$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4B2AFD54ABA611EEA4B59A6AC4F9AE02.roa File: 4B2AFD54ABA611EEA4B59A6AC4F9AE02.roa (raw, json) Hash identifier: 9fmSismXcyTH39qDXu1GtClnVNjxH/12hIIQgygnh2M= Subject key identifier: 1C:31:7D:7E:46:F4:42:1D:A6:C7:20:99:CB:F1:AB:7C:08:41:30:AB Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 347F Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4B2AFD54ABA611EEA4B59A6AC4F9AE02.roa Signing time: Fri 05 Jan 2024 08:42:01 +0000 ROA not before: Fri 05 Jan 2024 08:42:01 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 141215 IP address blocks: 202.142.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13439 (0x347f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Jan 5 08:42:01 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6597c0d9-ce70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:ed:a0:a2:f4:18:a7:44:91:d1:0b:82:be: b7:79:7f:33:eb:fa:da:0d:65:d9:11:44:6f:94:90: b0:94:a7:1d:21:a9:3e:d0:8f:bc:88:7d:99:57:ce: d7:26:7f:ea:71:03:05:89:9c:49:97:d7:d1:b7:7b: 74:0f:fc:09:9a:e8:64:03:f3:b9:f6:c8:bf:30:6a: 5c:02:36:a2:e4:c2:a4:5f:1c:f7:64:c2:ff:46:8c: ed:e1:ec:3f:2b:d8:2f:4c:1a:fe:38:68:ce:db:38: 09:c6:ee:57:32:d3:00:1c:95:9a:19:de:ba:43:95: 2b:01:9f:79:8a:96:48:d9:c4:a4:fb:8a:42:74:65: 55:3b:03:83:b8:28:b5:6a:90:7a:28:68:c7:40:97: e3:ae:41:0d:3d:47:66:a9:19:aa:2b:99:05:59:c7: 28:85:4f:4b:b4:c2:65:1f:ab:09:ac:65:93:6b:2b: c9:41:52:cd:bd:cf:a1:b9:f4:ba:74:68:a1:62:99: 5c:9e:ea:53:28:4d:26:93:a9:09:84:dc:fd:f5:46: 96:02:01:71:34:f1:5d:bd:1f:7a:1f:3e:62:9f:ab: e6:1f:6b:47:d2:29:e9:17:f3:b0:5a:f1:fa:f5:de: 61:8c:bb:b3:2b:e3:12:0e:3d:24:63:61:49:a7:57: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:31:7D:7E:46:F4:42:1D:A6:C7:20:99:CB:F1:AB:7C:08:41:30:AB X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4B2AFD54ABA611EEA4B59A6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.142.155.0/24 Signature Algorithm: sha256WithRSAEncryption 76:9a:e8:48:89:0a:75:96:96:93:a6:90:84:8a:da:d0:25:00: 42:0f:48:9d:1a:a0:2c:16:7b:df:42:8c:84:8f:81:c1:75:27: e0:bf:45:57:02:de:7a:32:b9:24:dd:a2:15:dd:20:6d:41:17: 44:f4:04:b9:59:8c:be:59:5f:cb:08:81:eb:9e:dd:76:4e:58: d7:3a:0e:f1:37:a0:a9:8f:e7:ed:11:94:72:f3:21:4c:d4:d4: 68:6c:6f:b1:f0:12:50:06:68:33:44:e8:5d:17:30:c3:8d:a9: 40:52:68:42:f2:3a:09:17:57:bb:f2:83:2c:c4:c9:c4:5c:ed: a6:94:48:c8:77:e3:e9:f6:6f:2c:bf:00:d6:3a:a8:76:df:63: 33:28:19:b6:2b:55:cb:4b:37:4f:99:0d:ad:b9:a6:8a:92:f9: 86:59:90:38:88:42:8b:55:3b:5b:20:b1:9c:4a:10:68:66:29: 4c:b7:0f:1b:1e:4e:4a:f7:86:21:4d:ab:b1:63:75:bd:81:3a: 81:1e:58:23:44:fc:5a:45:ef:a9:f4:38:2e:a6:4b:e9:fe:57: 28:7f:9f:f9:c9:c7:83:16:c4:36:88:49:e6:fd:19:43:4e:de: 54:b1:49:b1:b2:88:32:8e:40:f4:82:58:d0:d9:d9:e1:f1:c0: c0:0a:ac:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjQwMTA1MDg0MjAxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk3YzBkOS1jZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS/toKL0GKdEkdELgr63eX8z6/raDWXZEURvlJCwlKcdIak+0I+8iH2ZV87X Jn/qcQMFiZxJl9fRt3t0D/wJmuhkA/O59si/MGpcAjai5MKkXxz3ZML/Rozt4ew/ K9gvTBr+OGjO2zgJxu5XMtMAHJWaGd66Q5UrAZ95ipZI2cSk+4pCdGVVOwODuCi1 apB6KGjHQJfjrkENPUdmqRmqK5kFWccohU9LtMJlH6sJrGWTayvJQVLNvc+hufS6 dGihYplcnupTKE0mk6kJhNz99UaWAgFxNPFdvR96Hz5in6vmH2tH0inpF/OwWvH6 9d5hjLuzK+MSDj0kY2FJp1fCvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBwxfX5G 9EIdpscgmcvxq3wIQTCrMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvNEIyQUZENTRB QkE2MTFFRUE0QjU5QTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKjpswDQYJKoZIhvcNAQELBQADggEBAHaa6EiJCnWWlpOm kISK2tAlAEIPSJ0aoCwWe99CjISPgcF1J+C/RVcC3noyuSTdohXdIG1BF0T0BLlZ jL5ZX8sIgeue3XZOWNc6DvE3oKmP5+0RlHLzIUzU1Ghsb7HwElAGaDNE6F0XMMON qUBSaELyOgkXV7vygyzEycRc7aaUSMh34+n2byy/ANY6qHbfYzMoGbYrVctLN0+Z Da25poqS+YZZkDiIQotVO1sgsZxKEGhmKUy3DxseTkr3hiFNq7Fjdb2BOoEeWCNE /FpF76n0OC6mS+n+Vyh/n/nJx4MWxDaISeb9GUNO3lSxSbGyiDKOQPSCWNDZ2eHx wMAKrGM= -----END CERTIFICATE-----Generated at Sun May 26 19:11:40 2024 by rpki-client on console-ams.rpki-client.org