$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/ED54502AAFCF11EA926A5C48C4F9AE02.roa File: ED54502AAFCF11EA926A5C48C4F9AE02.roa (raw, json) Hash identifier: uv4YHJGeHIKZEuFqJlGDqjwkBu45qN9VkY0Iz5VKmrM= Subject key identifier: 9B:8A:D8:4D:47:D1:EA:31:4B:69:8F:FD:22:AF:1B:E5:6E:DE:B0:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 33FA Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/ED54502AAFCF11EA926A5C48C4F9AE02.roa Signing time: Tue 30 Jan 2024 14:50:50 +0000 ROA not before: Tue 30 Jan 2024 14:50:50 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 63199 IP address blocks: 202.55.234.0/24 maxlen: 24 202.55.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13306 (0x33fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Jan 30 14:50:50 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b90cca-472f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c7:bc:57:ac:f6:59:c1:89:43:34:45:4b:26: 1c:8d:f7:d3:f0:30:a0:57:41:bd:fb:2b:7e:12:9d: 46:93:51:8e:b5:03:d4:42:86:53:28:63:d0:7e:38: 1a:60:47:39:05:eb:07:ae:18:a3:b2:6a:6b:44:4c: 71:f6:66:7e:90:e1:9f:a9:31:c6:a6:85:89:7c:08: cc:c7:d5:e1:97:72:ee:fc:0c:46:7f:bc:0b:88:ae: 92:92:78:e0:0a:d3:f1:72:6a:89:63:8f:a6:1f:86: f7:b2:8f:1e:7a:65:18:14:e7:9b:71:3c:22:0b:5a: 51:3f:40:73:3e:f6:e0:9f:fa:5c:bf:ee:58:19:56: 0c:5f:b3:90:b1:c1:41:2e:30:25:31:fa:1e:9b:73: be:e5:47:63:34:d8:d6:2d:5e:d2:ae:3a:1b:28:da: 4a:ac:c5:8b:7a:c9:20:23:58:18:e4:0a:4d:45:0a: 6a:17:4b:c3:62:23:d7:85:f0:6c:cd:1c:b3:11:d2: 10:80:b9:90:c7:ae:63:61:1f:5a:8c:4a:e0:86:e4: e3:34:3d:53:25:1c:ce:61:0c:a4:02:4a:8b:a0:a5: f6:f1:f8:8d:4b:a8:ff:cb:a0:a8:de:d9:0a:82:5f: 90:93:4d:ed:cd:37:78:56:06:45:61:cb:09:c0:62: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8A:D8:4D:47:D1:EA:31:4B:69:8F:FD:22:AF:1B:E5:6E:DE:B0:9D X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/ED54502AAFCF11EA926A5C48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.55.234.0/24 202.55.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:4b:95:38:4d:06:80:82:c7:67:7a:a7:ca:b3:4b:c4:db:0c: 63:ac:8b:0c:30:26:be:ba:fb:29:71:5f:ff:56:d7:9d:d7:48: f9:34:43:3d:3b:87:b3:59:1b:2b:22:23:7e:05:72:03:80:38: 9f:7f:3f:44:1d:75:97:b7:ab:7b:65:17:e7:ed:02:e8:19:8d: 0c:02:ee:b0:cd:65:ea:0f:6e:54:33:e3:94:6a:96:1f:d3:9e: fe:89:44:3a:11:68:74:01:8a:30:57:68:73:5e:a9:bf:42:76: 41:dd:30:bf:d4:9d:b0:57:4c:fa:47:67:65:12:f1:66:53:75: 02:3c:f5:bf:9f:7e:19:4c:2b:72:f4:bc:9c:e9:17:62:d6:75: d2:a7:a8:2c:00:2a:b9:9b:e1:2b:39:43:61:9b:e0:fc:c5:48: e5:ae:a4:44:8f:1a:ae:fe:99:95:0b:36:dd:72:8d:be:1e:76: 37:2d:dc:f3:3d:4a:5b:92:ef:06:97:8c:ed:af:93:2a:b4:e0: 0e:40:5e:b0:fc:33:7e:d0:f1:85:f9:c5:19:6f:c6:42:73:75: 52:a0:f1:c5:f6:af:5b:65:46:c3:19:81:d1:0b:ab:88:c6:8f: 43:1e:23:d9:14:cd:8a:fe:f3:6c:11:f3:d2:6c:a4:97:e8:1e: 11:de:8b:b1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICM/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjQwMTMwMTQ1MDUwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MGNjYS00NzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+8e8V6z2WcGJQzRFSyYcjffT8DCgV0G9+yt+Ep1Gk1GOtQPUQoZTKGPQfjga YEc5BesHrhijsmprRExx9mZ+kOGfqTHGpoWJfAjMx9Xhl3Lu/AxGf7wLiK6Sknjg CtPxcmqJY4+mH4b3so8eemUYFOebcTwiC1pRP0BzPvbgn/pcv+5YGVYMX7OQscFB LjAlMfoem3O+5UdjNNjWLV7SrjobKNpKrMWLeskgI1gY5ApNRQpqF0vDYiPXhfBs zRyzEdIQgLmQx65jYR9ajErghuTjND1TJRzOYQykAkqLoKX28fiNS6j/y6Co3tkK gl+Qk03tzTd4VgZFYcsJwGK+ZQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJuK2E1H 0eoxS2mP/SKvG+Vu3rCdMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlFM0EvMTk3RUMwQjYxRDg2MTFFMkFCRUYyMkREMDhCMDJDRDIvRUQ1NDUwMkFB RkNGMTFFQTkyNkE1QzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKN+oDBADKN/0wDQYJKoZIhvcNAQELBQADggEBADtLlThN BoCCx2d6p8qzS8TbDGOsiwwwJr66+ylxX/9W153XSPk0Qz07h7NZGysiI34FcgOA OJ9/P0QddZe3q3tlF+ftAugZjQwC7rDNZeoPblQz45Rqlh/Tnv6JRDoRaHQBijBX aHNeqb9CdkHdML/UnbBXTPpHZ2US8WZTdQI89b+ffhlMK3L0vJzpF2LWddKnqCwA Krmb4Ss5Q2Gb4PzFSOWupESPGq7+mZULNt1yjb4edjct3PM9SluS7waXjO2vkyq0 4A5AXrD8M37Q8YX5xRlvxkJzdVKg8cX2r1tlRsMZgdELq4jGj0MeI9kUzYr+82wR 89JspJfoHhHei7E= -----END CERTIFICATE-----Generated at Thu May 16 15:21:28 2024 by rpki-client on console-ams.rpki-client.org