$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/8F7AEE2CB97811ED8676732CC4F9AE02.roa File: 8F7AEE2CB97811ED8676732CC4F9AE02.roa (raw, json) Hash identifier: bLsDlYmebPW+zKPhTDvYE4YLU0ZHEj+nqeYvecMaqZc= Subject key identifier: 82:5F:29:37:39:B0:2B:7C:E7:54:D7:B8:20:6F:E1:DE:A8:69:DA:CD Certificate issuer: /CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A Certificate serial: 153C Authority key identifier: D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/8F7AEE2CB97811ED8676732CC4F9AE02.roa Signing time: Thu 04 May 2023 17:54:45 +0000 ROA not before: Thu 04 May 2023 17:54:45 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 45629 IP address blocks: 141.164.101.0/24 maxlen: 24 141.164.102.0/24 maxlen: 24 2400:c180:20::/48 maxlen: 48 2400:c180:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5436 (0x153c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A Validity Not Before: May 4 17:54:45 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6453f164-ec0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:14:79:37:30:3f:78:c4:60:1a:13:5b:a8: 69:e2:18:06:56:20:7d:0c:31:41:ca:48:e0:a2:0e: 6d:9d:23:77:be:19:e6:1a:96:b1:4d:7c:73:54:c0: e9:e1:cb:2c:9d:14:32:ae:68:f2:bd:9c:04:bb:00: fa:b4:be:87:ff:15:ae:2f:46:7f:8b:8e:71:a0:f5: a3:8a:6c:34:47:20:aa:cd:f2:ba:65:63:c2:c6:32: a6:24:3f:e8:17:3c:d9:2a:7b:b0:3c:95:86:13:84: 37:f4:56:9d:81:4e:a0:fd:9e:70:20:9f:f3:ec:a9: 47:70:8d:a5:3b:35:fc:50:04:83:9d:4f:84:13:9d: 44:e2:9a:66:e9:8d:ae:a0:a1:a8:09:78:2c:a9:4a: 57:78:ff:9f:d2:89:02:da:83:9f:28:71:2a:35:e4: 58:64:b8:50:aa:c2:29:f2:ea:21:12:01:e2:56:fb: 44:c1:c7:76:05:b4:ed:4f:8f:c5:07:ed:ff:f1:9c: bf:be:79:80:89:e3:9b:1e:d1:c6:d7:f1:00:82:66: 36:84:66:98:97:23:8c:9b:bf:0a:f7:f7:a7:9c:22: 3e:39:51:f8:50:b3:13:52:44:48:7d:4c:55:ba:c2: 1a:c3:34:2d:81:0e:92:f5:9d:01:f8:01:dd:5d:ba: 41:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5F:29:37:39:B0:2B:7C:E7:54:D7:B8:20:6F:E1:DE:A8:69:DA:CD X509v3 Authority Key Identifier: keyid:D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/8F7AEE2CB97811ED8676732CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 141.164.101.0-141.164.102.255 IPv6: 2400:c180:20::/47 Signature Algorithm: sha256WithRSAEncryption 8d:1b:f2:b9:6e:8d:f5:db:ba:16:70:da:28:18:23:ab:89:71: ff:ad:d0:f0:c8:41:f0:29:0a:62:f4:e9:ab:fd:80:f2:75:13: 37:f1:0f:96:42:60:f0:16:46:b3:69:58:64:75:99:8a:e3:c7: ac:1b:d3:b0:d4:9a:6a:e7:4f:d6:d4:8e:5a:38:bd:42:a1:2d: 8d:2e:42:34:aa:bd:74:70:f4:22:89:b4:8c:9b:1c:38:9b:12: 17:34:6d:a7:01:f7:0c:a4:94:df:6a:99:cd:fe:ab:d8:36:9b: d7:2e:01:98:06:e6:31:11:7d:ce:ba:58:1e:0d:60:60:bc:c4: eb:84:66:ea:50:5e:cd:04:2c:b6:05:aa:f9:e3:67:65:18:dc: 9b:36:1d:67:43:4c:80:32:7e:f5:11:d3:1f:10:8b:78:6c:9d: 8a:b6:3c:c4:b7:a6:68:de:cb:48:98:ef:f8:1a:63:af:77:fd: 91:36:8b:ad:e0:2f:4c:b3:5c:2e:46:d7:b0:c9:9a:2d:61:2a: 92:2b:a1:23:3e:ee:ea:18:06:c4:ba:8f:05:53:03:63:73:cc: ff:71:f6:c7:ff:1a:88:48:1b:8f:a7:97:f6:e0:10:a1:49:ed: e4:3d:be:22:5f:36:7d:94:fa:db:b3:2b:5e:0a:e7:48:ab:72: d0:38:4c:e8 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICFTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQ1NEJGMzk5QkUxQjY1OUIxMzIzMTRCODIxOTMzQTIw QkEzOEI5NkEwHhcNMjMwNTA0MTc1NDQ1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDUzZjE2NC1lYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbQUeTcwP3jEYBoTW6hp4hgGViB9DDFBykjgog5tnSN3vhnmGpaxTXxzVMDp 4cssnRQyrmjyvZwEuwD6tL6H/xWuL0Z/i45xoPWjimw0RyCqzfK6ZWPCxjKmJD/o FzzZKnuwPJWGE4Q39FadgU6g/Z5wIJ/z7KlHcI2lOzX8UASDnU+EE51E4ppm6Y2u oKGoCXgsqUpXeP+f0okC2oOfKHEqNeRYZLhQqsIp8uohEgHiVvtEwcd2BbTtT4/F B+3/8Zy/vnmAieObHtHG1/EAgmY2hGaYlyOMm78K9/ennCI+OVH4ULMTUkRIfUxV usIawzQtgQ6S9Z0B+AHdXbpBgQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFIJfKTc5 sCt851TXuCBv4d6oadrNMB8GA1UdIwQYMBaAFNVL85m+G2WbEyMUuCGTOiC6OLlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC9BMTA4N0QzNjAw RUExMUU4QkM5M0IxNkJDNEY5QUUwMi8xVXZ6bWI0Ylpac1RJeFM0SVpNNklMbzR1 V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFVdnptYjRiWlpzVEl4UzRJWk02SUxvNHVXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNFMzgvQTEwODdEMzYwMEVBMTFFOEJDOTNCMTZCQzRGOUFFMDIvOEY3QUVFMkNC OTc4MTFFRDg2NzY3MzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMBQEAgABMA4wDAMEAI2kZQMEAI2kZjAPBAIAAjAJAwcBJADBgAAgMA0GCSqG SIb3DQEBCwUAA4IBAQCNG/K5bo3127oWcNooGCOriXH/rdDwyEHwKQpi9Omr/YDy dRM38Q+WQmDwFkazaVhkdZmK48esG9Ow1Jpq50/W1I5aOL1CoS2NLkI0qr10cPQi ibSMmxw4mxIXNG2nAfcMpJTfapnN/qvYNpvXLgGYBuYxEX3OulgeDWBgvMTrhGbq UF7NBCy2Bar542dlGNybNh1nQ0yAMn71EdMfEIt4bJ2KtjzEt6Zo3stImO/4GmOv d/2RNout4C9Ms1wuRtewyZotYSqSK6EjPu7qGAbEuo8FUwNjc8z/cfbH/xqISBuP p5f24BChSe3kPb4iXzZ9lPrbsyteCudIq3LQOEzo -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org