:54: f8:e4:12:ef:a3:96:23:4d:5d:54:f3:90:b6:a0:f2: 91:c7:1b:af:74:9e:36:77:c0:74:54:df:57:2b:78: cc:81:fe:b9:e7:02:80:55:a3:20:30:76:04:50:9e: 15:87:a9:43:9f:41:a9:d1:98:7b:f1:9f:e5:9d:f7: 74:a8:af:4f:32:79:08:d3:fc:4a:bf:9f:cd:6e:e4: b3:97:39:e5:c5:f6:35:69:a2:da:6e:07:a4:a5:58: e6:1e:ee:20:4c:00:83:98:82:79:4b:8f:f7:d7:43: 6c:1e:c5:b9:2d:a3:bd:ef:8c:51:52:f0:78:fc:c9: 02:2b:6d:ff:75:bf:a6:b4:ac:dc:74:7d:21:79:5e: 0a:4a:76:d3:1f:ac:58:44:65:f2:5c:bc:cc:c5:c8: bc:29:84:21:be:2d:d3:29:32:51:2f:d8:3c:bd:3e: c9:af:87:3a:29:95:65:c1:54:b4:de:84:c6:86:d7: 8d:63:dc:41:fa:2c:ac:71:c8:9e:c9:86:b4:a4:9b: d9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:98:27:B5:9D:D5:41:E3:42:D0:5C:E7:37:31:52:95:FE:01:7E:14 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/28D70012A14F11EC8FF76A62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.198.6.0/24 Signature Algorithm: sha256WithRSAEncryption 17:bd:f5:10:fb:bd:3b:eb:d1:c4:fd:0e:05:d4:c7:2a:87:25: 24:c7:1a:9d:51:7d:a9:2b:1b:33:3a:71:03:c7:7a:d6:d2:0b: 33:e4:98:04:c1:b0:e9:01:62:e9:65:af:f1:84:45:3b:c1:11: bf:8c:f1:93:e4:93:60:92:3d:e9:a5:12:7b:0e:49:90:61:b1: 1f:f2:25:f9:32:d3:8f:80:60:8e:5d:f4:74:54:fe:bf:6d:af: fa:44:e9:b7:f2:01:30:e0:93:b5:c7:b5:2e:4a:34:6f:dc:9c: 3b:68:28:2b:e5:cf:77:c8:d5:3e:18:6a:85:3b:7b:da:96:b4: 58:b8:fa:87:40:77:dd:16:49:a7:c2:7f:bb:68:98:06:16:3d: e1:17:8a:4f:9a:8a:ce:32:b9:b9:c0:20:b4:22:44:73:5f:16: eb:df:42:e8:14:0d:07:f0:30:94:8d:af:f7:74:e3:69:4b:b4: 74:a7:51:ae:bb:c0:ae:0d:62:dd:03:ba:b2:95:3c:b8:2a:c2: 55:af:9e:f9:ab:2a:c8:64:e2:0e:c7:ab:4d:34:35:57:a6:f7: d6:3e:b7:d1:a7:f7:3c:69:8a:2f:c7:24:c4:ae:9e:66:a1:00: 4b:f9:2c:7b:b2:ba:84:62:32:27:86:92:85:b9:b0:2d:57:1a: d0:f4:af:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICInIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjMwNzIwMTYxMjUxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI5NWQwMi01MjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6EXOQ6UnspH5onx2in3bDOD4P/Y++NgtdrJTk4q1t6jw8BL51vqP6Uc8Zi4 hnRnADor2vB4aAYvhlT45BLvo5YjTV1U85C2oPKRxxuvdJ42d8B0VN9XK3jMgf65 5wKAVaMgMHYEUJ4Vh6lDn0Gp0Zh78Z/lnfd0qK9PMnkI0/xKv5/NbuSzlznlxfY1 aaLabgekpVjmHu4gTACDmIJ5S4/310NsHsW5LaO974xRUvB4/MkCK23/db+mtKzc dH0heV4KSnbTH6xYRGXyXLzMxci8KYQhvi3TKTJRL9g8vT7Jr4c6KZVlwVS03oTG hteNY9xB+iysccieyYa0pJvZZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDGYJ7Wd 1UHjQtBc5zcxUpX+AX4UMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMjhENzAwMTJB MTRGMTFFQzhGRjc2QTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABwxgYwDQYJKoZIhvcNAQELBQADggEBABe99RD7vTvr0cT9 DgXUxyqHJSTHGp1RfakrGzM6cQPHetbSCzPkmATBsOkBYullr/GERTvBEb+M8ZPk k2CSPemlEnsOSZBhsR/yJfky04+AYI5d9HRU/r9tr/pE6bfyATDgk7XHtS5KNG/c nDtoKCvlz3fI1T4YaoU7e9qWtFi4+odAd90WSafCf7tomAYWPeEXik+ais4yubnA ILQiRHNfFuvfQugUDQfwMJSNr/d042lLtHSnUa67wK4NYt0DurKVPLgqwlWvnvmr Kshk4g7Hq000NVem99Y+t9Gn9zxpii/HJMSunmahAEv5LHuyuoRiMieGkoW5sC1X GtD0r7E= -----END CERTIFICATE-----Generated at Fri Jun 14 19:09:19 2024 by rpki-client on console-ams.rpki-client.org