$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/5E5DF206BCA411EDBD39730EC4F9AE02.roa File: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (raw, json) Hash identifier: V8tQPJgIafOML1xImTfe44DixBLHxhrgUhynPfLWKws= Subject key identifier: 41:79:8C:97:B0:42:E5:74:7C:C9:E4:28:16:CF:14:BE:AD:B6:F4:58 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 42 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/5E5DF206BCA411EDBD39730EC4F9AE02.roa Signing time: Sun 09 Jul 2023 04:23:30 +0000 ROA not before: Sun 09 Jul 2023 04:23:30 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 9738 IP address blocks: 203.9.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: Jul 9 04:23:30 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64aa3642-c43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:b7:dc:fd:c8:c5:04:3b:6d:8c:13:da:2a: b5:37:9f:76:cc:2e:72:cc:bb:6b:81:37:18:a2:c8: b9:2a:a5:04:cc:89:08:72:ef:bc:dc:ab:e5:86:c8: 4e:81:e8:40:ba:13:f2:ff:60:90:9a:d3:af:23:d1: d6:b7:51:79:16:f0:bd:d1:bf:f1:95:cf:68:56:8d: e5:ba:e8:c1:c3:3f:ae:e1:1f:2c:44:37:72:2a:85: 66:4a:55:8d:d9:fb:f4:09:0c:10:60:da:5c:40:e4: 4a:d9:1f:75:92:6e:73:a8:d1:57:1d:6c:5e:83:7c: e2:55:40:12:89:c9:eb:67:9b:5a:df:ae:59:5e:74: 22:65:c1:bc:50:96:9a:b6:58:a9:cf:77:6e:de:da: c9:1f:ee:fe:3f:1d:41:bf:c9:0e:b1:58:4e:32:66: b3:c9:45:29:1d:6b:f5:f4:43:17:2c:18:08:06:50: a1:43:0e:86:a4:9e:7b:75:79:c3:a0:a3:f7:cb:51: f1:47:f8:1d:9d:02:41:10:a4:f9:5d:3a:11:c9:fd: c3:33:28:69:6c:48:1b:92:e6:df:d5:48:07:89:ac: a5:66:0f:f5:b6:b4:28:c7:ba:41:77:b6:d1:b8:0f: 58:b0:d5:4e:2a:ff:f3:15:f9:f0:00:c2:7b:bb:01: ae:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:79:8C:97:B0:42:E5:74:7C:C9:E4:28:16:CF:14:BE:AD:B6:F4:58 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/5E5DF206BCA411EDBD39730EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.9.64.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ae:fd:86:33:12:20:c3:74:22:3b:84:a3:2e:36:d0:87:be: e4:15:33:74:6c:d8:9c:31:4e:c3:5f:a9:09:3f:cd:6e:e3:14: 6e:ee:56:d1:45:2b:35:b0:0c:7f:31:c9:11:36:d8:7e:a2:07: df:55:6d:96:c0:b9:f1:06:4d:85:05:3b:33:fb:d5:da:20:2a: 86:33:12:81:c9:5b:b5:2d:16:b1:b3:44:36:a0:30:2b:ef:13: 2f:78:44:80:6b:87:36:91:9c:fc:65:e8:30:4a:ed:6e:b2:cc: 88:67:01:9c:02:50:57:75:2c:29:28:c9:40:d7:76:58:87:c9: 9f:47:dc:ce:fd:03:45:8a:61:46:6b:11:71:6f:ea:48:4e:19: e1:bd:8c:44:fc:9e:60:7d:21:5b:f1:52:26:64:64:74:b5:cd: ac:94:77:81:ca:ea:5a:25:14:6a:60:fd:8a:48:da:9f:c3:45: a9:9c:4a:f5:ac:9d:6d:23:21:cb:9e:85:ef:8d:b8:5b:dc:b6: df:96:d6:6f:36:86:c7:a8:99:1d:3b:98:83:b0:29:56:81:4f: 93:e2:9e:e8:bd:87:ab:76:48:1d:41:e9:24:eb:60:db:6d:52: c5:75:b7:9e:f9:5c:d8:de:eb:75:a2:d9:51:86:e2:9c:df:62: c8:3f:8a:d5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTlGODExMC8GA1UEBRMoNzY0QkI4NDc4QkZGOENDOEJGRjE0RThGQjZBQURDMjhF RDVFNDg2NDAeFw0yMzA3MDkwNDIzMzBaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0YWEzNjQyLWM0M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBybfc/cjFBDttjBPaKrU3n3bMLnLMu2uBNxiiyLkqpQTMiQhy77zcq+WGyE6B 6EC6E/L/YJCa068j0da3UXkW8L3Rv/GVz2hWjeW66MHDP67hHyxEN3IqhWZKVY3Z +/QJDBBg2lxA5ErZH3WSbnOo0VcdbF6DfOJVQBKJyetnm1rfrlledCJlwbxQlpq2 WKnPd27e2skf7v4/HUG/yQ6xWE4yZrPJRSkda/X0QxcsGAgGUKFDDoaknnt1ecOg o/fLUfFH+B2dAkEQpPldOhHJ/cMzKGlsSBuS5t/VSAeJrKVmD/W2tCjHukF3ttG4 D1iw1U4q//MV+fAAwnu7Aa5zAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQXmMl7BC 5XR8yeQoFs8Uvq229FgwHwYDVR0jBBgwFoAUdku4R4v/jMi/8U6PtqrcKO1eSGQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOUY4L0NBRTZCNENFQkNB MTExRURBMzcwNzgwREM0RjlBRTAyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGt1NFI0dl9qTWlfOFU2UHRxcmNLTzFlU0dRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi81RTVERjIwNkJD QTQxMUVEQkQzOTczMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsJQDANBgkqhkiG9w0BAQsFAAOCAQEAOa79hjMSIMN0IjuE oy420Ie+5BUzdGzYnDFOw1+pCT/NbuMUbu5W0UUrNbAMfzHJETbYfqIH31VtlsC5 8QZNhQU7M/vV2iAqhjMSgclbtS0WsbNENqAwK+8TL3hEgGuHNpGc/GXoMErtbrLM iGcBnAJQV3UsKSjJQNd2WIfJn0fczv0DRYphRmsRcW/qSE4Z4b2MRPyeYH0hW/FS JmRkdLXNrJR3gcrqWiUUamD9ikjan8NFqZxK9aydbSMhy56F7424W9y235bWbzaG x6iZHTuYg7ApVoFPk+Ke6L2Hq3ZIHUHpJOtg221SxXW3nvlc2N7rdaLZUYbinN9i yD+K1Q== -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:36 2024 by rpki-client on console-fra.rpki-client.org