$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/488867FE1E0111E9A590C837C4F9AE02.roa File: 488867FE1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: bb60g1PYMT33ddV74DstPhDwFs91HUAdvQ3IIrNvzqE= Subject key identifier: BA:A6:18:47:6E:32:E7:B2:92:4D:E9:C7:03:7C:4D:65:3F:F9:A9:04 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 36B5 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/488867FE1E0111E9A590C837C4F9AE02.roa Signing time: Sat 08 Jul 2023 14:31:04 +0000 ROA not before: Sat 08 Jul 2023 14:31:04 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38326 IP address blocks: 210.86.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14005 (0x36b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:31:04 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a97328-c0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:c3:69:58:b6:e4:03:8b:de:64:db:75:24: 1b:8f:bc:d8:f9:52:4a:97:c7:85:2c:14:93:6f:ed: 93:af:36:1f:f0:cd:5e:8a:03:eb:a8:47:d5:1c:34: 71:5c:f8:76:07:5c:72:bf:94:2a:37:a8:6e:55:c1: 47:26:52:fb:cc:91:e1:7c:17:c8:5f:a4:9f:48:05: 3c:78:67:1c:a9:fa:1d:8d:40:ba:5a:24:73:d8:62: c0:d9:6c:b8:8d:2a:47:f8:c7:68:28:ca:7f:6c:65: 26:a2:94:99:dc:2e:d3:6b:17:ef:14:22:e4:72:3c: 18:e5:e3:37:b0:c5:44:9f:c2:71:f2:2a:14:f8:3b: e8:66:ed:dc:a2:25:d6:12:ac:36:b7:d7:36:22:84: 8f:f7:44:c1:2b:1d:1e:ff:9a:33:5e:f5:03:40:dd: e0:bf:48:89:d8:e3:a6:a3:3e:f3:85:b1:40:0d:23: d2:e1:55:e1:e3:c5:b0:5f:7a:a1:0c:b1:0a:7b:78: 4d:ef:fe:18:70:7f:a3:e3:49:52:fe:d3:ac:c6:a8: 19:58:89:38:ed:6d:62:2c:37:8d:62:4e:35:ae:9f: 48:e8:11:d1:5b:d6:c2:a9:f8:5d:0b:e6:bd:46:49: db:70:72:40:1a:13:79:51:e5:c5:b5:48:ce:a8:28: 30:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A6:18:47:6E:32:E7:B2:92:4D:E9:C7:03:7C:4D:65:3F:F9:A9:04 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/488867FE1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.86.221.0/24 Signature Algorithm: sha256WithRSAEncryption 08:96:41:c3:dd:28:df:38:9b:f7:d4:f5:14:ad:89:af:6e:61: 74:7a:20:ab:c5:be:45:c4:f0:a4:90:84:6f:ba:40:b3:7e:2a: 22:2b:4d:56:9b:0a:9e:5f:c5:49:2b:d5:87:de:0a:7c:54:43: 51:56:2f:1b:ad:c0:e1:01:86:7d:58:d9:59:65:4b:80:49:a2: 63:85:82:ff:1f:97:cb:13:31:ba:09:70:69:ff:33:f1:e0:f2: 5c:4d:5e:73:36:d2:bc:27:7f:97:5e:34:4b:44:ed:72:92:ce: 87:ed:53:43:bb:ec:ff:76:bf:c7:52:9b:57:3e:91:62:73:fe: a4:11:80:52:4a:60:76:41:5c:5f:dd:a2:2d:e5:d5:34:c4:06: a6:98:c1:16:44:9b:ce:49:9b:ff:a8:1a:11:3e:b6:ec:9c:00: ff:38:cb:ed:33:48:89:6c:ca:44:66:b8:e7:ed:eb:4c:a9:f5: 72:76:be:5f:af:35:de:95:72:73:2c:48:ec:31:8d:b6:07:ad: e0:84:01:e3:bf:af:cb:7c:30:09:90:9c:0e:4d:a4:d7:74:b3: 2a:26:e9:a7:41:6d:38:44:fa:db:df:2c:b7:97:37:43:2c:af: 6a:5b:bc:bf:15:e4:46:e1:01:23:f4:75:d8:af:3b:f5:d3:ea: e5:f9:c2:a2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTA0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzMyOC1jMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b3DaVi25AOL3mTbdSQbj7zY+VJKl8eFLBSTb+2TrzYf8M1eigPrqEfVHDRx XPh2B1xyv5QqN6huVcFHJlL7zJHhfBfIX6SfSAU8eGccqfodjUC6WiRz2GLA2Wy4 jSpH+MdoKMp/bGUmopSZ3C7TaxfvFCLkcjwY5eM3sMVEn8Jx8ioU+DvoZu3coiXW Eqw2t9c2IoSP90TBKx0e/5ozXvUDQN3gv0iJ2OOmoz7zhbFADSPS4VXh48WwX3qh DLEKe3hN7/4YcH+j40lS/tOsxqgZWIk47W1iLDeNYk41rp9I6BHRW9bCqfhdC+a9 RknbcHJAGhN5UeXFtUjOqCgwSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLqmGEdu Mueykk3pxwN8TWU/+akEMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDg4ODY3RkUx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSVt0wDQYJKoZIhvcNAQELBQADggEBAAiWQcPdKN84m/fU 9RStia9uYXR6IKvFvkXE8KSQhG+6QLN+KiIrTVabCp5fxUkr1YfeCnxUQ1FWLxut wOEBhn1Y2VllS4BJomOFgv8fl8sTMboJcGn/M/Hg8lxNXnM20rwnf5deNEtE7XKS zoftU0O77P92v8dSm1c+kWJz/qQRgFJKYHZBXF/doi3l1TTEBqaYwRZEm85Jm/+o GhE+tuycAP84y+0zSIlsykRmuOft60yp9XJ2vl+vNd6VcnMsSOwxjbYHreCEAeO/ r8t8MAmQnA5NpNd0syom6adBbThE+tvfLLeXN0Msr2pbvL8V5EbhASP0ddivO/XT 6uX5wqI= -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org