$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/71DBA2E6D28811EAB7D79A47C4F9AE02.roa File: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (raw, json) Hash identifier: S9nY3Sl7EDqBHlCNRNgF0IQF6K39qge4nOXqDi55XVI= Subject key identifier: 7A:B5:B6:41:4E:12:94:2C:D7:95:C4:24:3D:99:6E:1F:63:B2:2E:EE Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 0753 Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/71DBA2E6D28811EAB7D79A47C4F9AE02.roa Signing time: Mon 18 Mar 2024 22:41:35 +0000 ROA not before: Mon 18 Mar 2024 22:41:35 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 24038 IP address blocks: 202.68.208.0/24 maxlen: 24 202.68.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 22:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: Mar 18 22:41:35 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f8c31f-0e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:99:05:31:29:00:b0:62:86:48:46:48:db: ab:b8:dc:21:59:b6:d1:2d:25:70:fa:e4:dc:0a:b3: 97:b5:1e:68:ef:5e:04:df:b7:45:f8:4f:c5:98:ec: 2f:3e:2e:85:d0:da:fc:1c:6d:2d:1a:40:6f:49:b4: d1:1d:8f:73:3d:2d:84:e0:35:0c:c8:5c:2a:6e:6b: 20:d7:07:ee:5c:46:9a:8c:f1:09:a4:26:fb:66:6f: 78:23:a1:61:62:51:53:b5:5e:66:0e:92:44:6c:bd: 58:06:dc:49:33:83:f6:e7:2b:e1:96:b5:1c:d1:33: 98:da:35:d2:3f:15:9e:bd:a8:9d:e1:3e:da:4d:1a: f6:42:57:2b:e2:00:74:b3:56:0f:e9:80:f1:e3:b2: 1f:c5:c3:99:6b:d4:f8:5c:ca:b5:d6:07:c2:49:2e: 18:eb:dd:30:95:fb:a4:ac:42:8c:bf:37:eb:f7:5a: cb:ea:37:19:22:f7:48:82:e0:46:7c:3f:0a:aa:1a: e8:9a:47:2e:b8:84:1d:5e:52:a9:c1:7f:fe:5e:20: de:f8:bd:d2:ee:aa:14:e2:49:5a:33:ea:a9:e6:81: 2e:5c:0d:af:fb:aa:eb:02:79:1f:26:c3:84:b3:d4: ed:06:62:89:ed:ab:e4:63:83:99:ed:11:32:11:33: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B5:B6:41:4E:12:94:2C:D7:95:C4:24:3D:99:6E:1F:63:B2:2E:EE X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/71DBA2E6D28811EAB7D79A47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.68.208.0/24 202.68.221.0/24 Signature Algorithm: sha256WithRSAEncryption 67:cc:91:88:21:99:6f:85:8c:80:f0:d3:47:0f:21:0f:33:2a: b1:c2:48:b3:29:17:f6:4d:70:ce:9e:d2:b5:48:c1:69:9a:04: 6f:e1:c8:a4:14:09:50:3f:49:d6:cb:97:c4:c7:be:ca:17:19: 1a:d9:eb:06:dd:a3:d5:73:e2:d5:d3:d3:be:2f:bb:3f:f1:af: 77:19:3a:a4:35:bf:8f:08:b3:c9:46:46:59:4e:16:c4:e5:84: 9f:5e:0a:c8:56:40:1e:33:54:d7:89:22:50:57:de:23:56:b1: 7a:6e:9e:1e:d2:bb:58:79:c1:62:11:e3:d0:3f:78:76:8d:92: e2:a6:1d:85:26:b3:36:a4:ed:51:be:93:d3:05:c3:71:dd:cf: 1e:36:b8:a2:78:09:66:37:b0:6d:b3:fe:de:25:ca:e4:38:ac: 1e:4a:7b:9d:1e:ea:0d:6e:17:26:1b:1e:5e:ac:d2:51:82:6f: 74:7d:6b:8d:75:41:cd:8d:97:9e:6f:fa:00:95:55:bd:b5:c5: 81:8f:4f:94:83:16:40:16:35:51:01:1d:6d:6f:05:8c:f9:f8: d2:03:27:1c:a8:4e:b3:ad:de:be:2a:2c:16:67:69:ef:c0:c7: 82:35:01:f0:5a:93:b8:fe:cb:1a:b2:1d:8a:3c:6d:35:e2:ef: 24:3a:54:0a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjQwMzE4MjI0MTM1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWY4YzMxZi0wZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xWZBTEpALBihkhGSNuruNwhWbbRLSVw+uTcCrOXtR5o714E37dF+E/FmOwv Pi6F0Nr8HG0tGkBvSbTRHY9zPS2E4DUMyFwqbmsg1wfuXEaajPEJpCb7Zm94I6Fh YlFTtV5mDpJEbL1YBtxJM4P25yvhlrUc0TOY2jXSPxWevaid4T7aTRr2Qlcr4gB0 s1YP6YDx47IfxcOZa9T4XMq11gfCSS4Y690wlfukrEKMvzfr91rL6jcZIvdIguBG fD8KqhromkcuuIQdXlKpwX/+XiDe+L3S7qoU4klaM+qp5oEuXA2v+6rrAnkfJsOE s9TtBmKJ7avkY4OZ7REyETPd7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHq1tkFO EpQs15XEJD2Zbh9jsi7uMB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQzRTgvM0YxRjBEREFEMjg3MTFFQTlFNzNFNjQ2QzRGOUFFMDIvNzFEQkEyRTZE Mjg4MTFFQUI3RDc5QTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKRNADBADKRN0wDQYJKoZIhvcNAQELBQADggEBAGfMkYgh mW+FjIDw00cPIQ8zKrHCSLMpF/ZNcM6e0rVIwWmaBG/hyKQUCVA/SdbLl8THvsoX GRrZ6wbdo9Vz4tXT074vuz/xr3cZOqQ1v48Is8lGRllOFsTlhJ9eCshWQB4zVNeJ IlBX3iNWsXpunh7Su1h5wWIR49A/eHaNkuKmHYUmszak7VG+k9MFw3Hdzx42uKJ4 CWY3sG2z/t4lyuQ4rB5Ke50e6g1uFyYbHl6s0lGCb3R9a411Qc2Nl55v+gCVVb21 xYGPT5SDFkAWNVEBHW1vBYz5+NIDJxyoTrOt3r4qLBZnae/Ax4I1AfBak7j+yxqy HYo8bTXi7yQ6VAo= -----END CERTIFICATE-----Generated at Mon May 20 23:16:44 2024 by rpki-client on console-fra.rpki-client.org