$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3426848A1E0111E9A590C837C4F9AE02.roa File: 3426848A1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: gzGXJUaWeJ1XMgS6fbuhRCYSg5vNo33KQldMIsMiKEg= Subject key identifier: E8:70:59:AA:64:F4:C1:E3:8C:9D:D9:BF:D7:FD:8C:7D:9E:5A:83:35 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3677 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3426848A1E0111E9A590C837C4F9AE02.roa Signing time: Sat 08 Jul 2023 14:30:13 +0000 ROA not before: Sat 08 Jul 2023 14:30:13 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 132009 IP address blocks: 58.97.77.0/24 maxlen: 24 171.102.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13943 (0x3677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:30:13 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a972f5-f492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:33:e4:04:6a:67:48:51:de:6c:c9:38:e1:56: 8e:82:eb:90:5a:d3:65:f8:63:12:36:7c:56:df:0c: 85:f2:6e:0a:4b:12:65:88:a2:c1:32:b6:f4:dd:0a: 74:a2:89:22:8d:cb:0f:04:51:32:0c:38:52:5c:e3: f7:f7:95:b6:5b:50:fa:fd:e4:16:97:dc:ef:6e:49: 82:b7:2f:84:1f:61:a4:c7:7e:9c:96:e3:88:67:c2: ba:61:3c:70:6c:a6:d9:b6:c5:f1:12:4b:57:7a:f0: a2:33:4c:ff:0d:a7:c5:bf:b4:cb:c7:f4:6f:60:62: 1a:f5:3e:63:3f:2b:d1:71:39:70:aa:b6:22:80:a6: 20:00:38:ed:96:b0:67:c4:37:c1:1f:1c:ad:9b:e4: f4:b8:69:6d:c7:db:71:16:56:26:24:c3:d8:ce:5b: aa:70:56:2c:d5:dc:6e:f8:3b:e4:6b:37:5a:25:e7: ea:cb:60:16:d0:58:c8:5f:82:ec:17:42:e6:05:ac: df:24:bc:32:a9:a2:4f:18:88:d8:a7:c1:00:e4:b9: 23:cb:03:7b:f2:f2:18:03:b0:6f:73:25:e2:b8:79: 10:14:9a:1d:88:65:6e:03:a6:86:53:f5:75:29:56: c9:98:7b:1e:93:28:80:d5:a7:77:0d:26:b4:84:1c: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:70:59:AA:64:F4:C1:E3:8C:9D:D9:BF:D7:FD:8C:7D:9E:5A:83:35 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3426848A1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.97.77.0/24 171.102.204.0/24 Signature Algorithm: sha256WithRSAEncryption 61:1e:49:f7:be:cf:96:59:52:4a:fb:38:44:b5:3c:4d:7b:0d: e3:3e:e9:d1:72:3e:d9:d9:e1:8e:24:03:4a:e0:f2:c8:fa:6c: 55:4a:70:db:a6:20:3a:f9:3d:60:f8:e1:68:e4:e3:2e:88:74: 60:53:8f:d6:44:b1:49:5e:62:f8:33:fc:d4:76:05:3b:10:2b: d9:12:ce:ba:b8:7e:84:f8:7e:a1:89:b7:b3:de:59:73:ec:10: 40:bd:b4:cc:ae:94:b9:5c:c2:50:ee:00:aa:f5:9c:0c:96:9e: 39:bd:c5:c4:38:97:71:7e:18:d4:a7:f0:4e:25:91:da:d5:5e: 3a:4b:49:ac:97:51:cc:d5:57:ba:c7:9b:04:26:e0:39:41:f3: dd:6a:55:13:e4:1c:02:bd:5e:1f:b7:d1:a3:81:d1:25:67:ad: 9c:0f:43:96:d7:43:38:cd:04:85:23:0c:1b:80:08:45:8c:d6: 1c:f3:e9:f3:c3:09:9e:09:ed:30:83:bb:78:a9:d9:b3:e2:a7: 4c:a4:8b:3c:ce:f3:bf:50:4e:17:46:de:d2:f2:6e:4e:7c:13: b9:cd:1a:c5:30:b6:31:15:24:44:e8:dd:0c:20:31:e4:a5:33: cf:22:ea:f4:d6:a2:8e:f6:1c:52:fa:b6:90:24:f0:ed:78:d2: 72:ef:8d:30 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMDEzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzJmNS1mNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TPkBGpnSFHebMk44VaOguuQWtNl+GMSNnxW3wyF8m4KSxJliKLBMrb03Qp0 ookijcsPBFEyDDhSXOP395W2W1D6/eQWl9zvbkmCty+EH2Gkx36cluOIZ8K6YTxw bKbZtsXxEktXevCiM0z/DafFv7TLx/RvYGIa9T5jPyvRcTlwqrYigKYgADjtlrBn xDfBHxytm+T0uGltx9txFlYmJMPYzluqcFYs1dxu+DvkazdaJefqy2AW0FjIX4Ls F0LmBazfJLwyqaJPGIjYp8EA5LkjywN78vIYA7BvcyXiuHkQFJodiGVuA6aGU/V1 KVbJmHsekyiA1ad3DSa0hBwdOwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOhwWapk 9MHjjJ3Zv9f9jH2eWoM1MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMzQyNjg0OEEx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA6YU0DBACrZswwDQYJKoZIhvcNAQELBQADggEBAGEeSfe+ z5ZZUkr7OES1PE17DeM+6dFyPtnZ4Y4kA0rg8sj6bFVKcNumIDr5PWD44Wjk4y6I dGBTj9ZEsUleYvgz/NR2BTsQK9kSzrq4foT4fqGJt7PeWXPsEEC9tMyulLlcwlDu AKr1nAyWnjm9xcQ4l3F+GNSn8E4lkdrVXjpLSayXUczVV7rHmwQm4DlB891qVRPk HAK9Xh+30aOB0SVnrZwPQ5bXQzjNBIUjDBuACEWM1hzz6fPDCZ4J7TCDu3ip2bPi p0ykizzO879QThdG3tLybk58E7nNGsUwtjEVJETo3QwgMeSlM88i6vTWoo72HFL6 tpAk8O140nLvjTA= -----END CERTIFICATE-----Generated at Fri May 24 18:22:52 2024 by rpki-client on console-ams.rpki-client.org