$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/800275E63FF911EB9BC3F51FC4F9AE02.roa File: 800275E63FF911EB9BC3F51FC4F9AE02.roa (raw, json) Hash identifier: Rhnw6RJ6YIg0TkgswbAebLFktOS8eu4QvXzHJoAKQ4o= Subject key identifier: 43:AA:52:59:01:D6:DB:50:5B:95:78:7A:12:2F:91:47:AE:DC:9F:98 Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 3428 Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/800275E63FF911EB9BC3F51FC4F9AE02.roa Signing time: Thu 02 May 2024 15:31:01 +0000 ROA not before: Thu 02 May 2024 15:31:01 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9280 IP address blocks: 202.60.90.0/24 maxlen: 24 202.60.91.0/24 maxlen: 24 2400:d400:9280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13352 (0x3428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: May 2 15:31:01 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633b1b4-28af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:54:36:6b:7b:77:58:3e:b2:e4:7c:f5:ad:6c: ce:34:13:a6:04:a8:b6:75:1b:67:1f:9c:23:53:2b: 6f:7a:69:3e:fd:4f:57:f5:df:cb:d6:64:69:18:c0: 1f:83:d0:cd:30:c0:e6:f5:fb:f3:4c:eb:d5:8e:8c: 25:43:97:17:77:68:7a:99:8c:28:2c:75:85:d1:e8: 1c:ad:02:74:be:9e:e0:2d:7f:73:b3:b8:d8:44:3d: f3:93:7f:04:60:e3:1d:c1:ea:c6:33:4e:cc:e2:b6: 02:5b:96:17:ac:b1:8d:f5:29:a4:e6:a2:ea:14:1b: 34:6f:43:d4:89:50:06:db:52:47:fb:85:f1:7a:92: dd:fc:43:d7:a6:e3:a9:c3:72:50:0c:d9:48:5c:63: 6a:d9:2c:26:44:f8:4b:34:8c:2a:2d:b1:4a:15:b8: eb:7f:01:f6:72:28:67:b9:2c:07:10:d8:69:63:02: e0:a7:bd:82:8d:3e:e5:56:d6:84:81:f2:47:71:92: 68:e5:3b:a8:73:5e:7c:b9:ae:3c:e6:84:d6:06:65: c0:52:d2:00:96:78:37:b4:76:17:c8:e4:bd:6b:09: 9a:77:62:51:6d:c7:a3:c3:de:5b:39:ca:b9:b4:09: 46:4a:9e:47:19:a8:27:52:2c:7d:38:99:1b:ad:4b: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AA:52:59:01:D6:DB:50:5B:95:78:7A:12:2F:91:47:AE:DC:9F:98 X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/800275E63FF911EB9BC3F51FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.60.90.0/23 IPv6: 2400:d400:9280::/48 Signature Algorithm: sha256WithRSAEncryption 40:f7:97:83:5d:45:9c:79:f3:1b:62:e8:16:e6:fe:7a:43:1e: 49:9f:38:b5:b2:d5:10:19:94:80:27:17:c8:b3:2e:f7:1d:33: f7:68:ea:26:88:eb:bb:a4:7b:5d:9a:5f:15:1e:82:c7:ec:dc: 27:d2:90:83:a5:b6:1b:71:77:2d:8a:58:e9:e7:50:d0:c5:c6: 02:d4:de:95:b3:74:74:6a:fb:ce:2c:09:c3:d1:ed:d0:7d:27: 92:95:84:ef:ca:c5:29:2f:a8:e6:9d:2e:0f:e7:97:b9:d2:34: 2e:b5:3a:b5:f2:49:23:5b:e2:4d:2c:94:5e:aa:d5:cf:b8:a7: c1:9e:21:a5:20:24:a1:0f:bd:28:e5:0b:a4:c2:b6:1c:35:5f: 01:01:03:cf:8a:3a:c9:f5:2c:83:ea:e4:5c:06:63:92:37:8b: b0:10:13:71:91:4b:7b:0f:87:3f:25:74:1f:fd:e2:1c:e9:d1: 36:02:13:2d:39:c7:4f:4e:6c:9d:d9:4f:2e:1f:63:45:ed:2e: 12:41:30:91:51:8f:01:81:fc:61:32:f4:c6:d2:09:c1:12:a6: 39:33:cc:79:1d:ad:6b:30:73:cc:41:45:d8:e5:44:2e:ff:e9: ee:13:8e:68:70:bc:f1:2e:3f:fa:45:11:e0:a1:f0:ca:d1:0f: 81:2c:28:36 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjQwNTAyMTUzMTAxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzYjFiNC0yOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FQ2a3t3WD6y5Hz1rWzONBOmBKi2dRtnH5wjUytvemk+/U9X9d/L1mRpGMAf g9DNMMDm9fvzTOvVjowlQ5cXd2h6mYwoLHWF0egcrQJ0vp7gLX9zs7jYRD3zk38E YOMdwerGM07M4rYCW5YXrLGN9Smk5qLqFBs0b0PUiVAG21JH+4XxepLd/EPXpuOp w3JQDNlIXGNq2SwmRPhLNIwqLbFKFbjrfwH2cihnuSwHENhpYwLgp72CjT7lVtaE gfJHcZJo5Tuoc158ua485oTWBmXAUtIAlng3tHYXyOS9awmad2JRbcejw95bOcq5 tAlGSp5HGagnUix9OJkbrUu1gQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEOqUlkB 1ttQW5V4ehIvkUeu3J+YMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZEQkEvMDc3ODUxQTQxRDlEMTFFMjk4N0NFRThCMDhCMDJDRDIvODAwMjc1RTYz RkY5MTFFQjlCQzNGNTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKPFowDwQCAAIwCQMHACQA1ACSgDANBgkqhkiG9w0BAQsF AAOCAQEAQPeXg11FnHnzG2LoFub+ekMeSZ84tbLVEBmUgCcXyLMu9x0z92jqJojr u6R7XZpfFR6Cx+zcJ9KQg6W2G3F3LYpY6edQ0MXGAtTelbN0dGr7ziwJw9Ht0H0n kpWE78rFKS+o5p0uD+eXudI0LrU6tfJJI1viTSyUXqrVz7inwZ4hpSAkoQ+9KOUL pMK2HDVfAQEDz4o6yfUsg+rkXAZjkjeLsBATcZFLew+HPyV0H/3iHOnRNgITLTnH T05sndlPLh9jRe0uEkEwkVGPAYH8YTL0xtIJwRKmOTPMeR2tazBzzEFF2OVELv/p 7hOOaHC88S4/+kUR4KHwytEPgSwoNg== -----END CERTIFICATE-----Generated at Sat May 18 15:58:20 2024 by rpki-client on console-ams.rpki-client.org