$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3B6CD8201E0111E9A590C837C4F9AE02.roa File: 3B6CD8201E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: eXIrjssGHXtCl02V3ZDrI2p72OWJn5Q+LSaud1P7J9c= Subject key identifier: 3D:87:FA:B8:74:73:E1:7B:ED:87:AD:F5:22:C8:AC:BC:56:05:20:BD Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3694 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3B6CD8201E0111E9A590C837C4F9AE02.roa Signing time: Sat 08 Jul 2023 14:30:37 +0000 ROA not before: Sat 08 Jul 2023 14:30:37 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 138344 IP address blocks: 210.86.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13972 (0x3694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:30:37 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a9730d-7abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:c2:95:2e:93:35:00:2e:8b:4d:68:3f:ff: 0e:34:27:26:95:f0:bf:54:ff:00:77:8b:d7:c9:e7: 44:5e:42:80:0c:b7:6a:99:b3:4f:67:66:42:a6:86: 06:b9:d3:e1:4f:3c:db:7a:9c:ef:41:42:50:d6:74: 7b:72:e5:c5:1a:a3:3b:6f:0f:23:aa:2e:f3:c8:ee: 7b:a0:8e:00:83:f8:60:8f:7b:75:bf:97:a9:ba:e1: 8e:2b:85:f5:54:ab:1d:4d:c5:7f:31:68:dc:e2:7e: 66:75:33:0b:83:92:c3:ae:f2:f9:0f:65:53:5d:1e: e0:ad:0b:5b:f4:02:68:1c:ef:47:5d:07:d4:63:d8: be:f1:e2:3e:2d:c8:c6:2a:b6:74:8b:72:58:2d:d5: 74:17:ef:5b:12:27:7d:77:25:71:fd:22:9d:b9:39: 6f:92:cd:3e:02:90:ea:f8:60:86:aa:cc:55:c7:05: fb:fe:0d:14:9e:bb:09:81:dd:13:eb:c1:7a:2f:8b: 4f:e8:c4:ef:4c:8e:57:e8:cc:cc:af:12:de:5e:26: 02:9a:2e:ad:d7:b9:29:e9:a9:54:63:f7:66:91:d8: d4:a4:63:1e:2d:e8:e4:81:28:5e:64:c3:27:c0:35: 40:6f:d7:78:d2:e6:69:00:b3:18:18:8e:bc:9e:a7: a6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:87:FA:B8:74:73:E1:7B:ED:87:AD:F5:22:C8:AC:BC:56:05:20:BD X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3B6CD8201E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.86.216.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:b5:14:b6:d5:87:0a:10:e7:c7:bd:7c:84:b3:8a:6d:b4:a2: 5e:7d:cc:1c:2c:e9:04:18:c7:1f:6e:2b:3c:be:45:20:f8:c6: 3b:af:4c:52:29:5b:43:44:a6:d0:4e:25:33:90:93:bd:71:77: ea:1b:e0:39:c7:e7:ee:b1:61:92:a8:ea:af:70:8c:24:c5:93: d5:00:d4:d3:be:ea:97:1b:9a:f2:57:0f:4c:e6:99:e2:c8:45: 35:43:e9:f2:d8:d3:d7:b0:ef:fa:82:25:b2:db:41:d9:66:06: fa:00:68:0c:33:96:9c:1a:0f:ef:41:bd:93:08:59:b5:1f:a4: 8c:41:40:13:41:5e:34:75:a9:f9:dd:79:96:de:e9:1c:9d:86: 11:f8:4c:b9:b5:4c:e6:7c:0f:f3:ce:d3:79:aa:c0:04:e5:eb: ca:69:b3:9c:10:9a:d0:f1:70:a2:20:2a:51:a4:99:42:69:b6: c4:b2:79:d2:96:5d:6e:44:a6:ad:84:b1:34:4b:9d:d2:e6:54: e3:a4:be:42:07:58:eb:63:61:64:de:7e:59:5b:f5:de:3f:40: f2:49:96:61:d5:67:f5:62:be:ae:4a:e2:0e:21:b6:57:31:c8: ad:50:99:af:05:21:ab:5f:d1:44:cb:7e:ec:64:9e:36:82:05: 63:6a:64:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMDM3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzMwZC03YWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKzClS6TNQAui01oP/8ONCcmlfC/VP8Ad4vXyedEXkKADLdqmbNPZ2ZCpoYG udPhTzzbepzvQUJQ1nR7cuXFGqM7bw8jqi7zyO57oI4Ag/hgj3t1v5epuuGOK4X1 VKsdTcV/MWjc4n5mdTMLg5LDrvL5D2VTXR7grQtb9AJoHO9HXQfUY9i+8eI+LcjG KrZ0i3JYLdV0F+9bEid9dyVx/SKduTlvks0+ApDq+GCGqsxVxwX7/g0UnrsJgd0T 68F6L4tP6MTvTI5X6MzMrxLeXiYCmi6t17kp6alUY/dmkdjUpGMeLejkgSheZMMn wDVAb9d40uZpALMYGI68nqemZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD2H+rh0 c+F77Yet9SLIrLxWBSC9MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0I2Q0Q4MjAx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSVtgwDQYJKoZIhvcNAQELBQADggEBAGq1FLbVhwoQ58e9 fISzim20ol59zBws6QQYxx9uKzy+RSD4xjuvTFIpW0NEptBOJTOQk71xd+ob4DnH 5+6xYZKo6q9wjCTFk9UA1NO+6pcbmvJXD0zmmeLIRTVD6fLY09ew7/qCJbLbQdlm BvoAaAwzlpwaD+9BvZMIWbUfpIxBQBNBXjR1qfndeZbe6RydhhH4TLm1TOZ8D/PO 03mqwATl68pps5wQmtDxcKIgKlGkmUJptsSyedKWXW5Epq2EsTRLndLmVOOkvkIH WOtjYWTefllb9d4/QPJJlmHVZ/Vivq5K4g4htlcxyK1Qma8FIatf0UTLfuxknjaC BWNqZNk= -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org