$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/A7EACE02FBFB11EE8DCAC620C4F9AE02.roa File: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (raw, json) Hash identifier: AVG8UOICPIOwfxF6CejSjbDjEsfHRJtOVBJAR9mZ1BQ= Subject key identifier: 8D:53:14:84:5E:7C:8E:6B:36:3E:4D:20:33:06:82:BD:A8:3D:C0:39 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: 02 Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/A7EACE02FBFB11EE8DCAC620C4F9AE02.roa Signing time: Tue 16 Apr 2024 14:14:37 +0000 ROA not before: Tue 16 Apr 2024 14:14:37 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137532 IP address blocks: 203.26.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 09:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: Apr 16 14:14:37 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661e87cd-e57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:12:e6:fb:11:02:02:ba:50:e2:bb:6c:36: 04:b7:eb:6b:2e:b8:eb:af:0f:51:23:b4:e1:f1:7d: 73:d2:01:72:bd:eb:0d:37:e3:8b:c8:89:22:ec:39: bd:ce:35:c1:cb:c9:a4:e3:73:68:66:df:d3:fb:b0: 82:fa:c0:29:37:47:b7:09:09:71:a7:58:65:3d:fe: 88:e0:b5:47:01:d3:20:d3:c6:b0:cb:8a:a5:d4:87: 9e:32:86:7b:02:f7:90:ad:e1:18:e9:14:52:5d:e2: 3e:72:2e:93:5f:79:78:c9:42:bb:d2:34:9a:28:b4: af:f1:94:4d:e7:4b:66:03:db:d7:ea:d6:31:01:a8: 07:70:88:b1:e5:29:c9:05:a8:11:cb:c5:48:26:67: ef:4a:7c:65:5f:bc:9e:80:9b:1c:71:68:89:93:d8: 18:12:eb:06:44:05:4f:a2:e0:5e:e3:77:9e:25:5f: 13:ea:69:08:65:66:50:8e:16:42:41:01:21:11:19: 1a:b5:7f:03:f1:be:4b:58:1d:51:68:4c:a8:32:af: 99:88:d4:47:eb:72:04:43:52:d1:db:f1:bd:ec:e2: b5:55:b9:c7:b9:57:53:4d:72:91:85:58:b3:9f:f0: f1:88:eb:b5:04:45:e2:dc:60:db:ef:0a:cb:59:f1: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:53:14:84:5E:7C:8E:6B:36:3E:4D:20:33:06:82:BD:A8:3D:C0:39 X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/A7EACE02FBFB11EE8DCAC620C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.26.240.0/24 Signature Algorithm: sha256WithRSAEncryption 33:ea:78:6d:97:db:cf:64:56:28:44:56:2e:40:98:2b:8d:52: e1:e8:06:12:68:73:e4:c4:42:8e:f5:a0:34:b7:8a:a1:a1:12: f5:6d:d6:22:9a:f3:da:94:a2:5c:18:2b:5b:7e:04:1a:69:e9: 22:2d:f3:02:5d:40:eb:37:3b:3c:8c:0e:25:a4:f4:8f:11:e1: b7:1e:f0:5c:55:d5:a2:35:da:b8:9a:55:34:cd:8b:cc:75:bc: d1:46:df:20:bb:21:08:5d:ed:7b:24:c5:7e:08:37:23:2b:68: 4f:c2:c5:f0:4f:d7:c6:87:61:79:ec:f7:ba:fa:58:a5:fa:74: 26:c6:18:8e:0b:92:67:2c:cf:db:b7:b3:75:b8:0e:03:03:f2: 71:a0:b5:36:3c:ee:22:81:e7:8a:82:04:9d:36:ca:93:94:25: 9c:0d:b4:f8:d3:39:11:fc:fe:1a:df:85:ab:71:47:ed:12:a8: f8:59:ea:c6:5a:ca:1b:ba:fd:f9:40:3c:2e:59:f6:fd:0f:24: 51:50:23:93:ed:8f:cd:47:f1:de:34:55:52:5a:46:7b:b5:ea: 8e:fe:9e:51:e5:be:16:ab:f2:ba:ae:ca:3b:c7:cf:29:36:6b: 07:47:a5:1b:e8:ad:34:9d:67:8d:60:14:c3:7c:f0:73:67:8f: f2:4b:44:ec -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjE3NTExMC8GA1UEBRMoRUM1RUYzMzU0RTRDRDUzNEFCODYyNUI5OUI3MzEyRDZG NEU0OEIxNTAeFw0yNDA0MTYxNDE0MzdaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MWU4N2NkLWU1N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSfxLm+xECArpQ4rtsNgS362suuOuvD1EjtOHxfXPSAXK96w0344vIiSLsOb3O NcHLyaTjc2hm39P7sIL6wCk3R7cJCXGnWGU9/ojgtUcB0yDTxrDLiqXUh54yhnsC 95Ct4RjpFFJd4j5yLpNfeXjJQrvSNJootK/xlE3nS2YD29fq1jEBqAdwiLHlKckF qBHLxUgmZ+9KfGVfvJ6AmxxxaImT2BgS6wZEBU+i4F7jd54lXxPqaQhlZlCOFkJB ASERGRq1fwPxvktYHVFoTKgyr5mI1EfrcgRDUtHb8b3s4rVVuce5V1NNcpGFWLOf 8PGI67UEReLcYNvvCstZ8ZW3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUjVMUhF58 jms2Pk0gMwaCvag9wDkwHwYDVR0jBBgwFoAU7F7zNU5M1TSrhiW5m3MS1vTkixUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGMTc1LzA0NjBBQTE4RkJG QjExRUVBMUVFQUYxRkM0RjlBRTAyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0Y3ek5VNU0xVFNyaGlXNW0zTVMxdlRraXhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi9BN0VBQ0UwMkZC RkIxMUVFOERDQUM2MjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsa8DANBgkqhkiG9w0BAQsFAAOCAQEAM+p4bZfbz2RWKERW LkCYK41S4egGEmhz5MRCjvWgNLeKoaES9W3WIprz2pSiXBgrW34EGmnpIi3zAl1A 6zc7PIwOJaT0jxHhtx7wXFXVojXauJpVNM2LzHW80UbfILshCF3teyTFfgg3Iyto T8LF8E/Xxodheez3uvpYpfp0JsYYjguSZyzP27ezdbgOAwPycaC1NjzuIoHnioIE nTbKk5QlnA20+NM5Efz+Gt+Fq3FH7RKo+FnqxlrKG7r9+UA8Lln2/Q8kUVAjk+2P zUfx3jRVUlpGe7Xqjv6eUeW+Fqvyuq7KO8fPKTZrB0elG+itNJ1njWAUw3zwc2eP 8ktE7A== -----END CERTIFICATE-----Generated at Fri May 31 13:04:59 2024 by rpki-client on console-ams.rpki-client.org