$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa File: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (raw, json) Hash identifier: 5CFKnjcy5F9IXxk31F+vn5LjvcxiJFwvGmhruhqdGmQ= Subject key identifier: A3:22:E8:60:42:19:F6:76:F3:30:21:B4:B4:21:8A:05:39:C7:F6:40 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 0880 Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa Signing time: Wed 20 Dec 2023 21:28:56 +0000 ROA not before: Wed 20 Dec 2023 21:28:56 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 38198 IP address blocks: 202.43.8.0/22 maxlen: 22 202.43.12.0/23 maxlen: 23 202.43.14.0/24 maxlen: 24 202.43.15.0/24 maxlen: 24 2402:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2176 (0x880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Dec 20 21:28:56 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65835c98-e382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bf:de:02:95:05:80:36:c5:38:e3:5d:38:6f: 34:cb:c3:16:40:e5:70:d4:fa:90:f8:bd:f5:ba:45: 60:e3:4d:57:a7:0b:2b:43:84:11:ca:af:71:e1:f2: 1a:5b:7f:a7:a5:ff:d2:55:d3:01:8b:10:f7:0f:25: bf:39:a0:be:05:e0:9c:6d:b4:8c:3f:cd:3e:14:06: 0a:84:99:74:f9:12:14:48:c7:6d:b5:09:25:2f:40: 54:74:9c:68:b5:1c:b4:4d:f4:c2:26:b2:18:8f:4b: 67:fa:27:a0:d4:35:b9:5f:45:41:e8:64:6b:1d:0e: 18:e9:09:97:25:d8:9e:20:c5:a2:53:bf:ba:a5:0f: 42:23:3e:f2:d8:44:7b:66:42:4d:20:02:19:e1:83: 12:35:c8:83:e8:52:9e:e8:5b:99:70:ec:34:b9:c3: 85:17:aa:f7:4c:63:01:75:3c:a6:84:fe:c9:a4:80: 43:1b:9d:90:0d:66:06:0d:21:ee:e6:39:f6:da:34: ba:87:68:26:da:60:c0:b5:9b:ff:48:7f:c2:bd:03: a9:8e:d2:0e:28:9a:6e:47:55:cf:6e:a1:3e:75:90: 44:ef:2b:ac:44:50:53:a7:5a:2c:08:0d:41:96:f2: e6:dd:05:aa:6d:46:a9:01:f9:d7:bd:00:1f:4e:27: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:22:E8:60:42:19:F6:76:F3:30:21:B4:B4:21:8A:05:39:C7:F6:40 X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.8.0/21 IPv6: 2402:1940::/32 Signature Algorithm: sha256WithRSAEncryption b8:0d:17:64:53:10:b1:37:fb:1a:f7:90:b0:06:6f:7c:76:35: 4c:0e:d5:16:f7:b2:ea:85:04:7c:fa:a2:ee:07:ba:fe:1c:28: 06:cd:be:3a:b8:b2:af:f9:77:8f:21:15:02:d2:ec:5f:a7:ef: 1a:44:87:f2:f9:93:86:c3:ee:3f:5b:4d:41:ff:26:39:1c:ee: a8:d4:bb:f5:87:5b:a0:af:cb:a7:1a:4d:2d:e1:3f:5e:df:25: a4:d0:19:a5:a3:42:93:9a:d9:04:0a:4f:f8:a2:2c:b7:82:f9: 76:03:70:59:67:c0:66:99:0a:a7:7f:cd:93:66:1b:5c:6c:8a: 13:0d:da:a0:ea:8c:c1:1b:38:05:d3:9e:d4:51:73:b9:7d:44: 98:50:3c:8f:4c:50:8d:56:7c:82:0b:fc:60:e2:60:fe:f4:d6: b4:cd:6a:ed:e4:dc:86:13:56:4f:11:0a:d7:37:8c:9d:00:d1: 7a:45:2f:58:e9:68:4c:24:e7:92:fc:32:a5:5c:e1:0b:df:ad: 75:6d:4e:a8:7c:4b:e3:cc:77:a2:de:a1:7d:b2:d9:6e:67:13: 57:75:04:3d:44:16:42:65:5d:65:c5:a4:ce:09:dc:72:ee:c6: 16:2f:fb:71:43:ef:e1:d4:cf:0a:f6:1d:c4:81:eb:54:84:1c: 76:00:7f:f0 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjMxMjIwMjEyODU2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgzNWM5OC1lMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5L/eApUFgDbFOONdOG80y8MWQOVw1PqQ+L31ukVg401XpwsrQ4QRyq9x4fIa W3+npf/SVdMBixD3DyW/OaC+BeCcbbSMP80+FAYKhJl0+RIUSMdttQklL0BUdJxo tRy0TfTCJrIYj0tn+ieg1DW5X0VB6GRrHQ4Y6QmXJdieIMWiU7+6pQ9CIz7y2ER7 ZkJNIAIZ4YMSNciD6FKe6FuZcOw0ucOFF6r3TGMBdTymhP7JpIBDG52QDWYGDSHu 5jn22jS6h2gm2mDAtZv/SH/CvQOpjtIOKJpuR1XPbqE+dZBE7yusRFBTp1osCA1B lvLm3QWqbUapAfnXvQAfTidntQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKMi6GBC GfZ28zAhtLQhigU5x/ZAMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjY5OUMvQUU5OUJDNzA4RTdFMTFFQTk2M0IwRTY2QzRGOUFFMDIvREE4RUY3QTQ4 RTdGMTFFQUEyQjJENzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAPKKwgwDQQCAAIwBwMFACQCGUAwDQYJKoZIhvcNAQELBQAD ggEBALgNF2RTELE3+xr3kLAGb3x2NUwO1Rb3suqFBHz6ou4Huv4cKAbNvjq4sq/5 d48hFQLS7F+n7xpEh/L5k4bD7j9bTUH/Jjkc7qjUu/WHW6Cvy6caTS3hP17fJaTQ GaWjQpOa2QQKT/iiLLeC+XYDcFlnwGaZCqd/zZNmG1xsihMN2qDqjMEbOAXTntRR c7l9RJhQPI9MUI1WfIIL/GDiYP701rTNau3k3IYTVk8RCtc3jJ0A0XpFL1jpaEwk 55L8MqVc4QvfrXVtTqh8S+PMd6LeoX2y2W5nE1d1BD1EFkJlXWXFpM4J3HLuxhYv +3FD7+HUzwr2HcSB61SEHHYAf/A= -----END CERTIFICATE-----Generated at Fri May 10 23:04:06 2024 by rpki-client on console-ams.rpki-client.org