$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/3A304DB4F54411EE8FF34627C4F9AE02.roa File: 3A304DB4F54411EE8FF34627C4F9AE02.roa (raw, json) Hash identifier: /40Lfx7mc+RKzfFNZjcJomMgvMglcXnhZ5igcKXMupQ= Subject key identifier: FF:A2:D1:B1:75:CD:97:93:BA:6C:5D:BD:EE:5C:31:9D:91:5C:12:75 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 33BC Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/3A304DB4F54411EE8FF34627C4F9AE02.roa Signing time: Mon 08 Apr 2024 01:58:45 +0000 ROA not before: Mon 08 Apr 2024 01:58:45 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 198949 IP address blocks: 202.7.8.0/21 maxlen: 21 203.5.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13244 (0x33bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Apr 8 01:58:45 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66134f55-24d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:62:22:d4:89:da:e0:ad:62:e7:95:3d:14: 37:c4:a2:c3:d4:3b:07:67:bf:c7:c8:e2:29:35:65: be:2c:01:ad:cf:a3:c8:7c:59:01:f1:27:28:e3:31: 3f:2b:71:db:21:43:7f:ee:57:a7:d7:cd:43:60:fe: 48:6f:75:c7:57:68:c0:78:66:36:58:5b:9f:7a:d9: 08:0c:40:a9:3e:fc:ee:75:d9:99:38:00:80:39:c0: 00:45:c1:17:ad:ed:65:a2:82:cd:8b:79:2f:b3:26: 90:eb:7d:69:d1:f3:c1:0b:38:b4:e0:a8:83:2e:bd: 0e:bc:5d:99:7b:f9:64:69:36:3a:13:0e:99:6e:45: 79:b6:b6:76:2e:bf:05:44:a8:76:a6:18:3d:0d:f2: fa:24:53:7d:80:f5:da:6f:0b:9c:4f:6d:32:b0:72: c2:ab:59:29:ee:32:ca:f6:fc:88:42:29:07:89:8d: e0:07:47:69:8d:02:fc:a5:69:40:07:c5:fb:a8:69: ba:15:7e:12:a3:e2:ae:7e:e8:95:c5:26:d2:ec:fc: 17:05:c9:aa:49:3c:41:99:9d:15:13:8c:16:87:29: 21:38:e0:db:02:5f:df:dc:8d:ce:7f:57:fc:cb:5d: 2e:f0:e9:19:b7:de:6f:38:7a:ca:7f:a9:d8:19:9c: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:D1:B1:75:CD:97:93:BA:6C:5D:BD:EE:5C:31:9D:91:5C:12:75 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/3A304DB4F54411EE8FF34627C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.7.8.0/21 203.5.121.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:cd:2b:9b:5f:b5:a8:9b:98:9c:18:19:f3:23:a4:dd:93:c8: 5b:13:ea:9b:4d:17:9f:52:c1:9f:ba:b7:bd:d3:04:fc:c6:c5: a5:49:15:8d:c7:2c:3b:b3:30:88:70:ca:08:5f:0a:1f:b6:78: 46:94:f0:a2:c1:fd:f0:04:e7:5d:2d:19:71:4b:77:1d:e9:a2: bd:f4:55:1d:44:ba:38:2d:a6:f6:e4:c6:f0:22:7f:fc:fe:a5: 06:46:92:12:4a:7d:6b:25:77:58:e9:3d:d2:a3:f6:55:ba:5b: 10:0f:71:ce:d6:a7:dd:b5:cd:96:97:55:c6:22:c4:5f:e4:8f: 18:f8:e1:59:b8:5b:e7:a1:42:36:d4:ad:34:55:9f:2e:a8:51: 42:cf:45:0f:a5:5f:d5:93:ee:b7:94:c1:48:12:13:bf:c0:48: 07:a3:89:a2:b0:b5:2a:90:5b:ed:64:d6:63:40:78:4d:34:94: 7b:e3:df:fd:8b:01:2f:0c:b8:29:c5:bc:9b:47:d4:ec:e5:b5: 52:dd:5f:44:97:ae:03:5f:d2:a6:ac:b7:e0:5f:f6:b3:36:2b: 0b:a8:99:4f:e4:d0:27:b8:61:6f:11:af:88:f1:fd:44:a8:7a: ce:46:4b:b8:40:cb:58:57:c1:20:99:c5:2d:84:c5:4b:0f:9d: 56:4b:e6:75 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICM7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjQwNDA4MDE1ODQ1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjEzNGY1NS0yNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsJiItSJ2uCtYueVPRQ3xKLD1DsHZ7/HyOIpNWW+LAGtz6PIfFkB8Sco4zE/ K3HbIUN/7len181DYP5Ib3XHV2jAeGY2WFufetkIDECpPvzuddmZOACAOcAARcEX re1looLNi3kvsyaQ631p0fPBCzi04KiDLr0OvF2Ze/lkaTY6Ew6ZbkV5trZ2Lr8F RKh2phg9DfL6JFN9gPXabwucT20ysHLCq1kp7jLK9vyIQikHiY3gB0dpjQL8pWlA B8X7qGm6FX4So+KufuiVxSbS7PwXBcmqSTxBmZ0VE4wWhykhOODbAl/f3I3Of1f8 y10u8OkZt95vOHrKf6nYGZy3QwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP+i0bF1 zZeTumxdve5cMZ2RXBJ1MB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzAzMDQvQUI4MjQ5QjIxRDhFMTFFMkIxODIyNkVEMDhCMDJDRDIvM0EzMDREQjRG NTQ0MTFFRThGRjM0NjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAPKBwgDBADLBXkwDQYJKoZIhvcNAQELBQADggEBAAvNK5tf taibmJwYGfMjpN2TyFsT6ptNF59SwZ+6t73TBPzGxaVJFY3HLDuzMIhwyghfCh+2 eEaU8KLB/fAE510tGXFLdx3por30VR1EujgtpvbkxvAif/z+pQZGkhJKfWsld1jp PdKj9lW6WxAPcc7Wp921zZaXVcYixF/kjxj44Vm4W+ehQjbUrTRVny6oUULPRQ+l X9WT7reUwUgSE7/ASAejiaKwtSqQW+1k1mNAeE00lHvj3/2LAS8MuCnFvJtH1Ozl tVLdX0SXrgNf0qast+Bf9rM2KwuomU/k0Ce4YW8Rr4jx/USoes5GS7hAy1hXwSCZ xS2ExUsPnVZL5nU= -----END CERTIFICATE-----Generated at Sat May 4 15:55:01 2024 by rpki-client on console-ams.rpki-client.org