$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0454DCC4C63A11EAB59CC262C4F9AE02.roa File: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (raw, json) Hash identifier: cH+HNTdNPLB+Mpe8pDEkV7NrSte2+A6Fkurnr6HR0N4= Subject key identifier: 35:61:02:46:8A:84:AA:46:0F:1A:E3:59:E4:E8:47:CE:03:0E:D8:FC Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 0732 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0454DCC4C63A11EAB59CC262C4F9AE02.roa Signing time: Mon 28 Aug 2023 21:38:27 +0000 ROA not before: Mon 28 Aug 2023 21:38:27 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 14618 IP address blocks: 202.173.24.0/24 maxlen: 24 202.173.26.0/24 maxlen: 24 202.173.27.0/24 maxlen: 24 202.173.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 22:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Aug 28 21:38:27 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ed13d2-2b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:f1:6f:27:c3:92:b2:d5:f6:29:f6:8f:2e: 21:d2:d6:88:ad:97:de:54:92:fb:d8:d5:5d:fe:73: 95:00:c4:2b:30:67:e8:01:9e:68:2f:84:76:ff:8f: 4a:69:4c:7e:91:5e:01:6c:a7:b8:5e:94:5d:c0:ae: 0b:9e:0a:76:c4:08:c3:a4:6f:73:84:9a:9c:63:f8: 45:52:a7:08:ff:72:88:e5:3b:3d:70:76:08:5b:0b: 00:07:fe:bf:ed:4c:04:93:f7:1f:8d:66:73:37:da: 77:18:31:71:f7:73:a1:b5:6b:ea:26:25:e8:d5:ef: 3b:3c:b0:cc:8f:9b:48:ca:40:97:41:6d:2c:de:8c: f0:4f:f2:81:27:5f:78:0a:a3:f1:bc:7a:b7:25:66: 6f:d5:2b:de:d1:4e:e9:dd:e2:51:5f:19:64:8c:b4: 5a:10:eb:bf:01:a4:a4:2c:c8:03:7c:aa:c3:9a:52: cd:27:f8:0c:55:b9:aa:d4:31:1b:0c:81:f0:b1:e6: 26:95:c7:5a:1f:3f:87:04:6e:35:55:cb:a8:11:09: 3c:b0:f1:5a:e7:c3:f8:4f:3d:11:60:14:2c:19:8d: e0:16:0c:ce:d1:0e:96:a9:d1:3e:ee:a9:e5:4d:8d: fb:df:99:28:f7:b6:0d:2b:92:6c:82:2d:a6:1c:e4: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:61:02:46:8A:84:AA:46:0F:1A:E3:59:E4:E8:47:CE:03:0E:D8:FC X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0454DCC4C63A11EAB59CC262C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.173.24.0/24 202.173.26.0/23 202.173.31.0/24 Signature Algorithm: sha256WithRSAEncryption 57:c4:f7:23:82:49:98:d5:7a:05:26:d7:b5:df:a0:e4:07:cb: c0:34:f3:30:44:20:d6:a4:a5:b4:c3:8f:21:ef:95:07:48:ae: 39:28:ae:58:6c:f2:66:51:27:b6:b7:3d:71:c4:b0:1a:e0:4e: 6b:81:8a:91:0c:ff:af:b6:1d:ab:69:33:47:3a:4a:2d:7f:eb: 21:1d:aa:8d:db:43:c6:63:22:d6:89:f2:0f:1f:0e:0f:92:d6: 25:d5:3c:c1:73:e6:6a:b3:8f:4b:8d:e9:2a:f2:dc:6f:f1:03: be:d2:70:b4:00:9d:21:42:d5:d0:e8:89:3d:5d:be:9d:b7:89: 37:c8:7a:7f:17:9f:f6:01:d9:dc:23:1e:26:42:31:98:7d:77: 31:59:02:9c:19:45:8b:89:43:70:f2:e7:71:47:4b:1c:5a:01: d4:ed:6b:f8:45:76:08:ac:0e:8e:52:6a:65:c8:bc:3e:53:4e: f7:74:94:2a:61:d4:b6:3d:44:57:d6:14:a1:6b:28:4b:e3:fb: 63:42:fa:26:26:4f:13:49:b5:c0:33:6b:d1:0f:3f:1c:4c:3d: a3:1b:12:87:a1:79:b8:a3:af:cc:4f:a4:c0:50:d2:a2:6f:7c: fe:a1:d7:cf:31:e7:c9:8d:eb:49:de:34:19:be:93:79:cb:1f: b9:ee:6c:aa -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjMwODI4MjEzODI3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVkMTNkMi0yYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4jxbyfDkrLV9in2jy4h0taIrZfeVJL72NVd/nOVAMQrMGfoAZ5oL4R2/49K aUx+kV4BbKe4XpRdwK4Lngp2xAjDpG9zhJqcY/hFUqcI/3KI5Ts9cHYIWwsAB/6/ 7UwEk/cfjWZzN9p3GDFx93OhtWvqJiXo1e87PLDMj5tIykCXQW0s3ozwT/KBJ194 CqPxvHq3JWZv1Sve0U7p3eJRXxlkjLRaEOu/AaSkLMgDfKrDmlLNJ/gMVbmq1DEb DIHwseYmlcdaHz+HBG41VcuoEQk8sPFa58P4Tz0RYBQsGY3gFgzO0Q6WqdE+7qnl TY3735ko97YNK5Jsgi2mHOQQHwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDVhAkaK hKpGDxrjWeToR84DDtj8MB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIyNDEvNEY3Qjk4NjZDNUY3MTFFQUJBOUQyMDgxQzRGOUFFMDIvMDQ1NERDQzRD NjNBMTFFQUI1OUNDMjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBADKrRgDBAHKrRoDBADKrR8wDQYJKoZIhvcNAQELBQADggEB AFfE9yOCSZjVegUm17XfoOQHy8A08zBEINakpbTDjyHvlQdIrjkorlhs8mZRJ7a3 PXHEsBrgTmuBipEM/6+2HatpM0c6Si1/6yEdqo3bQ8ZjItaJ8g8fDg+S1iXVPMFz 5mqzj0uN6Sry3G/xA77ScLQAnSFC1dDoiT1dvp23iTfIen8Xn/YB2dwjHiZCMZh9 dzFZApwZRYuJQ3Dy53FHSxxaAdTta/hFdgisDo5SamXIvD5TTvd0lCph1LY9RFfW FKFrKEvj+2NC+iYmTxNJtcAza9EPPxxMPaMbEoehebijr8xPpMBQ0qJvfP6h188x 58mN60neNBm+k3nLH7nubKo= -----END CERTIFICATE-----Generated at Thu Apr 18 23:10:08 2024 by rpki-client on console-ams.rpki-client.org