$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/86D13B7E571C11EC81276481C4F9AE02.roa File: 86D13B7E571C11EC81276481C4F9AE02.roa (raw, json) Hash identifier: U9XfFnvz89wtNVf/ysYn6un7mKVOleSAavmFNfO3I2Q= Subject key identifier: 5B:68:C1:09:56:39:26:2C:59:E9:22:3D:FC:5A:FF:2E:B3:B1:73:4F Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 24C7 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/86D13B7E571C11EC81276481C4F9AE02.roa Signing time: Tue 04 Jul 2023 16:02:16 +0000 ROA not before: Tue 04 Jul 2023 16:02:16 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 132138 IP address blocks: 202.156.10.14/31 maxlen: 32 202.156.10.72/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9415 (0x24c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 4 16:02:16 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a44287-68c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:ff:3f:70:97:f0:b0:df:cd:79:c3:26:7f: d6:95:7b:34:f0:f9:58:99:53:c2:13:73:b2:72:3c: af:3a:c8:fd:bd:76:b8:ee:e7:cb:46:bc:28:39:78: 32:ef:ca:7b:eb:f5:29:41:34:37:4b:3b:fe:f6:42: f0:d6:a0:96:4a:06:d7:5d:13:cf:15:88:ac:ea:0f: c3:c2:ec:5a:0b:07:b9:57:c3:83:59:97:13:fa:4f: ac:7d:14:da:fc:18:14:4b:8c:1b:75:85:1a:31:91: 91:46:95:1f:d7:27:1b:07:da:1f:d7:5c:88:61:ad: 99:df:97:1c:cb:7b:ea:52:5c:18:24:52:70:c2:67: 4d:0b:54:53:c0:fa:a4:5d:e6:32:6b:cb:b2:6b:f4: 6a:aa:6d:f7:18:ac:ad:12:dc:3e:b0:1c:f8:43:1a: ed:49:1c:65:6f:ce:9d:9c:4c:72:40:b1:25:74:76: 90:62:81:9b:cf:34:f6:24:05:30:83:88:74:1f:6f: 00:12:80:81:a2:6d:a6:01:46:d2:4d:2f:d0:76:55: 1b:5a:92:38:19:7d:b0:95:3f:43:5e:e7:fd:90:30: 55:ac:2b:10:ed:77:a3:17:e8:50:64:55:da:7d:9f: ca:c4:89:f9:21:e8:8e:92:97:82:bc:23:a2:55:b0: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:C1:09:56:39:26:2C:59:E9:22:3D:FC:5A:FF:2E:B3:B1:73:4F X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/86D13B7E571C11EC81276481C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.156.10.14/31 202.156.10.72/29 Signature Algorithm: sha256WithRSAEncryption 14:9c:73:0b:6d:ce:60:5f:34:c3:1d:d8:0d:83:42:53:0c:b3: 16:72:af:65:63:2c:7e:9d:3a:99:50:c0:9d:5f:4f:d8:1d:3d: 3e:a7:64:2f:b4:c3:62:25:aa:91:0d:7a:7a:b7:21:4c:6a:c2: 51:5c:21:ba:15:6f:a9:36:fc:a8:b1:14:4b:19:dd:c8:f0:94: 7e:b9:0c:af:ef:8f:53:96:40:d7:1e:ca:65:e1:8c:77:ec:62: ec:f9:1b:d1:79:6e:f5:32:23:39:e0:25:24:af:93:69:0a:85: 37:16:13:63:73:e5:de:fe:8f:0e:16:c9:ff:62:ef:52:27:c0: ff:52:29:45:d0:b4:9a:d9:b5:e4:95:52:e5:d4:3d:a1:e4:43: 0d:19:0c:54:00:3b:da:86:f2:b2:ee:e3:38:e1:bd:1d:ae:c9: 2e:4b:29:63:6f:59:19:e1:8b:a3:a0:7b:68:c6:a6:93:fd:8d: 7e:5a:77:2f:16:15:19:c0:b8:4f:15:13:ff:e4:ba:95:83:93: 0b:c3:8a:0e:c6:47:94:a4:49:1f:69:76:f1:62:6f:11:d7:cf: c1:9a:1c:64:e5:81:72:3a:3f:6f:4d:7c:77:e3:eb:cc:6e:e0: ba:af:86:c0:30:91:92:0a:6b:6a:d7:e7:74:34:93:6b:c9:66: 00:80:fc:aa -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICJMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjMwNzA0MTYwMjE2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE0NDI4Ny02OGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyz/P3CX8LDfzXnDJn/WlXs08PlYmVPCE3OycjyvOsj9vXa47ufLRrwoOXgy 78p76/UpQTQ3Szv+9kLw1qCWSgbXXRPPFYis6g/DwuxaCwe5V8ODWZcT+k+sfRTa /BgUS4wbdYUaMZGRRpUf1ycbB9of11yIYa2Z35ccy3vqUlwYJFJwwmdNC1RTwPqk XeYya8uya/Rqqm33GKytEtw+sBz4QxrtSRxlb86dnExyQLEldHaQYoGbzzT2JAUw g4h0H28AEoCBom2mAUbSTS/QdlUbWpI4GX2wlT9DXuf9kDBVrCsQ7XejF+hQZFXa fZ/KxIn5IeiOkpeCvCOiVbBhBQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFFtowQlW OSYsWekiPfxa/y6zsXNPMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvODZEMTNCN0U1 NzFDMTFFQzgxMjc2NDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4DBQHKnAoOAwUDypwKSDANBgkqhkiG9w0BAQsFAAOCAQEAFJxz C23OYF80wx3YDYNCUwyzFnKvZWMsfp06mVDAnV9P2B09PqdkL7TDYiWqkQ16erch TGrCUVwhuhVvqTb8qLEUSxndyPCUfrkMr++PU5ZA1x7KZeGMd+xi7Pkb0Xlu9TIj OeAlJK+TaQqFNxYTY3Pl3v6PDhbJ/2LvUifA/1IpRdC0mtm15JVS5dQ9oeRDDRkM VAA72obysu7jOOG9Ha7JLkspY29ZGeGLo6B7aMamk/2Nflp3LxYVGcC4TxUT/+S6 lYOTC8OKDsZHlKRJH2l28WJvEdfPwZocZOWBcjo/b018d+PrzG7guq+GwDCRkgpr atfndDSTa8lmAID8qg== -----END CERTIFICATE-----Generated at Fri May 31 17:44:24 2024 by rpki-client on console-fra.rpki-client.org