$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E9A620EAEBB11EA8A15501DC4F9AE02.roa File: 4E9A620EAEBB11EA8A15501DC4F9AE02.roa (raw, json) Hash identifier: 786Ir0WFvWbI4vV6SVW1kMt6mRcSKgYH6l8qwJA11Tw= Subject key identifier: 2B:3C:B4:3B:20:A2:EA:7A:AF:EB:75:8D:60:C8:E0:F1:4C:33:92:19 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 369A Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E9A620EAEBB11EA8A15501DC4F9AE02.roa Signing time: Sat 08 Jul 2023 14:30:42 +0000 ROA not before: Sat 08 Jul 2023 14:30:42 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 15133 IP address blocks: 119.46.85.0/24 maxlen: 24 2001:fb0:109f:8005::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13978 (0x369a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:30:42 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a97312-b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3e:44:45:af:7d:0d:25:0a:6d:08:22:85:fe: 34:49:01:e1:de:1a:74:98:77:d5:ae:9c:7c:d7:40: f5:c7:48:22:b6:b3:89:ce:dc:f0:f3:2e:f8:98:cc: 27:aa:16:9f:43:50:a6:fa:8c:e6:53:34:8e:3b:16: 61:2d:8a:d1:14:9b:88:ff:67:88:68:44:7a:d8:d3: 97:ec:d7:01:34:9e:84:ba:73:c5:6b:be:90:48:6d: 3a:34:0f:77:48:60:f3:4b:65:14:53:0e:92:48:f9: 72:f9:ed:1f:f6:8f:b8:25:b4:52:46:74:1b:98:45: fd:ea:6f:59:09:73:04:2f:bb:9e:ac:7d:a1:12:d4: a2:8c:c5:fc:9f:ea:65:37:27:ef:67:b5:2c:cc:91: 9c:77:8e:c7:22:f5:d4:b7:19:9b:69:ce:77:46:97: 25:2d:e4:a0:a2:a0:da:b0:d5:39:c9:4f:2a:ab:c0: 6a:04:ca:e1:5c:2b:ea:2d:ae:73:31:12:0a:65:d1: be:a0:28:9b:81:10:ee:8f:7c:33:da:fb:e0:96:e8: 8d:8a:a4:6d:43:c0:7b:89:a3:a6:f0:79:c3:6c:c1: 45:ce:0a:9f:f3:97:c9:88:85:eb:af:09:cd:61:44: 9f:e2:f3:34:3c:77:7b:3e:9c:0c:41:07:da:a5:4f: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3C:B4:3B:20:A2:EA:7A:AF:EB:75:8D:60:C8:E0:F1:4C:33:92:19 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E9A620EAEBB11EA8A15501DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.46.85.0/24 IPv6: 2001:fb0:109f:8005::/64 Signature Algorithm: sha256WithRSAEncryption 37:dc:1c:e3:5b:e1:83:83:14:9d:53:e0:ce:31:d5:a2:17:43: 9f:25:21:49:88:83:b7:ee:05:9f:7b:4b:87:5f:ad:13:a7:23: 65:42:6a:1a:fd:48:7f:fd:b1:89:01:35:f0:80:ef:7e:00:e9: 71:c3:da:49:ec:d4:48:fe:1a:07:4d:e7:ce:3e:fd:a1:b7:dc: 40:46:00:67:45:f7:b0:46:03:25:f2:07:5b:cd:69:7e:69:53: 42:53:28:67:b2:66:02:df:87:15:b8:45:16:21:4d:fb:65:93: aa:e6:88:bc:7e:69:14:e6:e0:b4:cb:c0:df:b5:dc:ad:99:8d: ea:2a:fa:6a:05:70:08:29:a7:0c:fd:cf:e3:18:20:38:23:d7: 6e:75:34:76:1f:7c:a1:35:90:6e:a2:c5:eb:e4:86:d5:a8:35: 85:b0:36:20:14:85:e8:91:a8:09:74:a3:68:c3:af:1b:6b:ca: 83:5b:29:17:0c:e6:1f:a5:62:a1:e8:b9:36:d6:87:d4:78:97: fc:a6:9f:5f:23:c4:b6:74:72:59:49:fe:cd:15:51:3b:e1:1a: f3:ff:e8:d8:f9:83:70:0f:1a:be:75:3c:03:37:02:9b:a1:d0: bf:5c:d3:53:d9:08:be:c5:b0:e2:0f:6d:2a:77:ac:38:b6:1a: 9d:b4:04:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMDQyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzMxMi1iOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6j5ERa99DSUKbQgihf40SQHh3hp0mHfVrpx810D1x0gitrOJztzw8y74mMwn qhafQ1Cm+ozmUzSOOxZhLYrRFJuI/2eIaER62NOX7NcBNJ6EunPFa76QSG06NA93 SGDzS2UUUw6SSPly+e0f9o+4JbRSRnQbmEX96m9ZCXMEL7uerH2hEtSijMX8n+pl NyfvZ7UszJGcd47HIvXUtxmbac53RpclLeSgoqDasNU5yU8qq8BqBMrhXCvqLa5z MRIKZdG+oCibgRDuj3wz2vvgluiNiqRtQ8B7iaOm8HnDbMFFzgqf85fJiIXrrwnN YUSf4vM0PHd7PpwMQQfapU9c8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCs8tDsg oup6r+t1jWDI4PFMM5IZMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEU5QTYyMEVB RUJCMTFFQThBMTU1MDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMAwEAgABMAYDBAB3LlUwEQQCAAIwCwMJACABD7AQn4AFMA0GCSqGSIb3DQEB CwUAA4IBAQA33BzjW+GDgxSdU+DOMdWiF0OfJSFJiIO37gWfe0uHX60TpyNlQmoa /Uh//bGJATXwgO9+AOlxw9pJ7NRI/hoHTefOPv2ht9xARgBnRfewRgMl8gdbzWl+ aVNCUyhnsmYC34cVuEUWIU37ZZOq5oi8fmkU5uC0y8DftdytmY3qKvpqBXAIKacM /c/jGCA4I9dudTR2H3yhNZBuosXr5IbVqDWFsDYgFIXokagJdKNow68ba8qDWykX DOYfpWKh6Lk21ofUeJf8pp9fI8S2dHJZSf7NFVE74Rrz/+jY+YNwDxq+dTwDNwKb odC/XNNT2Qi+xbDiD20qd6w4thqdtAQK -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org