$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/FD252B2CB8FF11EE96506121C4F9AE02.roa File: FD252B2CB8FF11EE96506121C4F9AE02.roa (raw, json) Hash identifier: /xLgcciV1fAsMQUoHqYX8C0b6v/QUBkQkCnmsh29lS4= Subject key identifier: 20:28:3F:6D:26:56:54:5F:06:D0:85:BC:71:D3:D9:94:3B:64:D5:48 Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: 0F Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/FD252B2CB8FF11EE96506121C4F9AE02.roa Signing time: Mon 22 Jan 2024 08:26:50 +0000 ROA not before: Mon 22 Jan 2024 08:26:50 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152140 IP address blocks: 210.87.126.0/23 maxlen: 23 210.87.126.0/24 maxlen: 24 210.87.127.0/24 maxlen: 24 2001:df3:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: Jan 22 08:26:50 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65ae26ca-95ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:84:74:81:3a:53:36:e3:7a:93:c7:82:d2: ab:ca:c4:27:cf:1e:d3:1a:35:d1:84:e8:4b:c6:2a: 00:ef:d8:aa:35:61:08:da:d9:69:b3:fa:08:38:f9: b6:71:f6:4b:a3:d7:fd:02:01:2d:67:d1:7b:2b:08: 84:db:5c:ce:65:f4:93:76:13:6f:cb:f1:ee:74:63: de:49:b0:03:9c:14:31:bb:8b:5c:c9:83:ad:a0:33: 24:c6:b8:1d:d6:05:45:20:11:42:3b:3f:f5:62:14: 77:f6:cd:5c:30:2f:05:8f:b4:15:17:fb:3b:17:ab: f9:e3:f1:74:9e:e2:28:04:a7:9b:f8:72:9b:fc:94: 41:65:18:14:7a:b4:cd:e8:ff:bb:54:7c:5b:db:2e: 5a:56:b5:60:bf:d6:1f:54:b3:4a:44:35:be:11:44: 2d:2a:5c:e7:bd:cb:22:bc:ec:bc:5b:2d:de:cf:09: 77:63:4f:00:1a:fe:f8:16:26:c9:54:4c:db:08:47: 0f:96:e7:ac:16:b1:cb:78:26:15:f3:48:b0:80:a4: ec:ea:bb:6b:29:8b:45:20:a2:da:2b:0c:09:4a:c7: 34:32:0f:bb:20:77:87:de:9b:44:b8:10:f2:e6:29: ec:e5:89:32:7a:45:54:e3:ca:a6:21:2c:c8:58:7a: 97:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:28:3F:6D:26:56:54:5F:06:D0:85:BC:71:D3:D9:94:3B:64:D5:48 X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/FD252B2CB8FF11EE96506121C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.87.126.0/23 IPv6: 2001:df3:4040::/48 Signature Algorithm: sha256WithRSAEncryption 99:0d:4d:2e:2e:2b:32:0c:16:43:8e:ea:48:0b:c3:73:20:6e: 2a:76:9c:31:eb:fb:07:f9:8d:0f:f9:2c:00:b6:08:64:02:0d: 55:8b:39:c6:8b:e4:c1:56:22:7c:da:4d:ba:34:ca:4c:29:81: a7:9f:42:5a:9a:14:02:cc:43:62:40:ff:bb:4e:e2:46:aa:af: 10:f8:b9:95:e3:dd:e6:62:07:a1:59:9c:65:9e:9f:57:b8:d4: 6c:1d:e7:f3:71:b1:f6:93:7f:ce:48:5c:5a:73:d0:57:8b:d8: 22:e8:6c:06:c8:e8:7f:83:ac:90:e3:f7:0a:5e:ac:7a:0a:14: 42:c4:82:2c:d9:1c:25:34:39:bf:f0:33:29:21:4c:24:0e:18: 91:d3:3a:d5:9b:56:da:de:93:f9:d0:61:9e:e5:28:8a:3a:2f: 03:ff:96:87:37:96:45:c0:62:84:b2:11:9f:5e:1f:98:a0:bb: ed:b3:ce:bc:87:8d:4d:ee:ce:ae:05:37:ad:3a:a9:a4:40:b7: a0:92:2a:6d:4f:69:9e:f8:f0:f7:20:4e:9e:fb:e4:33:82:11: 28:ca:c3:88:f6:be:6c:32:4d:55:9e:25:7e:4b:65:ef:db:ea: 9c:6c:75:b9:b1:3e:32:e1:9a:2f:56:5b:f0:7b:05:5e:9a:16: 92:75:cd:11 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzkyMTExMC8GA1UEBRMoQzM3NTY4MjM0QUJFQzc5ODBGNkUxNzdENDhEMEI0MzE2 NDBERDMzQTAeFw0yNDAxMjIwODI2NTBaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YWUyNmNhLTk1ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0eoR0gTpTNuN6k8eC0qvKxCfPHtMaNdGE6EvGKgDv2Ko1YQja2Wmz+gg4+bZx 9kuj1/0CAS1n0XsrCITbXM5l9JN2E2/L8e50Y95JsAOcFDG7i1zJg62gMyTGuB3W BUUgEUI7P/ViFHf2zVwwLwWPtBUX+zsXq/nj8XSe4igEp5v4cpv8lEFlGBR6tM3o /7tUfFvbLlpWtWC/1h9Us0pENb4RRC0qXOe9yyK87LxbLd7PCXdjTwAa/vgWJslU TNsIRw+W56wWsct4JhXzSLCApOzqu2spi0UgotorDAlKxzQyD7sgd4fem0S4EPLm KezliTJ6RVTjyqYhLMhYepdRAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUICg/bSZW VF8G0IW8cdPZlDtk1UgwHwYDVR0jBBgwFoAUw3VoI0q+x5gPbhd9SNC0MWQN0zow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzOTIxL0U5NUM3REFDQjI4 ODExRUVBQTIzNTUxOUM0RjlBRTAyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzNWb0kwcS14NWdQYmhkOVNOQzBNV1FOMHpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi9GRDI1MkIyQ0I4 RkYxMUVFOTY1MDYxMjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAdJXfjAPBAIAAjAJAwcAIAEN80BAMA0GCSqGSIb3DQEBCwUA A4IBAQCZDU0uLisyDBZDjupIC8NzIG4qdpwx6/sH+Y0P+SwAtghkAg1ViznGi+TB ViJ82k26NMpMKYGnn0JamhQCzENiQP+7TuJGqq8Q+LmV493mYgehWZxlnp9XuNRs HefzcbH2k3/OSFxac9BXi9gi6GwGyOh/g6yQ4/cKXqx6ChRCxIIs2RwlNDm/8DMp IUwkDhiR0zrVm1ba3pP50GGe5SiKOi8D/5aHN5ZFwGKEshGfXh+YoLvts868h41N 7s6uBTetOqmkQLegkiptT2me+PD3IE6e++QzghEoysOI9r5sMk1VniV+S2Xv2+qc bHW5sT4y4ZovVlvwewVemhaSdc0R -----END CERTIFICATE-----Generated at Fri May 31 10:42:20 2024 by rpki-client on console-fra.rpki-client.org