$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/1901CC2A972211ED876D8452C4F9AE02.roa File: 1901CC2A972211ED876D8452C4F9AE02.roa (raw, json) Hash identifier: n2Ck1CIYhU/Zj79OnSM6zA+joLItAmPk6euia1aGJNc= Subject key identifier: DF:F1:E3:6B:A1:10:B2:F2:39:A6:DF:36:18:90:96:64:8F:AA:47:CD Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 339C Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/1901CC2A972211ED876D8452C4F9AE02.roa Signing time: Thu 10 Aug 2023 14:30:30 +0000 ROA not before: Thu 10 Aug 2023 14:30:30 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 45650 IP address blocks: 163.53.26.0/23 maxlen: 23 202.51.64.0/24 maxlen: 24 202.51.68.0/24 maxlen: 24 202.51.76.0/24 maxlen: 24 202.51.84.0/22 maxlen: 24 202.51.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13212 (0x339c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Aug 10 14:30:30 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64d4f486-58c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:f5:29:ec:2c:96:f1:18:31:25:74:9b:e1: 90:d2:b0:01:cb:8e:ab:9d:45:64:8f:6d:f9:19:53: a9:96:b7:59:a6:24:8e:41:02:31:73:a2:da:1f:2c: c9:e5:8e:6d:20:09:e9:95:65:ce:1f:1e:82:27:69: ef:a5:4a:df:d5:5f:21:6d:9c:8e:57:c3:05:b3:54: ea:7f:ae:bf:d3:dc:6a:e7:b7:29:8f:14:85:cb:54: 51:df:05:5d:f8:84:d7:90:b9:63:c6:a2:a8:70:0a: 0b:16:f5:f4:71:6d:b7:60:35:fe:4c:92:33:cf:ee: c4:5d:3f:3e:ca:49:a5:a4:7f:e3:67:9e:2b:86:b0: 9c:a2:bc:e3:1d:e8:6f:f4:e9:a8:cc:b8:d7:61:2d: 42:d2:8a:ac:d9:79:b3:c1:01:8b:32:cc:32:b4:13: 4d:4d:cc:8b:74:0e:c1:04:f5:a5:51:ce:4b:e0:dd: 14:ae:1b:c8:9d:76:b2:13:c9:a8:16:33:80:a8:a1: 90:80:0d:a7:f6:1b:11:7f:fa:54:db:7f:fd:52:69: da:97:cf:e5:61:77:8f:32:76:30:a0:0e:05:60:6b: 6b:b3:07:d2:cf:58:e0:a8:24:55:7e:9c:8e:5e:be: 0f:65:6f:77:e3:17:17:f3:9c:41:39:84:1d:c7:bb: 68:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F1:E3:6B:A1:10:B2:F2:39:A6:DF:36:18:90:96:64:8F:AA:47:CD X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/1901CC2A972211ED876D8452C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.53.26.0/23 202.51.64.0/24 202.51.68.0/24 202.51.76.0/24 202.51.84.0/22 202.51.90.0/23 Signature Algorithm: sha256WithRSAEncryption 87:56:91:2c:2e:89:5f:a3:3e:87:ea:c2:2e:d6:70:10:2e:df: 7d:e9:0f:48:b9:e9:c9:88:10:b8:35:dc:63:93:12:f4:21:13: b0:8e:0a:1e:de:50:60:72:c0:02:26:8a:78:d1:04:4e:9a:3f: 98:1e:2e:b4:0a:68:cf:8b:f1:7d:c8:78:64:aa:8d:bf:16:45: 46:f8:a1:9b:c5:cf:26:d6:ab:35:f2:20:00:4f:01:76:9f:7e: 04:13:92:13:0a:71:18:8d:5c:82:6c:45:fd:1d:fb:c0:e2:71: 58:62:a0:c8:a5:94:5d:74:8f:fc:68:20:05:20:75:97:64:2f: bd:15:1d:a2:eb:28:2e:47:f4:94:68:2a:ca:5a:56:10:99:53: f6:aa:05:41:aa:3a:6a:f1:8e:a9:a8:44:ee:d0:2b:42:05:9e: 38:64:61:b1:4f:c7:fd:01:59:67:9d:a9:bb:03:5f:2c:de:dc: ad:22:b1:4a:7c:31:a6:88:93:d6:ca:bf:12:63:c1:f0:64:3b: ed:b2:1a:6e:6e:9e:d2:60:cc:f5:94:d1:ac:dc:5c:08:f0:66: 5b:a2:4b:f4:96:df:f9:40:88:65:40:45:fa:15:00:5e:41:24: 1a:17:97:ea:6e:b4:6d:38:a4:67:0f:d9:63:e7:96:2d:52:f0: ce:dc:20:35 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICM5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjMwODEwMTQzMDMwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQ0ZjQ4Ni01OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOX1KewslvEYMSV0m+GQ0rABy46rnUVkj235GVOplrdZpiSOQQIxc6LaHyzJ 5Y5tIAnplWXOHx6CJ2nvpUrf1V8hbZyOV8MFs1Tqf66/09xq57cpjxSFy1RR3wVd +ITXkLljxqKocAoLFvX0cW23YDX+TJIzz+7EXT8+ykmlpH/jZ54rhrCcorzjHehv 9OmozLjXYS1C0oqs2XmzwQGLMswytBNNTcyLdA7BBPWlUc5L4N0UrhvInXayE8mo FjOAqKGQgA2n9hsRf/pU23/9Umnal8/lYXePMnYwoA4FYGtrswfSz1jgqCRVfpyO Xr4PZW934xcX85xBOYQdx7towQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFN/x42uh ELLyOabfNhiQlmSPqkfNMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY1NTAvOEI5QkQyMDIxRDg1MTFFMkI0MTIzMERDMDhCMDJDRDIvMTkwMUNDMkE5 NzIyMTFFRDg3NkQ4NDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAGjNRoDBADKM0ADBADKM0QDBADKM0wDBALKM1QDBAHKM1ow DQYJKoZIhvcNAQELBQADggEBAIdWkSwuiV+jPofqwi7WcBAu333pD0i56cmIELg1 3GOTEvQhE7COCh7eUGBywAIminjRBE6aP5geLrQKaM+L8X3IeGSqjb8WRUb4oZvF zybWqzXyIABPAXaffgQTkhMKcRiNXIJsRf0d+8DicVhioMillF10j/xoIAUgdZdk L70VHaLrKC5H9JRoKspaVhCZU/aqBUGqOmrxjqmoRO7QK0IFnjhkYbFPx/0BWWed qbsDXyze3K0isUp8MaaIk9bKvxJjwfBkO+2yGm5untJgzPWU0azcXAjwZluiS/SW 3/lAiGVARfoVAF5BJBoXl+putG04pGcP2WPnli1S8M7cIDU= -----END CERTIFICATE-----Generated at Thu May 16 15:21:29 2024 by rpki-client on console-ams.rpki-client.org