$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FD2941A0BBC311EEBE58430EC4F9AE02.roa File: FD2941A0BBC311EEBE58430EC4F9AE02.roa (raw, json) Hash identifier: 9QQjdIzANogkD73MLLjkJxxdii9Tn1xVNrPM5/BTIw0= Subject key identifier: DD:40:6A:89:09:30:0F:4E:0D:4A:13:AE:8A:57:B6:DB:67:98:0E:99 Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 20EB Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FD2941A0BBC311EEBE58430EC4F9AE02.roa Signing time: Thu 25 Jan 2024 20:54:54 +0000 ROA not before: Thu 25 Jan 2024 20:54:54 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 133752 IP address blocks: 180.210.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8427 (0x20eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Jan 25 20:54:54 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65b2ca9d-c23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:7d:27:7a:1c:65:26:37:b5:a2:f8:fd:3b: 04:9a:04:cb:6f:ac:ad:4a:7c:00:70:ee:93:2d:8e: 5a:dd:9c:69:de:94:c6:ad:c7:f9:54:1e:ab:5f:36: 09:bc:2b:32:c9:ae:6a:89:78:92:d2:4e:51:31:05: a0:7d:30:ba:25:73:66:e5:07:02:60:2e:66:f5:86: d5:74:ee:64:78:82:2b:f6:e9:c8:b3:ba:b0:e2:16: f5:ef:ed:81:fa:70:bc:7d:c9:aa:34:f8:20:c0:1d: d7:fe:13:8c:1e:0e:19:8a:6f:77:54:40:b1:ef:fe: c2:eb:2a:87:1c:8b:86:6d:9c:c4:ce:a7:3a:c0:61: 70:9e:9c:d6:cc:f6:e1:90:71:0a:26:31:ed:0a:9b: 66:f6:ff:69:05:1c:1e:27:22:78:ee:40:0c:bf:f5: 3c:a1:0b:a3:cc:0e:69:62:ea:32:1c:88:ba:d1:09: 5e:76:3f:74:dd:66:f3:33:ee:3d:ea:e8:46:63:f0: df:92:36:a4:6c:15:36:aa:6d:e6:c3:9c:a0:e4:fb: bf:84:b3:61:65:0d:2d:30:08:01:cb:06:da:b3:2d: 67:5d:40:6c:c6:43:c5:1f:b3:23:21:b0:ed:23:4a: 59:80:9c:4b:1e:4f:b6:c5:d8:46:fc:5c:dc:a5:47: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:40:6A:89:09:30:0F:4E:0D:4A:13:AE:8A:57:B6:DB:67:98:0E:99 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FD2941A0BBC311EEBE58430EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.210.220.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:d8:76:c3:12:f3:b3:5c:47:7f:9c:c8:e7:bc:3f:c1:cf:d8: 1f:3d:59:13:fb:e8:a7:cc:dd:78:97:cc:65:cf:b5:f7:e1:9b: 6f:20:af:5c:bf:d3:ba:ad:c3:86:b6:80:ee:e8:10:08:0b:12: a6:97:fc:53:fb:78:64:3b:6b:68:a9:29:17:82:37:9f:32:ff: cf:56:25:0c:2a:fe:51:93:ff:93:9c:c9:22:f6:93:53:a4:bd: 93:03:91:ba:ed:e2:2a:72:90:0a:69:2c:7e:8c:00:3a:f3:a8: 9d:0f:4f:fb:36:88:e3:47:3c:1e:91:5c:ae:bd:61:49:ff:e7: 36:f0:b4:28:af:fe:c8:91:f6:60:f7:77:c3:82:e0:f5:e3:82: b0:d1:2c:ad:37:d8:e4:c5:60:54:5e:76:fd:6f:67:dd:32:e1: 66:12:10:ed:2f:33:2a:75:ee:e8:19:17:77:b5:bc:c4:bd:8a: 71:cf:33:67:6f:84:d1:f1:fc:e6:91:cb:20:d1:d8:e6:0e:ba: fb:96:29:93:b2:a7:e7:57:5e:ca:cd:f6:0a:3f:90:71:9b:ed: 69:f0:b5:53:bc:99:ff:08:4d:f1:2a:87:2f:07:fb:97:23:6c: ff:cb:e8:36:4d:a9:ed:0f:ab:e1:67:c4:5b:02:5f:54:22:f2: a6:14:6c:8f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjQwMTI1MjA1NDU0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWIyY2E5ZC1jMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudB9J3ocZSY3taL4/TsEmgTLb6ytSnwAcO6TLY5a3Zxp3pTGrcf5VB6rXzYJ vCsyya5qiXiS0k5RMQWgfTC6JXNm5QcCYC5m9YbVdO5keIIr9unIs7qw4hb17+2B +nC8fcmqNPggwB3X/hOMHg4Zim93VECx7/7C6yqHHIuGbZzEzqc6wGFwnpzWzPbh kHEKJjHtCptm9v9pBRweJyJ47kAMv/U8oQujzA5pYuoyHIi60Qledj903WbzM+49 6uhGY/DfkjakbBU2qm3mw5yg5Pu/hLNhZQ0tMAgBywbasy1nXUBsxkPFH7MjIbDt I0pZgJxLHk+2xdhG/FzcpUflswIDAQABo4IClTCCApEwHQYDVR0OBBYEFN1AaokJ MA9ODUoTropXtttnmA6ZMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvRkQyOTQxQTBC QkMzMTFFRUJFNTg0MzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC00twwDQYJKoZIhvcNAQELBQADggEBAD/YdsMS87NcR3+c yOe8P8HP2B89WRP76KfM3XiXzGXPtffhm28gr1y/07qtw4a2gO7oEAgLEqaX/FP7 eGQ7a2ipKReCN58y/89WJQwq/lGT/5OcySL2k1OkvZMDkbrt4ipykAppLH6MADrz qJ0PT/s2iONHPB6RXK69YUn/5zbwtCiv/siR9mD3d8OC4PXjgrDRLK032OTFYFRe dv1vZ90y4WYSEO0vMyp17ugZF3e1vMS9inHPM2dvhNHx/OaRyyDR2OYOuvuWKZOy p+dXXsrN9go/kHGb7WnwtVO8mf8ITfEqhy8H+5cjbP/L6DZNqe0Pq+FnxFsCX1Qi 8qYUbI8= -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:58 2024 by rpki-client on console-ams.rpki-client.org