$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/A3601D70C2A511EBB2025B36C4F9AE02.roa File: A3601D70C2A511EBB2025B36C4F9AE02.roa (raw, json) Hash identifier: mZZO7VRNtEd/9mSg4UGXrPNl1qbP+Ken3yNN8V+/ZNY= Subject key identifier: 96:5E:66:DE:9E:E2:02:71:75:84:FC:63:E1:07:4F:C4:F3:B3:90:33 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 33F1 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/A3601D70C2A511EBB2025B36C4F9AE02.roa Signing time: Tue 20 Jun 2023 14:50:37 +0000 ROA not before: Tue 20 Jun 2023 14:50:37 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 55760 IP address blocks: 203.188.16.0/20 maxlen: 21 203.188.48.0/20 maxlen: 22 203.209.48.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13297 (0x33f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jun 20 14:50:37 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6491bcbd-27cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:57:3b:78:34:33:59:4b:9c:1f:19:1b:10: f3:ca:52:4a:d2:7a:1c:80:d8:54:a1:d9:b9:93:ed: 20:63:f5:ec:ec:f8:ad:e4:19:da:a3:13:c9:26:2f: eb:de:85:4d:65:bc:04:47:d8:4b:72:67:7c:47:ad: 7c:91:2f:24:de:c5:8d:f6:a1:90:58:eb:98:f8:2c: 64:c2:cf:08:4e:6e:86:1c:04:74:62:3b:7f:8a:89: 47:ee:0c:80:37:0e:5c:20:b4:b2:49:32:a4:a5:e0: 55:26:ad:b4:18:d9:5d:44:de:39:a5:cc:50:93:b1: b3:bd:35:69:90:63:77:ab:d0:e6:98:2e:a6:85:0d: ec:04:65:5f:3f:3c:f8:dc:b5:6e:9e:38:4f:d5:0c: 12:1f:00:2b:46:b2:42:1c:e0:cf:14:bb:cd:1f:6b: e3:45:d2:71:10:5a:da:f1:a8:f3:2e:9f:c0:ab:bb: 42:9a:a9:13:ab:fb:94:d6:f7:ff:56:d5:2a:7b:4c: f7:86:2b:c9:2c:12:3d:5b:b5:da:3d:0f:27:24:d6: b2:42:b8:33:81:92:39:83:69:ea:1d:72:dd:e5:2a: 24:fb:9c:39:75:0e:ae:aa:9e:a7:0e:9f:dc:c8:c0: 6b:41:67:14:38:43:49:ed:d3:33:8c:ec:5e:53:b7: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5E:66:DE:9E:E2:02:71:75:84:FC:63:E1:07:4F:C4:F3:B3:90:33 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/A3601D70C2A511EBB2025B36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.188.16.0/20 203.188.48.0/20 203.209.48.0/21 Signature Algorithm: sha256WithRSAEncryption 83:bd:38:13:d7:0c:e8:43:7b:db:c1:69:79:4a:d9:14:4e:6e: 28:16:82:15:c9:19:53:89:a0:65:38:a3:77:10:2e:2d:06:b6: d7:32:7e:03:58:a9:3d:7b:b0:40:04:32:71:42:35:a7:0e:9f: 55:f0:57:96:e9:a0:3f:e7:d5:c7:d5:62:fd:5f:59:7f:a0:ff: 8e:71:60:bd:a4:92:a7:03:89:ad:26:05:0f:19:ac:58:8e:72: 4c:f3:45:99:ee:0d:7e:85:ea:79:e4:a5:2b:c5:4f:dd:28:5f: e2:9f:9a:41:db:9e:27:e3:b3:a6:cf:ea:2f:f5:8c:fc:3d:61: 46:df:82:ba:d3:90:ca:d3:ae:d2:38:7b:2a:5b:4d:9c:10:88: ad:e8:e4:29:9e:cb:62:d5:b7:d5:d0:68:c3:7a:c0:46:6c:36: 8e:2f:c1:0b:ae:45:c8:4b:67:14:17:64:85:e8:49:e6:a0:b8: fc:60:15:38:b2:4f:e2:33:7e:0d:1e:f2:58:e4:ff:a2:a2:1e: 7c:f9:6e:8a:ee:f5:f5:6b:5b:c8:db:3e:a5:4a:f7:3c:c8:46: f0:9c:d6:83:83:0f:c3:05:ce:91:6b:7b:e0:8e:4b:10:f3:e4: f4:c9:18:ba:6c:72:84:ff:fd:81:ef:f4:00:a2:d4:c2:16:ec: 43:dc:dc:c5 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICM/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjMwNjIwMTQ1MDM3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkxYmNiZC0yN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ENXO3g0M1lLnB8ZGxDzylJK0nocgNhUodm5k+0gY/Xs7Pit5BnaoxPJJi/r 3oVNZbwER9hLcmd8R618kS8k3sWN9qGQWOuY+Cxkws8ITm6GHAR0Yjt/iolH7gyA Nw5cILSySTKkpeBVJq20GNldRN45pcxQk7GzvTVpkGN3q9DmmC6mhQ3sBGVfPzz4 3LVunjhP1QwSHwArRrJCHODPFLvNH2vjRdJxEFra8ajzLp/Aq7tCmqkTq/uU1vf/ VtUqe0z3hivJLBI9W7XaPQ8nJNayQrgzgZI5g2nqHXLd5Sok+5w5dQ6uqp6nDp/c yMBrQWcUOENJ7dMzjOxeU7cQVQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJZeZt6e 4gJxdYT8Y+EHT8Tzs5AzMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvQTM2MDFENzBD MkE1MTFFQkIyMDI1QjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBATLvBADBATLvDADBAPL0TAwDQYJKoZIhvcNAQELBQADggEB AIO9OBPXDOhDe9vBaXlK2RRObigWghXJGVOJoGU4o3cQLi0GttcyfgNYqT17sEAE MnFCNacOn1XwV5bpoD/n1cfVYv1fWX+g/45xYL2kkqcDia0mBQ8ZrFiOckzzRZnu DX6F6nnkpSvFT90oX+KfmkHbnifjs6bP6i/1jPw9YUbfgrrTkMrTrtI4eypbTZwQ iK3o5Cmey2LVt9XQaMN6wEZsNo4vwQuuRchLZxQXZIXoSeaguPxgFTiyT+Izfg0e 8ljk/6KiHnz5boru9fVrW8jbPqVK9zzIRvCc1oODD8MFzpFre+COSxDz5PTJGLps coT//YHv9ACi1MIW7EPc3MU= -----END CERTIFICATE-----Generated at Fri May 31 15:08:09 2024 by rpki-client on console-fra.rpki-client.org