$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4FCF92C716B11ED9F349A49C4F9AE02.roa File: D4FCF92C716B11ED9F349A49C4F9AE02.roa (raw, json) Hash identifier: J+gY8qOEhcuRyujjCO0gYnnoKOCMqUrF6Mj9pXDgAl8= Subject key identifier: FA:F3:FA:4D:2A:92:76:B5:7D:DC:43:48:49:2D:E6:C6:3B:24:D7:AA Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0412 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4FCF92C716B11ED9F349A49C4F9AE02.roa Signing time: Sat 09 Dec 2023 01:53:58 +0000 ROA not before: Sat 09 Dec 2023 01:53:58 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 65004 IP address blocks: 122.15.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Dec 9 01:53:58 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6573c8b5-a22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:64:d1:50:3b:d0:11:fe:0e:ea:38:15:69: 6e:34:9c:d4:f4:e3:63:99:b0:6c:fa:f4:f5:48:a1: 36:33:00:29:ed:c1:fa:7b:ea:d9:d2:19:dd:49:35: 1f:08:49:36:3f:b8:34:f4:fb:d1:39:71:cd:c0:f4: 48:f2:16:ce:d0:8b:18:6f:80:f6:76:81:25:f5:6d: 64:03:28:fc:9a:65:f5:c3:73:02:ec:84:e1:d9:df: b4:a5:02:50:49:6f:ba:87:77:44:7d:ea:7e:f4:ed: a3:ef:eb:b7:6a:b6:74:72:68:20:55:36:d8:0a:c8: 63:24:c5:45:7c:18:d7:4f:4d:ce:52:e0:b0:dc:a4: 52:3c:a0:5d:82:a4:36:b5:b4:a3:1b:85:58:32:de: b0:a5:70:6a:17:a8:34:0c:4f:21:70:a1:9a:07:ab: 1e:3b:3f:da:73:d0:20:66:d8:4b:45:aa:d8:e9:f2: 46:42:a1:1f:9f:92:aa:0c:66:b0:d8:b2:d7:2f:56: fd:b4:62:c0:ed:94:3d:c4:98:a2:92:ce:dd:b1:6b: 22:86:76:59:f5:cc:d1:05:dd:f2:d0:98:7d:41:9b: 6d:b1:e3:31:7a:c0:95:54:d0:e0:c3:7d:99:7e:16: 9a:c2:53:ae:a4:0c:38:8c:56:68:94:c2:48:53:c9: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F3:FA:4D:2A:92:76:B5:7D:DC:43:48:49:2D:E6:C6:3B:24:D7:AA X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4FCF92C716B11ED9F349A49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.15.208.0/24 Signature Algorithm: sha256WithRSAEncryption 48:5b:56:f5:81:6b:1e:a4:88:8b:57:b3:73:de:da:45:e2:7a: 47:6f:88:a7:ec:bc:1e:68:c9:8e:f2:07:5f:76:e7:84:31:1c: 88:f1:10:d4:79:f1:c4:54:6d:ee:30:8e:f7:bd:22:09:fc:72: 77:85:1a:3c:a5:95:8c:4d:de:1e:1c:63:a6:1e:a1:50:11:c7: c3:3a:28:99:da:15:0c:1b:11:9d:a6:96:4e:46:08:cd:23:27: c6:ba:88:af:65:82:a9:e9:39:af:0f:a4:63:37:63:14:da:0b: 26:d1:44:3d:f6:34:64:14:00:9f:79:be:d4:a5:da:2b:52:bd: 43:c7:4d:37:11:a9:ef:77:7a:9e:b0:12:bc:89:ab:ff:c2:6e: 2f:7d:25:bb:9e:76:60:13:be:fc:16:9f:49:1e:29:df:16:0f: 7f:3e:41:52:70:a2:98:e7:71:e0:0d:a2:47:1e:c0:02:f6:87: ff:77:d0:67:a1:6d:4a:7e:d1:90:38:6b:4b:72:fc:3b:2a:ca: e8:7d:97:c0:cd:35:8d:59:2f:58:69:99:8f:0c:f1:60:6e:c0: ff:a8:84:92:12:2e:af:3c:22:3e:76:33:51:a1:00:98:87:cb: 07:d9:b9:c0:8a:1c:b5:89:15:83:9c:f3:76:2e:1c:bb:1d:19: 41:d6:52:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjMxMjA5MDE1MzU4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczYzhiNS1hMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxFk0VA70BH+Duo4FWluNJzU9ONjmbBs+vT1SKE2MwAp7cH6e+rZ0hndSTUf CEk2P7g09PvROXHNwPRI8hbO0IsYb4D2doEl9W1kAyj8mmX1w3MC7ITh2d+0pQJQ SW+6h3dEfep+9O2j7+u3arZ0cmggVTbYCshjJMVFfBjXT03OUuCw3KRSPKBdgqQ2 tbSjG4VYMt6wpXBqF6g0DE8hcKGaB6seOz/ac9AgZthLRarY6fJGQqEfn5KqDGaw 2LLXL1b9tGLA7ZQ9xJiiks7dsWsihnZZ9czRBd3y0Jh9QZttseMxesCVVNDgw32Z fhaawlOupAw4jFZolMJIU8lHqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPrz+k0q kna1fdxDSEkt5sY7JNeqMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvRDRGQ0Y5MkM3 MTZCMTFFRDlGMzQ5QTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB6D9AwDQYJKoZIhvcNAQELBQADggEBAEhbVvWBax6kiItX s3Pe2kXiekdviKfsvB5oyY7yB19254QxHIjxENR58cRUbe4wjve9Ign8cneFGjyl lYxN3h4cY6YeoVARx8M6KJnaFQwbEZ2mlk5GCM0jJ8a6iK9lgqnpOa8PpGM3YxTa CybRRD32NGQUAJ95vtSl2itSvUPHTTcRqe93ep6wEryJq//Cbi99JbuedmATvvwW n0keKd8WD38+QVJwopjnceANokcewAL2h/930GehbUp+0ZA4a0ty/Dsqyuh9l8DN NY1ZL1hpmY8M8WBuwP+ohJISLq88Ij52M1GhAJiHywfZucCKHLWJFYOc83YuHLsd GUHWUso= -----END CERTIFICATE-----Generated at Fri May 17 03:52:22 2024 by rpki-client on console-ams.rpki-client.org