$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/D80B013A172011EEB3A9C124C4F9AE02.roa File: D80B013A172011EEB3A9C124C4F9AE02.roa (raw, json) Hash identifier: NQthKb3GChge6T5RUI263G1tlKE7DYI5g1q3XSDyXjY= Subject key identifier: DA:FB:7D:C0:96:33:7D:C1:2B:29:03:5C:91:2C:81:2F:E3:0A:49:26 Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1D4C Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/D80B013A172011EEB3A9C124C4F9AE02.roa Signing time: Tue 28 Nov 2023 16:43:23 +0000 ROA not before: Tue 28 Nov 2023 16:43:23 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 55410 IP address blocks: 202.179.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7500 (0x1d4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Nov 28 16:43:23 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656618ab-1ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:82:9a:df:68:72:ae:75:0d:ca:69:07:8d: ac:1c:20:96:db:ff:bb:1b:89:fc:a9:ba:8f:e2:2d: 6b:f2:19:ee:39:79:47:fb:bd:38:b1:c3:d6:17:c4: b4:6e:1a:c3:df:7a:5c:95:aa:f3:a8:66:f9:11:d7: 5a:4f:0a:5d:af:60:1f:4e:71:20:61:f4:b9:cf:bd: a2:38:65:9c:35:fe:5b:0d:6c:1c:06:ef:4f:c2:e1: 69:e3:80:ea:ae:d6:c5:d3:cb:e5:b4:c9:4e:a2:47: 8e:ee:de:cd:f6:01:f7:f6:9e:59:bd:83:ff:a4:98: ba:9f:c7:f4:75:7f:0d:12:6b:2f:f5:5d:ff:6f:8f: b2:41:81:a2:a1:ae:8b:62:48:0e:dd:23:c7:5a:15: ef:dc:e6:60:31:af:7d:8f:18:de:bf:1f:c1:ce:3f: 6d:72:57:2e:69:ba:b8:c3:df:82:10:4a:bd:be:9b: 63:7c:26:aa:86:7a:9b:18:26:c4:67:de:8c:ca:84: ae:62:1d:2c:66:42:39:77:4a:13:2e:7c:53:3e:93: 17:14:4d:12:f3:c5:ad:31:1e:2f:ca:9a:b0:b0:40: f9:f9:42:d6:2b:17:dd:e1:24:9e:c8:ff:31:0a:b7: 02:94:9b:f9:03:e7:21:53:3e:e4:aa:74:17:f5:28: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FB:7D:C0:96:33:7D:C1:2B:29:03:5C:91:2C:81:2F:E3:0A:49:26 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/D80B013A172011EEB3A9C124C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.179.67.0/24 Signature Algorithm: sha256WithRSAEncryption b4:69:71:24:1d:81:12:a6:2f:60:27:aa:24:a4:5d:ab:e9:90: c2:ab:1c:f0:24:81:32:e5:48:99:e9:f8:06:e1:12:0a:64:c5: 53:39:00:a2:77:2e:71:d6:b2:50:52:9b:62:41:11:19:9b:59: 6a:95:d9:b6:d5:4f:66:0e:e5:55:a1:27:2d:c2:7b:7d:7e:ae: be:0a:63:96:48:8e:17:25:b8:e1:af:3f:02:2d:46:ae:52:f1: ec:9a:40:71:4b:fc:f8:24:c0:68:a1:fd:81:77:fd:47:a1:1a: 06:21:70:04:2b:1b:fb:f5:24:82:2e:8e:f2:93:f0:ba:39:85: cc:03:cb:6e:63:ff:a2:69:94:50:bd:f2:91:3d:ee:9e:ff:a8: d2:f9:89:e6:7a:f0:f6:1c:8f:de:7a:bf:3b:8f:60:3a:9c:46: 02:1a:4b:da:99:23:53:dc:89:da:01:e0:c6:a9:e3:0a:00:9f: d8:ea:da:12:38:69:1d:4a:f4:4c:b4:b5:8e:5a:d8:df:ec:9b: 64:08:1e:36:f4:06:0b:89:7c:f4:98:97:45:88:d8:08:6a:0e: b6:ba:26:19:d7:37:24:cc:d8:da:3d:b5:43:3b:00:a7:ea:98: 7f:2d:4f:5b:b3:34:35:a3:1d:0f:41:67:16:8d:89:12:0b:32: d2:0c:aa:32 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjMxMTI4MTY0MzIzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2MThhYi0xZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywKCmt9ocq51DcppB42sHCCW2/+7G4n8qbqP4i1r8hnuOXlH+704scPWF8S0 bhrD33pclarzqGb5EddaTwpdr2AfTnEgYfS5z72iOGWcNf5bDWwcBu9PwuFp44Dq rtbF08vltMlOokeO7t7N9gH39p5ZvYP/pJi6n8f0dX8NEmsv9V3/b4+yQYGioa6L YkgO3SPHWhXv3OZgMa99jxjevx/Bzj9tclcuabq4w9+CEEq9vptjfCaqhnqbGCbE Z96MyoSuYh0sZkI5d0oTLnxTPpMXFE0S88WtMR4vypqwsED5+ULWKxfd4SSeyP8x CrcClJv5A+chUz7kqnQX9ShphwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNr7fcCW M33BKykDXJEsgS/jCkkmMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFFNUYvOEI3OUI2Nzg4ODUxMTFFNkE2OTJERTc4QzRGOUFFMDIvRDgwQjAxM0Ex NzIwMTFFRUIzQTlDMTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKs0MwDQYJKoZIhvcNAQELBQADggEBALRpcSQdgRKmL2An qiSkXavpkMKrHPAkgTLlSJnp+AbhEgpkxVM5AKJ3LnHWslBSm2JBERmbWWqV2bbV T2YO5VWhJy3Ce31+rr4KY5ZIjhcluOGvPwItRq5S8eyaQHFL/PgkwGih/YF3/Ueh GgYhcAQrG/v1JIIujvKT8Lo5hcwDy25j/6JplFC98pE97p7/qNL5ieZ68PYcj956 vzuPYDqcRgIaS9qZI1PcidoB4Map4woAn9jq2hI4aR1K9Ey0tY5a2N/sm2QIHjb0 BguJfPSYl0WI2AhqDra6JhnXNyTM2No9tUM7AKfqmH8tT1uzNDWjHQ9BZxaNiRIL MtIMqjI= -----END CERTIFICATE-----Generated at Fri May 31 17:44:24 2024 by rpki-client on console-fra.rpki-client.org