$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/1321A11C9DF311E99A8DE961C4F9AE02.roa File: 1321A11C9DF311E99A8DE961C4F9AE02.roa (raw, json) Hash identifier: cQiqhuQgXXNHTU/ffynuc1SAf/nm6jGnBhRn8EgH/qQ= Subject key identifier: 4C:48:49:FB:0E:D4:8E:76:CA:9C:97:16:E8:31:80:AE:6B:52:D2:64 Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 1905 Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/1321A11C9DF311E99A8DE961C4F9AE02.roa Signing time: Sat 18 May 2024 17:25:13 +0000 ROA not before: Sat 18 May 2024 17:25:13 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9896 IP address blocks: 202.37.60.0/22 maxlen: 24 2001:4403:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6405 (0x1905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: May 18 17:25:13 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6648e479-d739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:36:ce:02:20:28:d8:98:57:f8:f9:23:da: bc:76:a6:44:6b:00:ed:b6:72:0f:e6:54:45:0a:9d: 88:1d:04:17:b1:ce:48:22:65:9b:0d:56:1c:4c:eb: d6:64:86:dc:9f:a6:eb:41:f6:5a:9f:f9:00:db:43: ad:29:99:e4:f4:35:68:41:bd:15:18:74:66:4f:7e: 8a:41:be:08:1b:88:94:56:14:43:6f:7e:8e:6b:f7: ed:d4:ae:1d:fd:00:37:33:81:80:28:79:7f:53:1c: 76:45:6f:e4:a6:1b:fb:b1:57:9f:a5:bb:3f:10:05: c3:8e:66:f5:6c:c6:b9:03:34:2d:65:73:9d:53:97: 7c:5d:cf:3e:fe:2c:2f:22:da:f0:db:d6:62:d7:2e: 7f:9f:3a:9c:3c:31:4a:6c:c1:88:a5:02:59:b0:95: 4f:8d:03:fe:c4:8b:fa:ae:c5:90:29:fd:d4:03:65: 60:2e:7c:66:81:f6:99:5a:ad:94:b9:64:a4:42:c8: 63:64:05:ce:82:ec:5b:16:06:bb:72:e6:2f:42:1e: e3:86:83:e6:23:7d:10:f2:c6:fd:20:23:a1:d5:0b: ae:30:e9:3d:26:c6:12:b1:29:da:a9:18:f3:c5:7e: 79:01:25:00:3d:d3:57:0d:33:c5:fb:6d:2f:08:a9: 48:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:48:49:FB:0E:D4:8E:76:CA:9C:97:16:E8:31:80:AE:6B:52:D2:64 X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/1321A11C9DF311E99A8DE961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.60.0/22 IPv6: 2001:4403:dead::/48 Signature Algorithm: sha256WithRSAEncryption 90:c5:68:75:9d:8d:80:c7:ce:2f:68:33:87:51:a9:ea:b3:e9: 9f:b0:7a:64:9d:84:e8:d1:a5:14:8e:7c:9e:d8:9e:cd:cc:f0: db:96:c4:d3:e7:08:15:2d:96:f0:14:73:2a:6d:76:c5:37:38: 17:03:d2:22:b7:89:d3:70:47:f8:99:94:05:5f:01:7f:5f:d8: 26:d0:e3:a6:a2:38:c1:e2:fa:92:b4:11:64:4d:62:f3:ab:6e: 65:35:c0:9a:c5:02:f9:f6:75:63:96:20:d0:3b:3c:42:76:21: 23:ce:af:1f:d5:25:d1:ce:6c:ea:8f:9b:07:22:3f:ef:3a:4a: 70:b2:2c:f0:e0:d6:d0:43:98:95:dd:b2:5a:3f:7e:ed:b9:45: b6:9e:14:5b:ec:26:59:2a:28:d2:13:7c:97:46:1e:4b:4b:79: 8c:f9:61:df:b5:a1:b4:4e:b5:02:63:c2:d0:3f:22:bf:39:83: a1:82:2a:8f:f6:17:a2:02:c9:95:3d:c1:f6:ef:0e:35:02:e5: a9:a2:f4:72:8c:36:4f:95:66:e5:97:1b:2b:3e:ed:7c:17:6e: 89:e6:c8:45:8b:9f:5f:a2:b9:ca:78:09:ca:43:05:12:16:d6: be:eb:4c:4b:48:b0:de:82:2d:50:63:a6:08:64:2f:de:74:2a: 9d:4e:82:fd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICGQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjQwNTE4MTcyNTEzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ4ZTQ3OS1kNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5E2zgIgKNiYV/j5I9q8dqZEawDttnIP5lRFCp2IHQQXsc5IImWbDVYcTOvW ZIbcn6brQfZan/kA20OtKZnk9DVoQb0VGHRmT36KQb4IG4iUVhRDb36Oa/ft1K4d /QA3M4GAKHl/Uxx2RW/kphv7sVefpbs/EAXDjmb1bMa5AzQtZXOdU5d8Xc8+/iwv Itrw29Zi1y5/nzqcPDFKbMGIpQJZsJVPjQP+xIv6rsWQKf3UA2VgLnxmgfaZWq2U uWSkQshjZAXOguxbFga7cuYvQh7jhoPmI30Q8sb9ICOh1QuuMOk9JsYSsSnaqRjz xX55ASUAPdNXDTPF+20vCKlIwwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFExISfsO 1I52ypyXFugxgK5rUtJkMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvMTMyMUExMUM5 REYzMTFFOTlBOERFOTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBALKJTwwDwQCAAIwCQMHACABRAPerTANBgkqhkiG9w0BAQsF AAOCAQEAkMVodZ2NgMfOL2gzh1Gp6rPpn7B6ZJ2E6NGlFI58ntiezczw25bE0+cI FS2W8BRzKm12xTc4FwPSIreJ03BH+JmUBV8Bf1/YJtDjpqI4weL6krQRZE1i86tu ZTXAmsUC+fZ1Y5Yg0Ds8QnYhI86vH9Ul0c5s6o+bByI/7zpKcLIs8ODW0EOYld2y Wj9+7blFtp4UW+wmWSoo0hN8l0YeS0t5jPlh37WhtE61AmPC0D8ivzmDoYIqj/YX ogLJlT3B9u8ONQLlqaL0cow2T5Vm5ZcbKz7tfBduiebIRYufX6K5yngJykMFEhbW vutMS0iw3oItUGOmCGQv3nQqnU6C/Q== -----END CERTIFICATE-----Generated at Fri May 31 20:34:02 2024 by rpki-client on console-ams.rpki-client.org