$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/B983A684E01811ED8385DA62C4F9AE02.roa File: B983A684E01811ED8385DA62C4F9AE02.roa (raw, json) Hash identifier: 86MvlxkKnQXznhxEyMQGuDQfe1pj2oqj++NXqqOrfDE= Subject key identifier: C6:93:B0:57:1F:51:F4:F9:66:52:C5:9D:73:A0:05:E3:30:E5:46:5B Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 43 Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/B983A684E01811ED8385DA62C4F9AE02.roa Signing time: Fri 25 Aug 2023 05:04:25 +0000 ROA not before: Fri 25 Aug 2023 05:04:25 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 24437 IP address blocks: 203.24.97.0/24 maxlen: 24 2405:3c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Aug 25 05:04:25 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e83659-d4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:22:5c:ea:71:1e:e3:72:06:4c:2c:41:37: 92:98:79:56:6b:14:94:d8:8e:a3:d1:34:ec:68:b8: 3f:65:5e:73:73:e6:28:1c:1f:c6:b6:e3:60:5f:19: 8f:ef:3a:d7:dd:3d:f2:c6:dd:6b:98:e6:3c:70:77: e1:13:1f:e3:71:24:1e:24:27:04:76:5f:45:bd:85: 65:f3:fc:4e:f2:95:08:60:62:ec:4d:1b:8a:9f:88: 05:65:83:40:f6:31:82:fc:af:b5:06:e9:ec:84:10: f3:6f:c4:6f:61:b6:0b:b9:b2:86:4b:21:cc:bc:13: 81:82:ba:61:bd:f4:fb:53:ef:bf:f2:99:38:f8:a0: 0a:8b:b2:77:77:89:83:30:e2:09:a9:a5:f4:48:46: f4:14:50:3d:0d:19:32:e6:76:3b:00:42:d0:0a:65: cb:a7:2b:a8:a3:fc:85:70:02:0c:f7:a4:7d:54:b9: 81:71:2c:bb:b5:d4:50:ae:37:4a:7e:40:8b:fd:e7: 7d:ae:7d:69:8c:f3:0d:da:98:17:cb:cb:2d:b3:71: bb:15:42:cf:08:71:ba:59:9d:c4:10:7f:e6:15:88: 40:ba:ee:93:22:3b:79:1c:fb:bd:a1:ca:54:27:28: 1c:58:19:f5:9e:aa:22:c7:34:6d:eb:1c:32:08:0d: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:93:B0:57:1F:51:F4:F9:66:52:C5:9D:73:A0:05:E3:30:E5:46:5B X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/B983A684E01811ED8385DA62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.24.97.0/24 IPv6: 2405:3c00::/32 Signature Algorithm: sha256WithRSAEncryption 4b:a9:25:53:69:21:88:59:3f:dc:02:c0:d8:b5:c5:9c:f9:1c: 70:79:5f:69:1a:7c:fe:9a:eb:3b:86:73:1d:7d:6f:3e:c7:5c: c3:02:88:f1:63:06:27:17:52:31:77:82:93:63:73:28:6a:ad: 87:64:66:1e:85:24:8a:96:44:1c:c2:06:da:6e:09:7d:34:46: e1:c3:ce:49:4e:b1:6c:20:82:9e:86:98:20:47:c8:57:12:98: e5:a7:2a:f9:32:8f:97:59:c3:ff:21:cb:7b:ec:51:11:72:3a: 68:d3:31:05:76:8d:3f:72:03:b7:eb:c4:6f:0b:bf:0c:dc:4a: 47:b5:27:3b:1f:a2:69:59:a3:be:49:d7:4d:05:82:0c:81:66: 2f:2d:dc:ef:b0:1a:eb:75:53:e3:d2:a1:7b:1b:a5:1b:82:53: 72:bc:d8:9e:59:f9:a2:5f:24:73:e1:d4:5f:62:23:7a:86:c9: 10:45:57:d5:8d:ce:00:76:ed:48:5a:00:6a:2b:c8:7e:51:27: c9:17:78:f4:22:15:05:0d:15:4d:4e:8d:e1:b4:4f:30:cc:b0: 53:77:0e:b8:3e:cd:55:16:5d:5b:e4:38:17:ca:d6:33:fd:55: b4:21:47:84:fc:28:4f:47:73:c5:2b:5e:04:7a:6e:4d:ad:9d: fa:b6:98:c9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0JGODExMC8GA1UEBRMoRUUwQUQ0Mzc1RjlGMEE5OEI3QTZEOUVGQThBNTI1MTU4 RDgxNzA5MTAeFw0yMzA4MjUwNTA0MjVaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZTgzNjU5LWQ0ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpoCJc6nEe43IGTCxBN5KYeVZrFJTYjqPRNOxouD9lXnNz5igcH8a242BfGY/v OtfdPfLG3WuY5jxwd+ETH+NxJB4kJwR2X0W9hWXz/E7ylQhgYuxNG4qfiAVlg0D2 MYL8r7UG6eyEEPNvxG9htgu5soZLIcy8E4GCumG99PtT77/ymTj4oAqLsnd3iYMw 4gmppfRIRvQUUD0NGTLmdjsAQtAKZcunK6ij/IVwAgz3pH1UuYFxLLu11FCuN0p+ QIv9532ufWmM8w3amBfLyy2zcbsVQs8IcbpZncQQf+YViEC67pMiO3kc+72hylQn KBxYGfWeqiLHNG3rHDIIDVNVAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUxpOwVx9R 9PlmUsWdc6AF4zDlRlswHwYDVR0jBBgwFoAU7grUN1+fCpi3ptnvqKUlFY2BcJEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQkY4L0FDMjk0REU4RTAx NTExRURCMTY2Njk2MUM0RjlBRTAyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNK RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2dyVU4xLWZDcGkzcHRudnFLVWxGWTJCY0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9COTgzQTY4NEUw MTgxMUVEODM4NURBNjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAMsYYTANBAIAAjAHAwUAJAU8ADANBgkqhkiG9w0BAQsFAAOC AQEAS6klU2khiFk/3ALA2LXFnPkccHlfaRp8/prrO4ZzHX1vPsdcwwKI8WMGJxdS MXeCk2NzKGqth2RmHoUkipZEHMIG2m4JfTRG4cPOSU6xbCCCnoaYIEfIVxKY5acq +TKPl1nD/yHLe+xREXI6aNMxBXaNP3IDt+vEbwu/DNxKR7UnOx+iaVmjvknXTQWC DIFmLy3c77Aa63VT49KhexulG4JTcrzYnln5ol8kc+HUX2IjeobJEEVX1Y3OAHbt SFoAaivIflEnyRd49CIVBQ0VTU6N4bRPMMywU3cOuD7NVRZdW+Q4F8rWM/1VtCFH hPwoT0dzxSteBHpuTa2d+raYyQ== -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org