$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/1DC7647CF8D811EEBBE6CE09C4F9AE02.roa File: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (raw, json) Hash identifier: VHWFb8Z2Eu6wi8MvhvaLD3Xh92wBU8OtO+jqiGApjkg= Subject key identifier: F5:14:65:1B:14:77:0C:51:E6:4B:AB:F2:E3:42:98:29:D9:BA:9F:EB Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: 07 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/1DC7647CF8D811EEBBE6CE09C4F9AE02.roa Signing time: Fri 12 Apr 2024 14:22:39 +0000 ROA not before: Fri 12 Apr 2024 14:22:39 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135337 IP address blocks: 203.134.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: Apr 12 14:22:39 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661943af-8946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:d4:56:e7:e3:8b:78:36:97:59:04:58:e5: 5e:28:cd:82:34:52:d7:cc:29:3f:da:17:f9:87:b6: 7b:8b:99:f0:7c:e2:2d:b6:b4:33:3a:dc:08:a5:34: c3:f6:2f:a5:a7:53:9f:1f:1f:86:50:ff:72:d2:e1: b5:0d:f7:31:5f:99:ea:8f:92:d4:19:4b:b1:7b:06: 2e:f1:c3:88:1e:45:27:76:4a:0d:63:19:60:a9:41: de:67:d0:28:d8:6f:a0:cc:45:6b:51:1b:2a:1a:88: 4e:19:67:8d:ab:3f:cc:7f:a7:45:d9:02:2d:88:1b: b4:03:ec:47:96:1e:7c:84:7b:a2:84:b6:6c:f8:b4: 1b:be:72:f6:a8:ed:25:cb:bc:f5:cb:cc:c3:e8:66: 40:3c:45:11:c1:39:3a:05:ef:20:39:92:44:87:86: 83:36:6b:c5:77:68:10:8a:09:6d:4b:7f:2a:ae:bc: 46:d5:9c:d2:5e:60:27:66:6a:45:d2:3d:31:9b:d9: 5a:96:bd:42:9e:6c:eb:ed:5e:b7:35:e0:06:1c:4a: 71:23:01:46:8e:83:f6:c5:a4:02:39:e7:70:ce:4b: f9:89:19:53:4a:d8:39:1f:2f:ce:33:2b:7e:00:88: 3c:0d:8b:8a:85:99:62:85:f1:1d:de:10:3f:dd:8d: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:14:65:1B:14:77:0C:51:E6:4B:AB:F2:E3:42:98:29:D9:BA:9F:EB X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/1DC7647CF8D811EEBBE6CE09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.134.250.0/23 Signature Algorithm: sha256WithRSAEncryption 44:d0:91:c1:70:49:89:62:b3:6a:d3:7c:a8:e5:53:0c:e3:cb: 7a:5c:09:d0:9e:ae:27:38:d7:14:43:13:3d:1f:7a:9e:08:5a: eb:57:79:49:40:0b:62:d2:8a:a6:fd:55:44:ac:c4:48:51:46: 56:d3:a2:b8:6f:bf:91:b7:81:b9:82:7a:ff:aa:c3:5a:eb:d9: ed:99:b6:8a:17:e5:d4:fd:47:54:d5:b7:09:fb:ee:6e:64:21: 60:56:6f:2b:06:ef:70:c5:3b:32:87:68:5a:02:94:3e:b7:7f: 50:c7:55:2d:58:54:3a:9d:f0:5d:3b:e9:35:9b:77:69:04:db: 93:8d:c0:cb:44:e8:a5:4e:a7:03:7d:2a:48:c2:2b:25:5f:e3: 61:3a:af:d1:ef:af:12:d5:fc:79:ea:ba:80:97:89:dd:fc:38: a1:ce:f4:e1:4a:d5:b7:00:1b:be:9d:10:b4:c1:90:c2:6d:ce: 37:7c:4d:02:34:76:73:14:4f:b5:d0:47:a6:50:a2:24:44:d1: 6b:3f:f9:a8:c9:00:6b:24:23:64:5d:d4:de:b0:b8:3f:c0:a8: 15:40:f0:3b:0d:ad:c1:a2:fe:46:f3:38:a7:23:e1:3a:2a:ba: 63:b6:58:30:5c:7d:a7:41:98:f4:46:1e:a0:cc:f3:6b:09:13: 16:ef:31:f7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjgyRDExMC8GA1UEBRMoOTUyMjgzMzhBODVGMjQ4MjMwMzEyQ0YzOThCMjRGODEx OUQ4MjMyRjAeFw0yNDA0MTIxNDIyMzlaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MTk0M2FmLTg5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCojtRW5+OLeDaXWQRY5V4ozYI0UtfMKT/aF/mHtnuLmfB84i22tDM63AilNMP2 L6WnU58fH4ZQ/3LS4bUN9zFfmeqPktQZS7F7Bi7xw4geRSd2Sg1jGWCpQd5n0CjY b6DMRWtRGyoaiE4ZZ42rP8x/p0XZAi2IG7QD7EeWHnyEe6KEtmz4tBu+cvao7SXL vPXLzMPoZkA8RRHBOToF7yA5kkSHhoM2a8V3aBCKCW1LfyquvEbVnNJeYCdmakXS PTGb2VqWvUKebOvtXrc14AYcSnEjAUaOg/bFpAI553DOS/mJGVNK2DkfL84zK34A iDwNi4qFmWKF8R3eED/djTmPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9RRlGxR3 DFHmS6vy40KYKdm6n+swHwYDVR0jBBgwFoAUlSKDOKhfJIIwMSzzmLJPgRnYIy8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyODJELzBBQzIyQUM0RjhB MTExRUVCMERFRkU0RkM0RjlBRTAyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFNLRE9LaGZKSUl3TVN6em1MSlBnUm5ZSXk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi8xREM3NjQ3Q0Y4 RDgxMUVFQkJFNkNFMDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcuG+jANBgkqhkiG9w0BAQsFAAOCAQEARNCRwXBJiWKzatN8 qOVTDOPLelwJ0J6uJzjXFEMTPR96ngha61d5SUALYtKKpv1VRKzESFFGVtOiuG+/ kbeBuYJ6/6rDWuvZ7Zm2ihfl1P1HVNW3CfvubmQhYFZvKwbvcMU7ModoWgKUPrd/ UMdVLVhUOp3wXTvpNZt3aQTbk43Ay0TopU6nA30qSMIrJV/jYTqv0e+vEtX8eeq6 gJeJ3fw4oc704UrVtwAbvp0QtMGQwm3ON3xNAjR2cxRPtdBHplCiJETRaz/5qMkA ayQjZF3U3rC4P8CoFUDwOw2twaL+RvM4pyPhOiq6Y7ZYMFx9p0GY9EYeoMzzawkT Fu8x9w== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:17 2024 by rpki-client on console-ams.rpki-client.org