$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CA1C5B2C3B1C11ED83CB2634C4F9AE02.roa File: CA1C5B2C3B1C11ED83CB2634C4F9AE02.roa (raw, json) Hash identifier: gm1AQigxEa62rKoRTtdlz9L09OXOeN66K7qse2pw9/U= Subject key identifier: 0A:ED:5B:98:C7:E0:FE:E4:13:97:E3:AE:02:BF:5E:1A:C4:A3:E3:5C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F00 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CA1C5B2C3B1C11ED83CB2634C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:43:35 +0000 ROA not before: Tue 12 Sep 2023 02:43:35 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 38730 IP address blocks: 203.189.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16128 (0x3f00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:43:35 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd057-3a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:be:37:13:97:4d:2e:92:f1:2e:9a:ca:92: 24:22:d9:a7:6a:68:05:93:fa:38:42:3e:bb:5c:b9: db:2c:35:48:22:85:2c:7a:e9:2d:a8:e4:0e:29:8c: 50:c2:d8:84:04:9a:c6:58:8d:c5:ea:8d:f2:5a:77: 60:5c:fd:72:e8:54:7d:b7:e9:9d:b5:b8:a5:c4:85: e7:05:ec:3c:9c:14:5f:16:d8:57:29:a3:e3:c1:15: e6:d5:7b:53:f7:eb:32:8a:8d:a9:cb:8e:19:5f:93: 21:60:ab:8d:73:3a:0d:bc:34:32:9b:f8:2a:1e:d1: 48:50:44:7a:77:c7:74:87:c7:e1:d0:0c:f5:30:0f: 56:ba:50:c2:19:e0:3e:81:39:f9:47:97:ea:0a:51: 04:d0:97:2c:c1:14:d4:07:39:f4:ad:d3:dd:b6:ed: 9f:aa:d0:e1:5e:dc:59:01:36:54:f5:a0:7e:72:6b: fc:f4:0d:d8:c4:15:88:fc:53:4b:fd:5e:78:19:bd: 94:dc:47:8d:d6:7d:cb:ab:e0:f9:27:9a:59:e0:6e: 8b:0a:7d:36:17:65:f0:52:42:63:65:b6:50:34:e2: 56:83:a5:00:2c:84:94:27:27:b1:ce:a8:ae:f3:66: 8b:70:fe:ad:11:ab:fd:00:11:5a:a3:4b:e2:5b:84: 74:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:ED:5B:98:C7:E0:FE:E4:13:97:E3:AE:02:BF:5E:1A:C4:A3:E3:5C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CA1C5B2C3B1C11ED83CB2634C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.189.28.0/22 Signature Algorithm: sha256WithRSAEncryption 84:ea:af:56:30:15:80:16:af:52:4b:95:9c:43:58:e0:78:37: 29:84:9c:62:42:13:7e:35:76:91:1d:dd:73:48:e8:b4:04:c9: 95:cc:cc:3a:35:f5:d3:4b:d3:ac:51:94:72:03:43:a6:87:e6: 47:79:a0:6f:86:65:d6:be:76:b4:5f:f5:16:4a:19:1c:84:6a: ac:80:e5:22:4b:d6:70:18:69:97:87:9c:bf:fd:b1:bc:2a:0c: f6:2e:04:c5:08:45:ab:e4:49:35:1e:b9:55:e0:b2:81:58:f7: 73:43:2a:e7:20:f6:a2:b3:65:ee:b2:03:15:0f:e1:2f:22:9d: 9d:e8:1b:03:a6:e0:67:da:49:d5:92:bd:64:83:21:5f:26:ab: 32:02:26:ee:f4:3b:05:a1:10:0d:5c:78:f4:46:8a:6d:0d:c0: a2:38:88:27:2e:a3:b1:dc:a8:05:0c:09:e2:42:5b:c4:86:05: 5e:8d:a7:bd:f0:29:76:35:cb:d3:73:ac:42:25:38:1c:8d:a3: 9c:0f:11:68:40:b8:ca:2a:18:d0:a2:18:86:99:78:9e:ec:0c: 84:1c:29:4f:7a:7d:a9:80:a7:93:bc:69:06:17:37:a2:3b:a9: 31:8e:13:4b:cb:10:7e:4f:8a:f9:94:16:ea:e7:54:80:41:a8: 2e:1d:8b:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICPwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MzM1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA1Ny0zYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZG+NxOXTS6S8S6aypIkItmnamgFk/o4Qj67XLnbLDVIIoUseuktqOQOKYxQ wtiEBJrGWI3F6o3yWndgXP1y6FR9t+mdtbilxIXnBew8nBRfFthXKaPjwRXm1XtT 9+syio2py44ZX5MhYKuNczoNvDQym/gqHtFIUER6d8d0h8fh0Az1MA9WulDCGeA+ gTn5R5fqClEE0JcswRTUBzn0rdPdtu2fqtDhXtxZATZU9aB+cmv89A3YxBWI/FNL /V54Gb2U3EeN1n3Lq+D5J5pZ4G6LCn02F2XwUkJjZbZQNOJWg6UALISUJyexzqiu 82aLcP6tEav9ABFao0viW4R08QIDAQABo4IClTCCApEwHQYDVR0OBBYEFArtW5jH 4P7kE5fjrgK/XhrEo+NcMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQ0ExQzVCMkMz QjFDMTFFRDgzQ0IyNjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLvRwwDQYJKoZIhvcNAQELBQADggEBAITqr1YwFYAWr1JL lZxDWOB4NymEnGJCE341dpEd3XNI6LQEyZXMzDo19dNL06xRlHIDQ6aH5kd5oG+G Zda+drRf9RZKGRyEaqyA5SJL1nAYaZeHnL/9sbwqDPYuBMUIRavkSTUeuVXgsoFY 93NDKucg9qKzZe6yAxUP4S8inZ3oGwOm4GfaSdWSvWSDIV8mqzICJu70OwWhEA1c ePRGim0NwKI4iCcuo7HcqAUMCeJCW8SGBV6Np73wKXY1y9NzrEIlOByNo5wPEWhA uMoqGNCiGIaZeJ7sDIQcKU96famAp5O8aQYXN6I7qTGOE0vLEH5PivmUFurnVIBB qC4di1A= -----END CERTIFICATE-----Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org