$ rpki-client -vvf rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/81EB4A8E47A911EA80B8633AC4F9AE02.roa File: 81EB4A8E47A911EA80B8633AC4F9AE02.roa (raw, json) Hash identifier: G5Ak8TX3+eeBzOkbzLop/v8HwMO/hdELq8urNXz/RJs= Subject key identifier: 1B:D5:E4:8B:CA:D3:8B:3B:63:20:C1:05:25:04:34:E3:F3:E4:8B:FD Certificate issuer: /CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Certificate serial: 0ACC Authority key identifier: 81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/81EB4A8E47A911EA80B8633AC4F9AE02.roa Signing time: Mon 31 Jul 2023 19:57:28 +0000 ROA not before: Mon 31 Jul 2023 19:57:28 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38877 IP address blocks: 202.191.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2764 (0xacc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Validity Not Before: Jul 31 19:57:28 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c81227-1d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:d6:25:a3:d6:e2:9e:05:03:b3:b0:23:a3: bf:29:93:e4:60:ab:95:43:4d:1f:11:86:42:63:f4: 73:f0:ef:19:fd:b3:64:a8:30:23:57:38:51:f7:63: 0c:95:7e:79:cc:7c:21:99:ad:f0:4a:09:ba:29:6e: 24:d0:b1:ca:cc:99:fb:1f:29:0c:ec:1d:f7:f4:aa: 39:81:da:3d:0f:3c:3d:3e:f4:ff:79:07:17:c0:9e: 66:70:91:87:b8:d9:7f:63:64:3c:c6:f5:45:8a:de: 85:e9:6d:b0:80:17:74:15:02:9c:17:70:f5:44:de: a6:60:f4:de:66:17:8f:9b:bf:3d:bc:a5:20:8b:69: 41:09:de:45:40:4b:c6:94:23:78:e3:e1:21:3d:7c: 87:47:33:8a:cb:fe:6d:f5:b1:bd:c1:42:7d:1b:c3: e1:09:d7:b0:75:42:3f:60:3c:a7:3e:80:8c:27:6b: 08:3d:f7:0c:80:36:db:1d:2d:99:8d:4c:37:a2:ab: 6b:65:3c:11:9d:16:8b:62:f8:11:06:53:ee:1c:f3: 86:da:10:00:95:d2:cb:a9:12:82:c0:75:40:16:90: 9c:b1:ee:5b:f3:82:e5:87:d5:00:da:62:ce:c1:57: 6c:c6:5a:87:4b:31:06:31:95:05:c1:d3:b5:90:0c: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D5:E4:8B:CA:D3:8B:3B:63:20:C1:05:25:04:34:E3:F3:E4:8B:FD X509v3 Authority Key Identifier: keyid:81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/81EB4A8E47A911EA80B8633AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.191.60.0/22 Signature Algorithm: sha256WithRSAEncryption c2:01:c3:58:4c:be:63:fa:e5:03:54:69:e8:80:b5:9a:a7:bb: 63:20:4a:61:db:93:c6:f4:e4:7d:4d:79:98:4e:d1:50:22:96: 41:d1:d7:b9:17:bc:2a:bb:28:6c:93:6b:d7:43:61:68:0d:e0: c6:56:22:fa:c2:1b:26:2b:29:16:a0:ec:14:51:fb:01:49:2f: e5:fb:91:37:32:40:52:85:90:64:ad:49:a0:07:96:4d:34:6b: be:60:10:71:77:3e:21:2d:69:fc:6c:fc:eb:5e:7a:f3:b1:53: ca:d7:67:27:aa:21:e7:03:4c:dd:6b:10:63:2a:77:8c:71:f1: 75:63:cc:35:d5:88:ea:72:fe:b4:6e:92:7c:9a:df:14:bf:e2: 74:b2:4b:7e:f9:85:f3:46:d5:75:2c:fe:5c:5f:8c:6a:f9:9d: f9:70:5a:f6:e7:95:d8:34:ac:ad:2b:d1:c7:51:9e:ce:7b:93: a6:60:f1:3b:1e:1c:ae:82:d2:c5:7b:82:cf:78:40:09:73:db: 0b:a4:80:05:01:09:11:8c:10:59:a7:43:29:b9:09:eb:4d:9e: e9:34:04:da:7c:f9:3c:a0:b2:ea:4f:fd:4a:da:a4:a0:ee:ea: 9d:82:ef:b3:97:41:64:66:4c:c1:1a:70:bb:7d:9c:02:3f:80: a1:11:02:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJGNTIxMTAvBgNVBAUTKDgxNDI4QTAxQzUxNjkxRTdBOEM1RDg0M0VDQjZCMUQz RDlBRTQyNEUwHhcNMjMwNzMxMTk1NzI4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM4MTIyNy0xZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wfWJaPW4p4FA7OwI6O/KZPkYKuVQ00fEYZCY/Rz8O8Z/bNkqDAjVzhR92MM lX55zHwhma3wSgm6KW4k0LHKzJn7HykM7B339Ko5gdo9Dzw9PvT/eQcXwJ5mcJGH uNl/Y2Q8xvVFit6F6W2wgBd0FQKcF3D1RN6mYPTeZhePm789vKUgi2lBCd5FQEvG lCN44+EhPXyHRzOKy/5t9bG9wUJ9G8PhCdewdUI/YDynPoCMJ2sIPfcMgDbbHS2Z jUw3oqtrZTwRnRaLYvgRBlPuHPOG2hAAldLLqRKCwHVAFpCcse5b84Llh9UA2mLO wVdsxlqHSzEGMZUFwdO1kAz2/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBvV5IvK 04s7YyDBBSUENOPz5Iv9MB8GA1UdIwQYMBaAFIFCigHFFpHnqMXYQ+y2sdPZrkJO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkY1Mi84OEVCQ0ZEQzFE NDkxMUVBQUU3NzVCMzRDNEY5QUUwMi9nVUtLQWNVV2tlZW94ZGhEN0xheDA5bXVR azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVS0tBY1VXa2Vlb3hkaEQ3TGF4MDltdVFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJGNTIvODhFQkNGREMxRDQ5MTFFQUFFNzc1QjM0QzRGOUFFMDIvODFFQjRBOEU0 N0E5MTFFQTgwQjg2MzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKvzwwDQYJKoZIhvcNAQELBQADggEBAMIBw1hMvmP65QNU aeiAtZqnu2MgSmHbk8b05H1NeZhO0VAilkHR17kXvCq7KGyTa9dDYWgN4MZWIvrC GyYrKRag7BRR+wFJL+X7kTcyQFKFkGStSaAHlk00a75gEHF3PiEtafxs/OteevOx U8rXZyeqIecDTN1rEGMqd4xx8XVjzDXViOpy/rRuknya3xS/4nSyS375hfNG1XUs /lxfjGr5nflwWvbnldg0rK0r0cdRns57k6Zg8TseHK6C0sV7gs94QAlz2wukgAUB CRGMEFmnQym5CetNnuk0BNp8+TygsupP/UrapKDu6p2C77OXQWRmTMEacLt9nAI/ gKERAlk= -----END CERTIFICATE-----Generated at Thu May 16 22:34:45 2024 by rpki-client on console-ams.rpki-client.org