$ rpki-client -vvf rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/8BDD1204FC5211EE89D8BD86C4F9AE02.roa File: 8BDD1204FC5211EE89D8BD86C4F9AE02.roa (raw, json) Hash identifier: AkiCxp9N8gMV3WtYdhLNJWSezcOAW2+2oJlKVD4H2Co= Subject key identifier: 5B:53:BF:04:9A:FB:E6:D3:00:AB:07:A7:53:88:77:B7:62:D0:26:19 Certificate issuer: /CN=A91647F5/serialNumber=579118B148E27D1571751568BA070FE1E62C7EB9 Certificate serial: 52 Authority key identifier: 57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/8BDD1204FC5211EE89D8BD86C4F9AE02.roa Signing time: Wed 15 May 2024 08:12:39 +0000 ROA not before: Wed 15 May 2024 08:12:39 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 203963 IP address blocks: 203.28.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.crl rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 07:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647F5/serialNumber=579118B148E27D1571751568BA070FE1E62C7EB9 Validity Not Before: May 15 08:12:39 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66446e76-f802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:c0:fd:23:bc:ce:68:1c:f8:44:cc:96:7f: 36:0d:6a:cd:73:54:a3:e4:13:ca:0c:4a:d3:fb:2f: b4:79:6f:c2:87:45:29:30:8a:2f:bd:a1:0d:8a:70: ea:8d:79:f6:f6:3c:84:62:ed:23:05:62:9a:5d:e1: 6d:06:16:bc:32:1c:0e:43:5e:fe:b2:bc:ba:1c:7c: 15:fe:71:01:d4:da:ef:81:e3:c6:90:08:53:f8:8b: 33:fa:e9:4f:dd:12:22:cc:b7:b9:fb:38:3e:b4:ab: a5:47:87:56:b8:c3:41:ae:de:be:16:1a:48:50:ae: 6d:6d:b3:52:e1:2e:a8:2b:c6:1b:dc:ec:92:7d:8c: 76:d6:d5:84:02:3c:c8:b0:d7:e7:3e:8f:10:3e:8a: c2:86:4d:2d:14:58:2e:4b:01:9f:1c:08:64:e2:89: 35:c9:af:e6:9d:7f:50:04:f9:6a:b1:12:09:2c:7f: 1e:0b:6f:a6:12:14:52:60:36:a7:3f:30:aa:26:f4: ca:ab:bc:90:8a:84:32:e6:a7:b7:f3:c5:73:71:da: 7b:61:f0:a4:b3:d4:f3:fc:14:a2:f2:ba:bd:fa:51: 38:55:ef:0a:fb:c5:42:6e:9c:fb:75:db:4b:cf:b1: 92:2d:8f:d1:7b:83:0e:da:18:fa:9c:d4:80:88:96: ba:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:53:BF:04:9A:FB:E6:D3:00:AB:07:A7:53:88:77:B7:62:D0:26:19 X509v3 Authority Key Identifier: keyid:57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/8BDD1204FC5211EE89D8BD86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.28.216.0/22 Signature Algorithm: sha256WithRSAEncryption 99:3c:42:b4:d4:71:ec:44:09:c5:d4:c4:08:2a:49:0e:f1:bd: 32:7a:9a:6b:23:0e:fe:66:ce:de:c6:75:90:57:26:a1:69:ec: 19:1f:a7:25:06:2e:e7:73:6f:6d:8b:a6:db:18:53:b6:c9:38: 66:fe:aa:ab:d6:02:b0:e4:a2:98:c1:92:0d:51:6a:e6:2d:40: 8f:73:67:e8:66:64:78:6f:a2:c6:8f:42:62:86:a8:27:a4:24: 2b:ad:33:46:ee:54:88:c1:86:39:94:c8:73:2f:0d:d3:96:e3: b5:67:8b:e3:1c:42:4b:a4:3f:2b:cd:53:9e:47:90:d3:64:ee: 32:06:2c:a3:3e:d5:15:40:30:a5:41:cf:7c:38:38:1a:8c:a8: 4c:62:a0:e9:bb:c2:06:dc:b5:33:db:36:35:0f:4b:06:30:bb: a4:9d:47:f8:2b:1c:7c:95:5b:ca:9c:57:84:f6:3f:f6:33:21: dd:3b:c1:c1:93:ff:5d:14:5b:74:79:a2:2d:1b:75:36:96:cb: d0:2c:44:58:0b:38:1d:eb:1c:b8:26:40:f5:67:fe:83:d7:f3: d8:ab:90:6a:f5:d4:11:a2:55:e4:77:02:76:1b:3c:01:02:f4: 1d:da:d8:05:69:3b:a5:38:ec:6c:a0:27:33:ed:34:8c:a8:76: 97:cf:cf:25 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDdGNTExMC8GA1UEBRMoNTc5MTE4QjE0OEUyN0QxNTcxNzUxNTY4QkEwNzBGRTFF NjJDN0VCOTAeFw0yNDA1MTUwODEyMzlaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NDQ2ZTc2LWY4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3PMD9I7zOaBz4RMyWfzYNas1zVKPkE8oMStP7L7R5b8KHRSkwii+9oQ2KcOqN efb2PIRi7SMFYppd4W0GFrwyHA5DXv6yvLocfBX+cQHU2u+B48aQCFP4izP66U/d EiLMt7n7OD60q6VHh1a4w0Gu3r4WGkhQrm1ts1LhLqgrxhvc7JJ9jHbW1YQCPMiw 1+c+jxA+isKGTS0UWC5LAZ8cCGTiiTXJr+adf1AE+WqxEgksfx4Lb6YSFFJgNqc/ MKom9MqrvJCKhDLmp7fzxXNx2nth8KSz1PP8FKLyur36UThV7wr7xUJunPt120vP sZItj9F7gw7aGPqc1ICIlrrFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUW1O/BJr7 5tMAqwenU4h3t2LQJhkwHwYDVR0jBBgwFoAUV5EYsUjifRVxdRVougcP4eYsfrkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0Y1L0Q2OTg5NkU2QTBD ODExRUVBN0I4RDAyQ0M0RjlBRTAyL1Y1RVlzVWppZlJWeGRSVm91Z2NQNGVZc2Zy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjVFWXNVamlmUlZ4ZFJWb3VnY1A0ZVlzZnJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDdGNS9ENjk4OTZFNkEwQzgxMUVFQTdCOEQwMkNDNEY5QUUwMi84QkREMTIwNEZD NTIxMUVFODlEOEJEODZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAssc2DANBgkqhkiG9w0BAQsFAAOCAQEAmTxCtNRx7EQJxdTE CCpJDvG9MnqaayMO/mbO3sZ1kFcmoWnsGR+nJQYu53NvbYum2xhTtsk4Zv6qq9YC sOSimMGSDVFq5i1Aj3Nn6GZkeG+ixo9CYoaoJ6QkK60zRu5UiMGGOZTIcy8N05bj tWeL4xxCS6Q/K81TnkeQ02TuMgYsoz7VFUAwpUHPfDg4GoyoTGKg6bvCBty1M9s2 NQ9LBjC7pJ1H+CscfJVbypxXhPY/9jMh3TvBwZP/XRRbdHmiLRt1NpbL0CxEWAs4 HescuCZA9Wf+g9fz2KuQavXUEaJV5HcCdhs8AQL0HdrYBWk7pTjsbKAnM+00jKh2 l8/PJQ== -----END CERTIFICATE-----Generated at Thu Jun 13 10:58:42 2024 by rpki-client on console-ams.rpki-client.org