$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/6322249E033E11EDA7401850C4F9AE02.roa File: 6322249E033E11EDA7401850C4F9AE02.roa (raw, json) Hash identifier: cX5jruIutxzq0VvAFSmdLDYS4hJPXEWjAR7XYKB1s2o= Subject key identifier: 47:99:36:F2:A5:03:2A:0E:04:05:FB:FB:8B:EB:02:A3:6A:06:D3:B5 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 08C5 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/6322249E033E11EDA7401850C4F9AE02.roa Signing time: Tue 02 Jan 2024 21:18:52 +0000 ROA not before: Tue 02 Jan 2024 21:18:52 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 63199 IP address blocks: 202.55.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2245 (0x8c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: Jan 2 21:18:52 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65947dbc-d7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:ec:f7:f0:4b:5d:76:12:1e:cc:9b:bc:ed: a9:ac:9b:a3:71:51:c3:42:a3:21:f2:0e:9d:6f:95: 7f:79:3e:30:81:16:61:d5:e6:77:41:16:08:fd:35: 20:1e:72:76:8a:28:a9:9d:3d:37:66:b3:74:86:9b: 15:7a:1f:c4:f0:4a:f7:e0:ad:0c:22:d9:1e:52:13: d2:b0:da:35:e8:2e:f1:0d:c1:c3:48:0b:39:b8:c7: e5:ca:e6:2c:bb:3b:ac:37:e7:c5:cc:e5:c0:0e:2f: 8c:34:4d:3f:4f:d3:44:8d:19:c7:15:a7:44:98:8d: ae:a3:0b:35:2d:fb:72:7d:e1:82:e6:c0:04:6a:5c: ac:75:67:d0:20:f3:d5:1b:d8:cf:b7:a9:f0:44:65: 98:98:e6:8e:c5:b5:9d:b2:d5:60:0a:5d:c8:78:3f: a8:a6:5c:eb:57:a8:c1:20:05:48:70:f2:5c:0b:f2: 42:3c:0d:d3:37:b2:6a:91:92:d7:c8:3b:3a:68:47: 8e:d7:fa:85:c3:17:69:34:64:7f:37:ab:d5:98:1e: d9:30:bc:e3:32:be:66:99:ae:7a:67:5e:1f:0b:6e: b3:9e:67:b8:53:82:42:26:41:85:ea:64:c8:62:76: 82:ab:6f:88:b0:e6:77:e2:c7:de:7b:50:22:0b:b0: 0c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:99:36:F2:A5:03:2A:0E:04:05:FB:FB:8B:EB:02:A3:6A:06:D3:B5 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/6322249E033E11EDA7401850C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.55.82.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:64:a5:48:7c:e6:9a:55:4c:0f:9b:2f:60:7f:43:5b:4d:02: 70:0c:38:59:62:10:d7:28:4e:7e:a7:3e:cc:5e:d4:02:7a:83: 42:f6:5d:45:bb:8d:c2:70:ff:2f:43:8d:e8:1b:0c:81:c0:51: d8:30:64:72:ce:88:5e:83:7d:f1:4e:75:0f:c3:85:cd:ce:4c: b4:3d:0e:bb:c3:2a:cc:c4:31:b7:15:9a:9c:f7:37:3d:18:f1: 41:dc:17:0c:51:f6:c0:05:00:91:ab:49:6f:94:45:a2:d1:3c: c5:73:3f:1a:c3:82:28:3e:74:a2:2b:ab:6b:59:01:4c:d5:5b: 17:ac:e8:b3:0f:6b:0b:79:bf:bd:6b:45:fe:e1:25:94:92:7e: bf:81:81:f6:11:6a:4c:94:ea:71:62:a8:27:9c:48:36:4e:f8: 79:cf:98:ed:de:00:15:8a:e6:87:20:fb:04:a9:12:13:41:98: 42:f5:f0:b4:b4:0a:31:43:19:af:b7:58:2b:61:9d:96:5d:70: 20:cc:fb:ad:54:ff:f5:f7:c7:74:27:2e:51:0a:44:2a:1b:b1: 70:94:47:2b:74:94:2f:97:a6:a0:a2:83:a7:b1:b4:8b:21:3d: d7:8d:a8:54:ec:0d:2e:58:6d:b9:fa:9f:2e:ad:a8:1b:04:1d: 51:b1:ab:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjQwMTAyMjExODUyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0N2RiYy1kN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4vs9/BLXXYSHsybvO2prJujcVHDQqMh8g6db5V/eT4wgRZh1eZ3QRYI/TUg HnJ2iiipnT03ZrN0hpsVeh/E8Er34K0MItkeUhPSsNo16C7xDcHDSAs5uMflyuYs uzusN+fFzOXADi+MNE0/T9NEjRnHFadEmI2uows1LftyfeGC5sAEalysdWfQIPPV G9jPt6nwRGWYmOaOxbWdstVgCl3IeD+oplzrV6jBIAVIcPJcC/JCPA3TN7JqkZLX yDs6aEeO1/qFwxdpNGR/N6vVmB7ZMLzjMr5mma56Z14fC26znme4U4JCJkGF6mTI YnaCq2+IsOZ34sfee1AiC7AMewIDAQABo4IClTCCApEwHQYDVR0OBBYEFEeZNvKl AyoOBAX7+4vrAqNqBtO1MB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVCQTkvREY3QTdGMTQ4MzhFMTFFQThDRUEwOTYwQzRGOUFFMDIvNjMyMjI0OUUw MzNFMTFFREE3NDAxODUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKN1IwDQYJKoZIhvcNAQELBQADggEBAG9kpUh85ppVTA+b L2B/Q1tNAnAMOFliENcoTn6nPsxe1AJ6g0L2XUW7jcJw/y9DjegbDIHAUdgwZHLO iF6DffFOdQ/Dhc3OTLQ9DrvDKszEMbcVmpz3Nz0Y8UHcFwxR9sAFAJGrSW+URaLR PMVzPxrDgig+dKIrq2tZAUzVWxes6LMPawt5v71rRf7hJZSSfr+BgfYRakyU6nFi qCecSDZO+HnPmO3eABWK5ocg+wSpEhNBmEL18LS0CjFDGa+3WCthnZZdcCDM+61U //X3x3QnLlEKRCobsXCURyt0lC+XpqCig6extIshPdeNqFTsDS5Ybbn6ny6tqBsE HVGxq0Q= -----END CERTIFICATE-----Generated at Mon May 6 22:40:59 2024 by rpki-client on console-ams.rpki-client.org