$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa File: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (raw, json) Hash identifier: F/S8AioHMhl/X8J3CcnYUHXIULmRySNS41JHCMugVlY= Subject key identifier: 31:8F:18:00:10:EA:AC:AB:DF:BE:D3:D5:F1:BC:BE:6A:8B:98:F9:BF Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Certificate serial: 1A2B Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa Signing time: Thu 08 Feb 2024 16:44:05 +0000 ROA not before: Thu 08 Feb 2024 16:44:05 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 137483 IP address blocks: 202.144.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 16:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6699 (0x1a2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Validity Not Before: Feb 8 16:44:05 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65c504d5-df48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e6:85:00:87:56:7c:14:33:50:f9:b5:d2:d4: 97:e3:51:68:13:77:43:78:48:07:2b:52:1d:c0:6d: 8d:fb:7d:61:44:d2:6e:3f:bd:8f:6d:15:20:99:17: 91:e0:9e:f3:bb:1a:3a:43:e1:22:ce:42:8f:c7:a1: ed:f9:f1:a2:59:39:1b:56:d3:58:12:1c:9f:ce:00: 04:13:49:40:34:4e:d8:5e:da:15:8c:8d:5d:41:6c: 58:da:9f:cc:b6:68:e3:db:0d:51:88:41:05:89:29: 95:79:e7:6e:3c:d8:d7:26:86:f1:b2:d0:43:3d:fd: f6:87:cf:96:2c:5c:40:0e:a3:a2:2f:14:74:01:9a: c0:61:a3:7c:27:08:5d:a3:18:16:db:7d:bd:17:a6: 84:b3:38:9b:e4:04:32:2b:2b:e6:2f:2f:32:ea:27: f1:24:a3:99:ee:8e:58:dc:f6:e3:e1:f3:8a:db:2c: 39:26:c8:39:c6:dd:a8:96:83:5f:c8:74:dd:80:39: 88:1d:77:0e:ee:a7:d3:22:63:92:9a:c2:db:79:9f: bb:7b:e0:60:88:e2:40:e8:19:93:0a:d5:08:31:3b: 1c:9a:10:73:a9:38:be:f2:08:ec:e1:c9:f7:20:4d: 55:ae:02:39:a5:a0:1a:79:5b:7b:05:ae:fa:02:2b: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8F:18:00:10:EA:AC:AB:DF:BE:D3:D5:F1:BC:BE:6A:8B:98:F9:BF X509v3 Authority Key Identifier: keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.144.201.0/24 Signature Algorithm: sha256WithRSAEncryption 23:f2:f8:6c:c8:ca:49:cf:11:f8:72:72:68:79:b2:e0:30:dc: c5:dc:6a:24:39:c4:1c:36:a1:2e:4e:8a:59:ae:65:01:4e:cf: 4d:aa:bc:5d:57:fd:86:53:3e:87:d3:2e:3a:4a:f4:27:a7:da: d1:9b:30:83:f9:cf:d3:8d:f0:97:95:0e:de:5b:72:aa:58:11: 2d:bd:a2:5b:c5:53:66:4f:b8:77:7c:06:93:00:27:c9:2a:50: d6:ee:1d:58:63:29:1c:8c:17:20:94:50:e4:39:8d:ea:7d:0d: 2e:80:80:7d:27:db:6f:4e:84:3b:5c:52:e3:c4:93:2a:29:fb: 6a:1b:b7:72:40:f3:8e:1e:8c:5d:ab:0e:59:01:1b:0f:38:e8: 73:d6:0b:49:64:eb:96:91:2e:76:4e:f4:13:d6:6c:e1:b9:53: ad:98:88:29:c8:73:92:c6:f3:43:39:8c:09:5f:15:39:05:00: b4:d3:cd:d5:03:8c:29:d9:77:03:7f:cf:f2:2d:d7:48:0d:d0: eb:05:2f:22:58:cd:bc:3d:00:5e:91:ca:67:df:65:27:66:4f: 46:42:c6:95:b3:6e:bd:51:aa:65:4e:78:bc:c5:53:7f:c2:b3: d9:47:29:2e:74:3a:3f:53:68:e7:06:bd:08:01:1e:e1:66:1c: cf:a6:ac:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwODMxMTAvBgNVBAUTKEI3QUE1MzczODMyMTRENjQ4RTYzM0JDQzQyMEQzQkQ2 ODYxNjc4RkQwHhcNMjQwMjA4MTY0NDA1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM1MDRkNS1kZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eaFAIdWfBQzUPm10tSX41FoE3dDeEgHK1IdwG2N+31hRNJuP72PbRUgmReR 4J7zuxo6Q+EizkKPx6Ht+fGiWTkbVtNYEhyfzgAEE0lANE7YXtoVjI1dQWxY2p/M tmjj2w1RiEEFiSmVeeduPNjXJobxstBDPf32h8+WLFxADqOiLxR0AZrAYaN8Jwhd oxgW2329F6aEszib5AQyKyvmLy8y6ifxJKOZ7o5Y3Pbj4fOK2yw5Jsg5xt2oloNf yHTdgDmIHXcO7qfTImOSmsLbeZ+7e+BgiOJA6BmTCtUIMTscmhBzqTi+8gjs4cn3 IE1VrgI5paAaeVt7Ba76AitOXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDGPGAAQ 6qyr377T1fG8vmqLmPm/MB8GA1UdIwQYMBaAFLeqU3ODIU1kjmM7zEINO9aGFnj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA4My9BMENGMDU5QTJF NjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRXU09ZenZNUWcwNzFvWVdl UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q2cFRjNE1oVFdTT1l6dk1RZzA3MW9ZV2VQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMwODMvQTBDRjA1OUEyRTYwMTFFN0I3NDczRTcwQzRGOUFFMDIvQkY2Q0Y3RUUx RDE4MTFFODlBRjgzNDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKkMkwDQYJKoZIhvcNAQELBQADggEBACPy+GzIyknPEfhy cmh5suAw3MXcaiQ5xBw2oS5OilmuZQFOz02qvF1X/YZTPofTLjpK9Cen2tGbMIP5 z9ON8JeVDt5bcqpYES29olvFU2ZPuHd8BpMAJ8kqUNbuHVhjKRyMFyCUUOQ5jep9 DS6AgH0n229OhDtcUuPEkyop+2obt3JA844ejF2rDlkBGw846HPWC0lk65aRLnZO 9BPWbOG5U62YiCnIc5LG80M5jAlfFTkFALTTzdUDjCnZdwN/z/It10gN0OsFLyJY zbw9AF6RymffZSdmT0ZCxpWzbr1RqmVOeLzFU3/Cs9lHKS50Oj9TaOcGvQgBHuFm HM+mrBU= -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:56 2024 by rpki-client on console-ams.rpki-client.org