$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/4B3E4A0693DE11EE81D1045FC4F9AE02.roa File: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (raw, json) Hash identifier: 4Cz/oqpVomdj5KjMuMHHcnulXM/0E2/i4QAzsSN/Y08= Subject key identifier: FF:31:28:F9:B7:EE:67:53:FC:2B:7C:04:0E:B2:6F:AA:3A:8C:D8:38 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: 5C Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/4B3E4A0693DE11EE81D1045FC4F9AE02.roa Signing time: Tue 21 May 2024 08:12:02 +0000 ROA not before: Tue 21 May 2024 08:12:02 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55785 IP address blocks: 202.37.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: May 21 08:12:02 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664c5751-3ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:9a:4e:e4:f9:9b:b0:1f:cd:ec:a9:8e:18: 6b:fb:a3:3c:a3:68:1b:74:4d:72:38:3b:6a:77:be: 3a:3a:d8:bb:98:a5:de:91:39:65:fc:d4:60:e2:fe: 0e:83:0e:f7:03:45:b1:d9:74:42:ef:cb:89:5c:be: 14:56:7a:8b:7b:fc:7c:4c:f4:51:e7:a5:1b:2b:e5: c7:83:ad:28:f3:32:78:87:e5:5c:46:7d:1a:b7:96: ee:3e:ef:34:3f:b1:06:60:a8:8a:16:3c:e6:d4:91: 18:48:1b:93:6f:68:2e:bf:96:c5:ed:3b:70:96:d6: 62:78:e1:d8:41:fd:e6:85:7d:60:f5:6d:87:cb:7b: 08:ce:26:a4:26:0c:e0:ac:c0:fc:0a:3f:5d:f3:19: 88:aa:ee:9b:42:14:0e:9b:d8:7a:34:b1:e8:88:d9: f9:2a:f7:a8:c4:52:70:aa:55:35:f5:e0:e6:93:4f: a3:c7:3b:dc:c7:db:8a:cf:93:df:44:70:81:5b:df: 02:2d:13:76:82:36:ea:da:75:b2:8d:8a:84:78:e5: 68:ff:89:b7:19:05:4c:ef:56:c5:69:08:c1:13:b1: c6:39:c7:04:71:d7:fe:72:ac:cf:1f:c5:45:46:3a: 85:b0:90:b2:cb:5e:d9:71:69:95:2c:b0:ef:96:04: 44:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:31:28:F9:B7:EE:67:53:FC:2B:7C:04:0E:B2:6F:AA:3A:8C:D8:38 X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/4B3E4A0693DE11EE81D1045FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.198.0/24 Signature Algorithm: sha256WithRSAEncryption c8:b2:ff:12:98:65:79:43:ed:5f:54:9f:f1:c0:23:c9:83:bc: a8:f9:f1:7e:29:d9:a5:fb:80:bd:52:5a:6f:2d:49:e2:86:bf: 52:7e:a2:f3:c2:16:6f:25:8b:b5:21:db:ce:39:17:c4:96:c7: fa:a8:31:eb:3d:b7:b4:e6:02:34:c4:25:fa:e6:19:4d:67:7b: 81:ee:23:53:97:3d:25:fe:30:a4:fb:74:9f:3c:5b:b2:69:de: a4:dd:09:cf:51:91:56:d3:b7:32:f0:ce:14:3d:06:47:75:8c: 15:08:43:82:1e:9e:b7:2b:83:92:70:74:3c:d3:51:72:1a:34: b7:3a:69:32:71:2a:85:77:80:5c:66:73:3e:a1:af:69:a2:f0: b7:c7:75:2a:b0:a3:e3:ee:c7:dd:79:d6:a3:56:1b:27:de:72: df:e3:c3:81:a3:67:a4:d3:f1:c6:38:f8:00:f1:8b:7f:0a:04: a9:15:b0:68:b2:3f:d7:f0:24:7a:49:7f:59:84:53:70:42:c1: c1:52:01:f9:e1:93:d1:d2:cb:4d:5d:5d:88:f7:f5:bb:a3:d1: 84:1e:75:54:ac:b2:b1:7c:f2:02:08:86:7b:4f:f0:b3:27:36: 76:10:e2:08:aa:b3:43:5b:99:fb:e5:23:2e:da:d6:de:91:21: 3f:be:70:ad -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QjIwRDExMC8GA1UEBRMoRTU1NkRDODZCOTRFOTFDRjlCMkUyOTQ0QTg1RjcxNjky REEwOTREMjAeFw0yNDA1MjEwODEyMDJaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NGM1NzUxLTNiYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChyppO5PmbsB/N7KmOGGv7ozyjaBt0TXI4O2p3vjo62LuYpd6ROWX81GDi/g6D DvcDRbHZdELvy4lcvhRWeot7/HxM9FHnpRsr5ceDrSjzMniH5VxGfRq3lu4+7zQ/ sQZgqIoWPObUkRhIG5NvaC6/lsXtO3CW1mJ44dhB/eaFfWD1bYfLewjOJqQmDOCs wPwKP13zGYiq7ptCFA6b2Ho0seiI2fkq96jEUnCqVTX14OaTT6PHO9zH24rPk99E cIFb3wItE3aCNuradbKNioR45Wj/ibcZBUzvVsVpCMETscY5xwRx1/5yrM8fxUVG OoWwkLLLXtlxaZUssO+WBETxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU/zEo+bfu Z1P8K3wEDrJvqjqM2DgwHwYDVR0jBBgwFoAU5VbchrlOkc+bLilEqF9xaS2glNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCMjBELzYxQUNCRjQ2OTNB OTExRUU5MTQ5RTM1NEM0RjlBRTAyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVZiY2hybE9rYy1iTGlsRXFGOXhhUzJnbE5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjIwRC82MUFDQkY0NjkzQTkxMUVFOTE0OUUzNTRDNEY5QUUwMi80QjNFNEEwNjkz REUxMUVFODFEMTA0NUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMolxjANBgkqhkiG9w0BAQsFAAOCAQEAyLL/EphleUPtX1Sf 8cAjyYO8qPnxfinZpfuAvVJaby1J4oa/Un6i88IWbyWLtSHbzjkXxJbH+qgx6z23 tOYCNMQl+uYZTWd7ge4jU5c9Jf4wpPt0nzxbsmnepN0Jz1GRVtO3MvDOFD0GR3WM FQhDgh6etyuDknB0PNNRcho0tzppMnEqhXeAXGZzPqGvaaLwt8d1KrCj4+7H3XnW o1YbJ95y3+PDgaNnpNPxxjj4APGLfwoEqRWwaLI/1/Akekl/WYRTcELBwVIB+eGT 0dLLTV1diPf1u6PRhB51VKyysXzyAgiGe0/wsyc2dhDiCKqzQ1uZ++UjLtrW3pEh P75wrQ== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org