$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CF1675CB8F711E9B9C8D587C4F9AE02.roa File: 7CF1675CB8F711E9B9C8D587C4F9AE02.roa (raw, json) Hash identifier: N9DS/4JgTjKlHpb3P52LHr6eCp50xhyuC5cnEjPscTU= Subject key identifier: B4:33:99:08:34:7A:5A:9E:27:0D:7F:30:C8:3F:02:44:C5:F5:9D:07 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 69E0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CF1675CB8F711E9B9C8D587C4F9AE02.roa Signing time: Wed 10 May 2023 16:11:58 +0000 ROA not before: Wed 10 May 2023 16:11:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 131262 IP address blocks: 202.191.64.0/22 maxlen: 22 202.191.64.0/24 maxlen: 24 202.191.65.0/24 maxlen: 24 202.191.66.0/24 maxlen: 24 202.191.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27104 (0x69e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:11:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc24e-84e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:66:37:2b:e1:e6:c1:91:13:4e:7c:a5:46: 35:ae:fc:56:f5:7e:59:5d:b6:5a:8b:8e:ba:b9:a9: fc:ac:90:d4:10:4f:9b:7b:07:f5:bc:ec:fa:2e:fc: 51:37:ff:55:fc:03:0c:e2:d1:d2:f4:e6:15:b5:19: 8f:83:74:76:78:5d:7f:1e:9a:e5:7c:a5:61:57:95: de:d5:33:a8:f0:73:d4:86:c5:38:cb:90:b1:c7:a0: db:33:40:13:70:2a:bd:c3:88:30:3e:a0:c6:dd:c8: 7b:1a:ad:a2:a6:70:c7:cd:2e:f4:b6:bc:47:c5:29: d3:43:92:12:b4:86:4c:22:94:a8:00:a0:c4:0c:7c: 45:f6:4b:36:8c:f0:fb:6e:08:9d:f8:03:47:c2:1c: ba:b5:6b:d7:3f:40:50:08:0f:61:98:11:2c:3c:c0: 3a:e9:14:8a:87:85:6f:24:f8:71:ef:11:4c:3c:3e: 31:5c:05:fd:34:a8:d8:d7:15:4a:10:f8:24:54:a2: 99:da:01:0a:69:8c:7d:41:2d:78:e9:64:a5:30:4e: 7e:8d:12:47:33:ef:2d:1c:c5:09:08:36:67:7c:5a: f6:5c:dc:31:1b:93:fb:d8:5c:06:6b:18:8d:2c:28: a2:cd:78:9e:20:ce:b6:c4:5d:58:85:cd:56:8b:f1: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:33:99:08:34:7A:5A:9E:27:0D:7F:30:C8:3F:02:44:C5:F5:9D:07 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CF1675CB8F711E9B9C8D587C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.191.64.0/22 Signature Algorithm: sha256WithRSAEncryption 96:77:06:be:cf:a0:dd:cd:32:03:9d:65:b8:b9:f2:fa:55:ad: 81:11:ae:9a:c3:84:ea:72:97:58:46:40:f9:03:91:02:22:3f: b1:d4:fa:c1:af:a4:5f:08:5d:03:39:04:be:df:6e:35:3e:d6: e7:d3:46:65:6a:ca:e5:0c:02:a4:fd:ea:48:d9:af:29:7d:eb: 72:67:6b:9e:cf:7b:22:ac:5d:39:fa:e4:9d:3a:a3:5d:86:a2: 81:1e:38:c4:a9:94:36:04:03:e2:fa:f4:52:07:20:96:0e:d6: 87:8f:83:fc:c8:5a:90:9b:15:c8:61:5a:7a:ea:a5:b3:65:69: 0a:06:7e:f7:18:4f:38:86:57:b1:f6:8c:f0:f2:ef:78:06:cf: b6:b3:ad:af:ad:cd:d1:52:ea:6d:31:ba:6e:7c:a6:b7:5b:6b: f8:b8:05:6b:dd:e0:3d:06:ae:f7:a2:5f:21:53:7f:08:e7:ed: 59:f0:4c:06:55:b8:28:4f:84:5e:96:01:e3:1f:57:4c:5e:74: ff:b0:f9:65:37:75:35:92:aa:6d:be:e0:a3:40:c8:65:2d:2a: eb:b1:de:f1:68:a6:a0:bd:82:08:f0:13:fc:c4:cb:0d:ba:08: 2f:b5:6b:af:f5:1b:06:c9:0d:d8:b6:bb:2a:01:16:62:06:4f: 5b:33:bc:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICaeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMTU4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI0ZS04NGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopFmNyvh5sGRE058pUY1rvxW9X5ZXbZai466uan8rJDUEE+bewf1vOz6LvxR N/9V/AMM4tHS9OYVtRmPg3R2eF1/HprlfKVhV5Xe1TOo8HPUhsU4y5Cxx6DbM0AT cCq9w4gwPqDG3ch7Gq2ipnDHzS70trxHxSnTQ5IStIZMIpSoAKDEDHxF9ks2jPD7 bgid+ANHwhy6tWvXP0BQCA9hmBEsPMA66RSKh4VvJPhx7xFMPD4xXAX9NKjY1xVK EPgkVKKZ2gEKaYx9QS146WSlME5+jRJHM+8tHMUJCDZnfFr2XNwxG5P72FwGaxiN LCiizXieIM62xF1Yhc1Wi/GcuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLQzmQg0 elqeJw1/MMg/AkTF9Z0HMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0NGMTY3NUNC OEY3MTFFOUI5QzhENTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKv0AwDQYJKoZIhvcNAQELBQADggEBAJZ3Br7PoN3NMgOd Zbi58vpVrYERrprDhOpyl1hGQPkDkQIiP7HU+sGvpF8IXQM5BL7fbjU+1ufTRmVq yuUMAqT96kjZryl963Jna57PeyKsXTn65J06o12GooEeOMSplDYEA+L69FIHIJYO 1oePg/zIWpCbFchhWnrqpbNlaQoGfvcYTziGV7H2jPDy73gGz7azra+tzdFS6m0x um58prdba/i4BWvd4D0GrveiXyFTfwjn7VnwTAZVuChPhF6WAeMfV0xedP+w+WU3 dTWSqm2+4KNAyGUtKuux3vFopqC9ggjwE/zEyw26CC+1a6/1GwbJDdi2uyoBFmIG T1szvG0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org