$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/9C072F22C9E411EC956B0A3CC4F9AE02.roa File: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (raw, json) Hash identifier: BaJvOYk2pgDiPag41CcHwCl7E16NKaccKF8BwONQqUU= Subject key identifier: 41:FB:47:08:68:B4:00:D7:49:EB:59:62:7E:E4:E6:9C:77:CF:A0:29 Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Certificate serial: 01C9 Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/9C072F22C9E411EC956B0A3CC4F9AE02.roa Signing time: Fri 23 Jun 2023 04:31:27 +0000 ROA not before: Fri 23 Jun 2023 04:31:27 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 24079 IP address blocks: 202.0.144.0/22 maxlen: 22 202.14.86.0/23 maxlen: 23 203.129.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Validity Not Before: Jun 23 04:31:27 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6495201f-27a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:52:69:97:72:35:52:aa:b2:c5:8d:ca:18: 61:43:ab:49:dc:c8:6a:99:da:60:d5:c5:22:e9:2a: ab:66:92:e6:c4:78:2a:1a:2e:76:c5:1e:a8:8d:45: 87:34:51:27:69:9c:1d:c7:a5:00:55:9b:a5:2f:60: 81:5a:d1:5c:bf:42:56:d6:be:4b:f5:ac:87:6f:cf: 9c:6a:85:aa:14:bc:65:b8:8d:03:63:79:0d:1e:29: bc:4e:a3:51:67:6f:d1:da:27:2a:53:3b:24:45:c5: af:f6:2e:2c:30:53:83:aa:f0:c1:56:82:01:b1:10: d1:b5:c5:d6:d8:11:3b:af:d9:61:0d:7f:de:cc:35: 8b:30:a0:13:30:4d:c0:e9:57:1a:4d:bf:ad:01:9c: cd:ea:3e:f4:b0:13:7b:1f:e5:cb:4f:d9:b8:53:31: 38:19:f1:6c:c3:07:03:57:7b:ee:ab:9e:7c:32:cc: cb:f3:5c:ca:e3:26:34:c7:72:9a:a9:70:8a:3c:af: 11:65:55:70:59:64:8b:e9:0c:2f:99:64:e7:fb:b0: c2:16:a7:ef:a7:a3:1d:d0:da:06:b4:e5:bc:e9:7b: da:6a:0b:d1:3c:02:f7:40:ff:b1:9e:b1:ab:ee:be: ed:c0:fa:f9:77:a8:aa:f4:83:d4:b6:0d:ed:bc:e1: f7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FB:47:08:68:B4:00:D7:49:EB:59:62:7E:E4:E6:9C:77:CF:A0:29 X509v3 Authority Key Identifier: keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/9C072F22C9E411EC956B0A3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.0.144.0/22 202.14.86.0/23 203.129.4.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:66:20:e1:da:aa:3b:8d:05:36:e5:61:a0:38:e3:6c:f3:69: f6:17:71:32:e9:8e:8b:79:67:5f:73:be:9f:ec:9e:ac:45:90: b2:79:4d:16:c9:f2:df:62:9b:cf:a0:6e:03:31:28:d5:d8:c1: 97:16:23:8d:cd:9e:3e:16:24:44:cc:22:18:90:ff:b4:c5:9c: da:e8:b0:af:60:9f:65:4a:c4:86:c7:70:09:2e:45:05:8d:5e: 2c:b6:f8:5b:38:51:5f:fc:c3:30:03:8b:3e:1c:28:25:af:d1: 03:10:48:d3:a0:24:c3:c8:ca:db:97:61:75:00:21:e6:67:a9: 5e:6d:df:dd:1d:86:e5:c3:17:0c:d5:c1:cd:f1:c5:b2:4c:93: 64:d1:4c:87:eb:f2:ac:cf:b1:b4:59:d6:ec:95:77:a1:fe:f5: 48:4d:d8:3d:12:b5:d6:2e:cf:7b:7e:1e:d1:93:63:74:c3:1e: 5c:88:f0:a1:58:b5:7a:d7:01:54:7a:3e:bf:56:40:e5:d1:f8: ad:70:1a:1c:74:fa:45:11:5c:cd:77:02:10:32:84:af:47:7f: be:a9:b0:b2:ef:a4:87:7a:32:70:44:d9:3c:7d:c8:72:de:a8: 2c:67:11:05:4f:ec:95:e2:bf:4f:66:29:31:e1:a0:4e:01:0b: a4:c8:fa:84 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyMzUxMTAvBgNVBAUTKDQ0MUNCMEQ4NkE5MkNFREZCRTgwODNERUQ2OTdBMjZE NjIzRUU2NTUwHhcNMjMwNjIzMDQzMTI3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk1MjAxZi0yN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7ZSaZdyNVKqssWNyhhhQ6tJ3Mhqmdpg1cUi6SqrZpLmxHgqGi52xR6ojUWH NFEnaZwdx6UAVZulL2CBWtFcv0JW1r5L9ayHb8+caoWqFLxluI0DY3kNHim8TqNR Z2/R2icqUzskRcWv9i4sMFODqvDBVoIBsRDRtcXW2BE7r9lhDX/ezDWLMKATME3A 6VcaTb+tAZzN6j70sBN7H+XLT9m4UzE4GfFswwcDV3vuq558MszL81zK4yY0x3Ka qXCKPK8RZVVwWWSL6QwvmWTn+7DCFqfvp6Md0NoGtOW86XvaagvRPAL3QP+xnrGr 7r7twPr5d6iq9IPUtg3tvOH3CwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFEH7Rwho tADXSetZYn7k5px3z6ApMB8GA1UdIwQYMBaAFEQcsNhqks7fvoCD3taXom1iPuZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTIzNS9ERDYxRTIyRUM1 REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0LS1nSVBlMXBlaWJXSS01 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCeXcyR3FTenQtLWdJUGUxcGVpYldJLTVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzEyMzUvREQ2MUUyMkVDNUREMTFFQ0JFRjQyQzc3QzRGOUFFMDIvOUMwNzJGMjJD OUU0MTFFQzk1NkIwQTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBALKAJADBAHKDlYDBAHLgQQwDQYJKoZIhvcNAQELBQADggEB AFxmIOHaqjuNBTblYaA442zzafYXcTLpjot5Z19zvp/snqxFkLJ5TRbJ8t9im8+g bgMxKNXYwZcWI43Nnj4WJETMIhiQ/7TFnNrosK9gn2VKxIbHcAkuRQWNXiy2+Fs4 UV/8wzADiz4cKCWv0QMQSNOgJMPIytuXYXUAIeZnqV5t390dhuXDFwzVwc3xxbJM k2TRTIfr8qzPsbRZ1uyVd6H+9UhN2D0StdYuz3t+HtGTY3TDHlyI8KFYtXrXAVR6 Pr9WQOXR+K1wGhx0+kURXM13AhAyhK9Hf76psLLvpId6MnBE2Tx9yHLeqCxnEQVP 7JXiv09mKTHhoE4BC6TI+oQ= -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:43 2024 by rpki-client on console-fra.rpki-client.org