$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/928C2032F0CB11EEA2206313C4F9AE02.roa File: 928C2032F0CB11EEA2206313C4F9AE02.roa (raw, json) Hash identifier: Md8FXILUd7FdRKvLS3oan4iiSjc7SWYFIJ/FiMpugOc= Subject key identifier: 92:5A:A0:28:D6:F8:5C:B4:92:BD:3B:5E:67:E7:63:99:FC:07:B9:8A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 85C0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/928C2032F0CB11EEA2206313C4F9AE02.roa Signing time: Tue 02 Apr 2024 08:32:42 +0000 ROA not before: Tue 02 Apr 2024 08:32:42 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134059 IP address blocks: 220.158.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34240 (0x85c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 2 08:32:42 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=660bc2aa-40e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:18:47:e3:db:13:b4:9f:2c:62:60:c3:22: cf:65:40:26:81:a8:a3:c9:e0:22:d3:2f:72:36:1a: 73:9a:e8:d3:60:8e:62:d3:29:2c:c8:5c:59:dd:6f: ca:15:38:a9:82:9f:b4:81:38:48:f3:73:b7:9b:66: 1a:60:29:20:f3:13:41:7c:84:c4:ff:94:8e:f2:5f: be:00:61:e4:19:72:5c:32:6c:1e:0e:79:59:cc:9d: 78:7c:b2:91:da:6c:dc:2e:26:7e:0c:c3:63:27:56: 13:90:3d:e8:b1:58:9d:ed:c6:fc:15:80:8b:6c:5b: da:c3:3f:27:39:01:a1:fd:6a:16:03:1a:67:47:f1: 2d:ae:79:49:85:f3:af:f5:38:13:8f:5c:ab:9d:ed: 92:87:6e:42:56:92:e5:56:4a:e7:66:bf:69:87:23: ab:5b:82:6a:7b:e6:35:08:30:16:b2:4d:b2:32:a9: 24:41:c0:9a:0b:0f:6c:fb:22:36:67:f3:33:51:71: 52:c6:06:17:90:32:f7:0f:0c:c6:f8:c2:24:57:e3: 5a:f0:32:61:88:7d:66:f4:31:7a:d1:7c:25:cc:f7: 32:ff:6e:e9:05:fe:5a:de:5b:87:44:a3:48:ea:e9: d0:4c:52:b2:8a:6a:31:9a:12:99:01:da:e9:20:a3: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5A:A0:28:D6:F8:5C:B4:92:BD:3B:5E:67:E7:63:99:FC:07:B9:8A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/928C2032F0CB11EEA2206313C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.158.136.0/22 Signature Algorithm: sha256WithRSAEncryption ac:27:f3:45:0f:6e:da:3e:8e:dd:37:5d:ea:40:60:7f:e6:06: b0:b7:8e:88:f6:4b:5e:55:71:a7:d9:bd:92:36:b4:8b:52:71: af:be:22:f4:fb:a2:30:ec:5a:e1:ad:9b:a9:c5:a7:3d:f4:42: 72:d4:5a:82:cc:67:ac:6b:ee:4e:cd:fa:78:30:2c:dd:35:77: d2:d9:71:21:84:a5:53:4a:92:8f:15:0d:2c:e0:bf:07:86:33: 44:51:1d:38:8f:06:fd:8d:c0:6b:68:12:ad:c2:1d:5c:8d:ca: 1b:ff:7d:37:53:12:fa:3c:a5:9a:58:99:fd:ce:ed:b3:47:7b: 07:ce:45:69:ac:d3:8e:16:0a:f1:64:52:91:d7:e5:dd:28:b0: 86:e3:7d:51:f5:eb:82:ec:02:f0:d4:63:5c:46:5f:5c:dc:c9: cc:29:77:e3:86:06:68:26:63:3d:9f:48:66:80:69:92:be:f3: 18:e8:88:c2:cc:45:f7:15:89:71:41:0c:d4:07:b2:22:21:70: 81:d7:14:c2:4a:e9:bc:62:61:4a:8d:ad:fa:aa:79:c0:d6:25: 0a:23:08:42:1e:f9:78:04:17:3b:8c:b3:b6:d8:1b:ad:1e:96: 66:38:8e:79:b9:b5:2d:97:96:53:a7:7d:03:c7:56:5c:5b:82: 99:6e:d4:4d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIXAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDQwMjA4MzI0MloXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjYwYmMyYWEtNDBlOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJWGEfj2xO0nyxiYMMiz2VAJoGoo8ngItMvcjYac5ro02COYtMpLMhcWd1v yhU4qYKftIE4SPNzt5tmGmApIPMTQXyExP+UjvJfvgBh5BlyXDJsHg55WcydeHyy kdps3C4mfgzDYydWE5A96LFYne3G/BWAi2xb2sM/JzkBof1qFgMaZ0fxLa55SYXz r/U4E49cq53tkoduQlaS5VZK52a/aYcjq1uCanvmNQgwFrJNsjKpJEHAmgsPbPsi NmfzM1FxUsYGF5Ay9w8MxvjCJFfjWvAyYYh9ZvQxetF8Jcz3Mv9u6QX+Wt5bh0Sj SOrp0ExSsopqMZoSmQHa6SCjiy0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBSSWqAo 1vhctJK9O15n52OZ/Ae5ijAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkyOEMyMDMy RjBDQjExRUVBMjIwNjMxM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQC3J6IMA0GCSqGSIb3DQEBCwUAA4IBAQCsJ/NFD27aPo7d N13qQGB/5gawt46I9kteVXGn2b2SNrSLUnGvviL0+6Iw7FrhrZupxac99EJy1FqC zGesa+5Ozfp4MCzdNXfS2XEhhKVTSpKPFQ0s4L8HhjNEUR04jwb9jcBraBKtwh1c jcob/303UxL6PKWaWJn9zu2zR3sHzkVprNOOFgrxZFKR1+XdKLCG431R9euC7ALw 1GNcRl9c3MnMKXfjhgZoJmM9n0hmgGmSvvMY6IjCzEX3FYlxQQzUB7IiIXCB1xTC Sum8YmFKja36qnnA1iUKIwhCHvl4BBc7jLO22ButHpZmOI55ubUtl5ZTp30Dx1Zc W4KZbtRN -----END CERTIFICATE-----Generated at Thu May 2 11:34:36 2024 by rpki-client on console-fra.rpki-client.org