$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/5D1C4CCCD13111EBBF945C80C4F9AE02.roa File: 5D1C4CCCD13111EBBF945C80C4F9AE02.roa (raw, json) Hash identifier: xU3l8v/6UVnR8htK4tUD8Z7IaqO/7A+pX4HGXgXUpN0= Subject key identifier: 2C:79:BE:03:EE:6F:63:ED:84:A6:F7:81:38:4E:EA:25:10:C3:32:78 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 071F Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/5D1C4CCCD13111EBBF945C80C4F9AE02.roa Signing time: Wed 12 Apr 2023 18:55:38 +0000 ROA not before: Wed 12 Apr 2023 18:55:38 +0000 ROA not after: Wed 29 May 2024 00:00:00 +0000 asID: 135353 IP address blocks: 45.118.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Feb 2024 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Apr 12 18:55:38 2023 GMT Not After : May 29 00:00:00 2024 GMT Subject: CN=6436feaa-0197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:06:4a:bc:ca:b6:fd:d2:4d:ee:9f:bf:74: 73:65:46:63:34:62:7f:d3:af:60:b8:dc:27:59:bc: 3d:c4:55:fd:0f:a9:20:0b:a0:f5:e4:d9:3d:b3:c8: 01:93:37:f6:4a:78:cd:95:af:a0:9b:f8:14:e2:20: fd:4d:7d:4e:a9:eb:47:69:d1:e8:c8:aa:42:f1:f9: ee:f0:92:18:26:40:be:4a:19:8d:49:d9:58:d8:60: 50:d2:cb:8c:01:9e:23:f4:a9:6a:a1:91:02:1a:33: 8d:7e:d8:4a:d7:3f:72:de:97:e9:c1:f7:19:31:18: b7:da:e7:2e:3d:d1:9b:7c:da:bb:49:a4:7d:e2:04: e8:7d:02:44:f3:b8:0d:d5:ab:a8:bb:09:45:bd:47: 49:0b:c6:7d:31:4a:b9:10:5c:c1:62:1b:6e:12:f6: 0d:ce:67:10:a0:55:c1:31:6a:6c:fb:1f:71:2d:1b: 43:59:a5:15:64:23:31:a7:2a:f0:0b:7f:a6:ae:47: 43:4d:49:8e:75:1b:ab:74:d5:d2:4b:3e:74:eb:30: a8:67:2a:50:09:6c:8a:46:7b:49:dd:b5:0f:f4:9f: f3:1c:49:d8:9e:98:83:a6:cd:dc:49:44:6a:2b:1a: 5d:62:b1:a7:1e:78:e5:81:6e:48:78:44:ad:b6:bb: a6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:79:BE:03:EE:6F:63:ED:84:A6:F7:81:38:4E:EA:25:10:C3:32:78 X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/5D1C4CCCD13111EBBF945C80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.70.0/24 Signature Algorithm: sha256WithRSAEncryption 70:7c:5b:fe:de:a8:1d:72:ea:22:1e:34:96:79:67:eb:fd:31: 07:ce:ad:28:09:70:0e:3d:53:a8:57:89:e4:cc:3a:ee:85:46: bf:57:c2:79:86:16:85:ec:f5:bb:c8:90:1b:04:82:c0:d2:58: 00:24:52:52:ee:af:43:0e:52:6d:6e:5c:55:a0:36:c0:d2:b8: 21:25:c7:c7:24:3d:cb:fa:3d:f9:e3:10:bf:4a:4d:b6:43:6e: 19:09:0d:15:84:0d:71:aa:5d:ed:96:a9:8b:06:fb:38:80:5d: d1:74:e0:c1:05:e1:4e:e5:ea:26:52:37:d3:3e:49:54:bf:e6: 21:48:a0:d9:32:de:a5:a8:f3:87:60:5b:e9:c5:85:32:19:b9: 7d:63:c1:30:80:c4:f1:3f:92:64:d0:c9:40:b6:39:54:66:74: 09:54:cd:84:60:09:3e:79:33:2d:c0:11:63:99:f8:b8:0e:3b: cf:cf:76:46:dd:6b:23:82:7f:64:d3:8e:d0:e6:fd:92:a6:36: 0b:92:b7:88:5a:38:46:5e:c0:ac:47:5b:98:e4:20:ae:18:67: 63:01:81:16:a1:e9:7a:39:17:45:c6:6b:35:56:bf:ad:1e:3a: 88:7b:a1:98:d4:6d:93:a9:b5:56:ad:04:2a:72:4a:79:dc:ab: 3f:d9:16:25 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjMwNDEyMTg1NTM4WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD VQQDEw02NDM2ZmVhYS0wMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuz4GSrzKtv3STe6fv3RzZUZjNGJ/069guNwnWbw9xFX9D6kgC6D15Nk9s8gB kzf2SnjNla+gm/gU4iD9TX1OqetHadHoyKpC8fnu8JIYJkC+ShmNSdlY2GBQ0suM AZ4j9KlqoZECGjONfthK1z9y3pfpwfcZMRi32ucuPdGbfNq7SaR94gTofQJE87gN 1auouwlFvUdJC8Z9MUq5EFzBYhtuEvYNzmcQoFXBMWps+x9xLRtDWaUVZCMxpyrw C3+mrkdDTUmOdRurdNXSSz506zCoZypQCWyKRntJ3bUP9J/zHEnYnpiDps3cSURq KxpdYrGnHnjlgW5IeESttrumFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCx5vgPu b2PthKb3gThO6iUQwzJ4MB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNCMDkvM0IzNjdCQ0UzM0I3MTFFOUFEMEY1ODdBQzRGOUFFMDIvNUQxQzRDQ0NE MTMxMTFFQkJGOTQ1QzgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtdkYwDQYJKoZIhvcNAQELBQADggEBAHB8W/7eqB1y6iIe NJZ5Z+v9MQfOrSgJcA49U6hXieTMOu6FRr9XwnmGFoXs9bvIkBsEgsDSWAAkUlLu r0MOUm1uXFWgNsDSuCElx8ckPcv6PfnjEL9KTbZDbhkJDRWEDXGqXe2WqYsG+ziA XdF04MEF4U7l6iZSN9M+SVS/5iFIoNky3qWo84dgW+nFhTIZuX1jwTCAxPE/kmTQ yUC2OVRmdAlUzYRgCT55My3AEWOZ+LgOO8/PdkbdayOCf2TTjtDm/ZKmNguSt4ha OEZewKxHW5jkIK4YZ2MBgRah6Xo5F0XGazVWv60eOoh7oZjUbZOptVatBCpySnnc qz/ZFiU= -----END CERTIFICATE-----Generated at Wed Feb 7 09:08:04 2024 by rpki-client on console-ams.rpki-client.org