$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/35D40EDE9F8511ECBE806D30C4F9AE02.roa File: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (raw, json) Hash identifier: Qf6Id46hBN+W7rLVaZL9Bo0piMWZE9hsYSpHsWs83lo= Subject key identifier: 8A:34:BD:BA:FD:72:6F:1E:44:DB:39:9D:FD:21:F3:FB:B9:0E:20:48 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1B54 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/35D40EDE9F8511ECBE806D30C4F9AE02.roa Signing time: Tue 18 Jul 2023 16:33:19 +0000 ROA not before: Tue 18 Jul 2023 16:33:19 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 135409 IP address blocks: 202.134.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 16:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6996 (0x1b54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Jul 18 16:33:19 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64b6bece-e1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:a3:5b:82:18:9d:c7:67:0f:95:9a:7d:dc: b2:15:33:d2:74:a5:1f:c0:b0:bf:7b:47:f4:ce:65: 3c:06:1a:7c:67:20:63:d6:80:16:36:58:4a:10:c0: e9:c6:a7:9c:ee:90:81:27:ef:f5:78:93:f5:53:c6: b7:ff:f6:03:12:7f:f1:f3:29:ff:eb:56:45:b0:69: bb:e8:cd:cc:64:95:11:c3:b6:f4:2a:e0:ee:e2:5e: 38:6a:95:f0:9e:41:38:d5:be:64:25:b6:20:70:19: db:f4:9c:3f:27:ab:53:5e:94:63:ed:92:23:66:be: bf:66:61:f7:03:e0:c4:ea:6c:66:4d:d5:aa:b6:f2: 51:5d:32:a6:9e:d1:9a:91:27:66:ac:4a:0d:b5:f9: 78:da:c7:f8:80:ff:70:3a:0c:d5:ac:e7:22:91:7a: 61:36:71:a4:de:ba:de:5f:78:6c:77:04:26:e4:d2: c6:c4:12:ea:bb:6a:8e:66:c2:c4:ca:8e:5a:05:f6: 83:16:92:cb:27:a3:c5:d9:90:86:04:80:bb:20:bb: da:20:75:fc:70:6c:5c:5b:bc:90:c7:9d:0d:43:dc: 9c:b2:bc:e6:47:88:cf:4c:4a:c9:c0:75:cd:c5:b7: 2e:62:c4:67:bc:7b:06:5e:7f:71:cb:48:6f:ea:63: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:34:BD:BA:FD:72:6F:1E:44:DB:39:9D:FD:21:F3:FB:B9:0E:20:48 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/35D40EDE9F8511ECBE806D30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.134.29.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:8c:bd:f6:fb:fb:66:b0:2c:29:1b:1d:2e:5f:8b:1f:df:09: 47:3a:70:48:e0:cd:61:ed:a6:cb:f3:f2:0e:c8:7a:d8:f9:c0: 45:6a:83:73:b4:4d:d7:88:b7:d0:2c:5f:a2:8b:e7:b9:f0:19: b5:5d:42:dd:a4:94:72:0b:72:40:f0:67:84:11:a2:67:71:39: 6f:e3:6a:98:6b:6e:7b:3b:27:5b:31:56:2f:e2:cd:40:06:7d: af:7c:32:37:f0:5e:74:4e:3f:12:f1:75:33:1c:aa:6e:e8:91: bf:6b:b8:c6:91:57:a1:00:67:25:e7:cc:57:d6:90:0e:39:94: 6e:02:68:3d:99:77:a2:bd:3a:08:96:f7:d8:85:85:cc:a7:d2: 8a:96:51:cd:82:12:db:9f:6c:ff:1f:bd:9f:5c:05:b0:5b:74: 7b:f6:5e:c0:dc:d3:9a:a6:e4:dd:70:91:7f:c8:e2:ce:3d:4e: c2:fe:4c:2a:98:c7:7f:67:e7:84:0d:c0:a6:74:f0:06:65:1b: 8f:c9:61:fa:b8:24:90:67:78:71:06:1c:01:e2:ea:86:20:3c: 97:17:94:d2:14:f2:e7:1e:ed:31:68:49:51:51:ae:96:94:a6: bf:0b:72:68:c9:46:39:e8:79:6b:a0:47:14:b7:fa:b4:bb:9e: 9c:af:d6:fe -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjMwNzE4MTYzMzE5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI2YmVjZS1lMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+OjW4IYncdnD5WafdyyFTPSdKUfwLC/e0f0zmU8Bhp8ZyBj1oAWNlhKEMDp xqec7pCBJ+/1eJP1U8a3//YDEn/x8yn/61ZFsGm76M3MZJURw7b0KuDu4l44apXw nkE41b5kJbYgcBnb9Jw/J6tTXpRj7ZIjZr6/ZmH3A+DE6mxmTdWqtvJRXTKmntGa kSdmrEoNtfl42sf4gP9wOgzVrOcikXphNnGk3rreX3hsdwQm5NLGxBLqu2qOZsLE yo5aBfaDFpLLJ6PF2ZCGBIC7ILvaIHX8cGxcW7yQx50NQ9ycsrzmR4jPTErJwHXN xbcuYsRnvHsGXn9xy0hv6mPXywIDAQABo4IClTCCApEwHQYDVR0OBBYEFIo0vbr9 cm8eRNs5nf0h8/u5DiBIMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQzOTAvMEU5MzU0RkNEQzVDMTFFNjhFOTE1RTMyQzRGOUFFMDIvMzVENDBFREU5 Rjg1MTFFQ0JFODA2RDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKhh0wDQYJKoZIhvcNAQELBQADggEBAA+Mvfb7+2awLCkb HS5fix/fCUc6cEjgzWHtpsvz8g7Ietj5wEVqg3O0TdeIt9AsX6KL57nwGbVdQt2k lHILckDwZ4QRomdxOW/japhrbns7J1sxVi/izUAGfa98MjfwXnROPxLxdTMcqm7o kb9ruMaRV6EAZyXnzFfWkA45lG4CaD2Zd6K9OgiW99iFhcyn0oqWUc2CEtufbP8f vZ9cBbBbdHv2XsDc05qm5N1wkX/I4s49TsL+TCqYx39n54QNwKZ08AZlG4/JYfq4 JJBneHEGHAHi6oYgPJcXlNIU8uce7TFoSVFRrpaUpr8LcmjJRjnoeWugRxS3+rS7 npyv1v4= -----END CERTIFICATE-----Generated at Tue May 14 19:55:13 2024 by rpki-client on console-fra.rpki-client.org