$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/95B42498B93411EB980CB25DC4F9AE02.roa File: 95B42498B93411EB980CB25DC4F9AE02.roa (raw, json) Hash identifier: eOvyXDq1Ha4aJH8WTiyYExZnB2xdkkbeb2iyX8nBLiU= Subject key identifier: B3:AB:54:0E:17:9C:ED:A4:26:A8:6A:29:A1:B1:FD:7C:92:85:BF:3D Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 04B5 Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/95B42498B93411EB980CB25DC4F9AE02.roa Signing time: Sun 05 Nov 2023 00:52:19 +0000 ROA not before: Sun 05 Nov 2023 00:52:19 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 1221 IP address blocks: 203.28.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 00:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: Nov 5 00:52:19 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6546e743-af36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:3e:e5:da:b7:29:d3:53:e1:c2:1c:84:c0: 6c:97:0b:b3:e2:65:77:f9:df:bf:7c:e2:7d:b7:72: db:7a:b9:50:a6:81:fa:1d:9e:70:f5:e4:d2:cb:7b: 29:af:a0:a3:af:0f:d4:db:4a:97:17:b0:21:ca:d0: 92:3e:b8:9c:a6:b5:97:92:fb:98:14:c0:0d:20:a6: de:9d:97:84:b6:e4:c6:7a:fb:5c:82:9c:15:82:36: 56:87:c0:b9:2e:cb:9c:fd:8d:03:e2:f3:70:49:61: 8e:ae:40:1e:8d:07:b2:c3:5d:b0:5a:50:94:6b:7a: 16:a9:2f:75:78:4c:8c:62:be:ff:12:c8:f4:67:58: c7:04:55:f0:0b:07:de:0c:24:bc:bc:26:e5:2f:b5: bb:6f:45:b6:b4:f5:11:b5:c0:1e:3d:65:b1:9a:65: 9c:f6:7b:d1:1d:aa:8d:b2:65:4b:5f:57:a9:16:38: c6:8b:8e:6d:1b:97:c7:34:b6:af:cc:ea:1e:27:f4: f8:24:11:af:72:3f:0e:9a:91:63:dd:15:23:64:08: 4d:1f:07:55:6e:46:1c:56:80:68:ea:a8:42:23:dc: f9:47:2c:95:a7:27:e6:06:5e:31:9b:49:52:9e:0c: 20:60:33:4f:13:d5:90:6b:b3:bd:50:88:ac:fd:b8: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AB:54:0E:17:9C:ED:A4:26:A8:6A:29:A1:B1:FD:7C:92:85:BF:3D X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/95B42498B93411EB980CB25DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.28.167.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:40:87:41:bc:2b:6d:ae:ee:d6:18:9d:43:b1:ce:11:68:54: 18:64:81:fd:8a:30:dd:41:c7:36:d6:cb:c4:e6:b0:c6:b6:99: 8a:f5:ac:1d:f7:aa:b0:af:de:25:4d:b6:b3:9b:15:32:d8:36: 46:61:71:11:a3:a9:5b:11:30:21:43:ca:72:d4:7e:03:d2:e3: f8:70:1d:37:69:ec:e1:6a:1c:79:67:7a:75:73:ca:9c:29:91: 4c:16:6c:4c:34:f6:21:5c:87:51:92:ed:c9:83:67:fe:81:65: 3a:05:7e:41:b1:bf:c2:9d:47:a3:af:bb:e4:17:3b:e3:b1:26: 1b:1d:5c:2c:6f:d0:db:b1:5b:bd:22:26:02:09:84:7b:32:73: d2:72:b4:ec:d7:3c:7f:3b:54:08:16:76:8b:ae:b0:73:14:01: 59:78:cc:b5:c3:8a:b8:9d:cd:3b:8a:1a:bc:23:2b:16:72:8e: ca:aa:c3:18:60:b3:00:2c:69:64:87:8a:7c:be:a5:6e:dc:27: 92:06:23:94:56:a5:04:b4:fd:2a:bb:3f:09:7a:6b:64:e9:e8: 22:77:f8:70:d5:28:dd:d5:eb:cf:0d:e5:78:ac:1c:dc:39:03: aa:73:5c:7a:1e:ad:f2:09:a2:06:6e:c2:31:5c:91:cf:d5:21: c4:4d:eb:75 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjMxMTA1MDA1MjE5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ2ZTc0My1hZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttk+5dq3KdNT4cIchMBslwuz4mV3+d+/fOJ9t3LberlQpoH6HZ5w9eTSy3sp r6Cjrw/U20qXF7AhytCSPricprWXkvuYFMANIKbenZeEtuTGevtcgpwVgjZWh8C5 Lsuc/Y0D4vNwSWGOrkAejQeyw12wWlCUa3oWqS91eEyMYr7/Esj0Z1jHBFXwCwfe DCS8vCblL7W7b0W2tPURtcAePWWxmmWc9nvRHaqNsmVLX1epFjjGi45tG5fHNLav zOoeJ/T4JBGvcj8OmpFj3RUjZAhNHwdVbkYcVoBo6qhCI9z5RyyVpyfmBl4xm0lS ngwgYDNPE9WQa7O9UIis/bj/UwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLOrVA4X nO2kJqhqKaGx/XyShb89MB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkREQjQvQTYwMDgzMTZCOTMyMTFFQkI5NUQwNjNDQzRGOUFFMDIvOTVCNDI0OThC OTM0MTFFQjk4MENCMjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLHKcwDQYJKoZIhvcNAQELBQADggEBAJxAh0G8K22u7tYY nUOxzhFoVBhkgf2KMN1BxzbWy8TmsMa2mYr1rB33qrCv3iVNtrObFTLYNkZhcRGj qVsRMCFDynLUfgPS4/hwHTdp7OFqHHlnenVzypwpkUwWbEw09iFch1GS7cmDZ/6B ZToFfkGxv8KdR6Ovu+QXO+OxJhsdXCxv0NuxW70iJgIJhHsyc9JytOzXPH87VAgW douusHMUAVl4zLXDiridzTuKGrwjKxZyjsqqwxhgswAsaWSHiny+pW7cJ5IGI5RW pQS0/Sq7Pwl6a2Tp6CJ3+HDVKN3V688N5XisHNw5A6pzXHoerfIJogZuwjFckc/V IcRN63U= -----END CERTIFICATE-----Generated at Tue May 21 01:47:01 2024 by rpki-client on console-fra.rpki-client.org