$ rpki-client -vvf rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/2404BA68477011EC8A31B762C4F9AE02.roa File: 2404BA68477011EC8A31B762C4F9AE02.roa (raw, json) Hash identifier: wse4L0FrmX/tz366IQ6yM7mxwlFwk4RG4pPiF7/7Gs4= Subject key identifier: 8C:97:7D:36:A8:77:AD:BF:B7:2D:3A:20:E0:FA:97:FE:05:85:61:8D Certificate issuer: /CN=A9151638/serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4 Certificate serial: 0345 Authority key identifier: 38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/2404BA68477011EC8A31B762C4F9AE02.roa Signing time: Wed 11 Oct 2023 01:33:39 +0000 ROA not before: Wed 11 Oct 2023 01:33:39 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 1221 IP address blocks: 203.20.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151638/serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4 Validity Not Before: Oct 11 01:33:39 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6525fb72-62ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:4d:d5:e1:cf:d0:5d:f7:ad:f9:24:de:4b: fd:b4:86:d0:14:f0:b6:d1:61:b2:58:e2:97:7e:a7: 59:bb:b9:22:a9:4d:d4:fd:26:ff:dc:bb:b1:44:90: 19:62:46:2a:02:ae:f1:8f:41:de:d5:a5:b1:6f:ed: 13:66:9c:08:5b:43:fe:f7:93:28:84:23:c9:36:17: f8:29:35:94:31:f0:ca:57:4b:0c:d6:48:92:f6:81: e6:f1:1d:60:f9:23:5a:6e:d8:a0:c8:98:d4:bb:87: 78:3a:77:0a:e2:8f:4c:94:bc:77:cb:1b:47:76:99: 4d:69:ef:26:92:e9:e8:65:cb:cb:5f:08:c1:af:93: e5:eb:a5:c3:3a:8e:09:8a:06:bc:8a:90:f6:8a:75: 93:a8:9b:f5:db:9b:2e:64:16:74:a5:4a:71:b8:a7: 3d:8d:19:a0:9b:2e:7a:83:a9:a0:e4:f7:cf:b6:3c: f6:a8:a1:2b:7f:b4:46:51:6b:2f:f3:5c:1d:48:af: 42:ff:4d:77:b6:9f:a6:53:6a:3a:ac:0b:e0:1d:b5: 3d:33:b8:cd:d4:c2:f2:b0:9f:1e:2b:4f:f4:7c:d0: ad:00:aa:eb:dd:45:67:ca:61:73:43:d5:d7:af:3c: 7d:ad:6f:53:4d:90:da:03:b8:21:77:a4:24:8c:b8: 40:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:7D:36:A8:77:AD:BF:B7:2D:3A:20:E0:FA:97:FE:05:85:61:8D X509v3 Authority Key Identifier: keyid:38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/2404BA68477011EC8A31B762C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.238.0/23 Signature Algorithm: sha256WithRSAEncryption 13:d1:34:9d:7e:d2:bb:ac:62:34:b6:b4:0f:8d:7b:9d:45:66: 11:a7:8a:ca:8c:b8:ce:51:96:09:ee:e3:3c:8b:bf:7e:74:26: 56:bd:27:77:fd:75:56:da:e3:82:8b:b7:e4:f9:db:3d:63:a2: 5c:fd:07:b8:01:09:b7:9b:ad:98:65:1e:f0:9d:9d:af:8b:6a: 19:28:76:bc:3f:13:be:3a:7b:12:08:6d:ed:4e:ed:c2:bd:9d: a5:fc:63:fe:70:a6:ad:04:5c:90:e4:eb:e2:4b:14:63:35:df: 80:d4:ca:f6:4c:99:2f:57:e0:03:09:5b:ed:8c:fd:8a:45:5f: 86:96:6e:e4:f3:a1:f5:09:7c:29:92:4d:1f:50:37:8d:25:2f: e4:0d:88:ad:34:72:a2:31:7a:65:dc:e6:29:b3:79:7f:77:89: 83:15:80:cf:28:de:7a:94:8a:dd:be:25:f5:d9:4c:d7:07:25: 93:08:6e:79:ff:88:2c:76:1f:b1:4b:2b:1f:8d:e5:a4:62:4a: 57:99:15:68:32:33:89:55:0c:77:9b:08:c7:0f:10:8b:d6:00: 23:75:5c:41:64:80:7b:90:87:11:52:c7:43:2f:72:3f:c9:d9: ab:90:6c:66:de:60:2b:da:d5:ea:c7:a0:aa:37:6f:b2:25:f3: 69:0f:92:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2MzgxMTAvBgNVBAUTKDM4NTkyRjA1NkY4M0NDRDQwQTYyQUUxMTYwMjkyNjk0 Mjg1QTJDRjQwHhcNMjMxMDExMDEzMzM5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI1ZmI3Mi02MmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoO1N1eHP0F33rfkk3kv9tIbQFPC20WGyWOKXfqdZu7kiqU3U/Sb/3LuxRJAZ YkYqAq7xj0He1aWxb+0TZpwIW0P+95MohCPJNhf4KTWUMfDKV0sM1kiS9oHm8R1g +SNabtigyJjUu4d4OncK4o9MlLx3yxtHdplNae8mkunoZcvLXwjBr5Pl66XDOo4J iga8ipD2inWTqJv125suZBZ0pUpxuKc9jRmgmy56g6mg5PfPtjz2qKErf7RGUWsv 81wdSK9C/013tp+mU2o6rAvgHbU9M7jN1MLysJ8eK0/0fNCtAKrr3UVnymFzQ9XX rzx9rW9TTZDaA7ghd6QkjLhAcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIyXfTao d62/ty06IOD6l/4FhWGNMB8GA1UdIwQYMBaAFDhZLwVvg8zUCmKuEWApJpQoWiz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzOC8xMjcxMTczMjQ3 NkMxMUVDODlFRjYyMzlDNEY5QUUwMi9PRmt2QlctRHpOUUtZcTRSWUNrbWxDaGFM UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Ga3ZCVy1Eek5RS1lxNFJZQ2ttbENoYUxQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE2MzgvMTI3MTE3MzI0NzZDMTFFQzg5RUY2MjM5QzRGOUFFMDIvMjQwNEJBNjg0 NzcwMTFFQzhBMzFCNzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLFO4wDQYJKoZIhvcNAQELBQADggEBABPRNJ1+0rusYjS2 tA+Ne51FZhGnisqMuM5Rlgnu4zyLv350Jla9J3f9dVba44KLt+T52z1jolz9B7gB CbebrZhlHvCdna+Lahkodrw/E746exIIbe1O7cK9naX8Y/5wpq0EXJDk6+JLFGM1 34DUyvZMmS9X4AMJW+2M/YpFX4aWbuTzofUJfCmSTR9QN40lL+QNiK00cqIxemXc 5imzeX93iYMVgM8o3nqUit2+JfXZTNcHJZMIbnn/iCx2H7FLKx+N5aRiSleZFWgy M4lVDHebCMcPEIvWACN1XEFkgHuQhxFSx0Mvcj/J2auQbGbeYCva1erHoKo3b7Il 82kPks8= -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:16 2024 by rpki-client on console-ams.rpki-client.org