$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/4B42335C9D8711EEAF2A6E25C4F9AE02.roa File: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (raw, json) Hash identifier: WWv1zP+/ieoUNA4o8+/TPeIk+mIn2LFhm0aViRzuk9E= Subject key identifier: 06:A9:67:ED:17:65:0D:8B:D8:1F:52:BF:5C:27:92:F8:7A:2E:5F:2B Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: 04 Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/4B42335C9D8711EEAF2A6E25C4F9AE02.roa Signing time: Mon 18 Dec 2023 09:47:34 +0000 ROA not before: Mon 18 Dec 2023 09:47:34 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150407 IP address blocks: 203.145.40.0/23 maxlen: 24 2401:5060::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: Dec 18 09:47:34 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65801536-338f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:eb:72:a8:e8:24:cb:02:26:fa:3c:8c:ed: 04:92:59:8c:7a:b9:60:b8:f2:19:18:bc:23:5f:80: ee:bf:7e:1e:18:ab:ce:98:d2:fd:0f:85:36:e8:0a: 95:f2:36:23:a9:91:ac:c2:6b:9b:2a:18:62:6d:f9: 21:fc:3c:93:28:14:c5:f7:a7:bd:f5:67:a7:d6:78: 7f:ad:32:c5:23:24:f3:0d:8f:f6:11:a6:7e:fd:77: 29:c5:ac:ad:93:97:72:4c:ba:04:6a:b0:b0:a2:fd: e8:95:02:e4:62:cb:51:69:4d:f0:aa:2a:d7:16:b6: 18:62:a4:9d:d8:16:a6:5f:38:83:57:0a:3b:3f:5c: 4c:a6:32:d6:82:f5:cb:ff:02:25:3c:c5:c1:90:14: 07:be:99:d7:89:56:54:fb:f2:6c:2d:5c:8a:7a:da: e7:ce:3a:aa:b3:15:aa:51:f2:02:82:81:59:68:14: 05:51:4e:5d:9d:4c:f9:39:c2:b6:0b:3e:c1:c2:d6: 9c:5d:d8:eb:99:cb:e9:74:d3:7f:de:2f:d2:1a:d2: 68:d7:74:4f:3c:54:4d:36:50:a8:12:04:2a:b2:b9: 2c:02:d4:e4:3c:6b:43:64:a3:14:2b:52:b9:ed:17: cf:4c:83:19:a7:a8:60:61:56:49:15:e1:6a:40:fc: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A9:67:ED:17:65:0D:8B:D8:1F:52:BF:5C:27:92:F8:7A:2E:5F:2B X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/4B42335C9D8711EEAF2A6E25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.145.40.0/23 IPv6: 2401:5060::/32 Signature Algorithm: sha256WithRSAEncryption 6a:e7:59:63:75:9e:57:21:20:33:56:5f:6a:5e:24:9e:62:c5: 20:86:a5:16:82:d4:6a:2a:e9:0b:4a:24:df:86:ea:63:4d:04: 41:f4:64:81:24:cc:c6:30:c3:81:04:75:7c:c0:b6:4a:44:c5: a4:4c:18:0b:8b:f6:3f:46:d4:0a:30:5d:5f:da:67:d1:22:33: 28:bf:b3:7d:18:1b:68:cf:36:be:ea:a9:90:3d:16:18:3e:17: 21:2a:c2:df:ac:27:74:f0:5a:67:61:6a:9a:55:20:ad:09:20: f0:4d:7f:de:df:cf:44:d5:c2:55:ab:a5:4e:e1:55:25:cf:dc: a2:8f:6b:73:d8:b5:98:12:99:2f:a3:97:99:43:07:18:2c:38: a2:cf:05:a5:50:e0:39:31:49:ed:ad:fb:29:82:6c:56:9b:2c: 5c:3c:ca:87:76:3d:67:6b:97:25:64:be:bc:41:4c:50:04:6c: 6b:7c:8d:86:7c:af:6f:0a:b8:6a:39:25:ec:28:10:52:14:16: f3:36:a3:55:94:6f:27:e3:a1:32:d8:ee:c0:f0:85:6c:d1:8d: fd:d4:dd:f9:c1:16:ca:b2:c5:9e:07:df:64:1f:33:c3:a7:f9: 19:c7:1f:6c:07:f0:32:6e:ec:28:25:ec:90:b3:10:3c:95:cb: d4:42:28:c8 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDM3MjExMC8GA1UEBRMoRjI5QjIzRUE0RTExNENEQzlDQTZEMzdGNUVGNzlFRjRD MzVDNzI4MjAeFw0yMzEyMTgwOTQ3MzRaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ODAxNTM2LTMzOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLuetyqOgkywIm+jyM7QSSWYx6uWC48hkYvCNfgO6/fh4Yq86Y0v0PhTboCpXy NiOpkazCa5sqGGJt+SH8PJMoFMX3p731Z6fWeH+tMsUjJPMNj/YRpn79dynFrK2T l3JMugRqsLCi/eiVAuRiy1FpTfCqKtcWthhipJ3YFqZfOINXCjs/XEymMtaC9cv/ AiU8xcGQFAe+mdeJVlT78mwtXIp62ufOOqqzFapR8gKCgVloFAVRTl2dTPk5wrYL PsHC1pxd2OuZy+l003/eL9Ia0mjXdE88VE02UKgSBCqyuSwC1OQ8a0NkoxQrUrnt F89MgxmnqGBhVkkV4WpA/OuxAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUBqln7Rdl DYvYH1K/XCeS+HouXyswHwYDVR0jBBgwFoAU8psj6k4RTNycptN/Xvee9MNccoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMzcyLzIwQTU0RkM4OUQ4 NTExRUU5MTgxQzEyMUM0RjlBRTAyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2Nv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHBzajZrNFJUTnljcHROX1h2ZWU5TU5jY29JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi80QjQyMzM1QzlE ODcxMUVFQUYyQTZFMjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAcuRKDANBAIAAjAHAwUAJAFQYDANBgkqhkiG9w0BAQsFAAOC AQEAaudZY3WeVyEgM1Zfal4knmLFIIalFoLUairpC0ok34bqY00EQfRkgSTMxjDD gQR1fMC2SkTFpEwYC4v2P0bUCjBdX9pn0SIzKL+zfRgbaM82vuqpkD0WGD4XISrC 36wndPBaZ2FqmlUgrQkg8E1/3t/PRNXCVaulTuFVJc/coo9rc9i1mBKZL6OXmUMH GCw4os8FpVDgOTFJ7a37KYJsVpssXDzKh3Y9Z2uXJWS+vEFMUARsa3yNhnyvbwq4 ajkl7CgQUhQW8zajVZRvJ+OhMtjuwPCFbNGN/dTd+cEWyrLFngffZB8zw6f5Gccf bAfwMm7sKCXskLMQPJXL1EIoyA== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:31 2024 by rpki-client on console-ams.rpki-client.org