$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D81FDE90B8F411E982F74F7BC4F9AE02.roa File: D81FDE90B8F411E982F74F7BC4F9AE02.roa (raw, json) Hash identifier: XLMl1/eXRaVoQf/IUjYf53sZL5Hk+LzlaH096CNL3Sg= Subject key identifier: 34:B0:00:13:97:EB:42:D3:D0:F2:D7:32:83:26:7F:94:4E:AE:EE:D7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7157 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D81FDE90B8F411E982F74F7BC4F9AE02.roa Signing time: Wed 10 May 2023 16:47:46 +0000 ROA not before: Wed 10 May 2023 16:47:46 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 18101 IP address blocks: 202.53.79.0/24 maxlen: 24 202.65.155.0/24 maxlen: 24 202.65.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29015 (0x7157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:47:46 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcab1-fe9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:cf:a4:7e:14:3d:c5:41:94:9d:86:1a:0e: 4b:c2:f5:f9:80:dc:38:b2:19:90:12:26:53:5f:ab: ad:bc:85:9d:37:1f:d8:c6:76:2f:94:ba:bf:6f:73: 33:7d:05:46:ae:e6:14:23:5a:27:bd:5d:5e:3a:37: e0:7d:48:51:e7:d9:08:e8:75:87:bd:41:06:99:60: 45:43:11:c9:a0:23:da:90:b4:6a:b1:e4:54:89:fa: a3:d9:79:94:b1:ed:58:d4:8f:90:4c:85:b0:1c:a9: 5f:e0:67:a0:dd:bf:d9:c4:fc:5f:7e:09:b2:1b:43: 8d:a6:e4:04:9c:d2:5d:11:a0:08:d4:d7:a6:e0:ea: bf:15:0a:7d:5d:11:82:07:63:96:f5:5c:7c:d3:06: 09:67:10:3e:d3:6b:eb:05:c0:d8:62:39:60:a5:c7: 8c:4a:aa:09:8b:e5:cb:2e:1e:83:d3:bf:e0:64:62: 94:2b:7d:16:d0:cc:ca:fb:ca:de:75:b2:68:fb:75: b7:89:b6:ab:8c:a5:c4:0f:3e:57:29:fc:c0:1a:d1: 75:58:56:e7:6d:de:11:c3:48:10:5b:9e:e4:99:12: 50:c6:be:e4:c2:bf:62:ae:ef:33:cc:19:5e:67:e6: 8d:61:f0:57:b6:7b:11:2a:1f:5b:97:81:db:8c:6a: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B0:00:13:97:EB:42:D3:D0:F2:D7:32:83:26:7F:94:4E:AE:EE:D7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D81FDE90B8F411E982F74F7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.53.79.0/24 202.65.155.0/24 202.65.159.0/24 Signature Algorithm: sha256WithRSAEncryption 47:60:49:2a:d5:a0:0a:5a:f3:9f:2b:47:41:5d:21:e6:fb:84: 79:05:37:e0:9d:d3:58:fe:89:27:5f:95:31:7b:a7:c8:83:44: 26:cc:73:da:24:26:30:cf:7c:af:28:2a:b4:eb:e0:c3:71:13: 3e:f1:0c:e2:c7:b3:18:f1:3c:96:77:fa:6d:64:bc:56:c4:4f: 64:c7:29:8a:38:ee:1d:a4:c4:d3:cc:2b:7d:e8:8c:a3:c7:40: c7:9d:1d:98:26:66:55:c5:7e:56:50:90:6b:02:1e:02:9c:0c: 43:8c:f3:f9:1a:55:e7:d1:d6:d3:f2:47:b4:75:3a:08:25:aa: 70:b6:d9:f1:6a:e3:d5:6e:79:64:46:b4:bc:98:a7:21:04:ad: 4c:f3:20:4d:27:56:dd:2e:9f:42:a2:b9:84:ab:63:78:06:25: 38:00:58:6b:f6:c3:1b:b0:d5:6f:af:5d:a6:be:25:1a:f4:b6: e6:a3:7d:ce:a1:eb:1e:35:3f:e5:47:ca:1b:a1:c9:b9:60:71: 95:ec:8d:d4:b4:23:01:3b:15:c7:32:3c:27:26:9f:36:4b:07: 69:22:05:3a:56:93:07:17:74:b4:7e:17:d0:be:cb:9f:cf:d5: ad:ae:6c:be:c0:5c:1e:19:2b:32:3b:48:8c:77:12:53:cb:80: 08:e0:21:93 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICcVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NzQ2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FiMS1mZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2XPpH4UPcVBlJ2GGg5LwvX5gNw4shmQEiZTX6utvIWdNx/YxnYvlLq/b3Mz fQVGruYUI1onvV1eOjfgfUhR59kI6HWHvUEGmWBFQxHJoCPakLRqseRUifqj2XmU se1Y1I+QTIWwHKlf4Geg3b/ZxPxffgmyG0ONpuQEnNJdEaAI1Nem4Oq/FQp9XRGC B2OW9Vx80wYJZxA+02vrBcDYYjlgpceMSqoJi+XLLh6D07/gZGKUK30W0MzK+8re dbJo+3W3ibarjKXEDz5XKfzAGtF1WFbnbd4Rw0gQW57kmRJQxr7kwr9iru8zzBle Z+aNYfBXtnsRKh9bl4HbjGqtjwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDSwABOX 60LT0PLXMoMmf5ROru7XMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDgxRkRFOTBC OEY0MTFFOTgyRjc0RjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBADKNU8DBADKQZsDBADKQZ8wDQYJKoZIhvcNAQELBQADggEB AEdgSSrVoApa858rR0FdIeb7hHkFN+Cd01j+iSdflTF7p8iDRCbMc9okJjDPfK8o KrTr4MNxEz7xDOLHsxjxPJZ3+m1kvFbET2THKYo47h2kxNPMK33ojKPHQMedHZgm ZlXFflZQkGsCHgKcDEOM8/kaVefR1tPyR7R1OgglqnC22fFq49VueWRGtLyYpyEE rUzzIE0nVt0un0KiuYSrY3gGJTgAWGv2wxuw1W+vXaa+JRr0tuajfc6h6x41P+VH yhuhyblgcZXsjdS0IwE7FccyPCcmnzZLB2kiBTpWkwcXdLR+F9C+y5/P1a2ubL7A XB4ZKzI7SIx3ElPLgAjgIZM= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:38 2024 by rpki-client on console-fra.rpki-client.org