$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/DD726152945311EAB9A9B971C4F9AE02.roa File: DD726152945311EAB9A9B971C4F9AE02.roa (raw, json) Hash identifier: 5x1qc/WoeaNVoEpC5uhb9hW2H/Qy8G3Vz638uPldxWc= Subject key identifier: 34:5B:9C:97:E3:53:7A:A8:8E:31:4D:60:6A:55:F8:7C:B1:AD:4A:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 0804 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/DD726152945311EAB9A9B971C4F9AE02.roa Signing time: Mon 10 Jul 2023 20:57:35 +0000 ROA not before: Mon 10 Jul 2023 20:57:35 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38264 IP address blocks: 202.45.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Jul 10 20:57:35 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64ac70bf-7687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:8a:16:e8:9d:7e:24:86:01:85:68:c8:35: 20:56:13:41:41:cb:ff:fe:98:66:06:9a:a7:08:d1: e8:9c:b1:1c:63:79:f7:18:79:f8:f7:74:29:a2:5c: b7:ee:f2:11:b9:bf:84:67:bc:ea:93:f1:10:1f:9a: 4c:81:dd:0d:fa:ee:7a:51:9d:27:fc:19:c5:50:37: 71:c1:74:ef:46:ed:8d:c0:5b:8a:53:56:2b:0c:7b: c4:19:a6:70:3c:0c:75:99:d0:26:52:34:5f:eb:f7: d8:ca:76:12:c4:cb:d7:5d:4a:e1:4c:bd:f8:6b:dd: 7f:d2:50:a0:b7:01:0b:2f:d3:fd:a4:07:14:1d:91: 1d:c5:7d:bd:ba:0b:11:ae:76:d9:93:3d:52:b9:24: 2d:74:ce:92:82:5a:a1:2d:58:fe:db:a6:be:16:df: 9f:ae:b6:d9:cf:c4:49:80:20:60:ed:9b:78:cf:01: a3:27:42:a3:50:03:e2:ed:80:a9:35:b7:ef:a4:0e: 30:0e:09:dc:c0:24:c4:82:fe:e0:52:3b:80:27:dd: b8:20:6a:8e:be:99:77:b9:8c:3a:91:1c:09:a3:58: f0:f0:8d:c2:40:03:f6:71:fc:22:74:7a:51:c9:3d: 3c:de:1c:cb:eb:d5:fe:d6:c7:39:09:d8:9c:52:30: aa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5B:9C:97:E3:53:7A:A8:8E:31:4D:60:6A:55:F8:7C:B1:AD:4A:3F X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/DD726152945311EAB9A9B971C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.45.156.0/24 Signature Algorithm: sha256WithRSAEncryption 55:a7:d4:86:1d:69:04:07:50:51:b9:e4:5a:c7:69:53:73:48: fe:a0:de:c0:29:bf:f7:2f:a7:bb:66:a4:e3:a0:34:a9:9e:37: b0:a3:51:1a:d7:6a:6a:30:a4:f8:c2:74:06:5a:1d:69:8c:3e: 38:11:34:76:a6:3a:4b:ad:e0:30:4b:f9:32:8a:e0:c2:7c:78: 8e:58:00:47:ff:0b:35:ca:f0:f1:c3:94:d1:01:dd:0e:fa:c2: 0c:80:e0:e7:3c:0c:e6:53:ac:f2:a5:31:54:8a:31:a1:d2:94: f7:cb:f7:11:63:7d:81:b7:b6:e9:ff:c0:7c:97:e3:00:6c:ca: 08:da:fc:d2:33:51:58:ab:48:30:87:e6:13:07:d8:11:91:0c: 18:35:3a:b0:ad:0b:8d:04:b1:a8:aa:1d:1f:cf:dc:f1:b7:08: 5e:10:5b:f0:a1:69:c9:98:13:b0:a6:a8:b0:de:68:07:58:86: 42:1b:45:03:aa:78:77:c6:b6:50:35:ea:98:33:dc:c9:3e:e6: 75:7e:ac:aa:61:19:2a:97:01:ef:b7:42:8e:07:08:23:94:86: 57:9b:64:c7:37:cf:98:bb:dd:2f:17:e6:d1:a5:0d:5f:81:40: 75:e8:72:2a:20:f9:f0:fc:db:bc:44:de:81:ee:8d:b8:b3:f8: 10:f8:24:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjMwNzEwMjA1NzM1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFjNzBiZi03Njg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8+KFuidfiSGAYVoyDUgVhNBQcv//phmBpqnCNHonLEcY3n3GHn493Qpoly3 7vIRub+EZ7zqk/EQH5pMgd0N+u56UZ0n/BnFUDdxwXTvRu2NwFuKU1YrDHvEGaZw PAx1mdAmUjRf6/fYynYSxMvXXUrhTL34a91/0lCgtwELL9P9pAcUHZEdxX29ugsR rnbZkz1SuSQtdM6SglqhLVj+26a+Ft+frrbZz8RJgCBg7Zt4zwGjJ0KjUAPi7YCp NbfvpA4wDgncwCTEgv7gUjuAJ924IGqOvpl3uYw6kRwJo1jw8I3CQAP2cfwidHpR yT083hzL69X+1sc5CdicUjCqIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDRbnJfj U3qojjFNYGpV+HyxrUo/MB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU3NkIvQkYxODMyMzI5NDUyMTFFQTgwNkU2OTcwQzRGOUFFMDIvREQ3MjYxNTI5 NDUzMTFFQUI5QTlCOTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKLZwwDQYJKoZIhvcNAQELBQADggEBAFWn1IYdaQQHUFG5 5FrHaVNzSP6g3sApv/cvp7tmpOOgNKmeN7CjURrXamowpPjCdAZaHWmMPjgRNHam Okut4DBL+TKK4MJ8eI5YAEf/CzXK8PHDlNEB3Q76wgyA4Oc8DOZTrPKlMVSKMaHS lPfL9xFjfYG3tun/wHyX4wBsygja/NIzUVirSDCH5hMH2BGRDBg1OrCtC40Esaiq HR/P3PG3CF4QW/ChacmYE7CmqLDeaAdYhkIbRQOqeHfGtlA16pgz3Mk+5nV+rKph GSqXAe+3Qo4HCCOUhlebZMc3z5i73S8X5tGlDV+BQHXociog+fD827xE3oHujbiz +BD4JIc= -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org