$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/A3436BD6FA5D11E6AA12A219C4F9AE02.roa File: A3436BD6FA5D11E6AA12A219C4F9AE02.roa (raw, json) Hash identifier: AEkbhlHCZoSAdf5bTxzBqec94+uTUsF0jdM0DiiwKmA= Subject key identifier: 17:B1:14:C6:6B:0A:49:08:E1:43:EF:CC:44:62:F7:01:5E:10:B7:DE Certificate issuer: /CN=A91EE1FB/serialNumber=2AE63331F7199A55A2BAD9CB14F83FAB5066E958 Certificate serial: 1A96 Authority key identifier: 2A:E6:33:31:F7:19:9A:55:A2:BA:D9:CB:14:F8:3F:AB:50:66:E9:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KuYzMfcZmlWiutnLFPg_q1Bm6Vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/A3436BD6FA5D11E6AA12A219C4F9AE02.roa Signing time: Thu 12 Oct 2023 16:43:29 +0000 ROA not before: Thu 12 Oct 2023 16:43:29 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 55743 IP address blocks: 202.59.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/KuYzMfcZmlWiutnLFPg_q1Bm6Vg.crl rsync://rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/KuYzMfcZmlWiutnLFPg_q1Bm6Vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KuYzMfcZmlWiutnLFPg_q1Bm6Vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 16:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6806 (0x1a96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1FB/serialNumber=2AE63331F7199A55A2BAD9CB14F83FAB5066E958 Validity Not Before: Oct 12 16:43:29 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65282231-a3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:08:ea:b1:a4:92:44:2c:2b:15:eb:31:1a: 24:ad:83:21:f2:1a:2c:11:56:21:41:6c:f0:e9:bd: 9b:f8:d7:10:5d:a9:5f:fd:56:fa:ff:51:1b:d9:2a: 83:4a:47:8f:c7:cc:de:3d:64:65:0b:b8:d5:e9:3e: ed:ca:ff:17:cc:fe:10:7c:f6:a6:bb:4e:d9:7b:79: 85:99:c0:a6:80:87:bf:a9:94:cc:95:66:1e:ed:03: a4:82:39:a6:7c:49:95:7d:37:36:2e:45:5e:00:38: 66:53:64:3e:cd:2b:94:36:c5:17:2f:3d:62:62:26: 78:53:c5:0b:13:8c:16:22:6f:b2:0f:f7:de:0b:e3: 0a:83:aa:91:7d:2b:3a:1e:af:d9:1a:05:6d:8d:c1: 5d:f2:70:20:dc:ba:18:3f:01:95:23:b8:29:e8:e7: 14:1b:38:7d:bc:d5:82:cb:b6:3c:e8:14:95:3b:1c: c5:a1:da:da:76:dc:6c:c3:1e:80:a8:37:d1:b8:05: 40:c9:63:c3:b2:04:b7:42:2b:72:55:cd:dc:6f:be: ca:3b:e1:15:fb:79:9c:83:a0:2e:d7:82:94:16:60: 7b:89:09:47:80:f0:13:26:e7:95:1a:ed:d0:ac:6a: 91:be:25:83:b4:6f:7a:f9:d5:2a:1c:aa:41:38:e4: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B1:14:C6:6B:0A:49:08:E1:43:EF:CC:44:62:F7:01:5E:10:B7:DE X509v3 Authority Key Identifier: keyid:2A:E6:33:31:F7:19:9A:55:A2:BA:D9:CB:14:F8:3F:AB:50:66:E9:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/KuYzMfcZmlWiutnLFPg_q1Bm6Vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KuYzMfcZmlWiutnLFPg_q1Bm6Vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/A3436BD6FA5D11E6AA12A219C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.59.232.0/23 