$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/B08503D8F8AA11EE91684140C4F9AE02.roa File: B08503D8F8AA11EE91684140C4F9AE02.roa (raw, json) Hash identifier: IUgNex4iPrWnmyVmO2Q5cbWe368R6s70Pzj5ggltF2A= Subject key identifier: 2E:89:73:DC:49:49:5D:4F:46:3E:59:D8:E8:33:60:FC:E9:FF:D7:73 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 65 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/B08503D8F8AA11EE91684140C4F9AE02.roa Signing time: Fri 12 Apr 2024 08:57:28 +0000 ROA not before: Fri 12 Apr 2024 08:57:28 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 10143 IP address blocks: 202.27.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Apr 12 08:57:28 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6618f778-6083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:d7:5b:fd:fc:14:39:d6:98:0e:6a:c7:68: f0:f3:d0:b5:15:86:18:89:64:69:81:74:b7:30:38: 1e:5c:77:40:76:50:2a:7e:92:a8:27:5b:6f:e2:68: d1:76:89:03:71:2a:e2:8f:d2:4f:ff:28:75:26:9f: 34:57:ac:d8:78:57:75:07:8d:ba:a6:e9:86:33:5a: 0c:21:de:8f:b4:23:ea:70:93:13:8e:13:d7:73:2a: 89:7c:03:0e:06:b5:b2:7c:13:99:09:ac:4b:d3:fa: a0:31:c2:98:a9:21:4b:4e:57:5f:bb:f3:6b:93:a6: 67:89:1c:48:50:26:b6:06:09:0f:fa:1f:d4:5b:f7: 2b:18:7b:e7:da:8c:bc:43:12:04:65:f3:78:53:88: d0:48:c9:1c:d1:bd:d1:88:2f:8e:7e:a6:8c:db:1d: 7d:5f:8f:5c:d3:99:bb:56:85:8f:a2:26:b7:6a:7f: a2:b4:cf:d2:6c:22:ad:9a:22:f2:f7:0d:69:d6:98: 3f:99:54:91:54:dc:fc:28:23:cb:6e:62:dc:ff:e6: 4c:11:3f:ae:4a:c9:3b:6e:a8:8e:cb:21:68:88:9c: fc:01:24:70:05:17:0e:8f:da:d3:7c:5d:79:1d:05: 13:74:28:19:f3:08:66:f9:d4:de:12:14:a0:cd:ee: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:89:73:DC:49:49:5D:4F:46:3E:59:D8:E8:33:60:FC:E9:FF:D7:73 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/B08503D8F8AA11EE91684140C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.27.229.0/24 Signature Algorithm: sha256WithRSAEncryption 56:fb:31:af:7a:b8:05:e8:25:40:11:76:c2:a1:00:55:c8:a2: 1d:9c:b6:78:70:dd:6d:30:21:c2:42:60:b7:8f:3d:22:6f:bb: 3a:75:91:d0:6a:0f:e5:4c:60:9c:83:91:98:99:6f:21:68:66: 09:fc:ef:91:f3:b6:45:f3:81:c6:54:04:1e:ae:7f:ff:af:6f: f2:68:77:d4:b9:34:30:93:c9:7d:e7:30:f8:ca:d9:bc:6d:97: 83:09:71:83:e9:21:b7:47:85:5c:b6:45:20:bb:2a:e1:fd:ec: 5f:f7:24:c8:17:f2:23:dc:fb:38:4c:36:ff:2b:c7:97:62:30: d2:df:7b:5b:5c:97:20:1a:4f:a9:54:be:79:36:83:1c:58:4e: 5e:47:f4:6a:53:fc:f3:ef:ac:32:17:0e:62:c3:6c:a6:2f:76: 98:70:15:73:55:85:2f:4d:2b:d1:76:52:c2:6d:aa:03:c2:d4: ed:79:19:a2:d8:b7:3a:6a:8d:df:fe:7c:6d:90:d6:91:82:69: 6c:6b:b0:19:d0:ff:3a:cc:8b:01:54:e0:d4:1d:d8:f0:0e:cf: f1:a3:ad:f0:9f:0e:e7:6d:87:29:f6:03:a1:90:f4:a8:37:1f: 05:84:ad:43:95:b5:d8:78:b3:59:84:37:8f:df:59:18:9b:64: 7d:eb:2f:07 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTdBMjExMC8GA1UEBRMoRTM5MDdCNDhFNjk4N0UyRkRGQ0VEMDFFRDAxRDQwQjNG NjNEQjExODAeFw0yNDA0MTIwODU3MjhaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MThmNzc4LTYwODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo9Ndb/fwUOdaYDmrHaPDz0LUVhhiJZGmBdLcwOB5cd0B2UCp+kqgnW2/iaNF2 iQNxKuKP0k//KHUmnzRXrNh4V3UHjbqm6YYzWgwh3o+0I+pwkxOOE9dzKol8Aw4G tbJ8E5kJrEvT+qAxwpipIUtOV1+782uTpmeJHEhQJrYGCQ/6H9Rb9ysYe+fajLxD EgRl83hTiNBIyRzRvdGIL45+pozbHX1fj1zTmbtWhY+iJrdqf6K0z9JsIq2aIvL3 DWnWmD+ZVJFU3PwoI8tuYtz/5kwRP65KyTtuqI7LIWiInPwBJHAFFw6P2tN8XXkd BRN0KBnzCGb51N4SFKDN7hkDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULolz3ElJ XU9GPlnY6DNg/On/13MwHwYDVR0jBBgwFoAU45B7SOaYfi/fztAe0B1As/Y9sRgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5N0EyL0IzREZDODg0NkQ2 MjExRUVCMzA3Q0UxOUM0RjlBRTAyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNS Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDVCN1NPYVlmaV9menRBZTBCMUFzX1k5c1JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi9CMDg1MDNEOEY4 QUExMUVFOTE2ODQxNDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMob5TANBgkqhkiG9w0BAQsFAAOCAQEAVvsxr3q4BeglQBF2 wqEAVciiHZy2eHDdbTAhwkJgt489Im+7OnWR0GoP5UxgnIORmJlvIWhmCfzvkfO2 RfOBxlQEHq5//69v8mh31Lk0MJPJfecw+MrZvG2Xgwlxg+kht0eFXLZFILsq4f3s X/ckyBfyI9z7OEw2/yvHl2Iw0t97W1yXIBpPqVS+eTaDHFhOXkf0alP88++sMhcO YsNspi92mHAVc1WFL00r0XZSwm2qA8LU7XkZoti3OmqN3/58bZDWkYJpbGuwGdD/ OsyLAVTg1B3Y8A7P8aOt8J8O522HKfYDoZD0qDcfBYStQ5W12HizWYQ3j99ZGJtk fesvBw== -----END CERTIFICATE-----Generated at Fri Jun 7 08:56:37 2024 by rpki-client on console-fra.rpki-client.org