$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/986F0854F7C611EA8B23C30CC4F9AE02.roa File: 986F0854F7C611EA8B23C30CC4F9AE02.roa (raw, json) Hash identifier: dUo8UCdna13Be6ENB8dKRJFi9Y9cl/xs8lvlY3i+6hU= Subject key identifier: 0F:8E:1D:1E:3F:C5:8E:47:4A:99:F2:C3:35:BD:0C:40:A0:32:2D:6D Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 068E Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/986F0854F7C611EA8B23C30CC4F9AE02.roa Signing time: Tue 26 Sep 2023 22:20:02 +0000 ROA not before: Tue 26 Sep 2023 22:20:02 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 7473 IP address blocks: 202.189.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Sep 26 22:20:02 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65135912-0d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:b5:3a:7d:e6:32:33:49:aa:e4:a1:70:d9: 54:0b:f8:ce:96:ad:38:e8:3a:5b:b4:02:79:08:38: 41:1b:fa:9a:fe:92:3f:e3:a4:e0:8f:48:1f:8d:0f: 6c:8b:76:9b:e9:11:a0:29:11:94:0a:11:01:bd:e0: 00:b5:cc:57:ad:bc:84:7f:50:8b:79:86:4f:49:48: 14:3d:f9:38:da:09:da:cd:80:f1:75:e0:2c:8a:72: ba:88:1d:e8:49:4c:8a:9e:0e:a2:45:36:7d:ee:22: 31:22:97:1a:ff:83:4b:6d:ed:e6:79:82:e7:4e:95: 7f:34:95:f9:f9:5a:2a:8e:0d:7b:46:83:ec:dd:c3: 20:7a:e9:7d:f2:24:13:20:04:50:aa:5e:01:09:ce: ba:58:19:69:2c:92:da:65:c0:5e:73:e3:06:4b:6c: ad:75:62:73:a7:e5:c5:56:39:22:8d:ba:59:68:e8: a4:1b:c8:d8:62:89:70:4b:f5:c0:54:1b:17:fb:9e: c7:e0:c0:33:01:9f:52:50:ce:fe:01:d8:2a:30:60: 35:24:62:18:aa:7f:ef:0d:bd:48:e1:ec:61:30:df: cd:4b:3f:6b:96:28:81:18:19:b1:42:eb:99:74:3c: 02:f4:7d:2a:e7:d7:db:b5:53:e8:f1:fb:8f:10:e0: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8E:1D:1E:3F:C5:8E:47:4A:99:F2:C3:35:BD:0C:40:A0:32:2D:6D X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/986F0854F7C611EA8B23C30CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.189.128.0/24 Signature Algorithm: sha256WithRSAEncryption 41:b4:d9:bb:ac:32:81:33:7e:54:86:71:0c:b1:61:41:44:1c: 48:12:fb:c8:0a:83:8f:fa:ff:29:5d:98:f2:b9:56:ff:4d:5c: 3d:f6:65:2d:08:ec:c5:a4:19:b4:86:51:94:7d:c9:ea:38:2e: 14:ae:30:0a:79:24:3e:0e:a8:52:42:f8:6e:a3:90:de:51:0b: 26:ec:f5:36:ac:fd:48:c1:80:46:bc:4e:83:4c:c7:f8:72:75: 2d:4c:12:23:89:59:da:c7:53:61:52:d0:dc:ab:7b:81:33:cc: 40:ed:89:dd:67:a8:72:cc:4d:91:69:11:39:5a:4d:7a:cc:96: a1:86:c9:55:c8:e6:e1:9e:d5:7b:75:a5:3a:7c:aa:da:de:74: 50:f6:5a:f7:26:e4:cb:3b:5a:1d:d1:15:88:4e:20:ab:54:f1: 43:3f:2c:11:92:ff:dc:82:ec:8b:83:78:c0:70:e0:55:1a:9c: 98:11:a5:95:d4:b8:65:67:35:44:fb:55:87:9c:15:4b:78:29: 97:af:82:51:93:6d:d8:4b:44:f1:9c:71:65:a3:da:b2:98:07: 32:71:f9:ae:2d:d4:96:c3:85:d1:37:57:d6:c1:98:79:42:54: 97:ff:2b:ed:e0:0f:39:72:0b:18:6a:5b:ce:b0:d6:53:ce:76: 0e:e2:9c:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjMwOTI2MjIyMDAyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzNTkxMi0wZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoI61On3mMjNJquShcNlUC/jOlq046DpbtAJ5CDhBG/qa/pI/46Tgj0gfjQ9s i3ab6RGgKRGUChEBveAAtcxXrbyEf1CLeYZPSUgUPfk42gnazYDxdeAsinK6iB3o SUyKng6iRTZ97iIxIpca/4NLbe3meYLnTpV/NJX5+Voqjg17RoPs3cMgeul98iQT IARQql4BCc66WBlpLJLaZcBec+MGS2ytdWJzp+XFVjkijbpZaOikG8jYYolwS/XA VBsX+57H4MAzAZ9SUM7+AdgqMGA1JGIYqn/vDb1I4exhMN/NSz9rliiBGBmxQuuZ dDwC9H0q59fbtVPo8fuPEOD7UwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA+OHR4/ xY5HSpnywzW9DECgMi1tMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU1OTAvQTg5NTI0OUVGN0M1MTFFQTg3MUMwMDBDQzRGOUFFMDIvOTg2RjA4NTRG N0M2MTFFQThCMjNDMzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKvYAwDQYJKoZIhvcNAQELBQADggEBAEG02busMoEzflSG cQyxYUFEHEgS+8gKg4/6/yldmPK5Vv9NXD32ZS0I7MWkGbSGUZR9yeo4LhSuMAp5 JD4OqFJC+G6jkN5RCybs9Tas/UjBgEa8ToNMx/hydS1MEiOJWdrHU2FS0Nyre4Ez zEDtid1nqHLMTZFpETlaTXrMlqGGyVXI5uGe1Xt1pTp8qtredFD2Wvcm5Ms7Wh3R FYhOIKtU8UM/LBGS/9yC7IuDeMBw4FUanJgRpZXUuGVnNUT7VYecFUt4KZevglGT bdhLRPGccWWj2rKYBzJx+a4t1JbDhdE3V9bBmHlCVJf/K+3gDzlyCxhqW86w1lPO dg7inPk= -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org