$ rpki-client -vvf rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa File: E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa (raw, json) Hash identifier: 9JU91l412hFsZgA1qAbuRoWUbwnNMVvRlNqSzYYXfQk= Subject key identifier: 83:61:FD:E1:B4:6F:FB:B5:9D:15:F1:EC:88:93:8E:CF:43:B2:7B:38 Certificate issuer: /CN=A918AAA1/serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Certificate serial: 02 Authority key identifier: A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa Signing time: Fri 01 Sep 2023 02:26:05 +0000 ROA not before: Fri 01 Sep 2023 02:26:05 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 4768 IP address blocks: 202.37.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AAA1/serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Validity Not Before: Sep 1 02:26:05 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f14bbd-24ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:5a:93:38:53:df:9d:98:ef:26:65:f6:56: 3e:e7:8c:76:7e:c0:01:4a:f3:b4:ed:3d:7d:ff:bd: d1:2c:94:30:f2:b9:e7:20:b8:41:a5:a8:ed:bc:2a: 5f:8d:f1:92:d7:62:13:96:e1:76:a8:e8:e8:c6:32: 7d:f7:03:3c:58:3b:20:f0:1e:ae:bf:6b:4c:db:97: 4f:c8:b4:44:39:be:2b:c1:b1:d3:25:4a:3d:4a:a1: a4:08:c5:7c:53:f0:29:0a:5d:95:fa:2e:32:7c:62: a2:bb:53:59:64:4c:79:09:2e:db:08:30:06:f3:06: 51:74:89:b0:68:83:e1:0b:69:ca:c6:04:88:6e:9b: 91:b7:05:87:05:27:a6:4f:b9:4a:a4:56:f9:b9:a2: 70:9b:1b:90:56:f2:51:c7:88:8c:39:00:e8:76:ab: 8c:42:55:a5:a9:fc:5f:17:b2:73:5b:ab:d2:8b:4d: c4:f4:c2:36:24:ff:d5:13:d1:e3:bf:3f:4b:cb:22: 80:46:fd:eb:d7:9d:1e:2f:50:6e:37:94:db:b5:2f: ed:b8:dc:96:53:b5:e9:31:68:ec:26:59:69:24:d5: 60:73:c9:db:8c:5a:40:e9:b8:07:25:8c:ee:23:33: 19:ce:c7:88:a3:19:64:8e:84:a0:ed:1d:ca:c7:ba: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:61:FD:E1:B4:6F:FB:B5:9D:15:F1:EC:88:93:8E:CF:43:B2:7B:38 X509v3 Authority Key Identifier: keyid:A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.138.0/24 Signature Algorithm: sha256WithRSAEncryption 11:d7:92:1e:1d:c2:ea:be:19:43:24:4b:b5:32:d2:10:46:0b: 37:29:ce:76:68:00:61:13:4e:b5:89:e5:d7:8d:bc:45:39:cb: 96:9d:35:da:0b:a9:fd:6c:7f:f1:29:c7:0e:3a:84:c1:eb:1e: 71:40:8f:5d:19:76:5a:08:18:1c:1b:16:da:2a:d7:09:52:9b: c0:47:59:ff:3b:c4:d9:a4:be:82:a4:f2:1f:38:e2:e2:c8:89: 48:e1:3d:78:3a:5f:e4:93:a7:30:33:88:2e:1f:d3:13:b1:6f: eb:19:4c:dc:42:e5:92:00:7d:f9:15:2e:89:b0:22:a9:dc:e1: fd:de:ef:ac:db:d4:a0:0c:ab:11:78:29:64:30:ec:dc:df:b2: cb:26:f3:d2:d9:bc:e4:01:a5:4f:5f:f4:50:f2:3b:91:27:5e: 02:3a:ca:9f:1b:96:07:f6:53:7f:aa:b5:e1:bb:ca:60:9c:70: 7c:5f:71:d6:df:5c:a9:38:da:99:09:a6:0a:69:38:91:f9:de: 73:b2:41:9a:b6:82:f0:7b:7e:1b:46:fe:87:0f:85:9d:71:56: a9:ea:da:bc:e6:b8:c7:fe:03:64:d6:1c:24:1a:da:87:0a:df: 12:f8:54:ab:15:07:4a:dd:5b:86:f4:9d:a8:56:5d:fd:52:71: 2d:1d:d2:e8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUFBMTExMC8GA1UEBRMoQTJEQTM2MzdEMzI1M0Y4OTk3RDg4RDBCRDhEQTk1OThG NzgzRjk5MTAeFw0yMzA5MDEwMjI2MDVaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZjE0YmJkLTI0YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY+lqTOFPfnZjvJmX2Vj7njHZ+wAFK87TtPX3/vdEslDDyuecguEGlqO28Kl+N 8ZLXYhOW4Xao6OjGMn33AzxYOyDwHq6/a0zbl0/ItEQ5vivBsdMlSj1KoaQIxXxT 8CkKXZX6LjJ8YqK7U1lkTHkJLtsIMAbzBlF0ibBog+ELacrGBIhum5G3BYcFJ6ZP uUqkVvm5onCbG5BW8lHHiIw5AOh2q4xCVaWp/F8XsnNbq9KLTcT0wjYk/9UT0eO/ P0vLIoBG/evXnR4vUG43lNu1L+243JZTtekxaOwmWWkk1WBzyduMWkDpuAcljO4j MxnOx4ijGWSOhKDtHcrHuhZ9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUg2H94bRv +7WdFfHsiJOOz0OyezgwHwYDVR0jBBgwFoAUoto2N9MlP4mX2I0L2NqVmPeD+ZEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQUExLzgxMTRDNzlDNDg2 RTExRUVBOTYwOTQyQ0M0RjlBRTAyL290bzJOOU1sUDRtWDJJMEwyTnFWbVBlRC1a RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3RvMk45TWxQNG1YMkkwTDJOcVZtUGVELVpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUFBMS84MTE0Qzc5QzQ4NkUxMUVFQTk2MDk0MkNDNEY5QUUwMi9FNkVCMkIxMDQ4 NkUxMUVFQjRENUZGMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMolijANBgkqhkiG9w0BAQsFAAOCAQEAEdeSHh3C6r4ZQyRL tTLSEEYLNynOdmgAYRNOtYnl1428RTnLlp012gup/Wx/8SnHDjqEwesecUCPXRl2 WggYHBsW2irXCVKbwEdZ/zvE2aS+gqTyHzji4siJSOE9eDpf5JOnMDOILh/TE7Fv 6xlM3ELlkgB9+RUuibAiqdzh/d7vrNvUoAyrEXgpZDDs3N+yyybz0tm85AGlT1/0 UPI7kSdeAjrKnxuWB/ZTf6q14bvKYJxwfF9x1t9cqTjamQmmCmk4kfnec7JBmraC 8Ht+G0b+hw+FnXFWqeravOa4x/4DZNYcJBrahwrfEvhUqxUHSt1bhvSdqFZd/VJx LR3S6A== -----END CERTIFICATE-----Generated at Thu Jun 13 08:01:45 2024 by rpki-client on console-ams.rpki-client.org