$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/FDAEEFB0A12A11EAB063A548C4F9AE02.roa File: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (raw, json) Hash identifier: G8avC+ulnEE5Co+9F77RGYPLdXzyOYDLFUOhDerbuVs= Subject key identifier: 8D:80:62:4C:70:3C:A7:42:C7:84:DE:AF:BB:34:0A:10:A9:53:F2:96 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 07C0 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/FDAEEFB0A12A11EAB063A548C4F9AE02.roa Signing time: Thu 06 Jul 2023 21:17:45 +0000 ROA not before: Thu 06 Jul 2023 21:17:45 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 23760 IP address blocks: 202.41.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 21:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Jul 6 21:17:45 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a72f79-da16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:ba:08:5c:f3:cf:59:13:f3:64:0d:21:d4: e9:fb:74:54:96:8c:c5:97:f2:3e:59:1b:99:5b:a3: 26:04:33:75:18:54:91:51:80:0c:1c:2a:8a:c2:dc: cd:3a:ae:95:0c:a8:60:2d:80:d7:63:0a:85:06:42: c1:f3:0d:c2:60:eb:2d:39:40:20:1d:f5:5d:16:8a: a3:a3:a0:ec:ee:12:61:ad:f0:80:60:94:75:5f:41: ba:0b:1f:ee:f0:de:c1:13:b3:87:3b:6f:f2:d7:0e: 51:46:3d:2e:a5:43:54:08:34:a2:7e:44:5a:d8:e2: 4e:d7:df:4d:6d:19:ec:02:b9:e1:19:d7:91:71:80: 4c:74:67:a7:15:48:d7:9f:7d:c5:7c:c4:ae:0a:0e: 47:40:09:22:7c:20:67:66:9b:78:ac:a1:74:bc:fd: 90:96:b4:d2:0c:d8:d5:ea:0b:d0:d2:7b:b3:70:4b: 92:ff:de:7b:e3:24:c3:60:a8:39:b2:33:2a:41:92: b0:74:40:85:70:78:24:65:c2:03:f9:f8:06:72:3e: 95:df:4c:78:98:f7:6f:44:37:f3:fd:5a:51:57:e3: 1a:be:b6:0f:1a:2d:97:97:eb:2e:fe:2b:c9:93:3b: 47:2e:63:ed:35:73:83:da:65:24:4f:a0:12:52:49: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:80:62:4C:70:3C:A7:42:C7:84:DE:AF:BB:34:0A:10:A9:53:F2:96 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/FDAEEFB0A12A11EAB063A548C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.135.0/24 Signature Algorithm: sha256WithRSAEncryption 60:8e:72:45:57:9e:f7:f0:a2:c1:06:7d:1f:bb:02:10:77:72: b7:5b:52:d8:1a:6b:bc:b1:0f:d0:31:cf:b0:03:55:63:e9:10: 4f:72:3f:15:fd:cd:87:ef:06:dd:06:30:19:ca:c6:8f:5c:92: fe:86:b7:da:94:96:32:2b:ed:ff:88:02:cc:56:17:92:9a:b1: f2:7c:43:8a:ad:41:87:b3:9c:54:fe:59:a4:80:6d:9f:f3:4e: 3d:89:1e:fd:e2:fd:11:b3:9a:5c:73:62:96:51:52:78:e1:20: 74:df:a1:a7:8d:26:68:dd:70:bc:8b:81:a1:a0:98:6c:46:94: f5:ab:d5:17:6d:e4:75:bb:08:53:06:4c:8e:8e:37:00:ff:51: 8a:18:21:16:ab:49:6d:d4:b0:6e:e9:67:fd:17:5d:14:de:8b: e8:18:41:ab:ae:08:43:3e:a2:db:c9:e5:16:21:18:dd:b1:a6: 57:5e:e6:c4:65:b4:e2:1d:6d:c7:13:3a:4a:a7:ba:a1:90:53: 33:9e:f1:8e:b7:4a:f2:93:5e:95:b1:b3:9b:eb:3c:c8:8d:a1: 5d:4b:d4:1f:75:bb:88:5f:60:65:7b:8d:b0:59:00:e7:88:d2: 4c:a6:69:0e:08:16:36:0a:24:8d:58:e1:f7:7f:3a:91:c3:7a: 7f:a4:6b:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjMwNzA2MjExNzQ1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE3MmY3OS1kYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZG6CFzzz1kT82QNIdTp+3RUlozFl/I+WRuZW6MmBDN1GFSRUYAMHCqKwtzN Oq6VDKhgLYDXYwqFBkLB8w3CYOstOUAgHfVdFoqjo6Ds7hJhrfCAYJR1X0G6Cx/u 8N7BE7OHO2/y1w5RRj0upUNUCDSifkRa2OJO199NbRnsArnhGdeRcYBMdGenFUjX n33FfMSuCg5HQAkifCBnZpt4rKF0vP2QlrTSDNjV6gvQ0nuzcEuS/9574yTDYKg5 sjMqQZKwdECFcHgkZcID+fgGcj6V30x4mPdvRDfz/VpRV+MavrYPGi2Xl+su/ivJ kztHLmPtNXOD2mUkT6ASUkmmEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI2AYkxw PKdCx4Ter7s0ChCpU/KWMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg5MEUvOEQ0MTM1RkVBMTI5MTFFQUEwMjI3NzQ2QzRGOUFFMDIvRkRBRUVGQjBB MTJBMTFFQUIwNjNBNTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKKYcwDQYJKoZIhvcNAQELBQADggEBAGCOckVXnvfwosEG fR+7AhB3crdbUtgaa7yxD9Axz7ADVWPpEE9yPxX9zYfvBt0GMBnKxo9ckv6Gt9qU ljIr7f+IAsxWF5KasfJ8Q4qtQYeznFT+WaSAbZ/zTj2JHv3i/RGzmlxzYpZRUnjh IHTfoaeNJmjdcLyLgaGgmGxGlPWr1Rdt5HW7CFMGTI6ONwD/UYoYIRarSW3UsG7p Z/0XXRTei+gYQauuCEM+otvJ5RYhGN2xplde5sRltOIdbccTOkqnuqGQUzOe8Y63 SvKTXpWxs5vrPMiNoV1L1B91u4hfYGV7jbBZAOeI0kymaQ4IFjYKJI1Y4fd/OpHD en+ka2M= -----END CERTIFICATE-----Generated at Sun Jun 2 22:26:11 2024 by rpki-client on console-fra.rpki-client.org