$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/5FBDA400853011EBA1AF1D76C4F9AE02.roa File: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (raw, json) Hash identifier: PQJByZBGE3MnE5Wg6g2SxEnErRgCFkemg+ns/ocZaL8= Subject key identifier: 0E:C5:56:4E:95:75:E9:B4:9A:FD:D9:9C:8D:65:8F:C3:A7:34:F7:84 Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Certificate serial: 0537 Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/5FBDA400853011EBA1AF1D76C4F9AE02.roa Signing time: Sun 05 Nov 2023 00:12:02 +0000 ROA not before: Sun 05 Nov 2023 00:12:02 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 1221 IP address blocks: 202.47.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 00:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Validity Not Before: Nov 5 00:12:02 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6546ddd2-4ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:8a:da:42:7f:10:09:8b:98:a5:e6:26:db: 67:81:0a:5c:6a:9b:2c:e0:f1:7a:db:69:5e:73:1a: 4f:de:9d:29:6f:3f:72:02:df:60:69:88:7b:82:75: a6:9b:1a:c4:e2:0c:1a:e9:36:4d:e9:04:f1:52:df: 26:18:22:b4:8a:ed:22:a7:81:54:40:d7:05:81:3b: 48:33:fe:e0:e6:b1:2c:69:f6:fe:b5:01:1a:bf:06: 1b:28:5b:6f:1f:28:5b:3e:3d:48:bf:44:e4:62:95: 01:21:f4:9c:f0:af:65:28:23:d4:54:66:1c:79:7c: 05:26:11:51:cc:4a:2a:7c:57:76:bf:cc:be:e8:3c: e4:2c:4b:fd:fc:ef:ed:21:35:3a:69:63:3f:ab:d6: 8e:2f:b4:e2:4a:dd:44:77:11:4e:ec:e8:7b:15:d7: cc:65:c7:f9:2d:51:39:d2:da:d9:aa:d7:46:e2:8a: c0:4b:0c:41:1c:e8:e9:25:40:fc:dd:df:bc:76:4b: 81:24:90:8f:19:44:e1:6e:b8:62:02:db:54:6b:6d: 06:d1:57:63:9f:45:4f:ec:ef:16:31:89:01:e5:84: 97:66:57:27:d9:be:c7:26:3b:e4:8e:d1:4e:89:bf: da:f4:d5:91:cb:80:d6:95:3a:88:1a:f2:ba:fc:d1: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C5:56:4E:95:75:E9:B4:9A:FD:D9:9C:8D:65:8F:C3:A7:34:F7:84 X509v3 Authority Key Identifier: keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/5FBDA400853011EBA1AF1D76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.86.0/24 Signature Algorithm: sha256WithRSAEncryption 59:9d:59:25:3a:4a:76:aa:63:6d:39:b7:76:c3:35:58:3e:90: 59:24:aa:41:26:5e:62:31:80:0c:c1:38:1a:cd:b8:e3:37:ba: ce:89:ee:3d:03:3f:75:90:31:9d:de:7c:78:a8:f9:32:42:55: 8b:c1:62:06:8b:6f:7c:9a:f3:92:2c:a8:dd:a1:f9:e1:8b:6d: 39:2b:06:3a:a4:bd:66:dc:82:ff:aa:94:ee:3d:cc:1a:50:c2: 07:98:c0:f0:7f:e7:ba:0d:9a:27:bd:3b:31:ff:09:15:3b:e3: 8c:cd:fb:43:c0:35:c9:56:f9:1b:dc:2e:da:9a:88:33:2c:6c: 5a:dd:bb:c7:7d:ce:12:cd:ce:34:5b:37:c7:ed:72:18:1d:bd: 1d:8c:c6:74:a0:ca:02:d4:75:46:e0:68:ab:25:00:a3:33:a8: 60:bd:17:03:e9:bc:50:8a:ef:fa:9e:ea:17:8b:05:ad:5f:47: e2:1f:23:ab:8c:34:66:6e:02:69:24:e6:8d:94:04:af:f8:63: 65:c2:d5:26:cc:39:05:34:9f:32:b1:68:7b:31:a1:96:fc:f3: 56:f5:51:5a:f9:7a:98:45:c1:08:cb:8b:f6:c6:c5:2b:30:45: 7e:c9:9a:5c:11:cc:97:b8:58:5d:1c:66:8d:9d:ec:b8:2d:f1: 71:61:ad:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC QkZDMUE3M0IwHhcNMjMxMTA1MDAxMjAyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ2ZGRkMi00ZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+aK2kJ/EAmLmKXmJttngQpcapss4PF622lecxpP3p0pbz9yAt9gaYh7gnWm mxrE4gwa6TZN6QTxUt8mGCK0iu0ip4FUQNcFgTtIM/7g5rEsafb+tQEavwYbKFtv HyhbPj1Iv0TkYpUBIfSc8K9lKCPUVGYceXwFJhFRzEoqfFd2v8y+6DzkLEv9/O/t ITU6aWM/q9aOL7TiSt1EdxFO7Oh7FdfMZcf5LVE50trZqtdG4orASwxBHOjpJUD8 3d+8dkuBJJCPGUThbrhiAttUa20G0Vdjn0VP7O8WMYkB5YSXZlcn2b7HJjvkjtFO ib/a9NWRy4DWlTqIGvK6/NE7oQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA7FVk6V dem0mv3ZnI1lj8OnNPeEMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1 MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJGNzYvQTZERTA5N0M4NTIzMTFFQkI3RTlGMzgzQzRGOUFFMDIvNUZCREE0MDA4 NTMwMTFFQkExQUYxRDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKL1YwDQYJKoZIhvcNAQELBQADggEBAFmdWSU6SnaqY205 t3bDNVg+kFkkqkEmXmIxgAzBOBrNuOM3us6J7j0DP3WQMZ3efHio+TJCVYvBYgaL b3ya85IsqN2h+eGLbTkrBjqkvWbcgv+qlO49zBpQwgeYwPB/57oNmie9OzH/CRU7 44zN+0PANclW+RvcLtqaiDMsbFrdu8d9zhLNzjRbN8ftchgdvR2MxnSgygLUdUbg aKslAKMzqGC9FwPpvFCK7/qe6heLBa1fR+IfI6uMNGZuAmkk5o2UBK/4Y2XC1SbM OQU0nzKxaHsxoZb881b1UVr5ephFwQjLi/bGxSswRX7JmlwRzJe4WF0cZo2d7Lgt 8XFhrQc= -----END CERTIFICATE-----Generated at Fri Jun 7 03:19:15 2024 by rpki-client on console-ams.rpki-client.org