$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/29D600062C3311EEBFF69B6CC4F9AE02.roa File: 29D600062C3311EEBFF69B6CC4F9AE02.roa (raw, json) Hash identifier: ngWH1G+IyPwemoOuF+JzNuSD97M/6I4YZeW4mDTVznw= Subject key identifier: 2B:2B:31:6A:CE:0B:CF:9E:37:5F:30:83:37:EF:12:96:A2:70:60:80 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: 0F Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/29D600062C3311EEBFF69B6CC4F9AE02.roa Signing time: Sat 19 Aug 2023 13:34:46 +0000 ROA not before: Sat 19 Aug 2023 13:34:46 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 4778 IP address blocks: 203.20.218.0/24 maxlen: 24 203.20.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Validity Not Before: Aug 19 13:34:46 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64e0c4f6-973d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7e:d4:69:24:02:07:1b:0d:19:f0:f4:3e:3c: 05:19:e3:e3:98:cf:a3:04:2d:45:56:a3:90:9d:3c: 48:54:18:c8:2c:aa:de:2b:7b:65:96:15:29:84:d6: 12:a1:2c:e5:d1:e6:d7:50:49:cc:cb:fd:98:63:6c: ab:8b:5f:f3:32:5d:cd:a6:94:e9:30:f7:32:85:24: c6:15:0b:c9:ee:71:8b:cc:e7:db:f9:61:95:5f:66: a8:df:e6:19:9c:41:6b:c1:0d:79:03:7d:fa:de:1d: ae:89:e1:f8:66:fa:0c:65:b0:e8:90:99:a9:0f:b2: 49:1b:dd:82:c3:07:eb:1b:f1:3c:67:a0:a6:0d:0b: bf:d7:e3:06:2a:87:3d:f4:2c:cd:8c:85:09:59:c2: 18:01:87:16:91:00:b0:58:41:e9:81:d9:46:a1:7f: 30:44:7e:4c:db:31:29:0b:51:97:be:5e:c2:0b:97: 13:5f:1a:79:d6:f1:f4:ed:68:85:dc:0d:e3:eb:2c: 68:cb:e4:35:eb:81:60:e6:a8:92:2b:2f:0b:48:ec: 25:77:3b:b5:0c:38:0a:f9:9e:91:96:60:0f:58:54: e9:77:59:f7:93:73:0e:7b:57:0e:1d:e4:50:36:5f: 6c:48:03:fe:ae:32:c5:6a:f9:0e:6f:05:f9:16:d7: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2B:31:6A:CE:0B:CF:9E:37:5F:30:83:37:EF:12:96:A2:70:60:80 X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/29D600062C3311EEBFF69B6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.218.0/23 Signature Algorithm: sha256WithRSAEncryption 94:d7:da:2c:23:2d:c3:b6:7b:ff:bd:13:f8:b6:27:ad:7b:43: 08:62:bd:65:5e:d6:82:2d:e9:39:5e:46:b9:44:09:b9:81:5b: 64:c1:a4:3f:14:c2:ad:a4:4a:ef:e9:eb:38:61:92:72:17:f3: 9a:de:64:a0:a3:3f:07:0f:79:3a:9f:86:be:29:f6:c5:cc:55: 49:78:f4:69:e0:0d:67:b8:a5:d1:b8:38:f8:88:41:0c:39:ab: 44:8a:a1:22:c4:22:08:a3:f4:67:e3:81:b7:2b:b1:f0:e0:10: 0a:cd:99:22:40:8c:d1:4b:3e:42:79:a3:7d:a2:f9:ef:0b:2c: 81:46:81:b9:89:78:fa:d1:82:b9:48:76:28:46:08:f5:8c:0b: d1:bd:a3:72:26:c7:5c:97:a3:58:45:fd:34:c0:39:08:0e:ee: 90:d6:84:38:02:e9:0c:d0:f3:64:a4:c2:2d:2a:73:7a:17:6c: 27:ed:8f:91:30:13:a3:00:9a:dd:1e:dd:9c:62:f6:f4:47:7f: 0f:09:cb:6d:d6:9b:fa:77:c6:c9:28:db:38:88:bf:6b:e2:c8: 9f:38:1f:a1:bc:f2:64:6a:79:cd:8d:77:5a:ba:62:4a:0f:3d: 85:e1:77:63:87:e9:52:a5:6c:49:ac:d1:85:35:4a:b8:f4:36: 3d:48:60:2c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OURDRDExMC8GA1UEBRMoNTc5MzQzNkQyMkE5NkEwNjEzNjg1MTIwM0JCNzI1OTg0 RDcwQjAxNzAeFw0yMzA4MTkxMzM0NDZaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZTBjNGY2LTk3M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYftRpJAIHGw0Z8PQ+PAUZ4+OYz6MELUVWo5CdPEhUGMgsqt4re2WWFSmE1hKh LOXR5tdQSczL/ZhjbKuLX/MyXc2mlOkw9zKFJMYVC8nucYvM59v5YZVfZqjf5hmc QWvBDXkDffreHa6J4fhm+gxlsOiQmakPskkb3YLDB+sb8TxnoKYNC7/X4wYqhz30 LM2MhQlZwhgBhxaRALBYQemB2UahfzBEfkzbMSkLUZe+XsILlxNfGnnW8fTtaIXc DePrLGjL5DXrgWDmqJIrLwtI7CV3O7UMOAr5npGWYA9YVOl3WfeTcw57Vw4d5FA2 X2xIA/6uMsVq+Q5vBfkW18X9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKysxas4L z543XzCDN+8SlqJwYIAwHwYDVR0jBBgwFoAUV5NDbSKpagYTaFEgO7clmE1wsBcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5RENEL0EwMEQ3MDA2MkMy NDExRUVBQjk3OEYwRkM0RjlBRTAyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NC Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjVORGJTS3BhZ1lUYUZFZ083Y2xtRTF3c0JjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi8yOUQ2MDAwNjJD MzMxMUVFQkZGNjlCNkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcsU2jANBgkqhkiG9w0BAQsFAAOCAQEAlNfaLCMtw7Z7/70T +LYnrXtDCGK9ZV7Wgi3pOV5GuUQJuYFbZMGkPxTCraRK7+nrOGGSchfzmt5koKM/ Bw95Op+Gvin2xcxVSXj0aeANZ7il0bg4+IhBDDmrRIqhIsQiCKP0Z+OBtyux8OAQ Cs2ZIkCM0Us+QnmjfaL57wssgUaBuYl4+tGCuUh2KEYI9YwL0b2jcibHXJejWEX9 NMA5CA7ukNaEOALpDNDzZKTCLSpzehdsJ+2PkTATowCa3R7dnGL29Ed/DwnLbdab +nfGySjbOIi/a+LInzgfobzyZGp5zY13WrpiSg89heF3Y4fpUqVsSazRhTVKuPQ2 PUhgLA== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:13 2024 by rpki-client on console-ams.rpki-client.org