$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa File: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (raw, json) Hash identifier: Wg0ycCOoKuAHP5nQShBntZqgFSfdv38dgCrRwUlSjDU= Subject key identifier: 39:F3:28:48:11:B4:F9:A1:3D:C4:A7:03:18:2B:24:8F:CD:DA:02:A6 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 047D Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa Signing time: Thu 23 May 2024 02:05:53 +0000 ROA not before: Thu 23 May 2024 02:05:53 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 55470 IP address blocks: 202.41.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: May 23 02:05:53 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=664ea481-b6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:5b:3c:3e:20:66:af:01:ee:6a:d0:16:5a: 9c:2d:46:7b:83:ec:f7:9e:9f:6d:71:37:d9:14:bd: b5:90:1c:a1:97:77:db:24:ae:ea:c0:aa:23:4e:db: b4:94:c7:db:d6:b0:fb:8d:5a:2a:3b:df:7a:19:b8: 92:42:80:27:49:df:9f:9b:1e:db:38:99:a4:7e:aa: 04:27:6b:9c:fc:54:8a:05:7b:a9:ad:99:95:18:73: 98:15:d9:67:9f:a7:a5:50:9a:c5:01:52:f2:88:60: 5a:95:86:60:1a:9f:e5:4d:40:4e:59:e6:87:3f:0c: 0a:8f:3c:70:fb:69:16:ab:e1:e2:21:99:94:c2:df: df:23:9d:63:50:6f:88:b0:2f:bf:a4:5b:87:67:b8: 1b:ca:43:9e:b4:67:97:c6:4a:f5:02:8e:49:5d:d4: c7:d9:83:c3:64:82:8c:be:5d:5a:32:54:f8:d9:d8: 9f:e1:dd:1c:3e:26:61:05:e3:ca:05:3b:cc:f5:61: f1:e7:97:02:6e:48:2b:79:bd:f2:6b:79:cc:e2:39: a0:0a:1a:4e:c0:0f:d8:ca:69:74:52:80:d9:8b:2d: 81:45:df:80:50:3d:67:f5:99:48:bf:88:e5:9a:a6: 31:7e:60:de:4d:fc:70:49:68:e6:fe:22:89:de:0a: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F3:28:48:11:B4:F9:A1:3D:C4:A7:03:18:2B:24:8F:CD:DA:02:A6 X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.64.0/24 Signature Algorithm: sha256WithRSAEncryption a4:9f:3c:6b:a3:57:d7:2e:d8:56:53:4d:58:ae:aa:9a:01:8f: 79:f2:5f:57:78:5d:d0:ad:f2:33:f6:d0:26:15:92:d9:93:18: 3f:0c:b4:d6:29:f0:d8:8a:11:79:5d:4d:ca:79:2b:46:7d:0e: 1f:f2:79:9b:e9:2f:5b:ea:a6:d6:2c:a2:17:ed:9d:a3:4b:d5: d0:d0:d0:ce:1c:77:98:0b:cc:21:1b:83:7c:1f:87:a8:ad:5c: e7:4c:23:f2:86:74:75:1d:d8:93:a0:f0:8e:28:1d:c3:b4:e2: d8:1d:a4:3e:72:e7:85:c2:61:60:18:90:8e:1b:2f:9e:1f:86: 94:af:f7:e1:3c:f6:e9:19:73:23:bc:da:0c:a3:c2:0c:1c:24: cd:4a:17:a1:d3:6e:f5:f6:80:2a:f6:0c:85:c9:37:3d:5e:59: 8b:75:92:e8:bb:20:7b:0e:78:69:85:82:c1:d2:62:e6:0a:5c: 11:92:6e:0b:b6:86:23:9d:3b:8a:b9:7c:a9:8d:d4:37:3a:62: 49:8b:f9:2d:29:96:a2:84:10:cb:06:f0:4a:29:4b:ed:70:a2: 25:84:29:8a:ae:ae:22:22:f4:92:7b:d4:1d:1e:b1:ca:6d:af: 37:19:28:18:b1:3a:da:bd:f0:5f:f6:f1:8d:15:25:c4:80:46: d3:c0:f3:cc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjQwNTIzMDIwNTUzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRlYTQ4MS1iNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6FbPD4gZq8B7mrQFlqcLUZ7g+z3np9tcTfZFL21kByhl3fbJK7qwKojTtu0 lMfb1rD7jVoqO996GbiSQoAnSd+fmx7bOJmkfqoEJ2uc/FSKBXuprZmVGHOYFdln n6elUJrFAVLyiGBalYZgGp/lTUBOWeaHPwwKjzxw+2kWq+HiIZmUwt/fI51jUG+I sC+/pFuHZ7gbykOetGeXxkr1Ao5JXdTH2YPDZIKMvl1aMlT42dif4d0cPiZhBePK BTvM9WHx55cCbkgreb3ya3nM4jmgChpOwA/Yyml0UoDZiy2BRd+AUD1n9ZlIv4jl mqYxfmDeTfxwSWjm/iKJ3grHZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDnzKEgR tPmhPcSnAxgrJI/N2gKmMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUzRDMvNkVDMEUzNjgwMDBBMTFFQzhDMjg3MjUyQzRGOUFFMDIvMzZDNEZBQUFB OUZDMTFFRUJFRjNFNjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKKUAwDQYJKoZIhvcNAQELBQADggEBAKSfPGujV9cu2FZT TViuqpoBj3nyX1d4XdCt8jP20CYVktmTGD8MtNYp8NiKEXldTcp5K0Z9Dh/yeZvp L1vqptYsohftnaNL1dDQ0M4cd5gLzCEbg3wfh6itXOdMI/KGdHUd2JOg8I4oHcO0 4tgdpD5y54XCYWAYkI4bL54fhpSv9+E89ukZcyO82gyjwgwcJM1KF6HTbvX2gCr2 DIXJNz1eWYt1kui7IHsOeGmFgsHSYuYKXBGSbgu2hiOdO4q5fKmN1Dc6YkmL+S0p lqKEEMsG8EopS+1woiWEKYquriIi9JJ71B0escptrzcZKBixOtq98F/28Y0VJcSA RtPA88w= -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:03 2024 by rpki-client on console-fra.rpki-client.org