$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa File: BA007060162D11EEB79F703CC4F9AE02.roa (raw, json) Hash identifier: hbT64AC1b+dkt2+W5FJQBVgunjxhbDfkjwBTqo/aGMM= Subject key identifier: F8:80:D4:34:5A:03:49:66:DF:76:13:48:66:C8:90:7F:72:9D:62:32 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2275 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa Signing time: Thu 20 Jul 2023 16:12:53 +0000 ROA not before: Thu 20 Jul 2023 16:12:53 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 142424 IP address blocks: 120.28.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8821 (0x2275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 20 16:12:53 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b95d05-2a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:36:2d:39:f1:df:eb:72:b6:4f:c0:08:b8:a9: 06:a7:b7:9f:8b:7a:7f:81:59:e2:7f:53:ee:d6:45: b6:61:66:42:2e:fc:cd:3f:2e:2f:12:b2:83:b2:ce: 33:db:0b:13:81:24:40:cb:6e:dc:b1:37:74:87:46: 16:0e:0e:69:5c:b4:a2:d7:16:59:df:a1:48:ff:92: cb:4a:8f:fd:66:b3:9e:3a:c1:ef:9d:1c:d4:60:9d: f6:d1:95:1b:5f:d2:99:84:19:2d:e7:8d:af:26:e6: f2:0e:8f:2e:cf:c9:5b:37:b8:04:b9:bd:d1:bb:5c: c7:44:4a:5f:9f:0e:5f:c7:2b:77:7c:f8:3a:81:b2: b8:fc:a4:cb:12:77:51:69:d6:77:74:1e:28:4e:c1: f4:0e:1a:45:56:36:f0:86:13:2e:53:0c:56:46:f7: 8f:ee:a6:9b:dd:36:0a:c2:70:29:89:55:f3:8f:b3: ed:51:11:6c:95:0d:ec:9e:97:c5:ac:94:1d:c1:c9: 66:8e:55:45:15:9b:cd:ff:82:18:06:e9:92:95:2f: eb:34:dd:fb:22:53:32:8a:ee:80:95:7f:12:03:10: bb:12:fc:f9:7b:cf:43:d5:de:63:0f:6f:0f:93:12: 56:56:07:3f:2b:3d:8e:c5:55:f7:d9:26:33:d8:cd: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:80:D4:34:5A:03:49:66:DF:76:13:48:66:C8:90:7F:72:9D:62:32 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.28.32.0/24 Signature Algorithm: sha256WithRSAEncryption b1:de:06:61:77:93:ed:df:c1:43:7e:56:fb:ea:61:bb:72:1e: 2e:21:dd:fa:ed:b4:06:46:19:18:8a:85:51:03:d0:08:48:23: 68:cf:32:35:c3:9e:d4:13:5c:7e:83:fb:6b:71:cc:f8:29:6b: 5c:b5:02:0c:b6:41:d8:fc:1f:4b:2b:e6:3d:b7:e8:86:67:c1: 76:5c:ed:aa:a2:c8:d3:bb:e7:23:18:0f:e1:96:03:26:66:a7: c6:50:a1:6d:fc:f7:32:c4:30:16:33:b3:d1:1f:00:bf:9b:aa: d0:b1:46:e4:79:33:75:dd:58:ad:c7:7d:f0:3a:96:4b:f0:3a: 6e:34:86:83:eb:13:5b:9a:ef:2c:4d:31:b3:66:cf:6c:5d:5a: 4f:5a:04:b3:28:df:07:48:85:52:42:b8:06:fe:81:a0:44:d0: e3:e3:12:4d:f9:dc:c8:bc:ee:4a:1a:80:07:b1:87:71:1d:42: a2:13:8c:de:3e:7d:fe:39:21:89:0d:59:b6:95:51:30:e0:b7: 30:1c:71:d1:9e:cc:19:92:f0:63:a2:90:00:81:12:69:4f:b3: 3e:6a:2b:8d:b0:ea:5a:db:0d:e4:65:a3:08:2f:33:78:74:26: 38:a2:2b:cc:f6:2d:7d:62:a8:2c:82:e9:38:a5:11:f8:a1:86: 8b:a8:23:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICInUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjMwNzIwMTYxMjUzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI5NWQwNS0yYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jYtOfHf63K2T8AIuKkGp7efi3p/gVnif1Pu1kW2YWZCLvzNPy4vErKDss4z 2wsTgSRAy27csTd0h0YWDg5pXLSi1xZZ36FI/5LLSo/9ZrOeOsHvnRzUYJ320ZUb X9KZhBkt542vJubyDo8uz8lbN7gEub3Ru1zHREpfnw5fxyt3fPg6gbK4/KTLEndR adZ3dB4oTsH0DhpFVjbwhhMuUwxWRveP7qab3TYKwnApiVXzj7PtURFslQ3snpfF rJQdwclmjlVFFZvN/4IYBumSlS/rNN37IlMyiu6AlX8SAxC7Evz5e89D1d5jD28P kxJWVgc/Kz2OxVX32SYz2M1BZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPiA1DRa A0lm33YTSGbIkH9ynWIyMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQkEwMDcwNjAx NjJEMTFFRUI3OUY3MDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB4HCAwDQYJKoZIhvcNAQELBQADggEBALHeBmF3k+3fwUN+ VvvqYbtyHi4h3frttAZGGRiKhVED0AhII2jPMjXDntQTXH6D+2txzPgpa1y1Agy2 Qdj8H0sr5j236IZnwXZc7aqiyNO75yMYD+GWAyZmp8ZQoW389zLEMBYzs9EfAL+b qtCxRuR5M3XdWK3HffA6lkvwOm40hoPrE1ua7yxNMbNmz2xdWk9aBLMo3wdIhVJC uAb+gaBE0OPjEk353Mi87koagAexh3EdQqITjN4+ff45IYkNWbaVUTDgtzAccdGe zBmS8GOikACBEmlPsz5qK42w6lrbDeRlowgvM3h0JjiiK8z2LX1iqCyC6TilEfih houoIzw= -----END CERTIFICATE-----Generated at Fri May 31 17:44:23 2024 by rpki-client on console-fra.rpki-client.org