$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa File: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (raw, json) Hash identifier: mq9IErlXtLjA6bZPaOi1Wg4LlomF2SH5Rowc0ythHaM= Subject key identifier: 5A:3F:DA:59:E8:58:BF:49:AE:51:62:6F:22:27:06:25:42:64:A0:D4 Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Certificate serial: 336E Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa Signing time: Wed 20 Sep 2023 14:51:01 +0000 ROA not before: Wed 20 Sep 2023 14:51:01 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 38241 IP address blocks: 202.137.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13166 (0x336e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Validity Not Before: Sep 20 14:51:01 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=650b06d4-0f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:97:8c:82:cc:a2:e7:9d:22:97:8d:59:63: 2d:ef:83:7c:6c:b5:ea:35:a0:e4:0e:1d:13:a0:30: 1d:66:b8:c1:9c:61:20:2e:aa:88:8f:ec:a4:d0:8a: 1f:63:74:4c:6e:cc:32:db:aa:1c:c4:35:e0:af:d7: 42:b8:f5:ca:99:53:cf:6f:cb:d2:9e:e5:22:ca:54: 97:71:94:75:62:a7:bf:1d:7d:7e:02:73:a2:21:51: ed:2d:77:09:4e:e5:58:31:f2:dd:0c:53:a3:47:96: f0:d6:5f:1e:da:71:84:0c:4f:6c:02:b7:81:2b:f5: 37:bb:27:89:e4:64:27:a8:c8:4d:c5:90:66:63:a0: 18:a0:56:a5:20:a1:a2:b4:2a:e9:54:63:0d:4f:21: 86:bb:44:88:41:8e:56:08:fc:c3:9b:29:68:30:3e: 99:d8:f9:3e:72:b3:d7:b2:ef:ff:4b:43:c9:ce:3a: 40:9b:1d:6e:6c:f8:76:24:9f:c9:d9:11:7c:b4:f8: 3f:c4:02:f0:23:0a:46:b2:c7:f4:e7:ef:a7:20:b1: ce:b8:e4:e4:1e:79:08:99:98:ab:0a:f3:f9:96:f8: 5d:f1:6f:c1:1a:d7:e5:e8:52:66:3c:d9:7e:18:ef: 97:0f:c8:e9:99:4c:19:89:6c:12:d0:59:c7:d8:7b: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3F:DA:59:E8:58:BF:49:AE:51:62:6F:22:27:06:25:42:64:A0:D4 X509v3 Authority Key Identifier: keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.137.248.0/22 Signature Algorithm: sha256WithRSAEncryption 21:f0:18:68:eb:85:1e:03:82:86:b7:90:84:43:40:88:83:c7: 05:c1:4d:50:a4:51:4c:a7:38:eb:53:e0:30:d4:cc:27:0c:e5: 30:c7:20:e0:d4:3a:06:b4:99:de:9f:fe:95:27:33:e3:cd:2a: de:f1:a8:92:ae:02:60:b5:23:b0:8e:61:21:8e:a2:15:76:1d: b5:8f:b8:c4:bb:e7:30:92:a2:a4:20:f5:2c:4b:a4:30:e9:e6: 76:39:44:83:ef:b8:c1:e2:51:21:aa:96:d8:d1:55:83:c0:f2: 79:a2:83:69:53:ac:78:8d:b6:d2:99:cc:3b:89:68:bf:b3:b7: 15:19:dc:fa:d4:97:d8:ab:5c:2e:13:7c:b6:35:03:2c:e9:e7: dd:3c:11:03:c1:d2:f2:0f:9d:dd:16:8f:17:74:1d:42:e9:75: 0d:c9:7f:f9:22:68:71:b2:00:9a:ed:0b:90:a2:70:f8:b1:f5: 3a:e8:f4:63:90:95:58:f0:58:12:3f:a6:96:a4:80:22:f8:67: b4:73:e3:84:ac:a5:be:10:8a:e5:d5:d3:11:bf:67:ea:28:50: 8e:76:72:38:bd:fe:f0:f8:b7:31:f5:2d:c1:f3:46:45:89:de: a8:36:c0:24:1c:5e:e0:a4:94:83:3a:3c:f5:20:16:dd:26:d7: 05:85:14:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICM24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2 MkEzMTAwNTcwHhcNMjMwOTIwMTQ1MTAxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBiMDZkNC0wZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTCXjILMouedIpeNWWMt74N8bLXqNaDkDh0ToDAdZrjBnGEgLqqIj+yk0Iof Y3RMbswy26ocxDXgr9dCuPXKmVPPb8vSnuUiylSXcZR1Yqe/HX1+AnOiIVHtLXcJ TuVYMfLdDFOjR5bw1l8e2nGEDE9sAreBK/U3uyeJ5GQnqMhNxZBmY6AYoFalIKGi tCrpVGMNTyGGu0SIQY5WCPzDmyloMD6Z2Pk+crPXsu//S0PJzjpAmx1ubPh2JJ/J 2RF8tPg/xALwIwpGssf05++nILHOuOTkHnkImZirCvP5lvhd8W/BGtfl6FJmPNl+ GO+XD8jpmUwZiWwS0FnH2HvJPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFo/2lno WL9JrlFibyInBiVCZKDUMB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1ODEvQkI4RkRGRkUxRDkzMTFFMkE5NjM4QUY3MDhCMDJDRDIvN0EzOEQ2Qjg1 NEYzMTFFN0FDNjRFRDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKifgwDQYJKoZIhvcNAQELBQADggEBACHwGGjrhR4Dgoa3 kIRDQIiDxwXBTVCkUUynOOtT4DDUzCcM5TDHIODUOga0md6f/pUnM+PNKt7xqJKu AmC1I7COYSGOohV2HbWPuMS75zCSoqQg9SxLpDDp5nY5RIPvuMHiUSGqltjRVYPA 8nmig2lTrHiNttKZzDuJaL+ztxUZ3PrUl9irXC4TfLY1Ayzp5908EQPB0vIPnd0W jxd0HULpdQ3Jf/kiaHGyAJrtC5CicPix9Tro9GOQlVjwWBI/ppakgCL4Z7Rz44Ss pb4QiuXV0xG/Z+ooUI52cji9/vD4tzH1LcHzRkWJ3qg2wCQcXuCklIM6PPUgFt0m 1wWFFGA= -----END CERTIFICATE-----Generated at Tue May 14 17:00:13 2024 by rpki-client on console-fra.rpki-client.org