$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/425C78E48DB811E98ACC9F7EC4F9AE02.roa File: 425C78E48DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: NeX3nlV47g61NgXKBIjXSrncjuAj23iwhp28oDebxag= Subject key identifier: 32:7E:13:05:B5:31:B4:38:47:BF:F2:FE:CA:27:7B:C3:43:1A:09:08 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 33E2 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/425C78E48DB811E98ACC9F7EC4F9AE02.roa Signing time: Tue 20 Jun 2023 14:50:23 +0000 ROA not before: Tue 20 Jun 2023 14:50:23 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 17980 IP address blocks: 203.209.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13282 (0x33e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jun 20 14:50:23 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6491bcaf-b17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:1b:0b:3e:3c:7a:6c:07:4a:cb:88:1b:11: f8:7e:84:d9:56:3c:a8:32:30:17:23:fd:e8:e8:f9: 80:68:b6:18:58:1f:35:83:fe:bf:11:ba:19:b5:04: bc:ab:ab:62:54:b1:5d:d7:da:ed:a4:8b:65:6b:2d: e9:e7:91:df:fb:95:84:70:d6:2e:11:d8:11:2d:a9: 8c:1e:cc:6f:cb:f0:62:ff:bf:2c:7b:ef:7e:78:a2: a9:ad:5d:7e:9b:dd:43:cf:4f:8c:f4:49:a9:2e:01: 2d:11:fe:26:03:c4:2d:38:ba:62:0a:54:83:6c:2b: 9a:d7:65:d4:b1:9e:92:33:98:88:63:d4:ad:89:7c: c2:6c:cf:10:0e:97:09:70:01:0e:42:4b:cb:21:30: a1:da:fe:f3:d5:49:44:a5:d2:15:5b:85:31:2c:0a: 27:da:39:d0:8c:2b:4c:5e:2b:72:67:1a:9c:5a:88: fb:e1:34:99:a9:00:b2:88:4e:6a:f5:a3:a6:55:7c: 87:d2:77:ce:0b:1c:91:fb:2c:48:91:80:ee:e4:59: 1a:59:6e:15:1d:9d:5c:22:e4:b2:ed:fa:9d:03:1a: 0d:e6:1b:14:67:03:9c:b4:4f:33:3b:65:8a:0d:0b: 1a:cf:84:a0:e2:6e:09:8f:47:2c:f6:73:0c:58:22: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7E:13:05:B5:31:B4:38:47:BF:F2:FE:CA:27:7B:C3:43:1A:09:08 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/425C78E48DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.209.99.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:7f:49:66:06:66:ed:9b:0e:5f:c8:ad:3b:7c:dd:74:7d:d6: 66:71:1c:2d:7f:35:d0:e8:9a:a0:4c:cb:6b:15:0a:b6:2b:6f: ed:18:3c:3e:9a:ba:10:f9:70:84:5c:39:47:d0:eb:ad:3e:30: 52:06:e7:14:6c:ce:ab:90:b8:c7:ff:7b:16:a0:3c:1d:72:d6: 00:34:bd:2f:ac:b7:b4:5c:99:3e:f6:22:1d:5d:af:ea:ab:0c: 07:e0:6d:23:22:ea:99:a1:37:1a:3a:1d:0f:a2:81:25:09:e2: 20:1c:0d:57:7a:28:aa:56:4d:f7:38:34:7b:af:7c:bb:5c:98: b1:d9:d6:d1:08:b1:b3:3c:2b:91:8a:e6:c7:e6:00:c3:ef:c8: 9b:af:96:fa:57:52:36:28:81:86:ee:1d:d0:9e:3f:73:03:4e: be:f8:73:a5:a2:23:3c:6e:14:5b:c9:87:7a:ad:c1:2b:34:f0: aa:99:c2:42:2e:4e:99:39:01:dc:a5:d3:16:34:15:c8:48:37: 71:bb:83:a9:1a:24:dc:ef:40:18:71:30:b6:f4:59:23:4a:35: 75:48:dd:ec:a3:1d:62:e2:6e:71:89:f9:2f:82:2d:ce:c6:86: 00:20:6e:36:3e:ac:84:2d:ce:c8:11:d1:8e:e4:fc:d4:d6:34: 8b:62:63:9c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICM+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjMwNjIwMTQ1MDIzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkxYmNhZi1iMTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsUbCz48emwHSsuIGxH4foTZVjyoMjAXI/3o6PmAaLYYWB81g/6/EboZtQS8 q6tiVLFd19rtpItlay3p55Hf+5WEcNYuEdgRLamMHsxvy/Bi/78se+9+eKKprV1+ m91Dz0+M9EmpLgEtEf4mA8QtOLpiClSDbCua12XUsZ6SM5iIY9StiXzCbM8QDpcJ cAEOQkvLITCh2v7z1UlEpdIVW4UxLAon2jnQjCtMXityZxqcWoj74TSZqQCyiE5q 9aOmVXyH0nfOCxyR+yxIkYDu5FkaWW4VHZ1cIuSy7fqdAxoN5hsUZwOctE8zO2WK DQsaz4Sg4m4Jj0cs9nMMWCJv/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDJ+EwW1 MbQ4R7/y/sone8NDGgkIMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDI1Qzc4RTQ4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL0WMwDQYJKoZIhvcNAQELBQADggEBAJp/SWYGZu2bDl/I rTt83XR91mZxHC1/NdDomqBMy2sVCrYrb+0YPD6auhD5cIRcOUfQ660+MFIG5xRs zquQuMf/exagPB1y1gA0vS+st7RcmT72Ih1dr+qrDAfgbSMi6pmhNxo6HQ+igSUJ 4iAcDVd6KKpWTfc4NHuvfLtcmLHZ1tEIsbM8K5GK5sfmAMPvyJuvlvpXUjYogYbu HdCeP3MDTr74c6WiIzxuFFvJh3qtwSs08KqZwkIuTpk5Adyl0xY0FchIN3G7g6ka JNzvQBhxMLb0WSNKNXVI3eyjHWLibnGJ+S+CLc7GhgAgbjY+rIQtzsgR0Y7k/NTW NItiY5w= -----END CERTIFICATE-----Generated at Thu Jun 6 15:11:44 2024 by rpki-client on console-ams.rpki-client.org