$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/843B56E29BDE11EA85D44F5BC4F9AE02.roa File: 843B56E29BDE11EA85D44F5BC4F9AE02.roa (raw, json) Hash identifier: cq+gsgGf0xlM6mMNEjf4nudlnuy6rL+K/G0FG3xwLns= Subject key identifier: B5:A2:24:FD:2B:6E:79:8E:0A:28:64:16:A2:1B:16:D4:1F:C6:1D:4D Certificate issuer: /CN=A919AB89/serialNumber=947EFD1BF6F93A98DFEBC153DAB0DA77CC4028C7 Certificate serial: 0821 Authority key identifier: 94:7E:FD:1B:F6:F9:3A:98:DF:EB:C1:53:DA:B0:DA:77:CC:40:28:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/843B56E29BDE11EA85D44F5BC4F9AE02.roa Signing time: Thu 28 Sep 2023 21:18:28 +0000 ROA not before: Thu 28 Sep 2023 21:18:28 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 9503 IP address blocks: 202.160.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.crl rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 21:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2081 (0x821) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AB89/serialNumber=947EFD1BF6F93A98DFEBC153DAB0DA77CC4028C7 Validity Not Before: Sep 28 21:18:28 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6515eda4-c3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:65:3f:48:8a:fd:61:ae:20:8c:c2:64:37: 96:34:f3:0b:34:c5:be:bb:b5:98:5b:3f:cb:db:c5: f0:ed:57:a2:1c:1a:8c:64:4e:7b:1b:50:77:f0:19: 6d:a2:84:bd:4f:0d:ab:19:b5:c1:74:07:eb:bc:12: 28:f5:55:c9:3d:fd:65:12:42:e4:2c:50:f8:cc:84: 97:ab:e9:00:ae:80:ef:e0:f0:83:93:f7:cd:75:20: 4b:ad:55:7d:7d:e8:dc:67:d5:4a:5b:65:0a:e7:46: 7d:d8:21:fa:15:82:51:85:5b:5e:71:2c:e2:f6:1e: fb:8d:de:9a:1c:e2:94:6e:88:27:35:be:60:7a:47: 46:40:f4:0e:bd:38:b2:4c:27:df:e7:50:0f:02:2e: 8b:8c:a1:ab:ca:55:fa:d7:e6:9d:2c:c1:9a:85:7c: b8:1d:49:a9:c2:00:c9:3b:5f:75:c5:26:22:80:88: 32:dc:02:9e:61:21:8b:10:69:80:7d:4b:ee:d0:66: 6b:5b:86:35:fe:20:e9:98:cd:42:5b:3d:70:d1:9c: f6:d7:bf:2f:64:4f:27:b0:19:ce:cd:80:cb:23:40: 67:b6:58:bc:9f:cd:5c:8e:a5:5e:22:31:d0:dd:40: e7:2c:61:54:62:e9:20:b5:86:ae:f5:2b:df:cf:69: 14:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A2:24:FD:2B:6E:79:8E:0A:28:64:16:A2:1B:16:D4:1F:C6:1D:4D X509v3 Authority Key Identifier: keyid:94:7E:FD:1B:F6:F9:3A:98:DF:EB:C1:53:DA:B0:DA:77:CC:40:28:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/843B56E29BDE11EA85D44F5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.160.118.0/24 Signature Algorithm: sha256WithRSAEncryption 