$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCDF01E2729E11EBBF1EEF82C4F9AE02.roa File: FCDF01E2729E11EBBF1EEF82C4F9AE02.roa (raw, json) Hash identifier: YYz3x6fS4hkX2fCr7DTTDyqRMCisYLa7/ifXm+tCzC8= Subject key identifier: C0:55:EB:AF:43:B8:7B:B2:50:F7:73:0E:E9:2F:50:3D:5D:3F:96:1B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71B5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCDF01E2729E11EBBF1EEF82C4F9AE02.roa Signing time: Wed 10 May 2023 16:49:35 +0000 ROA not before: Wed 10 May 2023 16:49:35 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 583 IP address blocks: 221.134.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29109 (0x71b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:49:35 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb1f-33c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:c2:d5:c4:55:fb:b8:1c:3e:ab:90:c5:9d: 5f:2f:a7:57:05:a5:65:bd:26:7d:88:13:3c:bd:8a: b5:16:c9:d5:cb:56:0c:12:69:87:50:b4:94:d9:72: a5:2e:e9:d2:72:e9:f5:de:a7:f8:5f:8a:20:76:64: da:a5:f8:5d:d4:35:19:7c:60:67:0c:72:68:33:94: 26:57:a4:b3:8a:0f:d4:c5:b9:a6:05:f2:e7:9d:d3: 01:4c:60:32:d2:12:34:c4:ca:b3:07:c4:bb:ec:46: 69:b8:24:3a:68:15:b6:8a:88:76:c6:a4:c2:fd:82: 43:88:59:24:c4:f5:f0:2d:04:d0:0b:76:4f:c3:6f: 40:92:74:13:b0:d0:06:23:dc:bb:0a:23:d8:8d:fb: db:4d:a2:29:f6:9c:5f:e1:56:dd:ec:77:e8:95:11: 8d:85:c8:40:49:c3:a2:78:4d:c4:ea:23:ea:94:2b: 53:1d:ab:6c:99:74:53:60:9e:5e:ff:d0:fc:66:5a: db:52:ba:88:3a:75:cd:2e:eb:a7:8e:d3:08:02:dd: 14:e4:84:37:06:d1:eb:57:8b:64:2c:09:ee:1b:d1: 57:3a:49:d3:46:26:4b:b5:d7:e6:ee:84:6e:39:04: 92:14:0c:73:02:27:64:36:df:3a:dd:42:fe:09:f6: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:55:EB:AF:43:B8:7B:B2:50:F7:73:0E:E9:2F:50:3D:5D:3F:96:1B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCDF01E2729E11EBBF1EEF82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.134.236.0/22 Signature Algorithm: sha256WithRSAEncryption 58:c0:7f:74:ce:d9:c4:b2:ec:1d:ed:7f:f8:f6:67:94:ad:11: 8f:71:7b:3f:81:5c:41:51:f3:0e:8e:78:e8:88:c8:35:b5:2c: 12:13:7c:28:96:84:9b:8f:91:b6:89:8d:00:f7:1e:1f:ba:95: b7:bf:17:d5:c9:e9:7c:c3:a6:16:58:e9:3e:ca:b9:0c:0d:a7: 70:6b:56:79:77:64:f1:76:c2:12:bc:06:20:ac:ae:73:31:c3: 97:78:f3:c6:2a:5a:d4:20:98:07:48:c7:64:31:9e:4d:ac:2a: 66:e5:d3:01:4e:60:2a:57:33:40:dc:7a:3d:c2:1f:8a:1d:40: d9:de:ee:f3:5e:5c:de:ff:22:66:b2:be:ab:ba:01:ec:e3:17: ba:8a:9f:4a:01:b1:99:1d:aa:66:78:49:a3:4b:8d:eb:fd:34: 8f:da:d4:71:9c:86:ce:19:e8:0c:d3:b1:c6:7b:f2:92:6b:88: f8:f0:c8:21:d5:33:eb:58:70:3e:d5:90:db:ca:eb:8d:01:10: 3a:5d:f9:70:9e:67:ea:17:16:20:e3:31:6f:fe:ae:77:15:3f: 32:55:d3:96:11:8b:b8:a0:b0:39:a1:06:68:ac:e9:b0:01:78: 54:eb:07:11:1e:61:20:65:d6:ce:e3:91:3b:1a:3f:69:53:35: 51:91:07:92 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0OTM1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2IxZi0zM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHXC1cRV+7gcPquQxZ1fL6dXBaVlvSZ9iBM8vYq1FsnVy1YMEmmHULSU2XKl LunScun13qf4X4ogdmTapfhd1DUZfGBnDHJoM5QmV6Szig/UxbmmBfLnndMBTGAy 0hI0xMqzB8S77EZpuCQ6aBW2ioh2xqTC/YJDiFkkxPXwLQTQC3ZPw29AknQTsNAG I9y7CiPYjfvbTaIp9pxf4Vbd7HfolRGNhchAScOieE3E6iPqlCtTHatsmXRTYJ5e /9D8ZlrbUrqIOnXNLuunjtMIAt0U5IQ3BtHrV4tkLAnuG9FXOknTRiZLtdfm7oRu OQSSFAxzAidkNt863UL+CfYvqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMBV669D uHuyUPdzDukvUD1dP5YbMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkNERjAxRTI3 MjlFMTFFQkJGMUVFRjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALdhuwwDQYJKoZIhvcNAQELBQADggEBAFjAf3TO2cSy7B3t f/j2Z5StEY9xez+BXEFR8w6OeOiIyDW1LBITfCiWhJuPkbaJjQD3Hh+6lbe/F9XJ 6XzDphZY6T7KuQwNp3BrVnl3ZPF2whK8BiCsrnMxw5d488YqWtQgmAdIx2Qxnk2s Kmbl0wFOYCpXM0Dcej3CH4odQNne7vNeXN7/Imayvqu6AezjF7qKn0oBsZkdqmZ4 SaNLjev9NI/a1HGchs4Z6AzTscZ78pJriPjwyCHVM+tYcD7VkNvK640BEDpd+XCe Z+oXFiDjMW/+rncVPzJV05YRi7igsDmhBmis6bABeFTrBxEeYSBl1s7jkTsaP2lT NVGRB5I= -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:38 2024 by rpki-client on console-ams.rpki-client.org