$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CFF0FFB002CC11E6AA35863CC4F9AE02.roa File: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (raw, json) Hash identifier: ukieKIspcpwrq+madwOJ98Ix0pz/ZDTSPE9HCfYDOQM= Subject key identifier: EF:36:AA:90:65:6D:F2:BB:3E:8C:44:6C:A2:4C:88:CD:34:0B:6D:44 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2288 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CFF0FFB002CC11E6AA35863CC4F9AE02.roa Signing time: Thu 20 Jul 2023 16:13:12 +0000 ROA not before: Thu 20 Jul 2023 16:13:12 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 56095 IP address blocks: 120.28.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8840 (0x2288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 20 16:13:12 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b95d18-5dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:15:c4:51:6f:61:45:f4:63:0e:d5:9e:68:25: 58:35:e0:b1:6a:0c:80:95:3d:c5:60:28:af:05:2e: 1e:58:b8:fd:90:0e:f1:90:b8:1f:a4:d9:5c:e4:89: 66:22:d7:28:2f:65:de:41:29:23:02:45:fa:1a:61: a2:4d:8a:f3:43:84:13:f3:72:09:2a:db:3b:05:65: f7:3e:1c:96:cc:a5:e3:fd:2e:0a:6e:2a:c6:bc:22: eb:71:51:91:ab:2a:a0:23:eb:f1:42:3c:96:6e:b7: f8:b4:73:0f:b7:4d:d6:6c:53:d7:c1:5d:c0:b6:9c: 2e:ef:81:fc:f2:f6:ab:53:0f:ed:40:3c:1a:61:61: be:cc:6d:d6:fd:f0:fc:64:ca:03:17:e5:2d:17:8d: 21:0e:60:3a:cf:ce:b0:c9:7f:ab:83:35:99:2f:cf: 0a:ca:6a:69:46:29:60:67:fc:89:e9:62:d0:3c:26: c1:b5:e0:80:3e:5a:76:66:58:62:43:18:da:53:db: 96:1a:c8:f3:85:9a:c3:05:ac:ec:d8:37:89:91:72: bf:84:aa:b5:ce:8b:6e:f7:7f:22:0a:e1:76:f6:ec: c5:c0:ce:59:38:11:02:e1:87:13:11:1c:3d:28:52: b4:77:76:27:0b:fe:83:0e:7d:1c:6e:aa:4a:56:aa: ba:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:36:AA:90:65:6D:F2:BB:3E:8C:44:6C:A2:4C:88:CD:34:0B:6D:44 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CFF0FFB002CC11E6AA35863CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.28.16.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:ae:53:cc:00:5a:a1:12:59:97:73:cc:38:e8:33:be:ae:cf: 0c:b3:f5:4d:6a:84:35:9c:0a:9e:55:7d:fa:31:d2:f9:48:5f: 40:f3:b4:a3:e9:07:94:41:c5:b8:94:14:b1:e2:54:8d:a4:ac: 35:3d:67:88:84:5b:a6:2f:91:40:b3:14:08:2e:ad:5c:9a:8f: 6e:da:b3:24:44:92:6a:38:b5:aa:6e:96:5e:88:0f:b4:79:3f: d9:fb:e1:2c:1d:e6:01:c8:7b:1d:87:fc:4c:98:e4:8a:23:13: ab:b6:3a:09:3d:44:51:a1:db:b6:04:a0:ea:1c:06:21:29:b6: 81:95:47:8d:d6:d7:36:55:84:cb:29:7e:fa:3e:54:03:be:b1: 14:85:60:77:e2:93:45:16:29:24:e5:c0:c7:2a:64:bf:ec:af: 2f:31:7b:c7:2e:17:4d:d9:b9:ca:3f:ca:14:b6:cc:f9:3e:d2: 3a:0e:7a:0d:af:6a:65:f9:90:2e:74:f2:5e:aa:77:77:78:e1: 69:ff:db:67:43:f0:8f:93:8f:7e:b7:9a:dd:65:02:d5:20:27: 2c:60:b6:e3:0f:93:38:18:e7:75:63:bb:85:c3:96:f6:63:f7: 8c:23:b0:0f:a0:93:d8:5a:fd:eb:49:f7:fc:75:d7:5e:1e:fe: 8e:db:0a:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjMwNzIwMTYxMzEyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI5NWQxOC01ZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xXEUW9hRfRjDtWeaCVYNeCxagyAlT3FYCivBS4eWLj9kA7xkLgfpNlc5Ilm ItcoL2XeQSkjAkX6GmGiTYrzQ4QT83IJKts7BWX3PhyWzKXj/S4KbirGvCLrcVGR qyqgI+vxQjyWbrf4tHMPt03WbFPXwV3Atpwu74H88varUw/tQDwaYWG+zG3W/fD8 ZMoDF+UtF40hDmA6z86wyX+rgzWZL88KymppRilgZ/yJ6WLQPCbBteCAPlp2Zlhi QxjaU9uWGsjzhZrDBazs2DeJkXK/hKq1zotu938iCuF29uzFwM5ZOBEC4YcTERw9 KFK0d3YnC/6DDn0cbqpKVqq6VQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO82qpBl bfK7PoxEbKJMiM00C21EMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQ0ZGMEZGQjAw MkNDMTFFNkFBMzU4NjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB4HBAwDQYJKoZIhvcNAQELBQADggEBAHyuU8wAWqESWZdz zDjoM76uzwyz9U1qhDWcCp5Vffox0vlIX0DztKPpB5RBxbiUFLHiVI2krDU9Z4iE W6YvkUCzFAgurVyaj27asyREkmo4tapull6ID7R5P9n74Swd5gHIex2H/EyY5Ioj E6u2Ogk9RFGh27YEoOocBiEptoGVR43W1zZVhMspfvo+VAO+sRSFYHfik0UWKSTl wMcqZL/sry8xe8cuF03Zuco/yhS2zPk+0joOeg2vamX5kC508l6qd3d44Wn/22dD 8I+Tj363mt1lAtUgJyxgtuMPkzgY53Vju4XDlvZj94wjsA+gk9ha/etJ9/x1114e /o7bCms= -----END CERTIFICATE-----Generated at Fri May 31 20:34:02 2024 by rpki-client on console-ams.rpki-client.org