$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa File: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (raw, json) Hash identifier: h8HV9c9BAB/iqUxdeW4wZEmkOMDVsa4TBK/OrjQqG3Y= Subject key identifier: 7B:7B:BE:6E:2C:8B:0B:04:88:6C:27:BB:24:8A:A7:C5:99:75:0C:33 Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 068F Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa Signing time: Tue 26 Sep 2023 22:20:03 +0000 ROA not before: Tue 26 Sep 2023 22:20:03 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 9884 IP address blocks: 202.189.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Sep 26 22:20:03 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65135913-1072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:f9:ba:e5:c2:5d:49:b7:3b:26:42:27:53: e6:f9:ba:24:48:4c:36:68:f9:5a:78:ab:bd:d3:88: 86:ce:a5:06:5e:1a:ec:f5:e1:92:43:77:a3:d4:1e: 8f:65:b5:6b:78:00:5a:e7:dc:d3:e4:b8:c8:83:25: 13:07:c6:77:a2:9e:3b:24:da:6e:43:9c:6b:4f:fe: 26:d9:04:c8:57:7d:d8:e7:a0:32:bb:0b:8c:6f:dd: 3a:c3:2c:7d:e0:31:c6:36:95:12:1f:2d:b5:f1:84: 38:f9:90:35:36:fe:f1:92:ea:ac:1c:75:3e:65:a8: 53:ed:20:d4:08:80:df:e4:a6:57:c0:5f:cd:6e:5d: 37:ff:54:dc:a5:a4:d7:e5:94:69:c5:7f:49:f2:68: 14:fe:0e:d8:a7:b1:98:86:c7:d0:9d:7b:53:19:df: 90:dc:05:8d:82:ee:e3:f4:8a:75:f0:eb:0a:b0:0d: 5a:30:ba:ed:b9:7d:71:f2:b6:2d:d4:51:99:50:dd: 22:13:03:90:b1:1e:fb:f9:01:29:a5:9e:02:c4:38: 7d:10:3a:35:57:cc:13:9f:d1:81:93:a9:5b:f9:ff: 1f:83:a2:92:7d:7e:5b:00:0f:9c:22:36:98:81:50: 3d:31:c8:d4:1a:5a:99:57:7f:e6:69:84:cb:89:64: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7B:BE:6E:2C:8B:0B:04:88:6C:27:BB:24:8A:A7:C5:99:75:0C:33 X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.189.128.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:79:af:bd:c2:44:d5:f7:74:2b:d2:be:60:2b:ce:43:f4:17: c0:0a:2c:a9:91:89:96:91:2b:27:e4:82:54:07:5a:38:e1:33: 95:55:cb:08:61:6f:2e:48:53:54:c9:74:28:4d:cc:c6:e0:b2: 40:25:b6:a8:12:87:82:b8:0f:b9:69:fe:f5:1b:f8:36:ba:c3: 1e:af:17:7c:ad:e4:76:8c:b4:b4:08:06:a1:5f:f7:3a:2b:f1: 94:39:3d:c9:ee:d7:57:de:de:49:e4:dc:1d:7f:22:1a:13:ea: e7:2c:af:4f:b1:56:3c:57:fc:13:2c:b4:1d:78:d6:32:3e:1c: d4:78:d9:f4:3a:46:4e:62:72:fd:65:81:55:e7:b7:d2:48:d2: e6:d0:11:0b:c3:72:fb:e8:f7:a4:e1:b7:1b:33:7e:42:53:61: 33:29:18:ba:c1:49:96:67:17:0f:83:08:3f:a0:fe:f8:34:c2: 38:67:5f:77:46:11:0c:58:b8:af:b6:c4:d6:82:d6:eb:c5:5b: 14:a0:1b:71:76:81:50:c8:61:8e:e4:ff:ef:75:ab:fe:56:bd: 41:73:49:36:0d:cf:96:85:9a:d6:9e:7d:10:ca:bf:93:6c:8a: b8:40:72:91:33:30:11:e1:3a:9c:c4:29:c1:07:76:fc:28:5d: 41:29:eb:20 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjMwOTI2MjIyMDAzWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzNTkxMy0xMDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnET5uuXCXUm3OyZCJ1Pm+bokSEw2aPlaeKu904iGzqUGXhrs9eGSQ3ej1B6P ZbVreABa59zT5LjIgyUTB8Z3op47JNpuQ5xrT/4m2QTIV33Y56AyuwuMb906wyx9 4DHGNpUSHy218YQ4+ZA1Nv7xkuqsHHU+ZahT7SDUCIDf5KZXwF/Nbl03/1TcpaTX 5ZRpxX9J8mgU/g7Yp7GYhsfQnXtTGd+Q3AWNgu7j9Ip18OsKsA1aMLrtuX1x8rYt 1FGZUN0iEwOQsR77+QEppZ4CxDh9EDo1V8wTn9GBk6lb+f8fg6KSfX5bAA+cIjaY gVA9McjUGlqZV3/maYTLiWTCWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHt7vm4s iwsEiGwnuySKp8WZdQwzMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU1OTAvQTg5NTI0OUVGN0M1MTFFQTg3MUMwMDBDQzRGOUFFMDIvOTkyMEQyRTZG N0M2MTFFQThCMjNDMzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKvYAwDQYJKoZIhvcNAQELBQADggEBAHx5r73CRNX3dCvS vmArzkP0F8AKLKmRiZaRKyfkglQHWjjhM5VVywhhby5IU1TJdChNzMbgskAltqgS h4K4D7lp/vUb+Da6wx6vF3yt5HaMtLQIBqFf9zor8ZQ5Pcnu11fe3knk3B1/IhoT 6ucsr0+xVjxX/BMstB141jI+HNR42fQ6Rk5icv1lgVXnt9JI0ubQEQvDcvvo96Th txszfkJTYTMpGLrBSZZnFw+DCD+g/vg0wjhnX3dGEQxYuK+2xNaC1uvFWxSgG3F2 gVDIYY7k/+91q/5WvUFzSTYNz5aFmtaefRDKv5NsirhAcpEzMBHhOpzEKcEHdvwo XUEp6yA= -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org