$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/BDBFFB867D5411EB8CBE5B57C4F9AE02.roa File: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (raw, json) Hash identifier: ST3w5Tj88jMoz75b41w1YKAqx3Mmc8bfoi4qnLujj8E= Subject key identifier: 9A:5E:60:20:21:42:7D:0B:1C:C5:D5:CF:CB:BB:9E:16:2E:39:A2:8E Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Certificate serial: 05BD Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/BDBFFB867D5411EB8CBE5B57C4F9AE02.roa Signing time: Thu 23 May 2024 00:34:00 +0000 ROA not before: Thu 23 May 2024 00:34:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 9790 IP address blocks: 202.3.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 00:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5 Validity Not Before: May 23 00:34:00 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664e8ef8-3d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:eb:2f:e7:1a:37:73:0c:61:6f:e4:b5:d9:df: fe:97:99:d7:3c:b3:0d:17:e2:b0:a7:c6:03:48:a2: 7c:89:ff:b9:3a:c1:71:5a:5e:e1:ce:94:b8:c5:cc: 91:0f:9b:73:41:f3:5f:dc:b2:aa:9d:18:c0:64:c9: 6f:55:33:ec:d2:61:aa:51:f7:f6:ac:6f:94:21:0d: ff:e1:11:f8:e2:6c:75:d5:4b:29:f2:57:e1:1a:97: 46:fe:6a:ff:ee:d5:fb:5a:60:3e:95:7d:b6:b3:d9: 12:17:12:3e:4d:9b:47:e2:5c:4b:9a:e8:77:26:a7: 98:37:d7:76:e7:a4:f9:63:9b:59:72:c2:46:59:50: 4c:6d:c3:7d:49:13:0a:72:c7:7d:58:76:70:55:d9: e4:73:d5:18:7a:db:9c:9a:55:77:e5:45:29:67:a7: 3f:f3:6f:16:95:17:15:41:c1:6f:90:d3:2e:d7:de: 05:ff:67:8a:ed:96:da:55:07:56:b8:0d:59:c0:9a: 2e:7c:4a:b6:7c:1e:f0:de:30:b7:82:a8:40:0a:9b: 04:d7:87:a9:f9:c5:5f:46:d4:13:3c:eb:0c:7c:47: 25:15:13:01:0d:4b:05:f7:76:e7:69:c9:ba:35:4f: 8e:9e:47:e5:85:c2:82:63:1f:dc:23:9f:a8:9f:d0: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5E:60:20:21:42:7D:0B:1C:C5:D5:CF:CB:BB:9E:16:2E:39:A2:8E X509v3 Authority Key Identifier: keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/BDBFFB867D5411EB8CBE5B57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.3.88.0/21 Signature Algorithm: sha256WithRSAEncryption df:8d:7b:f8:3e:d6:97:54:b3:f2:0d:f1:30:e0:e9:07:24:9d: 25:d4:2d:af:02:3c:f1:4e:cd:4a:90:f0:60:9c:9b:49:e9:c2: eb:a4:77:21:d1:24:8b:15:fd:37:d6:bf:52:2d:84:3a:90:0f: da:be:b8:55:94:00:5e:d4:eb:b6:57:1c:22:a7:bb:53:aa:a0: c4:42:5f:02:12:bb:ce:d9:2e:df:82:53:6e:90:bc:a6:91:35: a3:61:94:8e:8a:50:bd:ec:2f:b5:ed:37:35:45:64:04:f1:c0: ac:49:09:35:30:1e:de:80:35:b1:fe:ec:bf:92:9d:bf:2a:0d: b0:65:d0:91:78:d8:d7:01:e7:2e:db:7f:ba:51:4a:6b:a3:e1: c2:c0:cb:e0:ca:5d:92:98:6a:fb:a9:09:91:64:e6:40:d6:bf: fb:1a:5a:9d:3d:9a:20:8a:d2:ba:85:9a:cc:42:df:6c:db:4c: 51:6d:8c:31:7c:46:82:35:70:08:da:a5:81:9a:c1:b1:25:4b: 63:47:42:33:27:54:e6:c9:8b:4d:e8:9b:cd:af:ad:6a:97:de: b7:e7:7e:a5:6f:fe:90:36:9b:f8:95:35:55:25:10:4a:80:4e: e9:6e:63:68:e9:2f:b4:0f:80:be:34:2f:82:18:90:29:fb:a6: 1e:af:7c:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG Qzg3MkU1QzUwHhcNMjQwNTIzMDAzNDAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRlOGVmOC0zZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Osv5xo3cwxhb+S12d/+l5nXPLMNF+Kwp8YDSKJ8if+5OsFxWl7hzpS4xcyR D5tzQfNf3LKqnRjAZMlvVTPs0mGqUff2rG+UIQ3/4RH44mx11Usp8lfhGpdG/mr/ 7tX7WmA+lX22s9kSFxI+TZtH4lxLmuh3JqeYN9d256T5Y5tZcsJGWVBMbcN9SRMK csd9WHZwVdnkc9UYetucmlV35UUpZ6c/828WlRcVQcFvkNMu194F/2eK7ZbaVQdW uA1ZwJoufEq2fB7w3jC3gqhACpsE14ep+cVfRtQTPOsMfEclFRMBDUsF93bnacm6 NU+OnkflhcKCYx/cI5+on9DqcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJpeYCAh Qn0LHMXVz8u7nhYuOaKOMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjczRUQvNEQ4RkEyMEU3RDQ5MTFFQkExNjU3MzdCQzRGOUFFMDIvQkRCRkZCODY3 RDU0MTFFQjhDQkU1QjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPKA1gwDQYJKoZIhvcNAQELBQADggEBAN+Ne/g+1pdUs/IN 8TDg6QcknSXULa8CPPFOzUqQ8GCcm0npwuukdyHRJIsV/TfWv1IthDqQD9q+uFWU AF7U67ZXHCKnu1OqoMRCXwISu87ZLt+CU26QvKaRNaNhlI6KUL3sL7XtNzVFZATx wKxJCTUwHt6ANbH+7L+Snb8qDbBl0JF42NcB5y7bf7pRSmuj4cLAy+DKXZKYavup CZFk5kDWv/saWp09miCK0rqFmsxC32zbTFFtjDF8RoI1cAjapYGawbElS2NHQjMn VObJi03om82vrWqX3rfnfqVv/pA2m/iVNVUlEEqATuluY2jpL7QPgL40L4IYkCn7 ph6vfCI= -----END CERTIFICATE-----Generated at Fri Jun 7 02:20:50 2024 by rpki-client on console-fra.rpki-client.org