$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/3E9F53C0A57711EAB2F52B2CC4F9AE02.roa File: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (raw, json) Hash identifier: JK8W6UaIKOwZbbLYWrHQgOdLnCofpXI6UdkvJKjgYgE= Subject key identifier: 78:B5:8B:05:C9:A9:61:99:EB:CA:C4:1A:CC:5C:0E:EF:28:04:74:1E Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 33F3 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/3E9F53C0A57711EAB2F52B2CC4F9AE02.roa Signing time: Tue 30 Jan 2024 14:50:44 +0000 ROA not before: Tue 30 Jan 2024 14:50:44 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 131600 IP address blocks: 202.3.184.0/24 maxlen: 24 202.153.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13299 (0x33f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Jan 30 14:50:44 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b90cc4-196c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:94:6f:ed:7c:fd:fe:18:c9:a5:d4:f2:11: 4d:5f:49:36:41:b4:df:1e:43:47:e0:52:8a:39:e4: 26:76:89:e0:ca:b8:d7:b7:8f:02:e1:3b:53:08:94: 38:47:e6:15:9b:59:0f:13:1f:4f:46:0b:1b:4b:33: df:74:f1:0b:0c:fa:ba:40:24:be:c3:7a:c5:89:5a: b9:8a:d5:77:3b:3a:15:b8:10:e1:2e:2c:30:2d:25: c3:ca:b3:1a:e3:e4:db:25:83:3a:44:7e:3f:c5:e5: 49:6d:0a:06:be:bb:79:f8:00:11:3e:b5:45:8e:77: 1b:31:f7:8b:91:65:90:8c:21:44:8c:36:95:44:59: 3b:cb:8f:5c:98:6e:99:d8:d4:dd:05:aa:55:68:09: 94:bc:7a:31:66:0b:84:e1:3d:28:85:78:48:7f:c8: a2:82:d3:69:e3:6e:10:b1:2e:2e:6b:90:d4:37:36: 60:95:1f:35:65:79:66:62:1a:4a:c0:c2:7f:06:27: 8b:85:70:8a:39:12:30:f7:fa:ea:63:8f:b7:41:7c: bb:10:7d:ae:5f:a3:87:61:b6:54:d6:eb:43:ff:43: 91:c0:68:f2:1d:82:96:0c:42:10:ce:f8:17:70:67: ab:e0:9e:f7:5b:ba:26:9a:cf:8f:1f:32:53:85:2a: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B5:8B:05:C9:A9:61:99:EB:CA:C4:1A:CC:5C:0E:EF:28:04:74:1E X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/3E9F53C0A57711EAB2F52B2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.3.184.0/24 202.153.163.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:9e:ee:21:90:ed:08:65:a6:aa:f2:74:5f:12:a5:cb:fb:b1: d7:84:b3:08:0f:c6:0d:c1:b4:37:03:a1:03:f8:ef:05:c7:08: 2a:4b:f2:7c:2c:d6:d3:d4:3c:fc:97:f7:b9:42:9f:53:8c:1a: 7b:26:24:fe:a6:15:c7:3f:ed:fb:d2:f8:f4:af:fc:25:c3:cc: 50:33:a3:e2:1e:ac:01:01:e9:de:09:91:f1:f2:98:1a:5d:c2: 28:f3:c6:72:70:2b:f0:80:ad:d7:54:f4:cc:13:0d:5c:e5:37: e7:b3:12:85:7b:ac:a7:86:c7:e4:bb:0a:69:f0:1c:60:6c:0c: ea:b5:3e:79:19:01:47:f4:49:93:f8:3f:c8:6c:bb:3e:a7:b2: 71:af:12:6c:37:11:4e:5d:03:af:01:9c:8d:0a:cf:4d:9f:f2: 78:43:c4:a2:ea:0b:2d:d8:34:30:82:4e:28:4f:34:74:ab:a2: 3d:0d:bd:28:8b:e4:82:ba:64:24:fa:df:64:cc:f2:00:da:ac: ef:66:8d:3b:19:04:cb:0a:21:04:85:d6:ac:83:92:a1:60:3e: bc:d8:c3:89:46:4c:b6:08:ba:4b:4c:82:dc:7c:a7:cd:26:9f: 76:42:e1:41:6d:14:74:a9:a6:5b:b7:7e:db:aa:3f:76:f9:70: 11:f4:4f:d9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICM/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjQwMTMwMTQ1MDQ0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MGNjNC0xOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFqUb+18/f4YyaXU8hFNX0k2QbTfHkNH4FKKOeQmdongyrjXt48C4TtTCJQ4 R+YVm1kPEx9PRgsbSzPfdPELDPq6QCS+w3rFiVq5itV3OzoVuBDhLiwwLSXDyrMa 4+TbJYM6RH4/xeVJbQoGvrt5+AARPrVFjncbMfeLkWWQjCFEjDaVRFk7y49cmG6Z 2NTdBapVaAmUvHoxZguE4T0ohXhIf8iigtNp424QsS4ua5DUNzZglR81ZXlmYhpK wMJ/BieLhXCKORIw9/rqY4+3QXy7EH2uX6OHYbZU1utD/0ORwGjyHYKWDEIQzvgX cGer4J73W7omms+PHzJThSpxhwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHi1iwXJ qWGZ68rEGsxcDu8oBHQeMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlFM0EvMTk3RUMwQjYxRDg2MTFFMkFCRUYyMkREMDhCMDJDRDIvM0U5RjUzQzBB NTc3MTFFQUIyRjUyQjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKA7gDBADKmaMwDQYJKoZIhvcNAQELBQADggEBAG6e7iGQ 7QhlpqrydF8Spcv7sdeEswgPxg3BtDcDoQP47wXHCCpL8nws1tPUPPyX97lCn1OM GnsmJP6mFcc/7fvS+PSv/CXDzFAzo+IerAEB6d4JkfHymBpdwijzxnJwK/CArddU 9MwTDVzlN+ezEoV7rKeGx+S7CmnwHGBsDOq1PnkZAUf0SZP4P8hsuz6nsnGvEmw3 EU5dA68BnI0Kz02f8nhDxKLqCy3YNDCCTihPNHSroj0NvSiL5IK6ZCT632TM8gDa rO9mjTsZBMsKIQSF1qyDkqFgPrzYw4lGTLYIuktMgtx8p80mn3ZC4UFtFHSpplu3 ftuqP3b5cBH0T9k= -----END CERTIFICATE-----Generated at Thu May 16 16:14:30 2024 by rpki-client on console-fra.rpki-client.org