$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/54376ADC1E0111E9A590C837C4F9AE02.roa File: 54376ADC1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: QkOQNExFs6l4g3TL2sWbx0zsWhs9q4zxfXKugpcDi+0= Subject key identifier: 48:EB:D7:94:86:BA:9C:40:50:37:63:2E:62:65:E8:79:5D:E8:B3:9E Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 36CF Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/54376ADC1E0111E9A590C837C4F9AE02.roa Signing time: Sat 08 Jul 2023 14:31:28 +0000 ROA not before: Sat 08 Jul 2023 14:31:28 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 55844 IP address blocks: 119.46.243.0/24 maxlen: 24 2001:fb0:1078::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14031 (0x36cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:31:28 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a97340-d6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:47:0f:2f:59:bd:44:38:c3:a3:6f:1d:ab: 94:cb:f1:53:35:84:1a:5f:e3:8e:f3:33:46:85:2d: 90:1f:d4:0d:fe:43:9b:90:64:bd:f1:46:41:10:f3: 0d:5e:df:1b:13:f9:1f:ba:9a:30:64:c6:39:4c:ee: 53:92:04:c4:f9:c9:fb:b5:e5:91:11:80:9a:27:be: a9:81:7c:84:50:e5:bc:0b:56:98:b5:fa:9d:0a:da: a8:44:80:74:1d:e4:60:27:29:59:ed:a7:40:a2:6f: 04:0d:2c:d8:f8:ed:48:2c:e5:2f:17:f6:65:15:fe: 68:d7:9f:84:fd:ff:62:8c:24:45:d4:e6:9e:04:12: 30:47:51:73:df:e8:42:6e:ef:e4:54:b9:58:26:49: b4:d5:2b:ed:37:9d:a5:6a:f7:c2:83:8c:7f:0e:3b: e1:9d:1b:f6:5b:9b:d9:fb:71:83:39:a7:9f:60:09: 37:e1:53:8a:d7:10:43:84:ca:79:6e:42:46:44:bd: 7c:d7:eb:01:ef:ff:16:c6:d8:25:4d:41:84:74:b7: 93:3f:f2:82:52:4e:bc:cd:cd:e8:98:bc:2b:1d:05: 98:94:cb:09:72:45:ce:d0:e7:35:88:a8:6c:2a:4f: 00:53:da:ba:11:ed:dc:65:d6:44:7b:92:dd:e5:de: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EB:D7:94:86:BA:9C:40:50:37:63:2E:62:65:E8:79:5D:E8:B3:9E X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/54376ADC1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.46.243.0/24 IPv6: 2001:fb0:1078::/48 Signature Algorithm: sha256WithRSAEncryption 25:4a:6d:d2:99:4e:3a:a8:2e:2a:58:52:d1:89:12:0f:3d:4b: f3:30:ca:c7:a4:50:dd:7e:c5:d7:26:92:a7:97:75:3e:5d:fd: 94:0f:8e:ba:28:9c:6c:1c:e6:f6:e6:45:26:99:af:98:b7:a6: 59:27:a7:56:1d:f6:1e:5b:12:52:3b:51:f9:48:86:3d:4b:c4: 7e:a5:5d:e6:6a:51:c1:38:b0:0a:25:07:db:97:3a:6f:99:0b: 4f:7f:7b:65:4e:d7:37:83:16:7b:44:13:9e:af:79:a3:c6:41: 31:5f:d1:b8:48:f2:30:1f:9e:14:54:66:40:30:4e:37:88:93: a0:f8:b3:c4:7f:31:21:1d:b5:64:46:ea:a5:2e:d0:49:6c:3f: 44:cd:28:f3:a7:5a:68:7e:f0:a3:3f:5f:d7:ed:28:1b:ac:2a: 6a:cd:83:22:9b:a4:ff:09:11:d0:6c:da:e1:ee:7a:b8:04:ce: 52:9d:91:49:9e:2b:1b:1f:de:1c:34:59:23:12:38:4f:a3:0d: da:57:ff:68:e3:cf:67:37:a6:1e:1a:b8:20:d5:e5:20:14:ca: db:69:49:8f:31:8b:a0:92:75:20:8b:0b:f3:61:05:73:c6:54: 59:53:ec:f5:a1:19:50:03:ec:47:4e:db:be:d2:c1:67:c0:21: 54:de:98:20 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTI4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzM0MC1kNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT1HDy9ZvUQ4w6NvHauUy/FTNYQaX+OO8zNGhS2QH9QN/kObkGS98UZBEPMN Xt8bE/kfupowZMY5TO5TkgTE+cn7teWREYCaJ76pgXyEUOW8C1aYtfqdCtqoRIB0 HeRgJylZ7adAom8EDSzY+O1ILOUvF/ZlFf5o15+E/f9ijCRF1OaeBBIwR1Fz3+hC bu/kVLlYJkm01SvtN52lavfCg4x/DjvhnRv2W5vZ+3GDOaefYAk34VOK1xBDhMp5 bkJGRL181+sB7/8WxtglTUGEdLeTP/KCUk68zc3omLwrHQWYlMsJckXO0Oc1iKhs Kk8AU9q6Ee3cZdZEe5Ld5d4+MQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEjr15SG upxAUDdjLmJl6Hld6LOeMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTQzNzZBREMx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAB3LvMwDwQCAAIwCQMHACABD7AQeDANBgkqhkiG9w0BAQsF AAOCAQEAJUpt0plOOqguKlhS0YkSDz1L8zDKx6RQ3X7F1yaSp5d1Pl39lA+Ouiic bBzm9uZFJpmvmLemWSenVh32HlsSUjtR+UiGPUvEfqVd5mpRwTiwCiUH25c6b5kL T397ZU7XN4MWe0QTnq95o8ZBMV/RuEjyMB+eFFRmQDBON4iToPizxH8xIR21ZEbq pS7QSWw/RM0o86daaH7woz9f1+0oG6wqas2DIpuk/wkR0Gza4e56uATOUp2RSZ4r Gx/eHDRZIxI4T6MN2lf/aOPPZzemHhq4INXlIBTK22lJjzGLoJJ1IIsL82EFc8ZU WVPs9aEZUAPsR07bvtLBZ8AhVN6YIA== -----END CERTIFICATE-----Generated at Fri May 24 15:43:20 2024 by rpki-client on console-fra.rpki-client.org