$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4A71D7E08DB811E98ACC9F7EC4F9AE02.roa File: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: nwlwRKTf8/88wD0XHgQwRvghlq46etyxH8s4HvJ0SaU= Subject key identifier: 87:23:05:87:EE:2D:3E:A3:AD:14:83:54:07:77:EF:A3:47:17:E8:9E Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 33F2 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4A71D7E08DB811E98ACC9F7EC4F9AE02.roa Signing time: Tue 20 Jun 2023 14:50:38 +0000 ROA not before: Tue 20 Jun 2023 14:50:38 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 55844 IP address blocks: 203.155.156.0/24 maxlen: 24 2405:a000:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13298 (0x33f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jun 20 14:50:38 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6491bcbe-fd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:4a:b6:6d:da:e5:55:d4:b6:d8:99:75:ef: 0a:6f:5b:ce:57:8e:76:c5:2c:34:33:a8:75:bc:ca: b8:45:f4:c3:17:5d:ab:3f:d2:86:25:21:99:70:3e: be:39:7c:2b:42:3e:83:f5:38:5a:a0:4a:1a:3c:35: e6:c8:9b:a7:b9:89:d8:6c:5f:af:4d:9f:84:b3:e6: dc:5c:aa:8d:90:d1:fc:dc:68:86:32:9f:e3:3b:0f: 0a:2e:1d:3f:96:b9:7a:5c:f1:fd:14:15:f5:cc:4a: 5c:1b:25:3e:88:92:51:91:6e:74:d6:23:df:3a:40: 8b:b5:fb:7e:b7:a3:92:c2:5a:18:4c:24:99:f2:86: 14:bf:76:51:e1:79:48:a5:6f:10:04:b9:cb:31:2c: 9a:e2:82:dc:5e:38:a3:6f:a4:35:95:77:81:18:45: f3:43:b8:9a:a6:05:bf:30:6d:b6:ac:9a:42:71:83: d4:de:96:55:74:3b:ab:ef:47:42:b2:0c:7b:99:fa: 7f:d2:54:0b:d9:2d:c7:42:9b:6a:07:9c:20:18:07: 61:c9:44:b4:49:ed:da:cd:aa:0a:20:6e:33:74:c2: 10:77:e5:12:85:a2:d0:c0:0e:c7:d4:2a:3b:6f:0a: 2e:84:e4:41:9d:82:cc:37:04:3b:40:fa:52:1e:c1: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:23:05:87:EE:2D:3E:A3:AD:14:83:54:07:77:EF:A3:47:17:E8:9E X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4A71D7E08DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.155.156.0/24 IPv6: 2405:a000:13::/48 Signature Algorithm: sha256WithRSAEncryption 8e:02:55:1b:24:14:23:df:06:fe:63:57:71:ca:3e:48:0c:23: d4:9d:f8:20:41:32:5d:3e:20:9c:9d:c1:e9:1b:59:c0:e2:36: 64:15:43:f6:44:45:32:f1:ee:ee:40:3a:e7:c3:8f:b7:c3:3e: e8:48:13:21:c9:ed:c3:41:bd:f9:ad:33:22:2f:2e:72:67:f0: 92:a1:cb:72:3b:fc:68:af:1d:87:6f:6d:45:fa:42:33:6a:99: a4:5f:42:17:c8:01:e4:a5:ba:3b:fe:58:cd:76:6a:c7:17:4c: 6d:4e:39:35:26:09:0d:a9:22:28:cc:d6:43:77:e5:8b:ed:1c: c1:28:c5:c7:9a:38:d1:28:54:a0:18:1a:24:a6:8b:71:24:4d: b5:28:06:7e:67:92:31:0b:4e:6f:95:ef:00:de:14:60:92:ea: 72:0d:e6:78:2e:52:17:2d:ba:02:a5:c9:5b:3f:8d:61:a8:43: c2:15:9e:f6:12:d3:c8:11:6b:5b:ed:86:ac:75:df:42:8a:0e: f7:14:60:39:a1:46:3e:41:66:d4:ed:ac:1f:7d:6c:d2:26:dd: 25:a9:50:03:af:f9:77:e1:aa:9f:1c:8c:76:67:f5:21:7d:0f: cf:a7:6c:5c:a9:b5:16:91:da:f9:c5:39:6d:47:20:9a:13:f2: f2:f9:f1:27 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICM/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjMwNjIwMTQ1MDM4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkxYmNiZS1mZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAly5Ktm3a5VXUttiZde8Kb1vOV452xSw0M6h1vMq4RfTDF12rP9KGJSGZcD6+ OXwrQj6D9ThaoEoaPDXmyJunuYnYbF+vTZ+Es+bcXKqNkNH83GiGMp/jOw8KLh0/ lrl6XPH9FBX1zEpcGyU+iJJRkW501iPfOkCLtft+t6OSwloYTCSZ8oYUv3ZR4XlI pW8QBLnLMSya4oLcXjijb6Q1lXeBGEXzQ7iapgW/MG22rJpCcYPU3pZVdDur70dC sgx7mfp/0lQL2S3HQptqB5wgGAdhyUS0Se3azaoKIG4zdMIQd+UShaLQwA7H1Co7 bwouhORBnYLMNwQ7QPpSHsG3MQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIcjBYfu LT6jrRSDVAd376NHF+ieMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNEE3MUQ3RTA4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLm5wwDwQCAAIwCQMHACQFoAAAEzANBgkqhkiG9w0BAQsF AAOCAQEAjgJVGyQUI98G/mNXcco+SAwj1J34IEEyXT4gnJ3B6RtZwOI2ZBVD9kRF MvHu7kA658OPt8M+6EgTIcntw0G9+a0zIi8ucmfwkqHLcjv8aK8dh29tRfpCM2qZ pF9CF8gB5KW6O/5YzXZqxxdMbU45NSYJDakiKMzWQ3fli+0cwSjFx5o40ShUoBga JKaLcSRNtSgGfmeSMQtOb5XvAN4UYJLqcg3meC5SFy26AqXJWz+NYahDwhWe9hLT yBFrW+2GrHXfQooO9xRgOaFGPkFm1O2sH31s0ibdJalQA6/5d+GqnxyMdmf1IX0P z6dsXKm1FpHa+cU5bUcgmhPy8vnxJw== -----END CERTIFICATE-----Generated at Sun Jun 2 18:46:22 2024 by rpki-client on console-ams.rpki-client.org