$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9EA7B7D8A63911ED874E6630C4F9AE02.roa File: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (raw, json) Hash identifier: J9lQZhRy8nlJurek/6TmeBBfcqfbhz3LFug7IIYnNuk= Subject key identifier: 59:85:F9:11:90:CF:59:01:53:09:2C:28:49:94:5E:A8:34:50:C3:EB Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: D9 Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9EA7B7D8A63911ED874E6630C4F9AE02.roa Signing time: Tue 27 Feb 2024 05:38:06 +0000 ROA not before: Tue 27 Feb 2024 05:38:06 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 400496 IP address blocks: 203.23.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Validity Not Before: Feb 27 05:38:06 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65dd753e-0ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:36:a6:49:27:d1:6f:3e:6e:23:8c:24:b6:73: 4d:6f:bc:3a:9c:9b:26:ef:56:7f:8b:64:2d:c0:48: 00:cc:ba:5e:24:16:2a:04:cd:bd:3b:dd:40:94:b3: 48:b9:fe:08:6c:23:11:44:cb:bd:11:98:f0:1f:34: 77:c3:2d:48:94:c8:cb:fc:58:99:b2:4c:47:c6:98: 52:04:e0:4e:e5:ca:63:31:c7:99:67:91:94:21:34: e0:af:ab:39:3c:4b:48:f1:71:c3:21:e8:6d:73:ec: 66:ec:d5:3f:c4:ed:ff:df:a3:34:6e:48:12:ce:80: 28:75:49:15:f2:82:f0:d9:4a:c9:73:7a:04:87:9f: c7:fe:d3:db:82:eb:1e:7d:95:cf:06:1d:c7:14:01: 92:05:6d:d4:5a:6a:bd:f1:4b:1d:26:0a:c5:99:b4: 37:aa:3c:74:0a:72:f6:9c:c7:e7:b5:40:d3:e6:2c: 91:30:b1:6b:94:70:97:5d:26:32:af:fa:b4:1d:da: 33:5a:02:ce:cf:55:77:5a:98:8a:f1:a1:3f:90:f4: 87:e5:96:12:83:4a:75:a3:7b:68:5e:d3:7a:e4:57: fe:06:06:2c:e3:f0:21:98:56:2b:73:83:fc:0e:74: 90:4d:ce:3f:34:e1:5a:57:5a:3b:54:7d:11:4e:4e: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:85:F9:11:90:CF:59:01:53:09:2C:28:49:94:5E:A8:34:50:C3:EB X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9EA7B7D8A63911ED874E6630C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.23.161.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:94:8a:ab:3e:71:f4:5c:58:f4:f5:a5:99:c4:e8:1b:9f:86: 5c:52:d1:da:f3:ca:95:22:92:67:85:74:c7:ef:d4:43:11:3a: ff:5a:0c:81:42:ec:d8:4e:46:74:1a:ec:f7:f1:78:24:cb:e8: ee:50:80:1f:a8:d9:3f:01:5f:34:3d:e0:88:09:68:69:2c:64: dd:a0:8a:a2:58:df:9e:41:70:fc:a2:0a:7d:af:28:a8:c1:23: 46:86:90:8f:8a:8e:40:fa:4d:e4:79:69:00:c8:96:10:c8:d8: 1b:33:50:22:ff:88:24:9f:d6:58:3f:95:0f:ae:9b:bd:ac:7b: f8:0d:98:be:1f:f8:db:0d:f5:21:ad:a1:5e:a5:cf:85:0c:90: 63:ed:89:8d:50:03:a3:89:fd:86:cf:54:07:3f:f8:45:71:63: 7e:94:a0:7f:9d:be:40:37:83:2a:f0:b7:a9:0c:f7:ba:4f:35: e3:5c:91:ff:4c:ee:ab:c9:2f:5d:52:77:91:70:83:27:f0:8a: f5:4e:a3:11:a4:08:92:c4:1a:2a:01:95:50:00:7d:55:94:5d: 55:47:b1:b4:55:19:cd:25:5a:45:76:b9:8f:c9:ad:e5:43:18: e3:7b:80:ac:52:48:d0:40:31:fd:a1:f8:99:d5:74:19:e5:60: d8:b4:c4:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjQwMjI3MDUzODA2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRkNzUzZS0wZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jamSSfRbz5uI4wktnNNb7w6nJsm71Z/i2QtwEgAzLpeJBYqBM29O91AlLNI uf4IbCMRRMu9EZjwHzR3wy1IlMjL/FiZskxHxphSBOBO5cpjMceZZ5GUITTgr6s5 PEtI8XHDIehtc+xm7NU/xO3/36M0bkgSzoAodUkV8oLw2UrJc3oEh5/H/tPbguse fZXPBh3HFAGSBW3UWmq98UsdJgrFmbQ3qjx0CnL2nMfntUDT5iyRMLFrlHCXXSYy r/q0HdozWgLOz1V3WpiK8aE/kPSH5ZYSg0p1o3toXtN65Ff+BgYs4/AhmFYrc4P8 DnSQTc4/NOFaV1o7VH0RTk6nuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFmF+RGQ z1kBUwksKEmUXqg0UMPrMB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUyNDAvMjdEREU3RDg5QjdEMTFFREIzQzMzRjVEQzRGOUFFMDIvOUVBN0I3RDhB NjM5MTFFRDg3NEU2NjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLF6EwDQYJKoZIhvcNAQELBQADggEBAFqUiqs+cfRcWPT1 pZnE6BufhlxS0drzypUikmeFdMfv1EMROv9aDIFC7NhORnQa7PfxeCTL6O5QgB+o 2T8BXzQ94IgJaGksZN2giqJY355BcPyiCn2vKKjBI0aGkI+KjkD6TeR5aQDIlhDI 2BszUCL/iCSf1lg/lQ+um72se/gNmL4f+NsN9SGtoV6lz4UMkGPtiY1QA6OJ/YbP VAc/+EVxY36UoH+dvkA3gyrwt6kM97pPNeNckf9M7qvJL11Sd5FwgyfwivVOoxGk CJLEGioBlVAAfVWUXVVHsbRVGc0lWkV2uY/JreVDGON7gKxSSNBAMf2h+JnVdBnl YNi0xB4= -----END CERTIFICATE-----Generated at Mon May 27 06:19:23 2024 by rpki-client on console-fra.rpki-client.org