$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/64A2B982E67211EEB3DACC2AC4F9AE02.roa File: 64A2B982E67211EEB3DACC2AC4F9AE02.roa (raw, json) Hash identifier: zvHQyTu53eFJCdrGA//zWaSAxwwl5TIllUByTjwQKYw= Subject key identifier: 21:A5:48:2F:01:66:99:14:37:99:C2:E9:56:43:08:BF:C7:1B:8F:67 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 1C Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/64A2B982E67211EEB3DACC2AC4F9AE02.roa Signing time: Thu 09 May 2024 03:48:23 +0000 ROA not before: Thu 09 May 2024 03:48:23 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152634 IP address blocks: 202.36.116.0/23 maxlen: 24 2001:df3:88c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: May 9 03:48:23 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663c4787-2055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:c8:e6:1b:f6:86:1f:cc:0b:7d:3f:71:04: 1c:fa:29:14:bb:ee:04:a1:13:fa:ee:d7:a6:c9:17: 4a:9e:79:15:6b:df:bf:66:58:95:af:25:28:92:29: f5:1c:61:50:78:64:4c:33:f0:d2:b9:ee:67:76:43: eb:2b:da:2a:80:18:77:a3:f7:3f:bb:0e:5b:c7:c5: 11:9b:28:68:fa:6c:9e:2e:39:eb:79:50:29:44:da: e4:43:6b:c4:1f:d2:29:cd:23:7b:ba:39:42:e5:cf: 42:f2:61:2f:d8:52:b2:42:7a:e3:9b:e0:a4:9f:83: a5:e1:e2:7d:1b:6c:f8:69:1d:dd:11:6b:cf:94:de: 75:41:1a:b1:bd:2d:fe:cf:a8:4a:2f:25:9a:70:d0: 87:15:4d:25:4f:6d:7e:4c:6a:96:7d:d2:62:0f:4c: 20:ef:45:ce:d3:e3:46:c4:22:2a:50:1e:db:e5:e0: 34:49:6c:56:55:ff:05:ae:bc:4a:e8:58:45:24:4b: 7a:0e:94:6e:4c:18:5b:6a:76:31:1c:d4:b4:45:d3: 7e:4a:11:3c:56:35:59:5a:a8:a7:81:56:46:92:c5: 6c:1e:99:fd:54:6e:bb:04:6a:cc:4a:e4:f9:da:da: 28:99:3f:21:49:f4:3b:52:b9:f9:b5:3e:5a:fd:d8: 03:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A5:48:2F:01:66:99:14:37:99:C2:E9:56:43:08:BF:C7:1B:8F:67 X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/64A2B982E67211EEB3DACC2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.36.116.0/23 IPv6: 2001:df3:88c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:c8:55:3f:c3:b3:2a:9a:c8:65:7f:52:f2:c5:4e:fb:ad:25: 8a:0e:c8:04:e7:60:3d:e6:2b:77:ea:39:6d:91:f3:1c:6d:5d: 67:81:b5:8b:82:4d:14:d9:12:04:b0:f9:94:c1:c4:5f:f3:76: 9e:de:b1:c0:32:c1:7a:4f:89:7b:34:8d:fc:3e:5e:07:46:08: 3b:e9:f1:3f:98:92:65:92:b6:72:ae:d6:cc:ca:d4:42:71:7f: 71:7d:53:d6:dc:63:95:c1:b1:94:6c:16:40:74:0b:8f:d4:10: 17:c2:5c:e0:cd:a9:f1:a6:90:5d:b2:e3:5a:39:b9:aa:32:a7: 99:eb:2e:9e:17:3d:51:48:b7:44:cd:a3:bd:4c:ce:0c:72:db: 9d:8f:ce:18:9b:7e:c3:4b:fd:fe:fe:ac:d1:49:5a:00:3d:08: 9e:3a:f5:a8:c9:f8:ad:df:69:67:0e:11:fa:3c:72:12:c5:6a: f1:2b:04:7e:9d:2c:f1:89:c8:c0:73:1d:a9:cd:ba:1f:b9:b2: 32:b8:4e:24:9d:c6:17:01:49:02:c3:c9:c7:19:17:14:fe:4c: 61:b0:05:a0:a1:e5:b5:e0:a5:8e:46:8c:af:8b:05:06:c1:ac: 14:f6:35:22:ce:b7:4b:16:5e:dc:4e:76:52:b1:a5:1d:cc:a3: 33:83:bd:e7 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTVERjExMC8GA1UEBRMoNzVEMzE5Njk1NjlCNUMwREYwREE1M0IzRDkzMTM2NjMz NDcyMTA4MjAeFw0yNDA1MDkwMzQ4MjNaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2M2M0Nzg3LTIwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0gcjmG/aGH8wLfT9xBBz6KRS77gShE/ru16bJF0qeeRVr379mWJWvJSiSKfUc YVB4ZEwz8NK57md2Q+sr2iqAGHej9z+7DlvHxRGbKGj6bJ4uOet5UClE2uRDa8Qf 0inNI3u6OULlz0LyYS/YUrJCeuOb4KSfg6Xh4n0bbPhpHd0Ra8+U3nVBGrG9Lf7P qEovJZpw0IcVTSVPbX5MapZ90mIPTCDvRc7T40bEIipQHtvl4DRJbFZV/wWuvEro WEUkS3oOlG5MGFtqdjEc1LRF035KETxWNVlaqKeBVkaSxWwemf1UbrsEasxK5Pna 2iiZPyFJ9DtSufm1Plr92AOdAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUIaVILwFm mRQ3mcLpVkMIv8cbj2cwHwYDVR0jBBgwFoAUddMZaVabXA3w2lOz2TE2YzRyEIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNURGL0NCRUZDRDlDRTY3 MTExRUVCN0JDQkUyOUM0RjlBRTAyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGRNWmFWYWJYQTN3MmxPejJURTJZelJ5RUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi82NEEyQjk4MkU2 NzIxMUVFQjNEQUNDMkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAcokdDAPBAIAAjAJAwcAIAEN84jAMA0GCSqGSIb3DQEBCwUA A4IBAQAvyFU/w7Mqmshlf1LyxU77rSWKDsgE52A95it36jltkfMcbV1ngbWLgk0U 2RIEsPmUwcRf83ae3rHAMsF6T4l7NI38Pl4HRgg76fE/mJJlkrZyrtbMytRCcX9x fVPW3GOVwbGUbBZAdAuP1BAXwlzgzanxppBdsuNaObmqMqeZ6y6eFz1RSLdEzaO9 TM4Mctudj84Ym37DS/3+/qzRSVoAPQieOvWoyfit32lnDhH6PHISxWrxKwR+nSzx icjAcx2pzbofubIyuE4kncYXAUkCw8nHGRcU/kxhsAWgoeW14KWORoyviwUGwawU 9jUizrdLFl7cTnZSsaUdzKMzg73n -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:15 2024 by rpki-client on console-ams.rpki-client.org