$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/B00A68E6014A11EFA8F03B5BC4F9AE02.roa File: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (raw, json) Hash identifier: dCFmmnGaeXc/Xyg5+AqlJy4nQ5RSSq2JLasc/NAHwbg= Subject key identifier: 4B:A6:FD:00:DD:D9:DB:0A:8D:D1:68:4D:B0:81:E5:D8:59:D1:4B:68 Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: 03 Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/B00A68E6014A11EFA8F03B5BC4F9AE02.roa Signing time: Tue 23 Apr 2024 08:22:57 +0000 ROA not before: Tue 23 Apr 2024 08:22:57 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 4637 IP address blocks: 202.27.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 08:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Apr 23 08:22:57 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66276fe0-21e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:e9:73:3c:6b:c4:53:d9:57:0b:02:c2:fd: e6:2e:f8:30:d1:c8:11:82:26:7b:bb:d5:02:c8:e1: 7e:b7:4f:d6:3a:6e:31:97:6b:1c:39:0f:d4:09:eb: 27:79:f5:c3:27:88:0c:21:78:54:f4:ec:46:3d:56: 23:fb:4d:66:22:54:bf:aa:7b:c2:1d:26:ff:e8:b0: 1d:92:df:a5:0d:29:d5:35:4a:91:4e:fd:82:dc:37: 20:64:df:11:8d:e7:30:70:27:f6:cc:4b:43:2b:49: a9:1f:24:5a:36:bd:ad:54:57:ef:2e:7f:b4:f5:7f: ad:fd:29:81:39:12:73:f4:e9:6a:e4:2f:9a:72:2c: 6a:7d:ad:d6:f4:5e:f9:8d:c5:2b:59:4c:b3:e0:e5: 2f:33:7d:07:43:cc:e9:ea:c6:0b:2e:cb:f0:c0:6c: 4d:e4:0d:08:40:cd:b2:3b:97:09:47:6b:59:f5:85: ff:b8:55:1e:f9:6a:07:90:13:bc:2b:1d:fe:7d:79: 30:fc:03:33:37:17:8a:26:e1:43:84:30:63:8f:5f: 91:2d:cf:5c:b9:09:aa:7c:30:a7:72:9e:38:0a:07: 75:a4:f3:12:40:87:2a:a0:45:fc:cf:09:9a:00:44: 7b:f0:b2:c3:65:ed:1a:d8:cf:fa:e4:18:62:1a:1d: 7c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A6:FD:00:DD:D9:DB:0A:8D:D1:68:4D:B0:81:E5:D8:59:D1:4B:68 X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/B00A68E6014A11EFA8F03B5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.27.128.0/23 Signature Algorithm: sha256WithRSAEncryption 76:c4:8a:20:c4:83:07:0f:ad:cc:b2:d0:08:cb:e4:da:80:9b: 2e:b8:ac:af:36:cb:cf:6d:82:5c:e9:8c:9e:45:15:53:44:fb: a2:d0:37:6c:c5:ff:f8:9d:be:73:da:07:50:88:61:ba:cf:55: 67:d6:bd:a3:84:b2:9a:6c:9b:2e:e9:53:69:49:b8:d9:ad:c7: 50:94:9c:68:f4:d6:ce:62:8b:48:0b:8d:3c:8d:7f:bf:8a:04: 14:ce:e3:e7:58:d0:d1:64:46:3f:2a:9e:c0:cc:bf:92:de:8e: df:65:4d:1d:10:d7:c8:cc:43:1b:a5:f4:d0:c8:45:14:3c:87: c4:f9:1e:86:1a:09:df:a6:6a:cf:e7:20:7b:09:7b:72:48:00: bf:bb:09:77:d5:78:c7:f1:fc:36:29:a5:2a:3d:3f:c4:d2:90: 03:c6:3c:0d:49:99:df:5f:03:34:7c:9e:13:39:53:38:75:ca: fc:be:2c:c9:2b:88:4f:af:7d:e4:09:94:11:2a:c4:92:c1:94: a1:21:98:3b:27:a2:8e:ac:59:56:2a:3f:1c:6f:13:ab:11:b6: 18:34:74:c3:6b:7f:d3:c7:a2:25:da:06:fb:94:8e:eb:c1:ba: 83:e0:1e:54:df:53:3a:28:aa:da:99:6b:98:f6:97:ad:8e:dc: bf:a5:6a:b8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkI5MzExMC8GA1UEBRMoRDlENjVGN0YzNjA5MEM0MDFCQ0YyMEQ0QkM4MEM0M0Yw REM1OTMzRDAeFw0yNDA0MjMwODIyNTdaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2Mjc2ZmUwLTIxZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5+OlzPGvEU9lXCwLC/eYu+DDRyBGCJnu71QLI4X63T9Y6bjGXaxw5D9QJ6yd5 9cMniAwheFT07EY9ViP7TWYiVL+qe8IdJv/osB2S36UNKdU1SpFO/YLcNyBk3xGN 5zBwJ/bMS0MrSakfJFo2va1UV+8uf7T1f639KYE5EnP06WrkL5pyLGp9rdb0XvmN xStZTLPg5S8zfQdDzOnqxgsuy/DAbE3kDQhAzbI7lwlHa1n1hf+4VR75ageQE7wr Hf59eTD8AzM3F4om4UOEMGOPX5Etz1y5Cap8MKdynjgKB3Wk8xJAhyqgRfzPCZoA RHvwssNl7RrYz/rkGGIaHXyXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUS6b9AN3Z 2wqN0WhNsIHl2FnRS2gwHwYDVR0jBBgwFoAU2dZffzYJDEAbzyDUvIDEPw3Fkz0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyQjkzLzNBQzg3NEVFMDE0 MzExRUY4MjVBNjQ2NUM0RjlBRTAyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmRaZmZ6WUpERUFienlEVXZJREVQdzNGa3owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi9CMDBBNjhFNjAx NEExMUVGQThGMDNCNUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcobgDANBgkqhkiG9w0BAQsFAAOCAQEAdsSKIMSDBw+tzLLQ CMvk2oCbLrisrzbLz22CXOmMnkUVU0T7otA3bMX/+J2+c9oHUIhhus9VZ9a9o4Sy mmybLulTaUm42a3HUJScaPTWzmKLSAuNPI1/v4oEFM7j51jQ0WRGPyqewMy/kt6O 32VNHRDXyMxDG6X00MhFFDyHxPkehhoJ36Zqz+cgewl7ckgAv7sJd9V4x/H8Niml Kj0/xNKQA8Y8DUmZ318DNHyeEzlTOHXK/L4sySuIT6995AmUESrEksGUoSGYOyei jqxZVio/HG8TqxG2GDR0w2t/08eiJdoG+5SO68G6g+AeVN9TOiiq2plrmPaXrY7c v6VquA== -----END CERTIFICATE-----Generated at Tue May 7 09:42:21 2024 by rpki-client on console-fra.rpki-client.org