$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/A4049C06213E11EAAA89A95DC4F9AE02.roa File: A4049C06213E11EAAA89A95DC4F9AE02.roa (raw, json) Hash identifier: XqNcL9YfvPxJbDsy1jbRzM9OJH/0mTt3c6WrfOsRgVU= Subject key identifier: 3D:DB:7A:2E:2A:B3:DA:9C:88:70:B0:95:DA:BE:47:8E:66:8E:C0:C8 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0AE1 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/A4049C06213E11EAAA89A95DC4F9AE02.roa Signing time: Tue 31 Oct 2023 19:06:52 +0000 ROA not before: Tue 31 Oct 2023 19:06:52 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 136972 IP address blocks: 161.38.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Oct 31 19:06:52 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6541504c-0a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:0b:c7:09:9a:de:27:76:67:2a:b5:83:b4: fe:4a:fb:8c:72:9b:1c:30:21:2c:50:58:15:f0:94: 07:a3:2b:11:ea:e6:20:3c:06:30:be:c4:27:92:4a: b7:cd:a5:27:eb:50:02:fc:aa:a0:9c:5c:60:7f:cd: a8:d5:41:76:49:d1:a9:45:51:04:0f:c9:c6:98:ff: a3:7e:6e:12:30:3a:9a:41:5a:a9:83:4e:6c:87:bd: 5e:81:0d:c1:62:eb:5d:86:a0:5f:0c:44:7a:0b:fe: bf:35:bf:c5:3b:87:4a:f6:6a:3d:71:fa:55:bc:e4: c7:d7:06:8d:19:ba:2f:62:33:17:e2:dc:d3:23:60: 82:47:ae:8f:7a:8b:b3:73:b7:33:d1:f8:fb:f6:4f: b3:9d:96:29:37:e0:6c:26:31:70:83:5f:21:80:46: 7e:97:f2:b4:86:5e:90:26:21:70:19:4f:14:90:cb: 68:1d:51:7b:3c:1c:43:79:74:93:c0:db:4e:fe:52: 34:16:aa:12:c4:2e:0b:bd:1d:f8:57:64:ee:8e:58: 66:73:02:eb:76:db:c0:c9:2b:6b:b0:a8:ac:10:cc: da:d8:9b:e2:0c:87:c3:c2:f4:8b:82:51:54:57:15: 99:c6:52:96:b5:13:82:ca:3f:f7:9f:d3:2b:a7:63: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DB:7A:2E:2A:B3:DA:9C:88:70:B0:95:DA:BE:47:8E:66:8E:C0:C8 X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/A4049C06213E11EAAA89A95DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.38.216.0/23 Signature Algorithm: sha256WithRSAEncryption 87:33:9a:49:1e:87:97:90:90:dd:98:bd:b2:56:62:cf:66:94: e9:16:9f:12:69:b4:69:7d:56:75:23:de:b3:40:a4:a5:0c:b1: 60:96:5f:86:f7:56:b1:62:6d:c8:96:01:55:a0:b7:dd:bc:db: d0:22:bb:44:b6:4a:f6:c4:76:0c:18:55:01:56:8e:76:c3:5f: 3f:ef:8a:7e:cd:07:59:d8:e4:8e:db:36:90:7b:fc:85:a7:24: 00:ed:22:5b:64:b0:eb:86:21:fd:e3:a8:e1:d8:e3:70:d4:88: 14:43:0b:43:1e:ae:a9:ef:08:b1:21:4b:d8:1c:82:39:2f:b9: 85:f8:8e:17:21:67:56:bb:2b:1b:52:c7:3e:99:99:b0:db:27: 98:d7:f6:f7:33:3f:f5:e0:70:47:8d:b8:b3:72:76:3d:23:39: 3d:78:98:d0:d2:eb:db:04:af:46:48:95:c2:07:56:48:27:67: b5:0e:18:c9:3d:d4:7a:8f:7a:09:df:c9:7f:dd:aa:2d:d7:53: 6f:e6:57:10:40:52:ce:2d:b1:e8:c7:c2:df:2c:4f:1c:ea:5d: 38:93:8d:ae:ac:b8:9c:a7:3c:b9:45:65:da:d1:01:9f:61:a7: a6:d6:ca:42:23:41:18:7c:d6:44:3e:08:30:8f:cb:db:68:30: 30:cb:f1:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjMxMDMxMTkwNjUyWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQxNTA0Yy0wYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9QLxwma3id2Zyq1g7T+SvuMcpscMCEsUFgV8JQHoysR6uYgPAYwvsQnkkq3 zaUn61AC/KqgnFxgf82o1UF2SdGpRVEED8nGmP+jfm4SMDqaQVqpg05sh71egQ3B YutdhqBfDER6C/6/Nb/FO4dK9mo9cfpVvOTH1waNGbovYjMX4tzTI2CCR66Peouz c7cz0fj79k+znZYpN+BsJjFwg18hgEZ+l/K0hl6QJiFwGU8UkMtoHVF7PBxDeXST wNtO/lI0FqoSxC4LvR34V2TujlhmcwLrdtvAyStrsKisEMza2JviDIfDwvSLglFU VxWZxlKWtROCyj/3n9Mrp2PnSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD3bei4q s9qciHCwldq+R45mjsDIMB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk2MjQvQzY5NDgyMzYxMEUwMTFFQTlCRDFBNTVEQzRGOUFFMDIvQTQwNDlDMDYy MTNFMTFFQUFBODlBOTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGhJtgwDQYJKoZIhvcNAQELBQADggEBAIczmkkeh5eQkN2Y vbJWYs9mlOkWnxJptGl9VnUj3rNApKUMsWCWX4b3VrFibciWAVWgt92829Aiu0S2 SvbEdgwYVQFWjnbDXz/vin7NB1nY5I7bNpB7/IWnJADtIltksOuGIf3jqOHY43DU iBRDC0MerqnvCLEhS9gcgjkvuYX4jhchZ1a7KxtSxz6ZmbDbJ5jX9vczP/XgcEeN uLNydj0jOT14mNDS69sEr0ZIlcIHVkgnZ7UOGMk91HqPegnfyX/dqi3XU2/mVxBA Us4tsejHwt8sTxzqXTiTja6suJynPLlFZdrRAZ9hp6bWykIjQRh81kQ+CDCPy9to MDDL8c0= -----END CERTIFICATE-----Generated at Wed May 22 20:42:43 2024 by rpki-client on console-fra.rpki-client.org