$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/CC9ED4E2015411EF83144341C4F9AE02.roa File: CC9ED4E2015411EF83144341C4F9AE02.roa (raw, json) Hash identifier: J2KwLe8SPWIWD1mMVkmMfy+3ZRxSXbUQ7iUXVfTcvng= Subject key identifier: 1E:B5:D3:9E:21:35:DA:5B:B4:32:F4:B2:07:BB:CB:B6:BB:BC:00:AF Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 0D Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/CC9ED4E2015411EF83144341C4F9AE02.roa Signing time: Tue 23 Apr 2024 09:35:19 +0000 ROA not before: Tue 23 Apr 2024 09:35:19 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2764 IP address blocks: 203.20.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Apr 23 09:35:19 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662780d7-f7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:24:ba:8e:9d:19:2a:9f:3d:2f:92:45:2f: 4d:34:eb:cf:74:03:89:4f:e6:06:fc:da:cc:72:59: f3:a6:91:f3:fc:3b:37:e7:e3:5f:74:bb:e7:9f:92: 9a:00:53:e5:5f:43:8f:d6:31:52:1b:2c:e7:b4:21: 36:2d:85:20:55:a6:71:8f:83:e7:27:b4:d2:4d:3c: 7d:d7:15:f6:12:c4:8f:ee:d6:83:cc:56:d5:57:93: 7e:93:42:a1:99:d0:12:17:de:ba:b3:8e:f1:b8:64: c2:c3:2d:ab:72:b8:15:d5:40:e0:4b:fd:b0:56:90: 76:74:c4:75:a7:bf:9a:3d:d6:20:51:85:76:c1:23: d4:43:32:f6:68:f2:43:69:83:23:8b:ee:09:76:e5: 74:44:41:c3:ce:e6:ff:78:5e:14:b2:cc:c2:bd:68: f7:68:ab:3b:17:a7:f7:4a:9b:e6:5e:4f:65:4a:9a: 21:8e:e9:bd:82:bc:33:34:05:c7:8c:5e:d3:27:26: c1:f1:f4:82:3e:a3:42:c9:30:9c:fd:82:1f:52:71: f3:c9:08:ab:b7:12:86:4c:5d:80:95:b9:72:e1:27: 77:fa:cf:f2:d9:e8:25:5d:69:a8:11:38:08:d5:d6: c9:e1:b2:15:a0:f8:28:f1:53:be:22:07:18:db:4c: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B5:D3:9E:21:35:DA:5B:B4:32:F4:B2:07:BB:CB:B6:BB:BC:00:AF X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/CC9ED4E2015411EF83144341C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.114.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:9e:77:b5:89:da:cc:37:03:15:67:f7:dc:a3:63:8b:25:7b: 35:a7:41:c9:87:af:a0:26:ff:6e:50:dd:cc:91:a6:dd:fd:77: ac:e7:ae:6f:ce:24:92:a3:aa:8e:ea:42:1a:d7:fd:a6:da:1e: d0:d2:69:4e:4b:f1:db:a7:54:fc:f0:81:fc:52:17:85:50:92: 94:7d:d7:e4:03:72:24:fa:cf:0f:a0:ba:0d:8e:d8:6e:b9:d3: e0:3b:58:20:f9:8f:99:87:ed:72:c6:d7:7e:df:09:78:39:72: ca:81:0a:99:55:21:1b:f4:a7:8a:9c:ed:2b:28:88:77:7d:e8: a8:9a:17:58:b7:0e:30:7a:7f:49:c6:46:b9:47:9f:ac:2d:e5: 61:93:1a:f6:59:27:ec:6e:d3:0e:cb:2e:4c:ea:92:23:ec:fe: 12:25:4c:8e:b8:52:67:56:c2:75:f7:5e:7a:08:31:a9:6b:c3: 3f:95:8a:15:5c:ef:ab:0a:f3:a1:21:db:ee:70:c5:da:8a:dd: c9:58:7e:0a:1b:4f:ce:f5:ca:1a:ce:31:61:a9:b9:d2:b5:f9: 95:7d:24:d0:c4:b8:6b:d5:57:b1:be:82:8e:ca:49:6f:85:98: 48:7b:9f:71:63:e1:fa:cf:a4:57:eb:51:cd:39:e1:74:d3:52: da:df:d8:0a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTRGRTExMC8GA1UEBRMoNkZDNzA5MDZGQkE2RjQ1Mzk0NTIwOTE5MzJDNDVGRkE0 RDg1NzJCODAeFw0yNDA0MjMwOTM1MTlaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2Mjc4MGQ3LWY3YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXiCS6jp0ZKp89L5JFL0006890A4lP5gb82sxyWfOmkfP8Ozfn4190u+efkpoA U+VfQ4/WMVIbLOe0ITYthSBVpnGPg+cntNJNPH3XFfYSxI/u1oPMVtVXk36TQqGZ 0BIX3rqzjvG4ZMLDLatyuBXVQOBL/bBWkHZ0xHWnv5o91iBRhXbBI9RDMvZo8kNp gyOL7gl25XREQcPO5v94XhSyzMK9aPdoqzsXp/dKm+ZeT2VKmiGO6b2CvDM0BceM XtMnJsHx9II+o0LJMJz9gh9ScfPJCKu3EoZMXYCVuXLhJ3f6z/LZ6CVdaagROAjV 1snhshWg+CjxU74iBxjbTBSRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHrXTniE1 2lu0MvSyB7vLtru8AK8wHwYDVR0jBBgwFoAUb8cJBvum9FOUUgkZMsRf+k2Fcrgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1NEZFL0Q2MTE3REY2RjZF OTExRUVBREJGRkI1MkM0RjlBRTAyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNy Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjhjSkJ2dW05Rk9VVWdrWk1zUmYtazJGY3JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9DQzlFRDRFMjAx NTQxMUVGODMxNDQzNDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsUcjANBgkqhkiG9w0BAQsFAAOCAQEAbJ53tYnazDcDFWf3 3KNjiyV7NadByYevoCb/blDdzJGm3f13rOeub84kkqOqjupCGtf9ptoe0NJpTkvx 26dU/PCB/FIXhVCSlH3X5ANyJPrPD6C6DY7YbrnT4DtYIPmPmYftcsbXft8JeDly yoEKmVUhG/SnipztKyiId33oqJoXWLcOMHp/ScZGuUefrC3lYZMa9lkn7G7TDssu TOqSI+z+EiVMjrhSZ1bCdfdeeggxqWvDP5WKFVzvqwrzoSHb7nDF2ordyVh+ChtP zvXKGs4xYam50rX5lX0k0MS4a9VXsb6CjspJb4WYSHufcWPh+s+kV+tRzTnhdNNS 2t/YCg== -----END CERTIFICATE-----Generated at Fri Jun 7 11:02:53 2024 by rpki-client on console-fra.rpki-client.org