$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/FA957D0A80FA11ED9B35954DC4F9AE02.roa File: FA957D0A80FA11ED9B35954DC4F9AE02.roa (raw, json) Hash identifier: K+t7i3423XnECOAg6VP33EO5HGW/9l8JzhruIfRaQsI= Subject key identifier: B4:85:31:CA:3C:3A:F7:2B:56:A6:50:4F:5A:17:33:2B:46:B7:AF:43 Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Certificate serial: E6 Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/FA957D0A80FA11ED9B35954DC4F9AE02.roa Signing time: Tue 05 Sep 2023 03:53:50 +0000 ROA not before: Tue 05 Sep 2023 03:53:50 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 7575 IP address blocks: 203.28.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Validity Not Before: Sep 5 03:53:50 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64f6a64e-2cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:46:74:94:96:08:43:46:47:24:a7:49:83: 73:d5:29:9c:4b:cf:5c:a7:8f:bf:d6:63:a8:db:04: e7:cc:a6:94:18:bb:89:19:36:dd:d1:f4:74:9c:8c: 8d:18:cb:4f:cc:f4:e6:4f:35:fd:02:34:39:9e:c9: 42:27:5d:fc:d4:ce:e5:cf:cd:50:28:58:90:1b:35: 9d:ec:55:03:06:00:9d:19:ff:77:05:c7:7f:ea:c9: 84:b6:94:49:5e:77:5e:e9:8c:25:1e:41:94:17:cf: f3:36:11:8f:94:24:d3:1f:e8:96:24:a6:db:e3:be: 0c:0f:67:23:cb:56:69:0a:76:43:5d:ff:1b:00:8d: fb:2a:2a:27:a3:cb:d8:c5:21:17:ee:3f:a0:66:bb: 70:e2:65:fa:ed:29:92:af:8c:69:2e:14:1e:8a:ed: b8:9e:4c:4e:74:af:2f:f8:04:44:d0:8b:e3:07:25: 1e:53:75:8b:d9:30:7d:fd:18:44:1c:88:1b:e2:dc: 00:6d:b3:b9:99:16:2f:0a:44:d3:d3:7b:74:2a:c8: 64:57:d6:64:cf:ce:e6:c0:cb:8e:01:05:a2:f1:5a: a8:ae:b0:41:08:8b:9a:cd:a3:ad:15:f5:b0:4d:96: 53:b4:0b:10:d4:86:c0:38:bd:c5:74:9e:40:a3:64: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:31:CA:3C:3A:F7:2B:56:A6:50:4F:5A:17:33:2B:46:B7:AF:43 X509v3 Authority Key Identifier: keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/FA957D0A80FA11ED9B35954DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.28.79.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:85:93:35:2e:50:2c:78:57:42:1f:bd:5c:2a:f1:28:1f:70: 34:d3:28:1b:46:de:23:34:1b:39:26:92:ca:3b:cb:60:39:23: 60:70:55:75:87:a5:2b:36:a6:e0:6e:8d:05:65:59:95:6d:4b: 66:c0:cc:63:0e:47:b4:94:6f:d4:64:e5:a2:7e:e1:6c:a6:d0: 8e:df:8d:2a:aa:f4:c5:e4:14:76:ff:2e:55:b8:ca:be:c4:9e: 2e:b5:64:cc:83:56:4f:d8:86:5c:a7:bc:cf:0b:ba:f7:53:91: 5c:6a:88:52:b8:68:71:cd:92:ed:79:f5:d1:0c:01:17:fc:65: 4a:b0:a1:e7:f5:6e:aa:15:a1:93:9a:f5:24:5a:fb:e1:80:71: bb:43:25:24:9b:4c:ee:4a:19:b6:aa:f8:c7:eb:34:24:af:8b: 15:09:c6:61:52:e0:48:e0:13:3d:8b:8e:b5:d2:78:7a:15:7c: 20:35:23:30:47:5b:5e:cf:b5:ea:ca:00:0d:3d:f8:b7:ec:1c: 73:eb:df:0a:4e:55:89:a8:a9:11:36:81:2a:a7:c8:2d:e2:73: 04:86:5d:06:a2:7f:26:6d:ae:cc:37:59:51:b2:f5:c6:fb:3c: bb:83:24:8e:f9:0b:12:68:41:43:35:2a:95:5f:8d:d8:e6:75: cb:74:a0:ea -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE QzRGNjYzRUMwHhcNMjMwOTA1MDM1MzUwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY2YTY0ZS0yY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hBGdJSWCENGRySnSYNz1SmcS89cp4+/1mOo2wTnzKaUGLuJGTbd0fR0nIyN GMtPzPTmTzX9AjQ5nslCJ1381M7lz81QKFiQGzWd7FUDBgCdGf93Bcd/6smEtpRJ Xnde6YwlHkGUF8/zNhGPlCTTH+iWJKbb474MD2cjy1ZpCnZDXf8bAI37Kiono8vY xSEX7j+gZrtw4mX67SmSr4xpLhQeiu24nkxOdK8v+ARE0IvjByUeU3WL2TB9/RhE HIgb4twAbbO5mRYvCkTT03t0KshkV9Zkz87mwMuOAQWi8VqorrBBCIuazaOtFfWw TZZTtAsQ1IbAOL3FdJ5Ao2QWDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLSFMco8 OvcrVqZQT1oXMytGt69DMB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgxQUQvNENDQjAwOTAyQ0JFMTFFRDk5ODI0QjRDQzRGOUFFMDIvRkE5NTdEMEE4 MEZBMTFFRDlCMzU5NTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLHE8wDQYJKoZIhvcNAQELBQADggEBAA+FkzUuUCx4V0If vVwq8SgfcDTTKBtG3iM0Gzkmkso7y2A5I2BwVXWHpSs2puBujQVlWZVtS2bAzGMO R7SUb9Rk5aJ+4Wym0I7fjSqq9MXkFHb/LlW4yr7Eni61ZMyDVk/YhlynvM8LuvdT kVxqiFK4aHHNku159dEMARf8ZUqwoef1bqoVoZOa9SRa++GAcbtDJSSbTO5KGbaq +MfrNCSvixUJxmFS4EjgEz2LjrXSeHoVfCA1IzBHW17PterKAA09+LfsHHPr3wpO VYmoqRE2gSqnyC3icwSGXQaifyZtrsw3WVGy9cb7PLuDJI75CxJoQUM1KpVfjdjm dct0oOo= -----END CERTIFICATE-----Generated at Sat Jun 1 06:27:38 2024 by rpki-client on console-fra.rpki-client.org