$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa File: B8E7D994D00711EAB66A1255C4F9AE02.roa (raw, json) Hash identifier: qBQZRIGJAp4KeSJFDy0uzWJBoTzS2pCrUTNDxRDaasc= Subject key identifier: 53:B2:C2:8E:77:6A:91:B6:C5:6A:72:46:1C:87:D7:FC:70:80:40:DB Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3464 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa Signing time: Tue 02 Jan 2024 14:50:28 +0000 ROA not before: Tue 02 Jan 2024 14:50:28 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 20940 IP address blocks: 220.227.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13412 (0x3464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Jan 2 14:50:28 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=659422b4-315e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:5c:07:60:b6:71:c1:e3:c1:91:41:31:fc: 95:81:d0:34:0a:8b:dd:60:58:8d:a5:19:2e:3c:68: 65:94:5d:d3:48:81:f6:a1:d6:5f:cc:59:2e:a1:b0: aa:70:da:99:5a:91:10:4e:6e:e1:f4:af:e1:04:d3: 32:ab:9c:7b:31:4d:d3:bc:5f:bb:35:4a:a8:f5:c0: 13:9d:c2:d7:61:50:b8:d4:88:41:d2:18:ca:7c:53: e6:e7:15:95:1c:dd:d6:04:ac:ac:5e:7b:2a:db:78: 55:d6:b2:fd:a0:75:92:06:1e:24:35:66:f7:1a:a8: a0:ca:43:ad:f5:3b:d3:45:1e:ce:b1:99:9e:2b:e5: 57:ed:3b:33:4b:f6:2e:8c:3d:2c:d5:38:e3:a8:d6: 8d:b3:69:ef:68:c9:f0:42:a9:fd:d8:65:95:82:f4: aa:46:f9:71:d1:d9:e3:a2:80:bf:62:cd:75:1f:38: c0:5d:49:9e:0b:78:29:f1:d4:f5:5f:bb:b4:51:14: a2:30:ef:80:21:af:da:18:4c:71:ee:a1:cd:d2:32: b3:e4:2f:80:ed:4b:32:4a:37:d3:22:dc:63:80:a9: 49:49:2e:51:93:3d:d4:72:1a:d6:24:fa:51:4e:36: c3:16:25:e0:42:7b:9f:13:ff:e1:72:66:14:0f:4c: 2b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B2:C2:8E:77:6A:91:B6:C5:6A:72:46:1C:87:D7:FC:70:80:40:DB X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.227.183.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:dc:9c:82:94:cd:84:f2:c5:55:23:5d:f4:00:5c:12:3c:db: f6:2b:c8:b8:6f:8f:e3:94:12:9b:b3:2b:85:29:c1:31:ad:db: 1a:5e:2c:4b:dc:09:22:4e:ac:8f:d7:9c:26:33:32:3c:0b:e1: 6c:d6:63:30:4f:00:86:db:4d:42:f2:05:b0:f9:10:fb:3b:c6: ad:60:5c:39:7a:92:81:b6:f8:3c:8e:e5:9d:41:96:d8:3d:b2: 42:f9:a4:9b:ea:00:db:42:a2:a6:16:5a:29:1e:dd:22:09:d0: 4f:58:43:16:10:ab:f3:65:76:6a:71:e2:aa:9f:07:f0:02:95: 52:1e:16:85:64:2c:78:1e:2b:ee:56:af:b6:2b:8b:8e:ce:1c: 40:21:96:a0:48:a5:88:49:b2:b5:9b:e9:3d:4d:22:02:ae:0b: c1:af:89:36:54:66:21:c3:a5:5e:d7:9e:e7:a9:b4:8a:a5:56: cf:01:a0:41:dd:40:0e:e0:4b:f8:c5:55:a5:6b:28:6f:91:df: 8d:e9:a0:ff:3f:b0:9c:66:fe:51:04:ba:8a:88:64:a6:ef:ee: f8:8f:c9:cc:09:f5:52:c3:40:34:38:d7:cb:11:16:98:a0:12: 6f:bc:a1:68:b6:21:72:76:ab:2f:af:3b:d8:ca:e5:6e:8b:cf: 30:9b:07:5b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjQwMTAyMTQ1MDI4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0MjJiNC0zMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCNcB2C2ccHjwZFBMfyVgdA0CovdYFiNpRkuPGhllF3TSIH2odZfzFkuobCq cNqZWpEQTm7h9K/hBNMyq5x7MU3TvF+7NUqo9cATncLXYVC41IhB0hjKfFPm5xWV HN3WBKysXnsq23hV1rL9oHWSBh4kNWb3GqigykOt9TvTRR7OsZmeK+VX7TszS/Yu jD0s1TjjqNaNs2nvaMnwQqn92GWVgvSqRvlx0dnjooC/Ys11HzjAXUmeC3gp8dT1 X7u0URSiMO+AIa/aGExx7qHN0jKz5C+A7UsySjfTItxjgKlJSS5Rkz3UchrWJPpR TjbDFiXgQnufE//hcmYUD0wruQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFOywo53 apG2xWpyRhyH1/xwgEDbMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFGQTUvMDgwNTZDRTQxRDg3MTFFMjlERDNDNkRFMDhCMDJDRDIvQjhFN0Q5OTRE MDA3MTFFQUI2NkExMjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADc47cwDQYJKoZIhvcNAQELBQADggEBAIvcnIKUzYTyxVUj XfQAXBI82/YryLhvj+OUEpuzK4UpwTGt2xpeLEvcCSJOrI/XnCYzMjwL4WzWYzBP AIbbTULyBbD5EPs7xq1gXDl6koG2+DyO5Z1Bltg9skL5pJvqANtCoqYWWike3SIJ 0E9YQxYQq/Nldmpx4qqfB/AClVIeFoVkLHgeK+5Wr7Yri47OHEAhlqBIpYhJsrWb 6T1NIgKuC8GviTZUZiHDpV7XnueptIqlVs8BoEHdQA7gS/jFVaVrKG+R343poP8/ sJxm/lEEuoqIZKbv7viPycwJ9VLDQDQ418sRFpigEm+8oWi2IXJ2qy+vO9jK5W6L zzCbB1s= -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:42 2024 by rpki-client on console-fra.rpki-client.org