$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8F5856362E9511E9896EFA1DC4F9AE02.roa File: 8F5856362E9511E9896EFA1DC4F9AE02.roa (raw, json) Hash identifier: pa1Fyj4rJ9wsQhHKUYwleZnXaMszFSBEcPoalFBKpsk= Subject key identifier: 02:79:CE:4E:80:9D:B5:06:64:09:E6:85:8D:27:A2:3D:E0:C6:67:CC Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 1032 Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8F5856362E9511E9896EFA1DC4F9AE02.roa Signing time: Tue 30 Apr 2024 18:26:34 +0000 ROA not before: Tue 30 Apr 2024 18:26:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 59348 IP address blocks: 202.78.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4146 (0x1032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: Apr 30 18:26:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663137da-ca86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:67:48:b7:0d:b1:7c:d3:6f:6b:78:f6:bf:44: b0:52:18:dc:bf:f7:82:eb:97:36:6e:72:35:5b:3f: 9a:7f:c1:4b:13:15:5e:b5:15:e6:0a:37:6b:cf:88: 57:a7:a1:fc:69:66:ea:05:26:00:7e:c4:95:98:00: da:8e:dc:59:b8:07:36:4f:b0:61:6a:45:5b:7c:7e: 56:90:35:6f:8d:f7:a9:89:90:40:e1:77:0b:24:52: d0:9f:bb:1f:ea:1a:60:06:d8:e4:bb:d8:53:39:c6: e3:3f:f3:4f:4a:2f:de:62:ac:63:60:a8:a3:32:5d: d6:b8:d6:df:40:0a:50:2a:c5:8d:76:c9:35:c7:4c: 6b:fc:4d:dd:e9:78:63:68:ac:79:60:09:34:b3:3c: 74:86:eb:81:fe:6d:59:ed:29:71:25:cd:c8:e3:81: 4d:cc:75:ad:8c:57:c2:c2:8a:5a:92:8f:60:5d:f6: 2f:0a:c2:95:eb:41:c7:f1:91:14:2c:06:20:bf:ad: b6:83:ff:e5:7c:a7:f7:9d:77:64:63:86:47:26:bc: 6e:a2:dd:16:2e:23:82:30:bb:0c:85:bc:1a:1f:ad: cf:30:d2:58:5f:88:a8:2d:bc:04:6c:bb:31:60:60: 04:f0:0e:3b:f9:26:c6:7d:f1:89:1b:40:9e:4d:49: 5e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:79:CE:4E:80:9D:B5:06:64:09:E6:85:8D:27:A2:3D:E0:C6:67:CC X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8F5856362E9511E9896EFA1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.78.64.0/23 Signature Algorithm: sha256WithRSAEncryption 91:09:b4:8f:d4:d0:a3:40:59:5b:0b:24:a6:c0:dd:09:ad:dc: 82:1a:d3:24:bd:a5:4a:c9:ce:05:da:77:16:13:b2:71:2a:ac: 9a:6c:79:f2:cb:44:ea:45:f0:09:ef:3b:0d:8c:d3:18:2c:d8: 9d:8c:71:f8:14:45:60:3f:77:c5:88:7d:9e:2d:6d:8c:4a:3c: eb:6b:87:cf:6d:4e:f3:2a:37:a5:b4:4f:ec:c4:72:37:7f:e6: 6f:a6:eb:72:f1:28:ff:e4:43:99:13:f8:f6:f9:28:9b:0e:f8: d3:62:e9:33:d1:d0:a3:33:2e:39:78:0d:f1:7c:27:d2:4e:a7: b5:41:c3:9e:d6:7b:2f:35:ff:b0:5d:da:8f:10:c2:4b:81:5e: 6a:d2:4e:e2:b6:9d:cf:df:3f:40:45:58:43:41:71:4f:22:8f: a8:e2:cb:88:d2:d8:7d:9c:c2:68:ae:11:c2:04:8e:60:be:3c: c5:f1:90:dc:28:f1:58:e7:87:03:50:b3:96:2f:88:98:18:3e: 9c:cd:b7:0d:46:8f:0c:22:36:07:7f:e5:90:ba:60:b3:50:c5: 84:c9:05:81:a9:15:cd:b2:eb:3f:ce:aa:07:6d:9f:4a:6f:aa: e6:32:39:c9:f8:98:bd:bd:fc:31:a0:25:d4:1e:fa:de:22:3d: 7f:8a:78:4e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjQwNDMwMTgyNjM0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMzdkYS1jYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GdItw2xfNNva3j2v0SwUhjcv/eC65c2bnI1Wz+af8FLExVetRXmCjdrz4hX p6H8aWbqBSYAfsSVmADajtxZuAc2T7BhakVbfH5WkDVvjfepiZBA4XcLJFLQn7sf 6hpgBtjku9hTOcbjP/NPSi/eYqxjYKijMl3WuNbfQApQKsWNdsk1x0xr/E3d6Xhj aKx5YAk0szx0huuB/m1Z7SlxJc3I44FNzHWtjFfCwopako9gXfYvCsKV60HH8ZEU LAYgv622g//lfKf3nXdkY4ZHJrxuot0WLiOCMLsMhbwaH63PMNJYX4ioLbwEbLsx YGAE8A47+SbGffGJG0CeTUleAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAJ5zk6A nbUGZAnmhY0noj3gxmfMMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5QkMvODkyODk3MzAyRTkwMTFFOTkxNzc5NjBGQzRGOUFFMDIvOEY1ODU2MzYy RTk1MTFFOTg5NkVGQTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKTkAwDQYJKoZIhvcNAQELBQADggEBAJEJtI/U0KNAWVsL JKbA3Qmt3IIa0yS9pUrJzgXadxYTsnEqrJpsefLLROpF8AnvOw2M0xgs2J2McfgU RWA/d8WIfZ4tbYxKPOtrh89tTvMqN6W0T+zEcjd/5m+m63LxKP/kQ5kT+Pb5KJsO +NNi6TPR0KMzLjl4DfF8J9JOp7VBw57Wey81/7Bd2o8QwkuBXmrSTuK2nc/fP0BF WENBcU8ij6jiy4jS2H2cwmiuEcIEjmC+PMXxkNwo8VjnhwNQs5YviJgYPpzNtw1G jwwiNgd/5ZC6YLNQxYTJBYGpFc2y6z/Oqgdtn0pvquYyOcn4mL29/DGgJdQe+t4i PX+KeE4= -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org