$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/4DF7BBE0B9A411EB8621D13CC4F9AE02.roa File: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (raw, json) Hash identifier: mdfptfU1KFsjIZAm1iPXbK29nkG/PT2OQg8PEsvtPkY= Subject key identifier: EB:E0:29:27:7C:25:B0:DA:5F:99:0C:4A:C2:E8:1F:49:D6:50:EA:F5 Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Certificate serial: 04ED Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/4DF7BBE0B9A411EB8621D13CC4F9AE02.roa Signing time: Fri 23 Feb 2024 01:03:17 +0000 ROA not before: Fri 23 Feb 2024 01:03:17 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 5716 IP address blocks: 202.12.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Validity Not Before: Feb 23 01:03:17 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d7eed5-693c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:4e:71:cb:b4:04:47:03:a3:b0:e9:cd:01: f7:98:8b:f7:0d:c9:f5:07:e1:ee:30:db:1a:17:d7: 4e:79:14:cf:49:c4:60:63:1f:c0:d2:be:9a:b6:bd: 7f:68:1e:4d:1f:72:04:d6:a9:e4:80:41:cb:4b:f3: f1:c4:da:f9:26:e7:d1:05:d9:9c:72:01:85:93:26: 27:e3:b2:98:91:32:1d:53:fe:92:d4:fb:37:a9:89: 61:3e:08:87:c4:6f:8b:f7:3d:5a:b8:6c:c6:ba:69: 8d:87:0a:7f:48:38:01:1c:a6:6d:cb:4a:cb:c8:4a: f2:ee:f9:f0:ba:e7:d9:80:51:4f:64:34:29:01:43: ce:92:b9:99:87:9f:3c:45:6c:86:4a:1a:c1:0d:7c: c0:e8:9b:77:9e:64:d3:18:bd:fd:ec:ac:c3:bc:8a: 65:9b:7e:f4:d8:e0:e3:67:d1:f7:99:27:c2:80:ff: f5:57:b4:fc:84:32:50:90:2e:cf:b9:eb:03:3a:cc: c0:ab:65:d5:cc:41:57:8c:b4:67:2a:d0:7b:31:d9: 05:06:42:e7:69:47:e3:bd:c6:12:2e:01:a3:2e:6c: 20:59:e1:d8:0b:0c:a6:c1:ed:b4:bb:26:1f:aa:ac: a0:6b:df:b3:fb:db:82:97:52:22:4b:76:52:4a:08: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E0:29:27:7C:25:B0:DA:5F:99:0C:4A:C2:E8:1F:49:D6:50:EA:F5 X509v3 Authority Key Identifier: keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/4DF7BBE0B9A411EB8621D13CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.127.0/24 Signature Algorithm: sha256WithRSAEncryption b2:2c:35:5a:54:69:62:30:db:7c:a1:bf:8d:41:a4:d3:02:6a: da:cb:c2:f9:a1:bc:67:de:98:a5:28:7a:5e:c5:61:43:9a:92: c0:17:4f:b5:5a:dd:61:72:7d:1e:a5:c3:0a:b3:f9:b2:cb:e0: f9:a9:ad:45:2f:e2:a2:9b:17:21:89:c8:b4:d8:f6:0c:0a:99: a6:04:7c:28:f0:42:69:39:0b:ae:7b:49:72:78:e0:e3:1b:d5: 06:e7:71:c6:76:2f:0b:73:9f:e5:7f:78:f1:be:01:83:79:8a: 19:f7:7d:28:02:78:02:82:f3:12:cf:a0:f3:0e:d0:ff:b1:d7: dd:b3:8c:21:b9:1b:bd:fe:fb:3d:9f:84:96:27:24:5f:7f:e8: d4:75:d3:c2:dc:20:d6:a1:5d:4b:7e:5e:c3:03:55:b4:0c:50: cc:47:5f:4f:aa:04:88:04:35:18:0b:40:36:78:c4:56:7d:e4: 1f:1f:35:3c:22:be:32:eb:fc:76:6a:8a:01:1c:64:35:c5:28: 3f:38:3f:a0:fd:b8:5e:4b:34:a9:3c:40:28:52:c4:b0:93:c2: de:2d:33:ee:6b:6a:15:fc:bd:e8:df:3d:10:b4:df:ed:bd:75: 72:9b:01:80:0b:17:60:d7:2c:57:ac:3c:7f:ea:e8:54:f7:ea: bb:f8:cf:ea -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF NzA5OTRGMDMwHhcNMjQwMjIzMDEwMzE3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3ZWVkNS02OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYhOccu0BEcDo7DpzQH3mIv3Dcn1B+HuMNsaF9dOeRTPScRgYx/A0r6atr1/ aB5NH3IE1qnkgEHLS/PxxNr5JufRBdmccgGFkyYn47KYkTIdU/6S1Ps3qYlhPgiH xG+L9z1auGzGummNhwp/SDgBHKZty0rLyEry7vnwuufZgFFPZDQpAUPOkrmZh588 RWyGShrBDXzA6Jt3nmTTGL397KzDvIplm3702ODjZ9H3mSfCgP/1V7T8hDJQkC7P uesDOszAq2XVzEFXjLRnKtB7MdkFBkLnaUfjvcYSLgGjLmwgWeHYCwymwe20uyYf qqyga9+z+9uCl1IiS3ZSSgjwdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOvgKSd8 JbDaX5kMSsLoH0nWUOr1MB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5 QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEzRTQvMjc1MDU4ODJCOUEyMTFFQjk1QzY4ODM5QzRGOUFFMDIvNERGN0JCRTBC OUE0MTFFQjg2MjFEMTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKDH8wDQYJKoZIhvcNAQELBQADggEBALIsNVpUaWIw23yh v41BpNMCatrLwvmhvGfemKUoel7FYUOaksAXT7Va3WFyfR6lwwqz+bLL4PmprUUv 4qKbFyGJyLTY9gwKmaYEfCjwQmk5C657SXJ44OMb1QbnccZ2Lwtzn+V/ePG+AYN5 ihn3fSgCeAKC8xLPoPMO0P+x192zjCG5G73++z2fhJYnJF9/6NR108LcINahXUt+ XsMDVbQMUMxHX0+qBIgENRgLQDZ4xFZ95B8fNTwivjLr/HZqigEcZDXFKD84P6D9 uF5LNKk8QChSxLCTwt4tM+5rahX8vejfPRC03+29dXKbAYALF2DXLFesPH/q6FT3 6rv4z+o= -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-ams.rpki-client.org