$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BCBD866404D311E9A6452047C4F9AE02.roa File: BCBD866404D311E9A6452047C4F9AE02.roa (raw, json) Hash identifier: gZt/dS9ERLDDlgltJbQZ2ZyHPNSJ0PM0lPFxRy8+HmM= Subject key identifier: 82:6E:B4:B8:C4:1C:C9:12:40:75:44:2B:01:F8:89:1A:6C:EF:CF:29 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1D3B Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BCBD866404D311E9A6452047C4F9AE02.roa Signing time: Tue 02 Jan 2024 16:54:42 +0000 ROA not before: Tue 02 Jan 2024 16:54:42 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 58571 IP address blocks: 202.98.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7483 (0x1d3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Jan 2 16:54:42 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65943fd2-dc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:39:1f:bf:fc:21:c2:85:8f:2c:4b:46:8c: 7e:59:ef:be:e6:49:58:e6:76:92:6f:bb:72:4d:4f: d8:de:eb:db:25:92:36:be:30:47:07:aa:89:50:cd: 3c:a0:14:89:cd:15:1a:62:59:c3:55:49:38:8f:5c: 6e:bf:89:ec:7f:f2:e0:db:d6:6b:3d:7c:90:4c:8e: ae:3c:85:43:4d:77:d9:c5:a2:bf:a5:b8:d7:6c:24: 52:50:09:e1:ea:13:38:a3:66:7e:ff:64:64:48:cb: 9f:78:d2:59:fb:41:e8:69:5e:fa:00:97:24:2f:6a: 9f:50:32:90:5e:b8:9e:39:39:2a:4c:d2:f2:96:10: a9:85:a7:ba:41:e1:3d:2b:0e:7a:d5:49:c8:b2:1d: 66:0c:ca:09:24:b8:33:85:06:95:48:4f:c5:54:82: 1d:58:e0:32:f8:96:23:12:5a:71:72:75:19:38:63: cf:9b:78:10:1c:4e:df:d0:16:10:42:a7:a5:04:77: 09:28:a2:36:c8:04:97:e4:44:59:86:44:25:64:29: 2f:34:c5:33:aa:9e:98:bd:67:d5:43:67:76:9c:ed: 7c:91:85:f2:b3:5e:ae:3a:eb:5e:5c:04:0f:99:42: b2:53:ce:36:c9:58:0c:73:c0:7d:cc:bf:7b:53:fd: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6E:B4:B8:C4:1C:C9:12:40:75:44:2B:01:F8:89:1A:6C:EF:CF:29 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BCBD866404D311E9A6452047C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.98.192.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:ca:23:a5:a8:59:bd:fe:b3:1e:7f:c8:7e:82:90:14:d3:e4: 3c:b1:ae:91:3f:75:13:8e:1b:72:06:6d:5f:4d:0c:5e:6f:e0: 5d:92:e4:d9:9f:2e:80:f7:10:d5:65:e2:7e:d6:83:13:37:cd: 9d:ef:61:99:7d:10:d0:e6:55:c1:45:46:29:07:00:be:da:f1: 0a:28:8d:2a:d8:e4:68:98:61:b7:6b:1f:37:29:54:d5:ba:88: 3b:de:4b:b9:39:c4:85:bd:0f:62:a3:0e:96:65:cd:56:50:f4: 76:e7:b4:77:c9:cf:69:b9:59:90:ad:33:84:3f:a0:9c:f5:5b: 15:9a:78:80:c9:70:69:a3:fb:bc:5c:13:d7:b9:31:40:46:9a: 34:32:a0:ff:ff:c1:14:c0:f8:5c:70:5c:cd:aa:80:19:67:b9: 61:cd:96:1c:b1:d7:4e:44:62:ad:b6:86:5c:56:ca:b3:87:fe: 27:d3:9b:d6:99:94:8f:82:9e:ec:ca:fb:95:c3:72:27:2e:5c: 5d:d4:9c:43:6c:de:f2:2f:1c:f7:94:0a:dc:2c:54:6d:40:25: 64:71:e7:31:6d:c9:04:03:e7:6c:43:ab:ea:92:d0:ac:08:75: a1:36:1c:fa:f4:01:2d:fb:d4:56:db:d7:a7:9e:0a:c5:13:1d: 40:f1:5f:20 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjQwMTAyMTY1NDQyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0M2ZkMi1kYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Mw5H7/8IcKFjyxLRox+We++5klY5naSb7tyTU/Y3uvbJZI2vjBHB6qJUM08 oBSJzRUaYlnDVUk4j1xuv4nsf/Lg29ZrPXyQTI6uPIVDTXfZxaK/pbjXbCRSUAnh 6hM4o2Z+/2RkSMufeNJZ+0HoaV76AJckL2qfUDKQXrieOTkqTNLylhCphae6QeE9 Kw561UnIsh1mDMoJJLgzhQaVSE/FVIIdWOAy+JYjElpxcnUZOGPPm3gQHE7f0BYQ QqelBHcJKKI2yASX5ERZhkQlZCkvNMUzqp6YvWfVQ2d2nO18kYXys16uOuteXAQP mUKyU842yVgMc8B9zL97U/04WwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIJutLjE HMkSQHVEKwH4iRps788pMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvQkNCRDg2NjQw NEQzMTFFOUE2NDUyMDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKYsAwDQYJKoZIhvcNAQELBQADggEBAJvKI6WoWb3+sx5/ yH6CkBTT5DyxrpE/dROOG3IGbV9NDF5v4F2S5NmfLoD3ENVl4n7WgxM3zZ3vYZl9 ENDmVcFFRikHAL7a8QoojSrY5GiYYbdrHzcpVNW6iDveS7k5xIW9D2KjDpZlzVZQ 9HbntHfJz2m5WZCtM4Q/oJz1WxWaeIDJcGmj+7xcE9e5MUBGmjQyoP//wRTA+Fxw XM2qgBlnuWHNlhyx105EYq22hlxWyrOH/ifTm9aZlI+CnuzK+5XDcicuXF3UnENs 3vIvHPeUCtwsVG1AJWRx5zFtyQQD52xDq+qS0KwIdaE2HPr0AS371Fbb16eeCsUT HUDxXyA= -----END CERTIFICATE-----Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org