$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/3F7DF1DAE27C11EDAE21C974C4F9AE02.roa File: 3F7DF1DAE27C11EDAE21C974C4F9AE02.roa (raw, json) Hash identifier: 7+iwGvBe2i2+1Iw3Ji78E2B2nQ4C3/BeDh7VWnAt1yI= Subject key identifier: 44:B9:33:36:73:BB:B1:27:34:22:7E:9E:B4:59:E7:74:FC:85:D2:7C Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 040C Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/3F7DF1DAE27C11EDAE21C974C4F9AE02.roa Signing time: Sat 09 Dec 2023 01:53:51 +0000 ROA not before: Sat 09 Dec 2023 01:53:51 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 38266 IP address blocks: 223.196.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1036 (0x40c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Dec 9 01:53:51 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6573c8af-c0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:fb:29:2f:1b:d0:d3:d1:a2:ec:ca:04:cf: 49:e6:4a:02:2a:68:5e:0b:cf:31:b2:69:08:66:8e: 3d:7b:31:c9:b0:41:84:c4:84:93:53:33:66:6b:23: 38:af:4b:69:79:3f:70:e3:30:7a:80:78:d2:30:62: a1:4e:f9:26:c0:a2:04:7b:39:bb:ce:75:1b:8a:af: 1d:74:17:6b:1d:4b:8e:9d:23:22:ac:19:63:61:8e: 58:8a:26:1a:55:e0:28:41:e9:f9:d6:42:09:7d:c4: 3b:53:99:50:19:a8:92:f2:14:68:71:30:e3:6c:67: e4:7a:6a:0c:eb:15:3c:7c:15:40:96:93:11:1f:54: cf:b3:94:70:a8:65:c0:15:59:99:55:01:5a:27:98: f1:d9:50:19:6e:0d:77:86:ac:2f:7f:f3:c6:dc:4a: 7d:a5:e1:6d:89:5b:20:43:f3:ba:aa:ee:74:61:91: 54:c4:59:2a:60:bf:6a:12:c5:10:ab:01:2e:6d:cf: 8c:82:42:a0:f4:7a:ea:e2:a4:f6:8b:f7:cd:5c:10: 6c:1f:dd:e0:a2:98:75:6b:9d:f8:c5:6c:95:bf:95: ec:11:9a:3b:76:d5:c3:91:fb:8e:ec:c4:6d:67:ce: 5c:11:c4:9b:4e:e1:a3:98:37:a6:ae:2a:6b:b8:44: d7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B9:33:36:73:BB:B1:27:34:22:7E:9E:B4:59:E7:74:FC:85:D2:7C X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/3F7DF1DAE27C11EDAE21C974C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.196.148.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:ae:d7:99:be:48:f2:36:d6:6b:b2:60:1e:99:55:82:ab:7b: 66:0f:6f:c5:d5:02:ec:a1:24:c6:ee:3b:8e:9e:76:af:fd:9e: 75:69:cf:ab:b1:ce:68:20:0a:5a:ed:c1:66:ef:c4:68:ac:c8: 11:c2:76:17:a9:78:64:f6:5e:6b:3a:07:79:d8:9d:a7:ff:5e: 05:39:b5:d3:4f:2e:2b:05:e4:cb:70:ea:ce:42:a1:08:2b:70: 44:54:b9:68:13:55:6b:38:b2:14:19:33:77:43:11:05:ad:7e: 5a:d7:7a:c0:ce:65:e2:88:e5:49:75:b7:55:83:32:3a:69:80: ce:fb:00:8d:5c:c3:b2:1e:f5:c6:03:95:a7:39:ae:b8:fa:db: a5:6b:a9:0e:d9:02:0a:d5:14:73:d3:a1:ff:90:68:a1:5e:50: 91:a4:e7:e0:84:5f:b0:ad:14:02:da:f8:30:d1:fd:52:c3:8f: a3:89:5b:56:33:98:27:8f:0c:a2:72:33:c8:8f:f8:65:7e:24: cc:14:94:e8:47:39:1c:fc:04:0b:70:c7:b6:ae:f8:17:40:f3: 57:32:e2:48:05:85:59:fb:83:59:ae:0f:03:f1:19:61:32:f7: 9c:5f:97:d5:a4:c9:83:97:4a:dd:8f:6c:24:12:f6:6d:cd:8f: e9:61:1f:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjMxMjA5MDE1MzUxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczYzhhZi1jMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sD7KS8b0NPRouzKBM9J5koCKmheC88xsmkIZo49ezHJsEGExISTUzNmayM4 r0tpeT9w4zB6gHjSMGKhTvkmwKIEezm7znUbiq8ddBdrHUuOnSMirBljYY5YiiYa VeAoQen51kIJfcQ7U5lQGaiS8hRocTDjbGfkemoM6xU8fBVAlpMRH1TPs5RwqGXA FVmZVQFaJ5jx2VAZbg13hqwvf/PG3Ep9peFtiVsgQ/O6qu50YZFUxFkqYL9qEsUQ qwEubc+MgkKg9Hrq4qT2i/fNXBBsH93goph1a534xWyVv5XsEZo7dtXDkfuO7MRt Z85cEcSbTuGjmDemripruETX6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFES5MzZz u7EnNCJ+nrRZ53T8hdJ8MB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvM0Y3REYxREFF MjdDMTFFREFFMjFDOTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADfxJQwDQYJKoZIhvcNAQELBQADggEBAGqu15m+SPI21muy YB6ZVYKre2YPb8XVAuyhJMbuO46edq/9nnVpz6uxzmggClrtwWbvxGisyBHCdhep eGT2Xms6B3nYnaf/XgU5tdNPLisF5Mtw6s5CoQgrcERUuWgTVWs4shQZM3dDEQWt flrXesDOZeKI5Ul1t1WDMjppgM77AI1cw7Ie9cYDlac5rrj626VrqQ7ZAgrVFHPT of+QaKFeUJGk5+CEX7CtFALa+DDR/VLDj6OJW1YzmCePDKJyM8iP+GV+JMwUlOhH ORz8BAtwx7au+BdA81cy4kgFhVn7g1muDwPxGWEy95xfl9WkyYOXSt2PbCQS9m3N j+lhH1Y= -----END CERTIFICATE-----Generated at Fri May 17 03:52:22 2024 by rpki-client on console-ams.rpki-client.org