$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/D1A2301C98DD11EAB0763B4BC4F9AE02.roa File: D1A2301C98DD11EAB0763B4BC4F9AE02.roa (raw, json) Hash identifier: 1CXisgn5G4IACvJcG9Sr+WfoN241nnt4sfV7d3DxyjQ= Subject key identifier: 49:3D:7D:84:B1:8B:B0:BF:61:94:7D:29:F3:DB:3C:AF:1E:75:A3:4A Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1B56 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/D1A2301C98DD11EAB0763B4BC4F9AE02.roa Signing time: Tue 18 Jul 2023 16:33:20 +0000 ROA not before: Tue 18 Jul 2023 16:33:20 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 5666 IP address blocks: 175.176.148.0/22 maxlen: 22 175.176.148.0/23 maxlen: 24 175.176.150.0/24 maxlen: 24 175.176.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 16:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6998 (0x1b56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Jul 18 16:33:20 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64b6bed0-2257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:fb:0a:a9:b4:df:d8:3d:86:20:07:fc:b9: f2:74:e0:8b:ec:9e:39:9a:78:9f:34:21:0e:61:44: fb:67:4b:7e:2e:81:b1:e5:e6:c1:51:b4:bd:16:52: e3:5f:0d:4f:b3:ac:be:e4:8d:f6:1e:f4:00:89:58: f6:f2:ad:21:32:a1:b2:74:89:8c:ed:a9:ae:2b:41: fc:7c:15:30:c1:39:2f:72:23:1f:c4:39:23:f6:4d: bb:c4:65:b1:dc:85:fe:0a:fa:2c:56:60:d9:23:c5: 35:63:45:c9:17:de:e7:e4:f8:b2:7d:32:67:e3:da: bd:1b:99:6c:e5:e4:15:37:87:48:63:55:a5:3c:ea: 49:29:42:a2:19:18:3b:a9:ed:fe:21:c5:c6:f0:cd: 0d:26:7d:15:d0:22:b2:e8:77:42:b3:9f:cb:64:47: 34:02:75:2a:80:ea:14:42:e7:66:ef:8c:e3:0d:81: d2:bd:36:83:03:fc:77:18:59:2f:dd:61:91:94:09: 0d:7d:42:d3:06:df:08:29:f5:c5:a4:68:31:42:6f: 88:9e:72:49:e6:7e:12:13:e5:ba:23:09:6d:f5:aa: b8:b9:ff:c8:5d:52:35:50:11:b5:49:fb:ca:96:a4: 56:32:93:ec:eb:67:d8:4b:4d:12:52:27:e9:67:4e: b1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3D:7D:84:B1:8B:B0:BF:61:94:7D:29:F3:DB:3C:AF:1E:75:A3:4A X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/D1A2301C98DD11EAB0763B4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.176.148.0/22 Signature Algorithm: sha256WithRSAEncryption 58:04:0a:78:5a:b2:8c:6d:e4:8e:57:0e:37:ac:6e:e6:2c:81: 16:d3:94:78:30:18:13:8e:3d:4f:1b:90:de:d3:d7:8f:ba:e1: bf:64:55:a3:b6:e8:aa:60:f1:94:81:48:7a:c0:6a:5d:a8:fe: d6:d4:9c:56:3e:04:d3:f5:b5:06:a3:f9:c0:62:3d:35:98:05: 07:89:21:bf:49:ae:45:3d:81:f3:8d:be:d3:72:d8:60:ed:83: e5:b0:40:3d:d8:18:7a:83:52:5e:98:64:66:b2:a3:8c:f9:4b: 1e:7b:e7:4d:1c:90:57:ea:01:d1:ea:b6:2d:d8:ee:0f:02:50: 42:e5:c2:1e:31:ce:74:11:80:6e:50:c0:2a:f9:6e:8a:70:a5: c1:47:59:c7:ab:7c:b9:d0:51:88:f8:28:c7:30:60:6c:8e:6f: 08:66:39:d1:9b:86:d0:a5:29:48:ff:4c:df:d8:90:bd:48:4c: 1b:a8:f4:07:50:48:a1:ac:8f:f2:d2:53:ad:9b:50:64:ae:00: 19:3f:da:65:20:f9:1d:86:be:04:49:39:5c:69:49:a3:3a:2c: 3c:76:b0:3f:c3:5a:de:b7:96:c8:0e:c4:82:3d:93:b0:ec:9a: dd:db:2b:05:16:73:52:1c:11:40:b3:93:12:ba:9e:c4:0f:b4: 3c:8a:69:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjMwNzE4MTYzMzIwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI2YmVkMC0yMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkz7Cqm039g9hiAH/LnydOCL7J45mnifNCEOYUT7Z0t+LoGx5ebBUbS9FlLj Xw1Ps6y+5I32HvQAiVj28q0hMqGydImM7amuK0H8fBUwwTkvciMfxDkj9k27xGWx 3IX+CvosVmDZI8U1Y0XJF97n5PiyfTJn49q9G5ls5eQVN4dIY1WlPOpJKUKiGRg7 qe3+IcXG8M0NJn0V0CKy6HdCs5/LZEc0AnUqgOoUQudm74zjDYHSvTaDA/x3GFkv 3WGRlAkNfULTBt8IKfXFpGgxQm+InnJJ5n4SE+W6Iwlt9aq4uf/IXVI1UBG1SfvK lqRWMpPs62fYS00SUifpZ06xtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEk9fYSx i7C/YZR9KfPbPK8edaNKMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQzOTAvMEU5MzU0RkNEQzVDMTFFNjhFOTE1RTMyQzRGOUFFMDIvRDFBMjMwMUM5 OEREMTFFQUIwNzYzQjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKvsJQwDQYJKoZIhvcNAQELBQADggEBAFgECnhasoxt5I5X DjesbuYsgRbTlHgwGBOOPU8bkN7T14+64b9kVaO26Kpg8ZSBSHrAal2o/tbUnFY+ BNP1tQaj+cBiPTWYBQeJIb9JrkU9gfONvtNy2GDtg+WwQD3YGHqDUl6YZGayo4z5 Sx57500ckFfqAdHqti3Y7g8CUELlwh4xznQRgG5QwCr5bopwpcFHWcerfLnQUYj4 KMcwYGyObwhmOdGbhtClKUj/TN/YkL1ITBuo9AdQSKGsj/LSU62bUGSuABk/2mUg +R2GvgRJOVxpSaM6LDx2sD/DWt63lsgOxII9k7Dsmt3bKwUWc1IcEUCzkxK6nsQP tDyKaco= -----END CERTIFICATE-----Generated at Tue May 14 19:55:13 2024 by rpki-client on console-fra.rpki-client.org