$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/643F1F08B72F11ED85F55F23C4F9AE02.roa File: 643F1F08B72F11ED85F55F23C4F9AE02.roa (raw, json) Hash identifier: LxFKpaBLLiL4XtnZYPCkOU9w/U8/2UUxvuYKcFhpa5w= Subject key identifier: 9F:BE:DF:79:BA:BE:C2:84:CB:02:1F:1C:79:83:45:E5:50:14:76:6E Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 58 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/643F1F08B72F11ED85F55F23C4F9AE02.roa Signing time: Sat 29 Jul 2023 05:11:39 +0000 ROA not before: Sat 29 Jul 2023 05:11:39 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 18259 IP address blocks: 202.178.96.0/20 maxlen: 24 2401:4640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Jul 29 05:11:39 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64c49f8b-7c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:e4:35:40:5e:6c:8c:59:f9:13:1f:65:4e: 51:13:c2:b1:c7:b3:cf:fe:24:46:e6:8e:d0:9d:ab: f3:1b:82:12:ed:dc:e9:9a:60:8b:8a:c7:c7:8c:58: 41:86:fc:53:f4:bb:b9:51:c3:bf:f7:0c:19:42:12: bc:ae:db:ef:07:b4:70:ea:c7:af:33:ec:c0:06:72: f8:4f:83:21:e8:cb:eb:28:0b:06:20:43:c8:e9:26: 4c:66:4d:03:31:72:1d:66:c1:44:ec:07:8a:b9:a7: a6:35:9e:6d:b7:30:8c:ce:85:76:3b:c9:65:c0:2a: e2:14:80:49:a2:63:c6:26:57:33:15:cb:0b:a0:45: 5e:42:c6:f0:62:33:32:52:57:31:80:c6:01:53:9a: 17:f4:89:87:b7:dc:da:6c:30:54:86:62:98:15:39: b1:2f:c5:eb:3c:cd:c6:71:cb:72:c6:ca:c6:cc:88: ca:38:d4:2b:28:3b:f5:d1:a9:48:83:52:c9:b1:75: ab:87:02:a9:35:0e:46:5c:77:8b:47:db:04:f3:2e: ab:0f:7b:49:71:60:ff:66:c8:6a:76:06:1c:d3:5d: ac:9e:6a:d6:66:4f:a9:53:1e:3d:06:82:6c:53:5d: 7a:e8:1d:f6:86:a8:71:b2:f1:ed:a9:15:57:f0:e9: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BE:DF:79:BA:BE:C2:84:CB:02:1F:1C:79:83:45:E5:50:14:76:6E X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/643F1F08B72F11ED85F55F23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.178.96.0/20 IPv6: 2401:4640::/32 Signature Algorithm: sha256WithRSAEncryption 78:d8:83:4e:71:bb:d9:13:8f:5c:2b:8d:65:cd:36:89:60:71: 96:09:3f:e5:e1:e9:27:6f:6b:44:fe:f4:e4:58:2c:18:e2:6d: 41:18:30:37:5a:e0:2e:e5:75:f8:38:e9:5c:48:a2:22:e7:68: 11:12:96:d3:60:78:76:7a:32:03:84:b4:fe:e5:b5:d8:35:6d: e6:37:42:4b:09:6b:98:b5:35:1e:de:b7:0c:23:f7:f1:e0:7e: 68:ad:b5:36:7a:05:19:0a:7a:de:bd:52:a9:d0:7d:34:34:c8: a8:cb:ba:d8:98:24:c8:73:66:8c:cd:5d:63:b1:f3:bd:1f:6b: b7:0d:3d:f8:c6:53:80:c5:72:a9:11:3f:58:67:08:91:de:7b: c0:db:ca:ac:af:c9:f3:3b:fa:99:07:49:43:0c:6f:ea:5f:1e: 90:69:45:d7:18:ea:7d:c3:92:ea:64:5f:97:fa:da:9c:4f:f8: 2c:0c:7a:dc:e6:c1:ee:0e:e6:fb:7a:42:84:b2:8f:b8:82:5b: 17:80:80:c0:de:fc:6a:4e:c0:8a:c6:a0:c6:96:51:15:58:b8: b7:bd:b7:fe:b6:c2:36:f7:31:a2:59:6b:fb:52:82:9a:82:1e: ac:fa:e1:83:74:bb:45:7a:6d:a2:00:da:39:50:d3:9a:04:7e: a1:65:e1:9e -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUJFRDExMC8GA1UEBRMoMjc2ODkwNDNDNDNGRTYxQjNDRTNDNEVCRTZCNkMxNUZC Q0NEMkQwNzAeFw0yMzA3MjkwNTExMzlaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0YzQ5ZjhiLTdjMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF+uQ1QF5sjFn5Ex9lTlETwrHHs8/+JEbmjtCdq/MbghLt3OmaYIuKx8eMWEGG /FP0u7lRw7/3DBlCEryu2+8HtHDqx68z7MAGcvhPgyHoy+soCwYgQ8jpJkxmTQMx ch1mwUTsB4q5p6Y1nm23MIzOhXY7yWXAKuIUgEmiY8YmVzMVywugRV5CxvBiMzJS VzGAxgFTmhf0iYe33NpsMFSGYpgVObEvxes8zcZxy3LGysbMiMo41CsoO/XRqUiD UsmxdauHAqk1DkZcd4tH2wTzLqsPe0lxYP9myGp2BhzTXayeatZmT6lTHj0GgmxT XXroHfaGqHGy8e2pFVfw6fErAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUn77febq+ woTLAh8ceYNF5VAUdm4wHwYDVR0jBBgwFoAUJ2iQQ8Q/5hs848Tr5rbBX7zNLQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQkVEL0ZCMkFBOEVDQjcy QTExRUQ4ODRBMDkxREM0RjlBRTAyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjJpUVE4UV81aHM4NDhUcjVyYkJYN3pOTFFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi82NDNGMUYwOEI3 MkYxMUVEODVGNTVGMjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEBMqyYDANBAIAAjAHAwUAJAFGQDANBgkqhkiG9w0BAQsFAAOC AQEAeNiDTnG72ROPXCuNZc02iWBxlgk/5eHpJ29rRP705FgsGOJtQRgwN1rgLuV1 +DjpXEiiIudoERKW02B4dnoyA4S0/uW12DVt5jdCSwlrmLU1Ht63DCP38eB+aK21 NnoFGQp63r1SqdB9NDTIqMu62JgkyHNmjM1dY7HzvR9rtw09+MZTgMVyqRE/WGcI kd57wNvKrK/J8zv6mQdJQwxv6l8ekGlF1xjqfcOS6mRfl/ranE/4LAx63ObB7g7m +3pChLKPuIJbF4CAwN78ak7AisagxpZRFVi4t723/rbCNvcxollr+1KCmoIerPrh g3S7RXptogDaOVDTmgR+oWXhng== -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org