$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC56AAE095FA11ECB7EB9262C4F9AE02.roa File: CC56AAE095FA11ECB7EB9262C4F9AE02.roa (raw, json) Hash identifier: ZI83yi72U4SEKBf9A0xMeu/MeXHRkY42+VTs5WUWZmw= Subject key identifier: BC:63:E4:0B:10:FB:16:C5:40:82:11:0E:94:69:79:B5:82:98:AB:52 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71DE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC56AAE095FA11ECB7EB9262C4F9AE02.roa Signing time: Wed 10 May 2023 16:50:20 +0000 ROA not before: Wed 10 May 2023 16:50:20 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 7633 IP address blocks: 203.193.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29150 (0x71de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:50:20 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb4b-28f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:54:27:c6:4c:d5:07:ed:06:8e:39:c2:35:8f: b9:24:ae:56:17:b2:f7:e0:04:7e:66:a6:67:c9:fa: 93:2f:26:47:4f:7f:06:76:bd:90:bd:f8:39:b5:68: 75:73:41:4b:e1:56:64:39:04:7b:32:b6:a4:e5:dc: c0:bd:59:e3:09:96:5f:60:25:75:91:45:ed:9e:4f: d3:8c:70:a0:99:4c:94:a8:7e:63:ef:64:03:b0:10: 98:83:32:d4:1c:86:af:f5:4e:d6:07:97:e2:58:af: 55:9f:63:7a:aa:a4:35:3c:c7:a0:8f:97:6b:dd:f4: 3c:8c:a2:db:a9:c1:47:4b:27:c7:7a:96:bf:47:b9: a3:22:1e:08:5e:37:5c:3e:b7:d2:c2:c6:34:78:cb: 1b:2b:d6:c1:1f:96:19:6a:f1:94:d5:5d:74:fc:37: 75:36:4b:05:45:9e:0a:20:4d:7e:a2:b1:1a:e2:c2: a9:0e:43:2f:f1:23:d6:f2:0c:56:b1:4f:f1:68:3f: 4f:46:ca:a4:83:ab:1b:5c:89:7d:01:b5:08:d6:c3: 73:53:72:d8:5e:06:21:d0:7e:68:85:c1:55:ea:03: 86:db:c0:85:ad:16:05:b5:f7:8d:f3:ee:4b:03:4e: e6:a7:34:c7:5a:56:c3:20:ff:59:04:d0:35:0c:f4: 36:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:63:E4:0B:10:FB:16:C5:40:82:11:0E:94:69:79:B5:82:98:AB:52 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC56AAE095FA11ECB7EB9262C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.193.161.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:a1:e6:46:52:d6:38:fc:ff:b5:a2:d8:33:9a:cc:c2:59:8b: 4d:a6:0f:ee:ce:ed:42:de:39:c6:f6:6f:5a:03:6c:17:5d:62: 08:00:47:cf:19:76:83:76:01:e1:a5:69:36:b8:d5:92:d9:3c: 15:c8:ff:a7:41:3a:f0:ec:6f:61:87:86:03:82:d6:6b:e2:ce: eb:21:4f:8d:12:84:14:ee:55:38:a4:ae:5a:c4:76:a7:d6:96: 41:dd:5c:61:79:ed:8b:a0:3b:b1:89:22:32:3b:c0:19:6b:81: ce:15:8d:74:1a:af:98:9c:cd:4b:c8:94:8b:4f:1c:a5:f3:26: cc:55:a0:f9:41:cf:95:2d:0d:3e:82:84:ba:d1:d7:9e:58:39: 3a:55:12:f4:7c:4b:41:09:af:bf:02:5e:a2:26:c9:fc:2b:d5: cb:f4:1f:13:50:84:a3:b4:b9:6d:d9:28:a9:bb:5f:80:2e:ef: 84:e4:a9:36:75:8b:af:64:e8:17:5c:7f:1c:23:7d:1a:1b:6a: bb:83:cd:98:01:a7:29:26:f2:d9:ef:80:53:b2:eb:81:23:82: c6:d4:21:58:3a:75:11:ac:00:e9:3d:9a:a5:d2:30:a5:0f:53: f6:84:03:93:34:e7:2a:b3:fa:05:f2:b0:31:96:66:f0:c2:70: b3:25:33:45 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY1MDIwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2I0Yi0yOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9FQnxkzVB+0GjjnCNY+5JK5WF7L34AR+ZqZnyfqTLyZHT38Gdr2Qvfg5tWh1 c0FL4VZkOQR7Mrak5dzAvVnjCZZfYCV1kUXtnk/TjHCgmUyUqH5j72QDsBCYgzLU HIav9U7WB5fiWK9Vn2N6qqQ1PMegj5dr3fQ8jKLbqcFHSyfHepa/R7mjIh4IXjdc PrfSwsY0eMsbK9bBH5YZavGU1V10/Dd1NksFRZ4KIE1+orEa4sKpDkMv8SPW8gxW sU/xaD9PRsqkg6sbXIl9AbUI1sNzU3LYXgYh0H5ohcFV6gOG28CFrRYFtfeN8+5L A07mpzTHWlbDIP9ZBNA1DPQ2+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLxj5AsQ +xbFQIIRDpRpebWCmKtSMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0M1NkFBRTA5 NUZBMTFFQ0I3RUI5MjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLwaEwDQYJKoZIhvcNAQELBQADggEBAG+h5kZS1jj8/7Wi 2DOazMJZi02mD+7O7ULeOcb2b1oDbBddYggAR88ZdoN2AeGlaTa41ZLZPBXI/6dB OvDsb2GHhgOC1mvizushT40ShBTuVTikrlrEdqfWlkHdXGF57YugO7GJIjI7wBlr gc4VjXQar5iczUvIlItPHKXzJsxVoPlBz5UtDT6ChLrR155YOTpVEvR8S0EJr78C XqImyfwr1cv0HxNQhKO0uW3ZKKm7X4Au74TkqTZ1i69k6BdcfxwjfRobaruDzZgB pykm8tnvgFOy64EjgsbUIVg6dRGsAOk9mqXSMKUPU/aEA5M05yqz+gXysDGWZvDC cLMlM0U= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org