$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa File: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (raw, json) Hash identifier: LBfH7RWj7WEPhZ3PqtOEAEDirP2HRxdsl8cOuzTfDFc= Subject key identifier: C8:F3:EB:88:E7:E7:22:A9:80:CD:B8:64:53:10:AF:24:A5:30:6D:6A Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 53 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa Signing time: Tue 25 Jul 2023 06:22:48 +0000 ROA not before: Tue 25 Jul 2023 06:22:48 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 37900 IP address blocks: 202.2.88.0/22 maxlen: 24 202.4.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Jul 25 06:22:48 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64bf6a38-8c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:01:b7:5d:b2:5d:75:0c:95:71:4e:5e:8c: 69:8f:23:7e:93:db:f6:d6:c2:5a:7b:81:0a:3e:d2: 44:ba:2f:03:d1:0e:f1:c4:74:f7:31:d3:b8:7d:e1: 14:3b:d5:39:78:73:43:03:77:3d:ab:4f:35:19:35: 68:ea:bd:e9:87:61:06:4f:da:7d:ac:b4:c0:4e:c1: 7a:b9:d3:2f:3e:8c:7b:ed:12:f9:5f:d2:fa:34:a3: b6:a5:75:19:28:9e:eb:47:45:9a:af:d2:a9:ac:20: 40:2f:c3:f4:c5:c1:3f:fa:8a:b3:f9:4b:1b:3d:4b: f7:10:ac:db:fe:a3:d7:74:09:02:f0:6b:dd:81:06: a7:0c:8b:20:64:f6:fc:3a:f1:ec:5b:2f:00:83:98: 90:65:50:69:ff:91:52:87:8a:3c:32:a5:26:3b:ae: cd:a4:66:89:6f:2c:12:d9:a9:ec:6b:1d:76:59:15: 71:4a:30:89:8b:7d:c3:5c:3f:74:bb:c6:b0:fd:b3: 5b:25:56:77:be:e5:c8:1e:16:c8:a2:da:4c:b9:ad: 63:17:01:a2:70:95:b2:e2:00:a9:ad:4f:75:37:de: 56:bd:52:92:b3:af:92:41:d1:d6:84:46:dd:fb:2f: 26:2b:ca:fa:51:47:49:3a:7b:45:4d:27:8e:c3:f6: 83:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F3:EB:88:E7:E7:22:A9:80:CD:B8:64:53:10:AF:24:A5:30:6D:6A X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.2.88.0/22 202.4.244.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:f0:41:28:94:ba:f3:59:b6:a2:6a:58:13:84:00:d5:b0:09: 8f:a7:ac:2f:2c:74:22:b2:86:25:d5:32:29:b3:6b:14:54:4c: ca:47:70:4b:dc:4f:66:e7:21:bd:d2:15:5f:df:03:18:14:b6: d9:8a:d9:d0:fa:64:c7:7e:e8:25:4e:18:5c:f7:b4:df:81:62: 65:ea:32:8f:d6:56:18:b7:33:f9:d8:38:10:74:e0:db:b4:3a: 79:ff:9b:a5:b1:b7:51:14:95:41:e1:ad:e7:6e:56:71:24:ca: 94:be:55:69:fa:37:50:92:33:b5:88:47:aa:67:f8:1e:0f:f1: 6b:08:3e:6e:d0:74:f0:a7:fb:87:74:b2:d1:d3:44:f6:55:07: fc:73:81:aa:c2:98:db:57:de:e0:03:39:ee:0d:7f:8f:59:00: e7:91:39:a0:9b:b7:70:1b:77:8e:48:f3:c1:b6:29:02:7c:a4: 39:cc:62:df:e8:47:81:3e:60:03:39:4b:ef:f3:38:c2:3f:50: fa:ee:bc:f3:68:df:2b:00:31:ba:95:ef:17:cd:e7:24:4e:29: 16:61:d6:64:df:60:e5:09:78:ba:8e:5b:d7:10:9c:78:10:01: 8d:f1:0f:61:74:4f:71:38:74:54:05:cb:d7:a8:fa:3c:ba:0d: d9:1d:26:35 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUJFRDExMC8GA1UEBRMoMjc2ODkwNDNDNDNGRTYxQjNDRTNDNEVCRTZCNkMxNUZC Q0NEMkQwNzAeFw0yMzA3MjUwNjIyNDhaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0YmY2YTM4LThjMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ6gG3XbJddQyVcU5ejGmPI36T2/bWwlp7gQo+0kS6LwPRDvHEdPcx07h94RQ7 1Tl4c0MDdz2rTzUZNWjqvemHYQZP2n2stMBOwXq50y8+jHvtEvlf0vo0o7aldRko nutHRZqv0qmsIEAvw/TFwT/6irP5Sxs9S/cQrNv+o9d0CQLwa92BBqcMiyBk9vw6 8exbLwCDmJBlUGn/kVKHijwypSY7rs2kZolvLBLZqexrHXZZFXFKMImLfcNcP3S7 xrD9s1slVne+5cgeFsii2ky5rWMXAaJwlbLiAKmtT3U33la9UpKzr5JB0daERt37 LyYryvpRR0k6e0VNJ47D9oMlAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUyPPriOfn IqmAzbhkUxCvJKUwbWowHwYDVR0jBBgwFoAUJ2iQQ8Q/5hs848Tr5rbBX7zNLQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQkVEL0ZCMkFBOEVDQjcy QTExRUQ4ODRBMDkxREM0RjlBRTAyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjJpUVE4UV81aHM4NDhUcjVyYkJYN3pOTFFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi84NUJCN0E0RTJB QjMxMUVFOThFQTAzMTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAsoCWAMEAsoE9DANBgkqhkiG9w0BAQsFAAOCAQEAjfBBKJS6 81m2ompYE4QA1bAJj6esLyx0IrKGJdUyKbNrFFRMykdwS9xPZuchvdIVX98DGBS2 2YrZ0Ppkx37oJU4YXPe034FiZeoyj9ZWGLcz+dg4EHTg27Q6ef+bpbG3URSVQeGt 525WcSTKlL5Vafo3UJIztYhHqmf4Hg/xawg+btB08Kf7h3Sy0dNE9lUH/HOBqsKY 21fe4AM57g1/j1kA55E5oJu3cBt3jkjzwbYpAnykOcxi3+hHgT5gAzlL7/M4wj9Q +u6882jfKwAxupXvF83nJE4pFmHWZN9g5Ql4uo5b1xCceBABjfEPYXRPcTh0VAXL 16j6PLoN2R0mNQ== -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org