$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/6AB0F2A2892611EEB5E27D69C4F9AE02.roa File: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (raw, json) Hash identifier: XBeLByasLFAR8do7tNTxhh0jQtZtivMveMhhIQYYpGw= Subject key identifier: 3B:E4:F6:05:81:DF:85:72:FE:8A:6B:C3:9E:22:AB:6D:24:FC:B3:20 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 0E6A Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/6AB0F2A2892611EEB5E27D69C4F9AE02.roa Signing time: Sat 20 Apr 2024 18:36:52 +0000 ROA not before: Sat 20 Apr 2024 18:36:52 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 9280 IP address blocks: 203.9.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3690 (0xe6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Apr 20 18:36:52 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66240b44-5747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:a2:ee:61:55:df:74:18:ac:48:df:46:84: 0d:4b:77:e2:63:96:22:a8:81:89:c2:06:99:ad:f2: ce:ed:cd:b6:61:2f:82:9a:73:6c:d5:38:8a:99:cf: e3:73:c6:f7:8a:01:85:4b:96:7a:ef:b8:13:33:5b: bc:22:2f:6d:79:cc:e2:f3:f0:48:5d:06:2f:49:d1: b2:25:7e:9d:b1:95:e2:7e:1d:82:be:46:c7:8c:e0: 22:99:00:58:66:06:87:0c:78:aa:98:f8:3f:bc:8b: fe:61:96:35:ee:86:31:6f:65:cb:22:59:33:ad:55: e3:23:97:42:7c:bd:b4:e3:3b:f3:91:c8:ae:31:b1: 00:00:da:e6:8e:c3:dd:78:aa:c4:50:b3:d6:18:f3: e8:3b:be:9e:65:8c:4e:64:6a:87:cc:10:c1:9e:f9: 4a:da:03:44:0e:0c:11:fe:03:81:9f:9b:bd:45:5f: 24:4a:06:95:e3:2a:64:2e:99:ea:35:0f:3f:fc:fb: b7:06:43:77:c8:23:6d:9a:c0:34:19:b0:42:50:d9: 71:4e:0a:2f:72:d7:75:2d:cc:a1:e5:3e:55:18:38: 4f:cc:64:34:c3:2e:39:ad:cf:fb:3e:f9:9d:33:55: 04:ff:55:9f:23:7c:eb:27:e2:01:b2:7f:ee:fe:b0: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E4:F6:05:81:DF:85:72:FE:8A:6B:C3:9E:22:AB:6D:24:FC:B3:20 X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/6AB0F2A2892611EEB5E27D69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.9.24.0/22 Signature Algorithm: sha256WithRSAEncryption 78:28:d0:1b:75:21:a5:cb:68:b4:94:72:01:2a:c9:d6:dd:ad: 86:04:ba:d2:ca:a2:23:01:03:4f:10:d5:f5:b0:db:4c:47:df: 0e:5c:a0:c7:a9:90:bf:d3:6c:10:ca:da:76:62:80:6b:8c:ff: 4d:bf:60:79:48:8b:ac:b4:c3:81:8c:62:df:3a:00:76:fc:55: 10:75:18:c1:a5:4d:8d:6c:a5:a8:ea:49:83:04:04:b3:2f:d9: 3d:56:39:bc:0c:ad:17:73:66:94:44:ea:80:b6:6d:4e:fe:ac: ea:5a:4c:35:58:b8:e3:6b:0f:5b:45:14:cb:28:c9:06:58:d7: 12:25:d2:43:54:17:5d:fe:f7:06:09:61:ef:f3:02:4d:31:4d: 2a:13:42:98:22:4e:2c:d0:cf:cd:2e:84:50:f2:8f:99:f9:39: c0:97:45:c5:1f:1d:c3:70:41:b4:05:a9:ae:a6:76:35:d4:1b: 33:28:4a:a7:6a:be:ed:36:38:47:3a:e9:ca:34:72:2c:0a:4b: 7d:5b:91:6c:7b:59:b5:3b:f0:c1:fd:82:5a:9e:02:a2:1c:4b: cc:91:cb:ee:86:d2:53:1a:d2:99:e5:8b:a2:8d:9a:8b:92:c9: 75:48:62:18:2f:6c:c1:00:5d:67:b9:a9:36:79:e0:11:8a:01: 8a:f5:6f:b8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjQwNDIwMTgzNjUyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjI0MGI0NC01NzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUSi7mFV33QYrEjfRoQNS3fiY5YiqIGJwgaZrfLO7c22YS+CmnNs1TiKmc/j c8b3igGFS5Z677gTM1u8Ii9teczi8/BIXQYvSdGyJX6dsZXifh2CvkbHjOAimQBY ZgaHDHiqmPg/vIv+YZY17oYxb2XLIlkzrVXjI5dCfL204zvzkciuMbEAANrmjsPd eKrEULPWGPPoO76eZYxOZGqHzBDBnvlK2gNEDgwR/gOBn5u9RV8kSgaV4ypkLpnq NQ8//Pu3BkN3yCNtmsA0GbBCUNlxTgovctd1Lcyh5T5VGDhPzGQ0wy45rc/7Pvmd M1UE/1WfI3zrJ+IBsn/u/rCYewIDAQABo4IClTCCApEwHQYDVR0OBBYEFDvk9gWB 34Vy/oprw54iq20k/LMgMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvNkFCMEYyQTI4 OTI2MTFFRUI1RTI3RDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLCRgwDQYJKoZIhvcNAQELBQADggEBAHgo0Bt1IaXLaLSU cgEqydbdrYYEutLKoiMBA08Q1fWw20xH3w5coMepkL/TbBDK2nZigGuM/02/YHlI i6y0w4GMYt86AHb8VRB1GMGlTY1spajqSYMEBLMv2T1WObwMrRdzZpRE6oC2bU7+ rOpaTDVYuONrD1tFFMsoyQZY1xIl0kNUF13+9wYJYe/zAk0xTSoTQpgiTizQz80u hFDyj5n5OcCXRcUfHcNwQbQFqa6mdjXUGzMoSqdqvu02OEc66co0ciwKS31bkWx7 WbU78MH9glqeAqIcS8yRy+6G0lMa0pnli6KNmouSyXVIYhgvbMEAXWe5qTZ54BGK AYr1b7g= -----END CERTIFICATE-----Generated at Wed May 8 20:36:04 2024 by rpki-client on console-ams.rpki-client.org