$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4EDB7B1E1E0111E9A590C837C4F9AE02.roa File: 4EDB7B1E1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: FKSRXt/0e10yJYrrsB3ZX7WwNE9PIK7kLXo/V+RUnS8= Subject key identifier: 91:3E:DD:1E:09:32:8F:58:E0:08:DC:7F:30:E8:21:8F:3D:47:F1:CA Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 36C0 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4EDB7B1E1E0111E9A590C837C4F9AE02.roa Signing time: Sat 08 Jul 2023 14:31:14 +0000 ROA not before: Sat 08 Jul 2023 14:31:14 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 45806 IP address blocks: 61.90.177.0/24 maxlen: 24 61.90.248.0/24 maxlen: 24 119.46.87.0/24 maxlen: 24 119.46.89.0/24 maxlen: 24 171.102.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14016 (0x36c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:31:14 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a97332-30b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:cc:0c:46:5e:52:98:d3:38:8c:0e:68:08: d3:3a:29:ed:0a:20:94:fd:54:58:7e:b7:71:b4:2d: cc:1f:3b:0d:6d:70:71:cf:03:a5:1c:7a:41:c1:a4: 7c:0a:4e:87:66:91:0b:1a:c0:25:7c:ed:63:d7:b6: 5e:aa:22:74:89:15:ed:de:0c:b4:59:23:fe:80:1e: 46:f3:14:a1:ae:9d:55:33:35:9e:79:f0:06:1b:cd: e8:b1:11:70:c7:ae:52:c8:67:f9:bb:0a:99:9c:47: 0b:ad:4b:c3:41:2c:d7:8c:7e:7c:b7:65:77:66:a2: df:4e:72:45:1a:f1:60:3e:08:82:10:91:19:ab:b1: ee:bc:08:bc:80:ae:67:7c:47:4f:2b:f8:2c:d0:c1: e1:4d:e8:b9:71:30:08:63:3f:18:39:63:98:06:25: 80:d4:03:3d:97:10:4a:6f:23:4e:28:01:bb:4e:6c: 30:17:04:a8:85:1e:77:6c:4f:ba:a3:5b:13:99:ac: 1e:59:a8:ba:79:3f:52:d3:80:92:52:79:6c:c0:d9: a6:44:ef:5f:96:4d:dc:b2:aa:62:ca:39:07:9a:62: 3a:8c:e0:6b:e0:11:f5:fd:5a:fe:56:d1:c2:f7:2a: de:f7:89:25:d9:da:27:2f:42:6d:ef:f0:a9:d7:9d: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3E:DD:1E:09:32:8F:58:E0:08:DC:7F:30:E8:21:8F:3D:47:F1:CA X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4EDB7B1E1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.90.177.0/24 61.90.248.0/24 119.46.87.0/24 119.46.89.0/24 171.102.56.0/24 Signature Algorithm: sha256WithRSAEncryption 72:ed:85:8a:41:ec:a0:d4:b7:c6:03:af:00:1c:8f:89:8a:ad: b8:9e:92:30:9d:75:d9:3a:2f:74:b4:3e:4f:56:7c:b0:69:9f: 36:b4:23:51:27:8e:86:4c:cf:40:2b:70:b6:2d:0d:93:ac:8b: 0a:ea:06:5d:cc:08:81:9f:96:13:75:6a:3f:d4:5e:c6:7e:5c: 31:85:8d:e1:2b:11:8b:70:38:33:f0:8e:71:7c:35:fc:2b:22: 2d:3b:96:62:ae:93:2b:8b:de:4c:b4:2a:a8:0c:73:7f:b8:56: 0c:c2:a6:f6:63:2a:65:3c:42:6b:9a:5d:5a:de:0c:16:4e:2c: b9:39:02:0f:45:38:ce:a4:09:e5:c6:5a:07:36:4d:b0:a7:60: 21:39:44:48:d1:ab:40:8b:c2:95:89:a3:5b:84:56:a8:9f:be: 1c:7b:bd:b9:6a:fb:17:e5:54:0e:65:e3:3b:37:94:0a:c1:1a: fb:2f:49:9b:8f:e9:6e:05:09:17:9b:f1:76:b5:6c:99:8d:5d: c3:dc:db:a3:11:16:a8:75:0b:9b:7e:60:e2:e5:83:59:84:39: ae:80:d6:d9:8f:dd:03:0f:50:a2:1c:b5:5c:36:06:71:48:29: 8d:6e:43:59:17:78:cb:ef:d9:c5:01:fb:ed:8e:64:22:5c:af: 32:04:c9:fa -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICNsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTE0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzMzMi0zMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD/MDEZeUpjTOIwOaAjTOintCiCU/VRYfrdxtC3MHzsNbXBxzwOlHHpBwaR8 Ck6HZpELGsAlfO1j17ZeqiJ0iRXt3gy0WSP+gB5G8xShrp1VMzWeefAGG83osRFw x65SyGf5uwqZnEcLrUvDQSzXjH58t2V3ZqLfTnJFGvFgPgiCEJEZq7HuvAi8gK5n fEdPK/gs0MHhTei5cTAIYz8YOWOYBiWA1AM9lxBKbyNOKAG7TmwwFwSohR53bE+6 o1sTmaweWai6eT9S04CSUnlswNmmRO9flk3csqpiyjkHmmI6jOBr4BH1/Vr+VtHC 9yre94kl2donL0Jt7/Cp1533nQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJE+3R4J Mo9Y4AjcfzDoIY89R/HKMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEVEQjdCMUUx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAA9WrEDBAA9WvgDBAB3LlcDBAB3LlkDBACrZjgwDQYJKoZI hvcNAQELBQADggEBAHLthYpB7KDUt8YDrwAcj4mKrbiekjCdddk6L3S0Pk9WfLBp nza0I1EnjoZMz0ArcLYtDZOsiwrqBl3MCIGflhN1aj/UXsZ+XDGFjeErEYtwODPw jnF8NfwrIi07lmKukyuL3ky0KqgMc3+4VgzCpvZjKmU8QmuaXVreDBZOLLk5Ag9F OM6kCeXGWgc2TbCnYCE5REjRq0CLwpWJo1uEVqifvhx7vblq+xflVA5l4zs3lArB GvsvSZuP6W4FCReb8Xa1bJmNXcPc26MRFqh1C5t+YOLlg1mEOa6A1tmP3QMPUKIc tVw2BnFIKY1uQ1kXeMvv2cUB++2OZCJcrzIEyfo= -----END CERTIFICATE-----Generated at Fri May 24 18:22:52 2024 by rpki-client on console-ams.rpki-client.org