$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa File: 206969823B9411EB9F059D7EC4F9AE02.roa (raw, json) Hash identifier: +WOWkZ4IvvEDoqbOmLKdD/j0EEQBFPOUPDqLgvMz59A= Subject key identifier: DC:30:E3:84:66:89:C6:A1:BB:06:C2:BE:47:56:6A:1C:63:56:98:1D Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 098B Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa Signing time: Sat 22 Apr 2023 03:58:12 +0000 ROA not before: Sat 22 Apr 2023 03:58:12 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 0 IP address blocks: 203.190.227.0/24 maxlen: 24 203.190.230.0/24 maxlen: 24 2001:de8:4::/64 maxlen: 64 2001:de8:5::/64 maxlen: 64 2001:de8:5:1::/64 maxlen: 64 2001:de8:6::/64 maxlen: 64 2001:de8:6:1::/64 maxlen: 64 2001:de8:6:2::/64 maxlen: 64 2001:de8:7::/64 maxlen: 64 2001:de8:7:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 20:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2443 (0x98b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Apr 22 03:58:12 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64435b54-e1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:ff:a2:15:0c:9d:5c:c5:a0:4a:b4:14:16: 61:0a:03:e8:57:3d:4e:63:b6:58:14:d1:fc:49:c6: 7d:91:17:a4:fa:e5:eb:5e:f8:85:e1:9a:e4:92:bd: 22:a0:01:6f:51:e7:44:fc:90:4a:fc:96:6e:2d:51: 4f:72:3b:61:a3:13:6f:12:32:12:a5:c9:9c:49:9f: 3d:a1:91:c8:d5:bf:fa:1f:c6:17:b8:35:d0:04:21: 35:60:cc:f6:26:a1:fd:d5:e3:de:c5:8d:9d:9e:40: c9:86:b8:47:5a:c2:b4:45:0e:79:18:1b:ff:d8:cf: c1:79:f5:fa:3a:44:7a:ee:55:88:85:7c:e8:0a:1d: fa:d7:54:d0:a3:33:44:da:83:18:1f:03:1b:cf:ae: 48:15:39:f1:89:60:9d:5d:c8:ca:ed:e1:c9:b3:10: 70:a9:42:93:f9:71:3e:99:c1:25:a0:b4:fb:70:8c: e0:6d:86:cd:b5:60:1c:52:d3:61:11:92:40:9d:e3: af:37:e8:7e:a0:a4:04:09:53:68:08:ae:8d:b9:e8: 8f:49:60:b7:41:88:28:7d:b1:06:48:f4:2e:a5:8f: fb:e2:7b:dd:9a:02:68:1c:ac:5c:d2:45:3a:b7:20: 42:ac:e3:86:fd:09:ea:2e:36:55:e3:85:ba:5e:5d: 35:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:30:E3:84:66:89:C6:A1:BB:06:C2:BE:47:56:6A:1C:63:56:98:1D X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.190.227.0/24 203.190.230.0/24 IPv6: 2001:de8:4::/64 2001:de8:5::/63 2001:de8:6::-2001:de8:6:2:ffff:ffff:ffff:ffff 2001:de8:7::/63 Signature Algorithm: sha256WithRSAEncryption 33:55:19:04:49:10:53:95:ef:8b:2f:f8:b8:b2:64:d0:e1:f5: 9f:65:58:14:93:66:2f:6f:fa:0e:86:50:ba:c4:17:3e:96:1e: c5:d2:88:5a:8e:cf:c6:98:8a:63:85:70:47:7d:0f:a5:96:5b: 4c:bf:d9:3b:8e:d0:1a:e0:00:cf:12:14:79:dd:72:10:4f:10: 51:00:7f:fc:4e:f1:c4:aa:5a:b0:89:0e:fb:89:78:6b:65:fc: d7:c2:4c:2b:10:0c:62:2e:26:5d:ce:11:1c:be:61:3f:50:1c: bf:df:72:ce:cd:b2:fa:a8:76:48:25:e9:6a:7e:a5:51:66:9c: 91:7f:d2:71:08:f6:79:fb:3f:f9:42:90:4a:d4:19:53:1d:85: 0b:9b:ab:5a:fd:c6:08:e5:70:41:86:e6:8c:5a:ea:02:ac:62: c1:2d:c0:c2:ed:96:e6:4a:a8:5a:6f:6d:bc:c8:cd:66:ed:12: a6:6e:39:f4:4d:13:90:33:19:a9:fd:de:cb:8e:c9:31:32:ff: 31:96:10:b7:48:7b:9d:33:fe:0b:9a:24:01:28:fd:39:1a:63: 6a:5a:83:f3:e7:f8:57:d3:39:f2:ae:44:89:8c:d3:3f:8e:eb: 9c:ba:5d:8e:e0:e5:b9:e7:fa:9e:d6:40:64:08:79:b6:6e:3b: 52:15:86:43 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgICCYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjMwNDIyMDM1ODEyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDQzNWI1NC1lMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzar/ohUMnVzFoEq0FBZhCgPoVz1OY7ZYFNH8ScZ9kRek+uXrXviF4Zrkkr0i oAFvUedE/JBK/JZuLVFPcjthoxNvEjISpcmcSZ89oZHI1b/6H8YXuDXQBCE1YMz2 JqH91ePexY2dnkDJhrhHWsK0RQ55GBv/2M/BefX6OkR67lWIhXzoCh3611TQozNE 2oMYHwMbz65IFTnxiWCdXcjK7eHJsxBwqUKT+XE+mcEloLT7cIzgbYbNtWAcUtNh EZJAneOvN+h+oKQECVNoCK6NueiPSWC3QYgofbEGSPQupY/74nvdmgJoHKxc0kU6 tyBCrOOG/QnqLjZV44W6Xl01HwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFNww44Rm icahuwbCvkdWahxjVpgdMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvMjA2OTY5ODIz Qjk0MTFFQjlGMDU5RDdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZAYIKwYBBQUHAQcBAf8E VTBTMBIEAgABMAwDBADLvuMDBADLvuYwPQQCAAIwNwMJACABDegABAAAAwkBIAEN 6AAFAAAwFAMHASABDegABgMJACABDegABgACAwkBIAEN6AAHAAAwDQYJKoZIhvcN AQELBQADggEBADNVGQRJEFOV74sv+LiyZNDh9Z9lWBSTZi9v+g6GULrEFz6WHsXS iFqOz8aYimOFcEd9D6WWW0y/2TuO0BrgAM8SFHndchBPEFEAf/xO8cSqWrCJDvuJ eGtl/NfCTCsQDGIuJl3OERy+YT9QHL/fcs7Nsvqodkgl6Wp+pVFmnJF/0nEI9nn7 P/lCkErUGVMdhQubq1r9xgjlcEGG5oxa6gKsYsEtwMLtluZKqFpvbbzIzWbtEqZu OfRNE5AzGan93suOyTEy/zGWELdIe50z/guaJAEo/TkaY2pag/Pn+FfTOfKuRImM 0z+O65y6XY7g5bnn+p7WQGQIebZuO1IVhkM= -----END CERTIFICATE-----Generated at Wed Apr 24 22:30:00 2024 by rpki-client on console-fra.rpki-client.org