$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/57009BC0E4FE11EE8B097A79C4F9AE02.roa File: 57009BC0E4FE11EE8B097A79C4F9AE02.roa (raw, json) Hash identifier: OwETguEfEvG/dWuG5wsUlMAo/UY27Q8IMcr+unH4nas= Subject key identifier: 4F:BA:F2:E7:36:DF:40:7A:AD:7F:F7:5D:3F:E8:F4:6C:A2:1D:26:C3 Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 0346 Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/57009BC0E4FE11EE8B097A79C4F9AE02.roa Signing time: Mon 18 Mar 2024 08:05:53 +0000 ROA not before: Mon 18 Mar 2024 08:05:53 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 210974 IP address blocks: 203.32.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: Mar 18 08:05:53 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65f7f5e1-04e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:22:99:15:e9:bc:82:c8:70:00:df:e3:94: f8:45:f0:e3:3a:6e:d9:88:53:d1:d6:ec:6b:80:e4: 38:ca:b7:6b:59:17:35:db:b2:43:30:82:81:8d:b4: 7d:9a:e0:e7:e2:9f:25:76:55:34:68:7f:51:1b:bd: 49:b6:28:a3:d5:5c:90:26:c2:de:38:70:18:b3:b8: d3:98:74:83:bd:a3:c4:18:7e:94:c8:6b:c2:8a:8a: 44:f6:f2:cd:87:22:74:9c:0b:6e:2c:a7:8b:3f:9d: b1:84:21:48:f5:f0:3f:e1:e9:72:05:f3:23:88:e4: cc:c9:17:24:2c:7c:fa:f0:70:ff:e3:df:86:58:04: c2:68:6f:9e:25:7a:10:b9:e5:b7:b7:3c:9b:b1:bd: 0a:86:4e:3f:f0:81:32:4e:7b:6a:91:ca:17:f7:36: 0b:9c:55:90:7f:49:92:2a:5a:9c:2f:6f:35:8a:b9: 41:ea:c2:c5:1e:dd:a2:73:aa:dd:f3:84:63:33:ef: 0a:3e:f3:11:06:6d:ab:e0:78:23:67:28:e1:09:e4: 25:44:0e:b1:58:d5:68:33:d7:a1:cf:1a:c0:fa:6f: 32:bc:4a:d4:ca:c8:c6:4d:bd:c8:d3:bc:55:4d:c5: 80:26:ec:a0:f1:06:3e:f2:9f:a6:b2:93:fd:d9:cf: 45:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BA:F2:E7:36:DF:40:7A:AD:7F:F7:5D:3F:E8:F4:6C:A2:1D:26:C3 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/57009BC0E4FE11EE8B097A79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.38.0/24 Signature Algorithm: sha256WithRSAEncryption 94:cb:8c:1a:75:b0:37:3a:96:f3:9d:c1:09:ed:63:3c:ff:e7: 7f:49:17:c0:9a:2e:80:03:1b:1e:f9:fb:c3:ba:4c:ea:45:3b: d4:c5:fe:f1:98:e4:01:f4:b0:37:c2:a1:32:b2:95:e8:6f:96: b4:31:b9:d4:db:3d:aa:e4:67:d6:eb:4e:a9:6e:c4:fb:80:7b: f8:85:b4:3e:a7:de:2f:37:cc:e6:49:55:82:d0:12:6b:20:02: dc:d6:1a:92:0b:27:37:96:69:6e:8b:94:1e:ab:e1:0f:66:c8: 1b:24:03:e2:76:05:ba:a1:62:10:dd:b9:b6:66:a8:dc:de:f9: 4f:a7:09:ce:00:c3:e0:8e:be:2c:74:f3:c6:4b:66:9f:8a:ed: 09:37:aa:81:5d:26:c1:c1:51:cd:a1:e4:81:28:ce:30:fc:0c: 32:94:f7:70:ad:a3:55:6e:e1:4c:07:55:a0:a5:96:18:ca:da: 9c:a0:ab:ce:3d:8f:e1:88:44:77:4d:ff:9e:9a:e1:45:bd:72: b4:80:20:f9:6c:c0:cd:f0:dd:d6:ae:0d:ec:af:15:29:93:d7: 37:73:bb:34:71:c3:d7:a1:27:66:94:87:45:c3:ce:32:1d:ea: 46:4b:77:93:4f:85:0d:57:c5:94:92:ff:59:c9:cc:69:42:66: 33:0d:3c:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjQwMzE4MDgwNTUzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWY3ZjVlMS0wNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCIimRXpvILIcADf45T4RfDjOm7ZiFPR1uxrgOQ4yrdrWRc127JDMIKBjbR9 muDn4p8ldlU0aH9RG71Jtiij1VyQJsLeOHAYs7jTmHSDvaPEGH6UyGvCiopE9vLN hyJ0nAtuLKeLP52xhCFI9fA/4elyBfMjiOTMyRckLHz68HD/49+GWATCaG+eJXoQ ueW3tzybsb0Khk4/8IEyTntqkcoX9zYLnFWQf0mSKlqcL281irlB6sLFHt2ic6rd 84RjM+8KPvMRBm2r4HgjZyjhCeQlRA6xWNVoM9ehzxrA+m8yvErUysjGTb3I07xV TcWAJuyg8QY+8p+mspP92c9FnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE+68uc2 30B6rX/3XT/o9GyiHSbDMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvNTcwMDlCQzBF NEZFMTFFRThCMDk3QTc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLICYwDQYJKoZIhvcNAQELBQADggEBAJTLjBp1sDc6lvOd wQntYzz/539JF8CaLoADGx75+8O6TOpFO9TF/vGY5AH0sDfCoTKylehvlrQxudTb ParkZ9brTqluxPuAe/iFtD6n3i83zOZJVYLQEmsgAtzWGpILJzeWaW6LlB6r4Q9m yBskA+J2BbqhYhDdubZmqNze+U+nCc4Aw+COvix088ZLZp+K7Qk3qoFdJsHBUc2h 5IEozjD8DDKU93Cto1Vu4UwHVaCllhjK2pygq849j+GIRHdN/56a4UW9crSAIPls wM3w3dauDeyvFSmT1zdzuzRxw9ehJ2aUh0XDzjId6kZLd5NPhQ1XxZSS/1nJzGlC ZjMNPM0= -----END CERTIFICATE-----Generated at Thu Jun 13 05:10:04 2024 by rpki-client on console-ams.rpki-client.org