$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A96C25C1E0111E9A590C837C4F9AE02.roa File: 4A96C25C1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: T+6sTRqSF7fiuqbLC7DhW+wfP0gRnVKdOMUZog1phzs= Subject key identifier: 75:9A:33:B0:36:4B:2F:85:21:5F:7F:9B:BB:84:00:3A:C6:57:83:72 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 36B8 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A96C25C1E0111E9A590C837C4F9AE02.roa Signing time: Sat 08 Jul 2023 14:31:07 +0000 ROA not before: Sat 08 Jul 2023 14:31:07 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38554 IP address blocks: 58.97.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14008 (0x36b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:31:07 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a9732b-135f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:0e:c8:48:82:d6:04:5a:1c:64:3d:04:ab: 6d:77:ca:69:ca:16:84:cd:81:29:36:4d:94:b6:9d: 90:f4:b2:cc:6a:bd:44:bf:c8:ef:22:5a:67:46:9d: e1:51:b1:e0:50:2b:4c:45:c9:43:1a:da:e3:3d:b9: 3b:e0:ac:e6:a0:08:9c:a9:43:dd:97:68:e6:27:72: 79:3f:bd:07:f1:3e:99:b5:ee:5e:6d:e0:43:74:44: 28:e1:cf:91:5a:ba:ff:fc:e2:98:5d:c5:25:5a:52: ab:10:ab:1f:3a:20:6e:ef:cb:0e:fc:9c:e8:04:5f: 88:47:7f:f6:9b:d1:3f:1f:d3:31:0d:1b:cb:15:85: d1:4b:05:3a:99:ec:eb:70:bd:ca:38:18:69:12:b2: 1c:aa:a1:0e:1b:22:78:d4:b7:dd:31:ac:75:44:42: 9b:ab:b5:fa:2a:0c:cf:91:74:9e:2d:0c:ea:a1:52: 1f:9c:30:e7:0d:c0:c0:ca:c3:a7:f8:01:b9:c9:a5: 0d:15:a1:84:0b:28:3d:7a:08:80:44:f3:55:fa:69: 44:a5:87:be:bc:05:a7:fe:83:29:00:d8:e9:5c:76: d7:31:80:35:f3:ef:21:4f:c6:34:c1:fb:a6:a1:df: 22:fb:ee:53:fe:8e:34:61:54:07:28:7b:65:a0:ce: b2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9A:33:B0:36:4B:2F:85:21:5F:7F:9B:BB:84:00:3A:C6:57:83:72 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A96C25C1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.97.20.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:09:50:a3:45:88:fc:83:1e:23:9b:b6:ff:a3:26:66:85:16: 0e:57:c6:91:df:52:f9:ff:b4:7a:08:30:a7:6b:17:c3:64:5c: 03:dd:e1:46:64:7e:c0:21:47:0b:ad:b4:95:58:1c:5f:21:89: 7e:a4:c4:34:00:1f:f5:84:c5:a3:80:0e:5b:e9:ef:ac:2a:37: 85:bf:8a:1c:f1:4b:6e:15:38:3b:96:4f:d4:a6:b3:c0:2c:1c: 7b:67:e7:4a:19:5d:86:f9:bd:91:28:1a:0d:a8:83:6a:ee:06: 46:d9:69:82:4a:9b:fc:2c:97:a1:24:08:b1:78:ae:57:29:d8: 27:b9:b5:08:91:1a:8b:2d:a2:e5:d5:83:ad:ae:96:ef:e4:30: 03:7c:75:14:52:65:01:c5:b7:cb:a3:15:95:a0:17:c0:ea:a8: ed:c8:1d:3d:a0:41:3f:98:dc:7f:2c:90:68:be:47:23:d6:1d: b3:66:a8:d9:54:b6:c6:4d:af:95:09:17:bb:cf:73:20:d3:be: ed:25:aa:c0:5f:3c:85:36:09:a6:a6:22:e5:1a:37:1f:66:54: 23:a5:68:a5:d1:44:37:43:0f:02:4b:14:c9:3e:47:e6:94:b5: 26:79:08:64:eb:92:ca:d9:72:33:d0:c1:cc:b8:5e:bd:cb:81: a5:77:78:f7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTA3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzMyYi0xMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAom0OyEiC1gRaHGQ9BKttd8ppyhaEzYEpNk2Utp2Q9LLMar1Ev8jvIlpnRp3h UbHgUCtMRclDGtrjPbk74KzmoAicqUPdl2jmJ3J5P70H8T6Zte5ebeBDdEQo4c+R Wrr//OKYXcUlWlKrEKsfOiBu78sO/JzoBF+IR3/2m9E/H9MxDRvLFYXRSwU6mezr cL3KOBhpErIcqqEOGyJ41LfdMax1REKbq7X6KgzPkXSeLQzqoVIfnDDnDcDAysOn +AG5yaUNFaGECyg9egiARPNV+mlEpYe+vAWn/oMpANjpXHbXMYA18+8hT8Y0wfum od8i++5T/o40YVQHKHtloM6ywwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHWaM7A2 Sy+FIV9/m7uEADrGV4NyMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEE5NkMyNUMx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6YRQwDQYJKoZIhvcNAQELBQADggEBADwJUKNFiPyDHiOb tv+jJmaFFg5XxpHfUvn/tHoIMKdrF8NkXAPd4UZkfsAhRwuttJVYHF8hiX6kxDQA H/WExaOADlvp76wqN4W/ihzxS24VODuWT9Sms8AsHHtn50oZXYb5vZEoGg2og2ru BkbZaYJKm/wsl6EkCLF4rlcp2Ce5tQiRGostouXVg62ulu/kMAN8dRRSZQHFt8uj FZWgF8DqqO3IHT2gQT+Y3H8skGi+RyPWHbNmqNlUtsZNr5UJF7vPcyDTvu0lqsBf PIU2CaamIuUaNx9mVCOlaKXRRDdDDwJLFMk+R+aUtSZ5CGTrksrZcjPQwcy4Xr3L gaV3ePc= -----END CERTIFICATE-----Generated at Fri May 24 15:43:20 2024 by rpki-client on console-fra.rpki-client.org