$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa File: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (raw, json) Hash identifier: J0n8zynWewxBVfoDX3OB8RbfuIjzjZ2KDx4R2TodoBE= Subject key identifier: 88:4B:CE:18:04:F1:08:F5:4C:FE:8C:3E:36:FA:3E:CC:22:ED:5A:04 Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Certificate serial: 342A Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa Signing time: Mon 16 Sep 2024 14:50:51 +0000 ROA not before: Mon 16 Sep 2024 14:50:51 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 38241 IP address blocks: 202.137.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13354 (0x342a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Validity Not Before: Sep 16 14:50:51 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e845cb-99cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:93:ba:f1:69:53:42:0f:7f:d6:e0:0a:bb: 4a:60:b8:7e:13:4c:be:91:36:75:9c:0d:fc:ca:39: c0:ef:08:92:ea:02:b3:dd:57:de:a5:78:ef:9a:30: c4:9c:8f:fb:06:35:53:31:59:c6:9f:bf:a0:64:14: 47:99:c3:b8:4b:40:15:5d:70:46:30:5f:1a:f5:76: eb:f1:d1:e5:90:dd:29:6e:1c:d5:94:96:44:ae:64: 85:9f:83:1c:7d:f4:c7:5d:91:1f:e2:97:e3:5b:4b: 8b:5d:2d:2a:0b:30:41:07:f8:71:f6:ff:96:a3:0f: 50:fd:82:ed:2d:d9:0f:6e:3d:aa:1a:4b:72:19:8e: dd:a5:e6:3a:13:5b:9f:82:e9:1f:f8:56:bc:b3:67: 9b:a2:38:3b:d7:96:00:3b:53:43:e8:f1:10:2c:af: f8:79:0a:06:11:6d:75:78:84:bd:cf:a9:fa:b8:5b: 53:fc:57:e6:68:c9:ce:b9:ba:68:7e:a7:75:db:93: 39:9a:01:f1:cf:fd:37:2c:24:e4:ab:c1:cd:d9:7f: 4d:c4:8a:21:99:29:85:54:37:94:e6:fb:e6:97:85: b2:91:51:bd:01:02:42:c9:23:97:5d:37:f3:23:21: b5:de:30:80:75:52:1c:98:a5:23:d2:c0:d4:ea:19: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4B:CE:18:04:F1:08:F5:4C:FE:8C:3E:36:FA:3E:CC:22:ED:5A:04 X509v3 Authority Key Identifier: keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.137.248.0/22 Signature Algorithm: sha256WithRSAEncryption 74:a1:f2:a3:90:f8:54:97:7d:3b:96:16:3d:f0:9b:80:46:d0: 42:ae:1d:df:1c:de:d9:30:02:db:59:83:68:f2:2b:ec:0b:53: f6:52:f2:24:5c:0a:0b:63:ec:85:9d:f5:ab:27:72:0b:9a:fe: 5a:79:89:95:77:e6:e5:43:a4:bb:75:de:30:bb:f4:6c:4e:34: 3d:02:51:a5:65:71:2a:5d:c6:30:50:0c:d9:55:75:6c:8a:39: 73:07:34:70:b0:a3:e6:f2:01:fe:77:4e:5e:85:8d:1d:2b:59: fe:34:b6:b1:2e:a7:4f:78:7c:04:e5:13:3d:f3:4c:bc:82:f6: 54:ff:8b:7e:13:ed:14:9c:37:7d:63:fd:dc:d0:2f:52:c0:cf: 73:ee:6a:15:54:e7:67:60:bd:0b:cf:ce:31:22:79:8d:ec:94: d9:ba:ba:c2:59:1e:02:af:75:a3:22:76:c0:b4:72:ad:15:03: c2:4a:e6:f9:cd:77:00:25:81:ec:f4:94:f7:b6:fd:4a:f2:f9: 98:10:e5:e7:07:ed:c7:0a:61:a9:3f:e8:7a:42:03:41:1c:1a: b1:78:36:f0:e0:ed:ac:41:b7:d9:cf:92:d9:05:dc:47:ff:e6: cb:0d:6f:94:4e:9d:90:ad:f6:c2:08:cc:58:66:ca:e0:97:40: 85:dd:a3:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2 MkEzMTAwNTcwHhcNMjQwOTE2MTQ1MDUxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU4NDVjYi05OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8eTuvFpU0IPf9bgCrtKYLh+E0y+kTZ1nA38yjnA7wiS6gKz3VfepXjvmjDE nI/7BjVTMVnGn7+gZBRHmcO4S0AVXXBGMF8a9Xbr8dHlkN0pbhzVlJZErmSFn4Mc ffTHXZEf4pfjW0uLXS0qCzBBB/hx9v+Wow9Q/YLtLdkPbj2qGktyGY7dpeY6E1uf gukf+Fa8s2ebojg715YAO1ND6PEQLK/4eQoGEW11eIS9z6n6uFtT/FfmaMnOubpo fqd125M5mgHxz/03LCTkq8HN2X9NxIohmSmFVDeU5vvml4WykVG9AQJCySOXXTfz IyG13jCAdVIcmKUj0sDU6hkBhQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIhLzhgE 8Qj1TP6MPjb6Pswi7VoEMB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1ODEvQkI4RkRGRkUxRDkzMTFFMkE5NjM4QUY3MDhCMDJDRDIvN0EzOEQ2Qjg1 NEYzMTFFN0FDNjRFRDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKifgwDQYJKoZIhvcNAQELBQADggEBAHSh8qOQ+FSXfTuW Fj3wm4BG0EKuHd8c3tkwAttZg2jyK+wLU/ZS8iRcCgtj7IWd9asncgua/lp5iZV3 5uVDpLt13jC79GxOND0CUaVlcSpdxjBQDNlVdWyKOXMHNHCwo+byAf53Tl6FjR0r Wf40trEup094fATlEz3zTLyC9lT/i34T7RScN31j/dzQL1LAz3PuahVU52dgvQvP zjEieY3slNm6usJZHgKvdaMidsC0cq0VA8JK5vnNdwAlgez0lPe2/Ury+ZgQ5ecH 7ccKYak/6HpCA0EcGrF4NvDg7axBt9nPktkF3Ef/5ssNb5ROnZCt9sIIzFhmyuCX QIXdo/Q= -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:13 2024 by rpki-client on console-ams.rpki-client.org