Signature Algorithm: sha256WithRSAEncryption ac:c5:5c:a1:66:08:6c:68:de:c5:11:ab:be:a7:fa:e6:44:ca: 8a:9f:ca:c1:f2:0f:31:99:ea:3e:ff:c6:5e:09:0f:3c:19:86: f5:f7:f8:b0:58:c1:74:ba:db:28:5e:77:8c:02:71:31:99:84: 5e:ec:b6:4b:c0:88:0d:ba:10:a3:14:4c:15:e5:01:14:c5:f6: 78:3d:a3:7d:dc:ee:61:3e:b4:46:41:75:65:6f:9e:06:c0:38: 67:a0:a2:49:e4:04:69:18:47:74:6a:60:7c:16:db:4e:95:39: 95:9f:57:8e:07:40:89:b5:b6:6c:93:0d:7f:6a:af:eb:12:a1: 2b:dc:cb:12:d2:97:76:9d:84:29:d7:51:bd:e9:5c:83:37:43: a4:92:25:07:48:8d:c9:a2:67:1b:0a:bb:b0:22:88:9f:4b:11: 3b:b1:b4:ab:19:41:57:d9:99:6e:3b:7b:e4:9c:a7:84:6d:df: 7d:56:dd:3d:42:e7:83:8a:7f:a7:eb:7f:81:f6:ed:0c:f1:a9: 8e:79:66:34:79:cd:0a:d1:9d:a9:89:b3:03:f2:40:7d:f5:18: 0e:b1:95:fa:5b:5f:38:c6:1c:fd:85:e6:12:b1:eb:2c:dc:96: 27:94:86:e5:e6:d3:c4:b6:d6:52:76:45:35:3b:d7:6e:79:94: 48:fd:a5:fc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxRkIxMTAvBgNVBAUTKDJBRTYzMzMxRjcxOTlBNTVBMkJBRDlDQjE0RjgzRkFC NTA2NkU5NTgwHhcNMjMxMDEyMTY0MzI5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI4MjIzMS1hM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA268I6rGkkkQsKxXrMRokrYMh8hosEVYhQWzw6b2b+NcQXalf/Vb6/1Eb2SqD SkePx8zePWRlC7jV6T7tyv8XzP4QfPamu07Ze3mFmcCmgIe/qZTMlWYe7QOkgjmm fEmVfTc2LkVeADhmU2Q+zSuUNsUXLz1iYiZ4U8ULE4wWIm+yD/feC+MKg6qRfSs6 Hq/ZGgVtjcFd8nAg3LoYPwGVI7gp6OcUGzh9vNWCy7Y86BSVOxzFodradtxswx6A qDfRuAVAyWPDsgS3QityVc3cb77KO+EV+3mcg6Au14KUFmB7iQlHgPATJueVGu3Q rGqRviWDtG96+dUqHKpBOOSL4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBexFMZr CkkI4UPvzERi9wFeELfeMB8GA1UdIwQYMBaAFCrmMzH3GZpVorrZyxT4P6tQZulY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFGQi80NTg0QzE0OEZB NUQxMUU2Qjg4MTRGMTlDNEY5QUUwMi9LdVl6TWZjWm1sV2l1dG5MRlBnX3ExQm02 VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t1WXpNZmNabWxXaXV0bkxGUGdfcTFCbTZWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUxRkIvNDU4NEMxNDhGQTVEMTFFNkI4ODE0RjE5QzRGOUFFMDIvQTM0MzZCRDZG QTVEMTFFNkFBMTJBMjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKO+gwDQYJKoZIhvcNAQELBQADggEBAKzFXKFmCGxo3sUR q76n+uZEyoqfysHyDzGZ6j7/xl4JDzwZhvX3+LBYwXS62yhed4wCcTGZhF7stkvA iA26EKMUTBXlARTF9ng9o33c7mE+tEZBdWVvngbAOGegoknkBGkYR3RqYHwW206V OZWfV44HQIm1tmyTDX9qr+sSoSvcyxLSl3adhCnXUb3pXIM3Q6SSJQdIjcmiZxsK u7AiiJ9LETuxtKsZQVfZmW47e+Scp4Rt331W3T1C54OKf6frf4H27QzxqY55ZjR5 zQrRnamJswPyQH31GA6xlfpbXzjGHP2F5hKx6yzclieUhuXm08S21lJ2RTU71255 lEj9pfw= -----END CERTIFICATE-----Generated at Thu Jun 6 18:48:22 2024 by rpki-client on console-fra.rpki-client.org