$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa File: D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa (raw, json) Hash identifier: 4yLcqA95hCRksD5YGqnTaTw1Fp6hXbRRmLsf+UnUmeo= Subject key identifier: ED:3C:F7:BD:AD:68:1F:28:B0:D3:76:BB:5E:85:5E:6A:7A:A9:62:AB Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 36D0 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa Signing time: Sat 08 Jul 2023 14:31:29 +0000 ROA not before: Sat 08 Jul 2023 14:31:29 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 55867 IP address blocks: 171.102.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14032 (0x36d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:31:29 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a97341-3b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:11:88:28:37:b6:30:00:fb:72:9f:8e:21: c4:4d:f6:17:37:7f:8a:64:e9:a3:97:f7:e7:81:80: 2c:18:5f:b6:32:c5:b8:b3:7e:65:d8:c8:51:73:92: 7b:53:97:02:48:69:f9:32:58:bf:60:61:d2:94:0d: 49:85:5c:c2:30:16:e3:3a:3f:f1:fb:d8:c1:ba:7f: 2c:ee:2d:b3:8d:46:d9:fa:b3:40:c7:70:f7:3f:fc: e9:c4:01:20:8c:c5:2d:6f:67:aa:8d:40:06:c1:b0: e4:8c:68:b1:28:3c:c5:f0:fe:f1:5e:bf:8e:21:3d: c2:f5:a5:f0:75:c6:73:15:3d:bb:6d:6a:ed:d1:fa: 26:7f:2f:2f:9f:7d:e6:4f:59:c4:7b:e2:65:5e:23: 48:7a:c0:4c:72:4a:fa:b9:cb:93:95:8d:11:e2:05: d8:33:12:e3:c8:46:ac:a4:35:57:56:c4:62:be:ad: 4c:4d:3a:60:58:59:4b:65:d8:4e:cd:16:54:26:31: 76:c2:9e:e9:d5:96:e0:f5:08:cd:0e:81:70:ce:6b: b0:c6:e6:15:84:82:7a:30:c9:2e:f6:f4:c3:c0:87: 36:f3:3e:8b:21:40:eb:8a:e5:8f:8d:5c:23:b6:5f: 4b:11:a2:19:39:24:d6:4b:e6:52:b3:6b:24:9a:67: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3C:F7:BD:AD:68:1F:28:B0:D3:76:BB:5E:85:5E:6A:7A:A9:62:AB X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 171.102.202.0/24 Signature Algorithm: sha256WithRSAEncryption 17:a1:ed:e7:18:76:d2:82:b7:bc:99:ba:a3:3b:16:fd:13:da: 72:5b:a3:97:65:a2:ac:a2:15:c8:32:11:b3:10:b6:6e:82:a3: 47:72:75:d5:87:f8:c4:d6:55:77:d7:a1:34:ee:bb:d4:c3:94: e2:64:dd:96:0f:ac:37:c8:c5:03:58:d5:e8:bc:34:fc:db:a1: 50:6e:58:65:ae:ae:93:cd:f8:1e:b9:73:75:b2:a2:64:46:7d: 67:30:4d:54:4b:ed:f9:b0:94:5e:91:e4:af:62:7c:f1:c3:ed: 81:89:33:0c:01:e3:a1:cf:ea:67:cb:ed:04:84:76:0c:ff:c4: 70:49:c9:df:5d:39:d3:27:8f:a7:80:5d:49:ab:53:6d:62:e7: 1b:7b:11:5e:23:a3:9e:00:0a:ef:fa:57:86:88:e9:db:94:e3: 63:8a:ac:36:00:7a:69:51:b7:2b:ac:6e:97:d1:fd:f9:0b:16: 63:87:b8:1e:9b:61:ac:53:4e:26:48:02:62:f1:a2:74:d7:ab: d9:38:0c:2f:27:cf:ca:76:9f:eb:79:21:5d:d1:0e:a1:ca:21: f8:65:12:67:da:11:18:1b:25:4f:00:fb:28:86:dc:47:f7:d1: 7b:b5:90:e6:18:61:4f:96:22:9e:e4:ee:ce:ca:e9:44:53:e0: a2:f2:44:76 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTI5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzM0MS0zYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTwRiCg3tjAA+3KfjiHETfYXN3+KZOmjl/fngYAsGF+2MsW4s35l2MhRc5J7 U5cCSGn5Mli/YGHSlA1JhVzCMBbjOj/x+9jBun8s7i2zjUbZ+rNAx3D3P/zpxAEg jMUtb2eqjUAGwbDkjGixKDzF8P7xXr+OIT3C9aXwdcZzFT27bWrt0fomfy8vn33m T1nEe+JlXiNIesBMckr6ucuTlY0R4gXYMxLjyEaspDVXVsRivq1MTTpgWFlLZdhO zRZUJjF2wp7p1Zbg9QjNDoFwzmuwxuYVhIJ6MMku9vTDwIc28z6LIUDriuWPjVwj tl9LEaIZOSTWS+ZSs2skmmdlqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO08972t aB8osNN2u16FXmp6qWKrMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvRDlEQUUwOTA1 QTVCMTFFQkJCQ0FBRjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACrZsowDQYJKoZIhvcNAQELBQADggEBABeh7ecYdtKCt7yZ uqM7Fv0T2nJbo5dloqyiFcgyEbMQtm6Co0dyddWH+MTWVXfXoTTuu9TDlOJk3ZYP rDfIxQNY1ei8NPzboVBuWGWurpPN+B65c3WyomRGfWcwTVRL7fmwlF6R5K9ifPHD 7YGJMwwB46HP6mfL7QSEdgz/xHBJyd9dOdMnj6eAXUmrU21i5xt7EV4jo54ACu/6 V4aI6duU42OKrDYAemlRtyusbpfR/fkLFmOHuB6bYaxTTiZIAmLxonTXq9k4DC8n z8p2n+t5IV3RDqHKIfhlEmfaERgbJU8A+yiG3Ef30Xu1kOYYYU+WIp7k7s7K6URT 4KLyRHY= -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org