$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6A90213E3FAD11EEA252F62FC4F9AE02.roa File: 6A90213E3FAD11EEA252F62FC4F9AE02.roa (raw, json) Hash identifier: iffxhBdU/hhvD+td53bLM0vQjORom48w0V6OvBgTVNY= Subject key identifier: 2B:0A:46:FC:13:7F:4F:7F:CD:5B:0C:DE:1E:9B:10:A9:79:34:0D:9F Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 1903 Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6A90213E3FAD11EEA252F62FC4F9AE02.roa Signing time: Sat 18 May 2024 17:25:11 +0000 ROA not before: Sat 18 May 2024 17:25:11 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 7714 IP address blocks: 202.20.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6403 (0x1903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: May 18 17:25:11 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6648e477-74d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e9:51:64:21:3c:5f:48:6b:77:e1:95:fb:c0: 44:97:d6:2e:a1:c2:6c:ce:38:68:c3:bd:38:2c:0e: 76:12:5d:46:96:a1:f6:cf:8f:e0:9d:b4:b0:48:ee: 9d:ab:3d:bf:22:20:a3:f8:40:bb:d3:74:7d:44:27: 54:ff:c7:1f:b5:a6:db:56:29:5c:2c:ba:44:a7:bb: 82:e4:53:58:53:fa:17:23:9f:ba:c2:05:07:87:a5: 24:b3:77:b7:0f:2d:80:8b:c4:8c:c7:a5:46:fc:c4: 4b:f2:29:33:31:ac:40:7d:88:68:1c:8c:66:70:96: 39:a5:83:e7:32:31:c5:b6:61:e7:6c:e5:8b:1f:1b: 78:c4:2e:fb:95:d5:5d:31:d9:7a:ac:9d:db:31:9b: a2:e2:31:ed:e2:e7:e1:08:68:eb:92:b8:c2:3a:70: cb:ad:6d:ae:cf:0d:12:3d:1b:7e:ec:e9:60:d7:c3: 34:ed:ab:24:6f:e8:5d:b0:f5:1f:40:40:1f:72:c1: 14:10:95:81:b3:59:90:10:81:20:1d:ed:6b:af:70: 3f:b0:ab:fb:72:c5:31:f1:05:c6:92:72:85:f9:99: 77:00:6d:29:4b:98:ec:f3:99:a9:df:43:08:8b:23: 3f:b5:e5:b1:1e:1e:20:e0:70:19:24:f5:2c:b9:73: 11:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:46:FC:13:7F:4F:7F:CD:5B:0C:DE:1E:9B:10:A9:79:34:0D:9F X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6A90213E3FAD11EEA252F62FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.20.76.0/24 Signature Algorithm: sha256WithRSAEncryption 02:14:7b:b0:68:26:4f:d9:ca:5c:34:66:b6:b4:52:5b:62:69: 64:ec:3a:cc:7d:45:c7:3f:30:3f:c9:66:9a:ed:87:ff:3d:fb: db:5e:38:c4:9f:f8:51:e8:c3:86:39:db:67:f0:4d:ea:f7:32: 7c:c0:29:32:52:01:4f:cd:16:bb:32:25:5a:72:5a:96:ad:01: b7:d6:b2:5d:2a:70:66:13:a8:ee:72:0f:0f:b9:8b:b7:90:41: 2d:25:59:37:96:a7:48:d5:be:d3:2b:7e:60:0f:92:2b:12:09: 04:e8:04:06:ab:cb:db:1f:68:9c:0b:df:c9:65:f9:b2:28:1d: 20:72:f7:7a:f6:64:21:70:7c:9a:11:7c:49:65:6f:47:4b:38: 3b:77:6e:e7:c5:9e:73:4c:af:2b:cd:94:84:b5:25:e7:96:b3: 65:20:1e:4b:9a:ee:9a:ab:54:70:fe:d6:77:b6:ec:68:9d:77: 83:a2:c1:f0:bb:fb:81:9d:28:2e:fd:33:72:71:bd:c5:81:9f: 06:78:22:ed:4a:c5:b2:e6:f2:13:9f:e8:3f:7a:e9:9a:40:71: 06:36:de:05:1c:d5:e0:b6:45:08:98:30:1a:20:f1:06:bd:f4: ac:b8:aa:39:9c:87:c9:a3:e4:4c:d6:cf:57:d3:d8:27:23:b5: d7:0f:24:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjQwNTE4MTcyNTExWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ4ZTQ3Ny03NGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmulRZCE8X0hrd+GV+8BEl9YuocJszjhow704LA52El1GlqH2z4/gnbSwSO6d qz2/IiCj+EC703R9RCdU/8cftabbVilcLLpEp7uC5FNYU/oXI5+6wgUHh6Uks3e3 Dy2Ai8SMx6VG/MRL8ikzMaxAfYhoHIxmcJY5pYPnMjHFtmHnbOWLHxt4xC77ldVd Mdl6rJ3bMZui4jHt4ufhCGjrkrjCOnDLrW2uzw0SPRt+7Olg18M07askb+hdsPUf QEAfcsEUEJWBs1mQEIEgHe1rr3A/sKv7csUx8QXGknKF+Zl3AG0pS5js85mp30MI iyM/teWxHh4g4HAZJPUsuXMR4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCsKRvwT f09/zVsM3h6bEKl5NA2fMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvNkE5MDIxM0Uz RkFEMTFFRUEyNTJGNjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKFEwwDQYJKoZIhvcNAQELBQADggEBAAIUe7BoJk/Zylw0 Zra0UltiaWTsOsx9Rcc/MD/JZprth/89+9teOMSf+FHow4Y522fwTer3MnzAKTJS AU/NFrsyJVpyWpatAbfWsl0qcGYTqO5yDw+5i7eQQS0lWTeWp0jVvtMrfmAPkisS CQToBAary9sfaJwL38ll+bIoHSBy93r2ZCFwfJoRfEllb0dLODt3bufFnnNMryvN lIS1JeeWs2UgHkua7pqrVHD+1ne27Gidd4OiwfC7+4GdKC79M3JxvcWBnwZ4Iu1K xbLm8hOf6D966ZpAcQY23gUc1eC2RQiYMBog8Qa99Ky4qjmch8mj5EzWz1fT2Ccj tdcPJDE= -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org