09:52:cf:f1:0a:49:79:70:50:bc:9a:59:b8:d9:94:e9:c7:cd: 20:d8:7c:44:ff:99:dc:88:4f:80:4f:81:69:df:9a:20:be:c4: 18:83:69:1b:1c:6a:68:b8:27:7c:e8:d6:a5:1f:64:70:e1:9b: b4:19:04:1e:7b:e4:80:a6:b4:dc:aa:94:24:19:c5:18:d6:9e: 17:20:aa:f1:29:81:45:0a:17:1a:ff:2d:f5:fa:60:74:5b:34: 49:cc:bf:ba:d8:3a:e9:a2:d7:73:70:28:9f:2a:cd:44:76:ad: 55:5f:d2:49:04:f7:92:79:28:61:79:23:88:9c:e6:6b:42:fc: 6a:a9:46:2d:15:98:02:18:10:b8:8e:66:56:34:f4:fe:15:38: eb:f3:27:fa:09:21:77:3a:0c:2f:32:a3:2f:d9:fb:46:de:e4: 9c:a7:56:53:46:95:b0:83:27:d5:02:a5:45:ba:b2:4f:e4:9f: 54:79:a3:b1:b3:ff:ec:f9:ed:0e:d9:e0:3a:09:bb:5b:12:b7: 48:4a:92:52:b3:c8:4e:77:7c:14:1b:42:a4:ed:10:1b:c0:9d: 95:c3:e9:e9:35:b5:0e:2a:f6:3a:67:37:b5:ba:3c:be:bf:ac: 8e:2e:85:5e:c3:37:01:62:f0:cc:9e:b4:c4:eb:6d:95:87:2c: f5:00:2a:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFCODkxMTAvBgNVBAUTKDk0N0VGRDFCRjZGOTNBOThERkVCQzE1M0RBQjBEQTc3 Q0M0MDI4QzcwHhcNMjMwOTI4MjExODI4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE1ZWRhNC1jM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRplP0iK/WGuIIzCZDeWNPMLNMW+u7WYWz/L28Xw7VeiHBqMZE57G1B38Blt ooS9Tw2rGbXBdAfrvBIo9VXJPf1lEkLkLFD4zISXq+kAroDv4PCDk/fNdSBLrVV9 fejcZ9VKW2UK50Z92CH6FYJRhVtecSzi9h77jd6aHOKUbognNb5gekdGQPQOvTiy TCff51APAi6LjKGrylX61+adLMGahXy4HUmpwgDJO191xSYigIgy3AKeYSGLEGmA fUvu0GZrW4Y1/iDpmM1CWz1w0Zz2178vZE8nsBnOzYDLI0Bntli8n81cjqVeIjHQ 3UDnLGFUYukgtYau9Svfz2kUEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLWiJP0r bnmOCihkFqIbFtQfxh1NMB8GA1UdIwQYMBaAFJR+/Rv2+TqY3+vBU9qw2nfMQCjH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUI4OS9DRTA2QTlFQzlC REExMUVBODIzMzZBNTBDNEY5QUUwMi9sSDc5R19iNU9wamY2OEZUMnJEYWQ4eEFL TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xINzlHX2I1T3BqZjY4RlQyckRhZDh4QUtNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUFCODkvQ0UwNkE5RUM5QkRBMTFFQTgyMzM2QTUwQzRGOUFFMDIvODQzQjU2RTI5 QkRFMTFFQTg1RDQ0RjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKoHYwDQYJKoZIhvcNAQELBQADggEBAAlSz/EKSXlwULya WbjZlOnHzSDYfET/mdyIT4BPgWnfmiC+xBiDaRscami4J3zo1qUfZHDhm7QZBB57 5ICmtNyqlCQZxRjWnhcgqvEpgUUKFxr/LfX6YHRbNEnMv7rYOumi13NwKJ8qzUR2 rVVf0kkE95J5KGF5I4ic5mtC/GqpRi0VmAIYELiOZlY09P4VOOvzJ/oJIXc6DC8y oy/Z+0be5JynVlNGlbCDJ9UCpUW6sk/kn1R5o7Gz/+z57Q7Z4DoJu1sSt0hKklKz yE53fBQbQqTtEBvAnZXD6ek1tQ4q9jpnN7W6PL6/rI4uhV7DNwFi8MyetMTrbZWH LPUAKiE= -----END CERTIFICATE-----Generated at Mon May 20 22:11:08 2024 by rpki-client on console-ams.rpki-client.org