$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/30BF32F2C28C11EAB764BF4CC4F9AE02.roa File: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (raw, json) Hash identifier: ACsXQpxom0pQH2Vh5Nd6SW+Bz96WCY0x99/tX/MXON4= Subject key identifier: 92:7B:3D:10:FC:37:1B:FD:58:AD:D6:77:84:1E:9B:31:E9:F2:47:07 Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 0EB9 Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/30BF32F2C28C11EAB764BF4CC4F9AE02.roa Signing time: Sat 30 Sep 2023 17:55:42 +0000 ROA not before: Sat 30 Sep 2023 17:55:42 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 140702 IP address blocks: 202.87.4.0/22 maxlen: 24 203.57.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3769 (0xeb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Sep 30 17:55:42 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6518611d-26ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:6b:4e:e4:29:1e:5b:18:ef:37:95:c4:c0: ee:8e:e7:6c:98:c5:9a:31:91:8c:d6:fe:b2:3f:03: 36:e7:9d:d1:fd:a1:95:16:09:6d:ff:53:dd:75:ab: 0f:87:50:82:56:04:ef:10:fb:c6:9b:a7:fd:23:ff: 36:bf:67:9c:9d:39:1a:cd:f4:1b:3e:35:19:34:ae: 95:32:dd:a7:6d:17:ab:db:0a:31:6f:a3:f4:23:99: 02:39:79:9a:95:a6:fd:cf:4f:f7:41:95:fc:61:1a: 8e:0a:9a:93:b1:62:04:dc:23:1c:a0:c0:fa:c2:02: 04:fb:c9:d8:bd:73:72:a4:e2:66:54:4c:fa:20:ad: e5:b7:fb:29:70:56:10:6e:59:3f:95:03:23:a7:51: 51:1c:43:a0:cc:01:c5:65:a5:e5:54:36:ec:c0:12: 5f:da:6b:26:5f:05:c6:e7:0a:9f:5d:fc:c9:ad:9c: b5:b7:f0:3f:a7:51:6f:f1:96:51:c2:7a:f1:78:1e: ed:2d:9f:b2:d9:2d:99:59:83:d1:b1:05:fd:c3:06: 6c:b3:28:ef:6b:01:e0:c1:f4:ed:f5:d6:42:4c:1a: 58:58:86:01:85:3c:d7:c9:98:a2:65:51:1f:ab:88: cb:9b:c6:b2:c6:2a:02:ce:f3:d5:15:bb:7e:38:0b: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7B:3D:10:FC:37:1B:FD:58:AD:D6:77:84:1E:9B:31:E9:F2:47:07 X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/30BF32F2C28C11EAB764BF4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.87.4.0/22 203.57.38.0/24 Signature Algorithm: sha256WithRSAEncryption 30:33:bb:eb:80:f4:d8:69:7e:8a:db:3b:da:15:17:27:39:65: a3:c9:eb:54:f1:c7:c1:86:0c:f7:03:e6:55:45:91:5b:56:bb: 47:e6:0c:3e:25:b5:55:26:34:68:a9:cf:52:7e:93:69:5d:a2: 25:20:5f:da:04:9d:9c:04:27:b7:be:9c:6a:c1:e9:c7:de:a8: aa:ec:9f:d5:e1:dc:4d:2c:56:47:19:79:e0:50:d7:4a:81:c1: ce:b7:54:f5:12:fa:2c:7d:77:e6:fd:e7:aa:65:a2:cc:0b:39: 67:c7:29:34:5f:3b:72:24:2b:4b:14:d3:47:d3:6f:c2:ac:1a: fb:86:6e:6b:15:a4:0f:66:fa:e2:01:8e:92:d3:ab:3f:24:a1: 66:d3:42:f7:41:21:7e:bf:26:26:6e:8f:8a:7e:a7:02:60:8f: 49:7e:2e:cb:57:c9:a2:56:f2:98:8b:78:57:7a:e6:40:41:3b: b5:33:5b:9f:03:d5:c6:98:22:ac:52:05:73:53:1a:28:15:57: f1:80:22:8d:8f:59:6f:10:d9:26:b8:0e:4b:c3:db:26:0d:ca: 9a:84:02:1b:38:73:ac:ec:b9:8b:3e:65:55:9e:7d:38:34:b5: dd:79:07:4c:3b:d2:14:08:95:50:9a:05:a6:6c:a2:dc:f9:cb: 9a:88:df:93 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjMwOTMwMTc1NTQyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE4NjExZC0yNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnd5rTuQpHlsY7zeVxMDujudsmMWaMZGM1v6yPwM2553R/aGVFglt/1PddasP h1CCVgTvEPvGm6f9I/82v2ecnTkazfQbPjUZNK6VMt2nbRer2woxb6P0I5kCOXma lab9z0/3QZX8YRqOCpqTsWIE3CMcoMD6wgIE+8nYvXNypOJmVEz6IK3lt/spcFYQ blk/lQMjp1FRHEOgzAHFZaXlVDbswBJf2msmXwXG5wqfXfzJrZy1t/A/p1Fv8ZZR wnrxeB7tLZ+y2S2ZWYPRsQX9wwZssyjvawHgwfTt9dZCTBpYWIYBhTzXyZiiZVEf q4jLm8ayxioCzvPVFbt+OAsWlQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJJ7PRD8 Nxv9WK3Wd4QemzHp8kcHMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQzMzUvMzQyRDIyMjg1MUQxMTFFOUFGMUZGNzNDQzRGOUFFMDIvMzBCRjMyRjJD MjhDMTFFQUI3NjRCRjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALKVwQDBADLOSYwDQYJKoZIhvcNAQELBQADggEBADAzu+uA 9NhpforbO9oVFyc5ZaPJ61Txx8GGDPcD5lVFkVtWu0fmDD4ltVUmNGipz1J+k2ld oiUgX9oEnZwEJ7e+nGrB6cfeqKrsn9Xh3E0sVkcZeeBQ10qBwc63VPUS+ix9d+b9 56ploswLOWfHKTRfO3IkK0sU00fTb8KsGvuGbmsVpA9m+uIBjpLTqz8koWbTQvdB IX6/JiZuj4p+pwJgj0l+LstXyaJW8piLeFd65kBBO7UzW58D1caYIqxSBXNTGigV V/GAIo2PWW8Q2Sa4DkvD2yYNypqEAhs4c6zsuYs+ZVWefTg0td15B0w70hQIlVCa BaZsotz5y5qI35M= -----END CERTIFICATE-----Generated at Thu May 16 20:25:48 2024 by rpki-client on console-ams.rpki-client.org