$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D895A576B8F411E982F74F7BC4F9AE02.roa File: D895A576B8F411E982F74F7BC4F9AE02.roa (raw, json) Hash identifier: Pv9zB3vsU0bLK17glkVYyRaX43F052N5xdu2DrGlJFU= Subject key identifier: 64:E4:F4:E2:70:1F:C5:82:48:74:B6:70:8A:81:BF:73:CF:44:F0:D2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 719C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D895A576B8F411E982F74F7BC4F9AE02.roa Signing time: Wed 10 May 2023 16:49:06 +0000 ROA not before: Wed 10 May 2023 16:49:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 46071 IP address blocks: 202.65.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 11:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29084 (0x719c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:49:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb01-e118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9e:5a:88:0d:87:6d:0f:9a:6f:85:76:d4:71: 60:c3:fc:4b:b7:b1:56:97:56:69:d1:1c:f2:a8:f1: d4:a5:01:e4:ac:8f:91:6d:4d:f1:82:8b:f2:b2:2f: 27:fb:51:af:3a:de:0b:43:43:cb:09:b3:35:31:48: 13:90:eb:0a:50:57:cb:d8:91:91:82:9e:49:8e:ed: 1a:d4:fa:9f:8b:62:94:80:70:f8:3c:0d:eb:d7:be: 3d:d9:27:3b:ac:f8:fa:20:2f:30:6b:93:e2:49:25: 91:6e:b3:68:54:94:8f:04:f8:f6:95:56:f3:2d:5e: 54:ac:4c:5b:73:a2:8b:8f:d9:37:84:62:5b:59:7e: 5c:29:21:7e:fb:e4:8e:86:2d:db:5a:ce:23:28:19: 7a:db:15:ff:60:00:19:65:b6:5c:ec:0c:f5:3f:b6: 9d:30:5b:54:58:0d:78:18:a0:25:80:01:8b:22:1f: b8:77:be:ce:84:bc:f7:3d:18:60:9e:a5:82:b7:16: 18:64:d7:df:ea:27:1e:5a:96:74:69:71:e9:32:4f: 92:df:4c:12:7c:3e:87:92:e3:af:76:60:3c:49:4f: fe:8b:ab:da:7c:5e:35:59:47:6e:39:dc:87:0c:4f: ae:7c:19:1a:22:ba:31:9f:63:4d:7b:dc:f0:88:cb: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E4:F4:E2:70:1F:C5:82:48:74:B6:70:8A:81:BF:73:CF:44:F0:D2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D895A576B8F411E982F74F7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.65.128.0/19 Signature Algorithm: sha256WithRSAEncryption a4:a2:9f:80:cf:b0:96:e1:a2:2d:49:6b:7e:81:9a:fe:6a:5f: 87:a8:3b:8d:bd:70:98:bd:1e:59:2b:f8:7c:e0:58:57:d8:e9: ed:be:7a:91:9b:70:b4:28:20:99:56:b2:74:bb:32:83:c1:04: c3:30:f3:37:b7:18:43:83:fc:3c:e9:ee:fa:b6:27:40:de:ad: e9:1f:6a:9b:bc:9c:20:d2:82:a7:ac:9a:0f:40:86:d2:40:b8: b6:cb:2f:d2:90:bf:c2:c3:7c:c4:e0:4f:fa:ae:df:04:dd:a4: 79:7a:ab:ff:b7:2b:9c:c0:f5:31:5d:2d:7d:a0:c0:5e:46:7d: e2:92:6d:75:22:ae:15:fa:0c:10:e9:45:69:11:00:6d:bd:82: f2:38:58:13:80:01:c4:cb:2d:88:02:0e:a9:da:70:e3:b1:df: fe:a9:1f:26:b5:80:2e:ba:81:bd:dd:17:c6:b8:4c:82:85:8e: 6e:02:bb:f2:fe:9b:39:3c:bd:81:80:7e:dd:48:1a:64:c4:f1: e8:99:5e:fb:0d:ef:fd:f1:da:93:e8:ab:16:c4:26:0e:16:fb: f7:1f:2f:a2:d7:4c:c4:ae:3b:af:15:c7:f2:de:6d:61:73:b7: 1b:8e:c6:76:74:39:c7:e8:c7:fd:55:71:f6:4d:14:00:2a:f9: d0:df:9d:be -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0OTA2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IwMS1lMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA355aiA2HbQ+ab4V21HFgw/xLt7FWl1Zp0RzyqPHUpQHkrI+RbU3xgovysi8n +1GvOt4LQ0PLCbM1MUgTkOsKUFfL2JGRgp5Jju0a1Pqfi2KUgHD4PA3r17492Sc7 rPj6IC8wa5PiSSWRbrNoVJSPBPj2lVbzLV5UrExbc6KLj9k3hGJbWX5cKSF+++SO hi3bWs4jKBl62xX/YAAZZbZc7Az1P7adMFtUWA14GKAlgAGLIh+4d77OhLz3PRhg nqWCtxYYZNff6iceWpZ0aXHpMk+S30wSfD6HkuOvdmA8SU/+i6vafF41WUduOdyH DE+ufBkaIroxn2NNe9zwiMvbuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGTk9OJw H8WCSHS2cIqBv3PPRPDSMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDg5NUE1NzZC OEY0MTFFOTgyRjc0RjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAXKQYAwDQYJKoZIhvcNAQELBQADggEBAKSin4DPsJbhoi1J a36Bmv5qX4eoO429cJi9Hlkr+HzgWFfY6e2+epGbcLQoIJlWsnS7MoPBBMMw8ze3 GEOD/Dzp7vq2J0Derekfapu8nCDSgqesmg9AhtJAuLbLL9KQv8LDfMTgT/qu3wTd pHl6q/+3K5zA9TFdLX2gwF5GfeKSbXUirhX6DBDpRWkRAG29gvI4WBOAAcTLLYgC DqnacOOx3/6pHya1gC66gb3dF8a4TIKFjm4Cu/L+mzk8vYGAft1IGmTE8eiZXvsN 7/3x2pPoqxbEJg4W+/cfL6LXTMSuO68Vx/LebWFztxuOxnZ0Ocfox/1VcfZNFAAq +dDfnb4= -----END CERTIFICATE-----Generated at Thu Apr 25 22:34:03 2024 by rpki-client on console-fra.rpki-client.org