$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8C14C710729F11EC85AE6D45C4F9AE02.roa File: 8C14C710729F11EC85AE6D45C4F9AE02.roa (raw, json) Hash identifier: xQjMQdtoZF7qOsDxBsLv0e3V9OFJzkh3vdv7Sykq1Jg= Subject key identifier: 68:4F:83:DD:1D:F7:EF:91:86:46:2B:A0:D7:8F:02:6E:37:0E:27:6D Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 36C9 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8C14C710729F11EC85AE6D45C4F9AE02.roa Signing time: Sat 08 Jul 2023 14:31:23 +0000 ROA not before: Sat 08 Jul 2023 14:31:23 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 55514 IP address blocks: 171.102.38.0/24 maxlen: 24 171.102.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14025 (0x36c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:31:23 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a9733a-9a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:5f:98:c3:da:e8:6d:a3:5d:63:30:e0:3b: 07:b4:36:fb:01:cc:18:f1:ba:f0:f1:d6:11:70:df: 7d:ef:75:fa:f2:6e:e0:4a:88:58:8c:34:1e:71:95: 8f:92:6a:71:ce:c8:37:8d:97:a5:07:4b:ad:91:80: df:23:d1:2d:50:34:7b:78:08:4b:9c:8e:90:7f:3d: fc:e0:76:92:5e:6b:94:30:4a:c9:d2:22:ec:05:69: 6b:8e:15:86:01:b6:56:cd:09:9e:fc:e9:39:2e:33: 6d:18:9c:e6:6a:4e:e6:61:e0:6c:0e:92:73:77:51: b8:66:3d:f6:bc:d5:50:76:1a:12:b4:49:78:53:99: 8c:13:b2:4d:df:6a:78:26:09:3f:a5:32:1a:75:52: 13:19:23:fd:50:d5:6e:de:3b:74:30:9f:5e:01:28: 80:6f:b6:19:f0:c2:3f:65:c2:2b:d1:db:c1:1d:8c: c2:e4:67:40:2b:04:b6:21:9c:7e:1b:0a:32:0f:3f: fe:f0:7a:2b:97:c5:89:d2:ce:5d:81:f2:c9:fe:7e: 91:45:7d:04:c4:7f:0c:8d:12:dd:ae:a2:55:c6:cd: 60:61:4d:ce:29:1a:6f:9d:53:93:6f:5c:07:7b:ca: ca:12:53:01:b8:91:b1:86:fc:9a:17:28:99:9e:2c: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4F:83:DD:1D:F7:EF:91:86:46:2B:A0:D7:8F:02:6E:37:0E:27:6D X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8C14C710729F11EC85AE6D45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 171.102.38.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:c0:a0:be:f9:76:8c:e4:65:35:9d:db:14:45:e8:db:5d:17: 61:d0:fa:af:d1:01:67:db:63:c9:a5:c8:eb:58:2e:0e:9f:de: 3d:46:f2:4e:f0:29:89:48:d4:0b:7f:c1:06:7e:58:7b:86:65: 37:05:22:23:00:7b:71:5a:a0:02:99:fa:2a:10:8f:26:38:4e: 82:95:0f:b7:76:24:c4:c7:e7:ba:06:87:24:97:88:57:fd:3b: 45:85:86:d8:fb:28:c0:76:eb:ba:5f:ec:0b:72:4d:a1:11:e7: f3:07:05:3d:ce:b6:0f:f3:f7:37:9a:1b:b5:2f:3c:f9:98:4d: 25:aa:96:dd:c7:10:cb:8b:ad:d3:ff:63:91:69:24:38:bd:40: 8f:d6:70:7b:36:66:bc:7e:f5:c9:6f:4e:47:24:44:92:30:80: da:e1:e7:ca:67:df:c4:da:fa:43:05:ce:93:02:58:6d:ac:1a: 0a:4d:5f:a4:2e:da:32:79:7b:64:e8:67:04:3b:e3:f3:c6:db: b4:2d:eb:be:18:80:2d:2e:80:a8:87:7d:2e:0b:a8:b9:fe:ea: 1e:a1:50:f4:30:3d:27:b5:5c:28:87:7f:07:07:e2:bf:a3:40: 3a:ee:a4:23:fa:9f:c6:30:72:2e:0c:ef:9a:3a:2f:47:a3:b9: 8e:ff:3e:c5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTIzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzMzYS05YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1xfmMPa6G2jXWMw4DsHtDb7AcwY8brw8dYRcN9973X68m7gSohYjDQecZWP kmpxzsg3jZelB0utkYDfI9EtUDR7eAhLnI6Qfz384HaSXmuUMErJ0iLsBWlrjhWG AbZWzQme/Ok5LjNtGJzmak7mYeBsDpJzd1G4Zj32vNVQdhoStEl4U5mME7JN32p4 Jgk/pTIadVITGSP9UNVu3jt0MJ9eASiAb7YZ8MI/ZcIr0dvBHYzC5GdAKwS2IZx+ GwoyDz/+8Horl8WJ0s5dgfLJ/n6RRX0ExH8MjRLdrqJVxs1gYU3OKRpvnVOTb1wH e8rKElMBuJGxhvyaFyiZnixu8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGhPg90d 9++RhkYroNePAm43DidtMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvOEMxNEM3MTA3 MjlGMTFFQzg1QUU2RDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGrZiYwDQYJKoZIhvcNAQELBQADggEBAHzAoL75dozkZTWd 2xRF6NtdF2HQ+q/RAWfbY8mlyOtYLg6f3j1G8k7wKYlI1At/wQZ+WHuGZTcFIiMA e3FaoAKZ+ioQjyY4ToKVD7d2JMTH57oGhySXiFf9O0WFhtj7KMB267pf7AtyTaER 5/MHBT3Otg/z9zeaG7UvPPmYTSWqlt3HEMuLrdP/Y5FpJDi9QI/WcHs2Zrx+9clv TkckRJIwgNrh58pn38Ta+kMFzpMCWG2sGgpNX6Qu2jJ5e2ToZwQ74/PG27Qt674Y gC0ugKiHfS4LqLn+6h6hUPQwPSe1XCiHfwcH4r+jQDrupCP6n8Ywci4M75o6L0ej uY7/PsU= -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org