$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/EE89EF2AE1BE11EE9A5F7B27C4F9AE02.roa File: EE89EF2AE1BE11EE9A5F7B27C4F9AE02.roa (raw, json) Hash identifier: ip30g7o2ZwpnAzFePhjOVtzH3YUjGy23+nNsZaOiRmg= Subject key identifier: CE:6B:12:AE:E2:3D:AA:69:99:EF:09:3E:9A:BC:DB:18:BE:55:B6:1C Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 06 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/EE89EF2AE1BE11EE9A5F7B27C4F9AE02.roa Signing time: Thu 14 Mar 2024 09:57:48 +0000 ROA not before: Thu 14 Mar 2024 09:57:48 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152643 IP address blocks: 202.37.46.0/23 maxlen: 23 202.37.46.0/24 maxlen: 24 202.37.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Mar 14 09:57:48 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f2ca1c-0bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:df:6a:db:91:e3:0c:3e:1e:d4:b4:40:08: 1b:84:e0:6e:58:b2:b5:54:9f:7c:be:e2:4d:6d:26: cc:fc:bf:44:55:44:fe:81:b7:de:4f:b6:46:cc:1b: 5a:3f:5c:06:83:54:c2:00:d4:a8:8b:b5:46:ed:93: 47:f7:b2:d3:02:88:c6:93:3b:46:14:d2:01:0f:72: 50:bb:13:95:fd:8c:fe:c0:a7:fb:e1:d7:eb:c3:08: df:8e:a8:8d:52:0c:c2:69:21:e2:aa:c6:95:c7:43: 70:d8:4d:ea:30:51:56:32:fa:47:62:3c:fe:b4:c6: 19:80:a2:f1:27:fd:be:1f:88:3d:5f:d7:20:f9:5a: 39:2b:a4:07:0f:4a:1b:9b:0d:52:bf:ee:23:81:73: fd:be:b5:06:33:2e:a8:e7:5e:60:63:3a:69:a8:33: b4:a0:c2:37:d0:28:c1:72:da:04:71:71:87:fe:94: 3f:29:2e:f4:6c:51:54:ee:09:da:30:5c:ec:aa:a0: 49:2b:ea:34:4c:2b:bd:68:0d:85:a0:25:32:08:2c: 7d:6f:74:ad:ca:91:30:dd:96:2a:7b:01:e6:29:fc: fb:c9:5c:9b:5e:d7:48:8c:58:28:b4:fb:da:6b:42: 78:75:77:12:fd:0c:15:04:e0:bf:00:49:2d:dd:3d: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6B:12:AE:E2:3D:AA:69:99:EF:09:3E:9A:BC:DB:18:BE:55:B6:1C X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/EE89EF2AE1BE11EE9A5F7B27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.46.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:1c:ef:30:b9:23:81:c8:dc:8e:e7:24:7b:9e:59:6c:bd:7e: d7:0a:68:12:f7:f2:34:01:65:ca:c5:1a:cc:90:94:15:b8:d5: ae:c1:6c:85:3c:59:b6:4d:11:c8:15:d5:09:d6:c9:7b:82:f7: cb:8f:bd:5d:ae:01:83:87:2b:a6:ba:c4:04:ce:40:39:e0:be: 19:02:0e:49:1d:0b:8f:7e:ca:c6:36:04:1a:62:45:d9:4b:dc: 44:c7:a0:c9:d0:d9:b4:c7:09:0c:bf:ca:d1:ca:58:5c:7b:60: a2:e9:47:27:b6:1a:74:c5:e4:09:4e:f3:79:15:55:73:4e:ef: d5:70:91:64:f6:8a:62:d8:a0:8a:30:2d:2d:d3:aa:14:da:d7: f1:f6:76:ec:8a:38:07:98:32:ae:cd:28:f7:17:18:ab:83:95: 29:4e:4c:b3:d6:8a:01:36:82:3e:ca:31:10:c7:90:de:c8:18: d1:34:f9:fe:18:57:d6:f7:13:61:a1:63:c4:09:e6:15:f5:1a: 8e:ef:d9:c6:b5:49:79:b0:6d:32:74:3e:63:32:9a:56:ae:b4: 04:79:5e:91:bd:db:4a:ba:0e:44:98:b4:4e:18:c3:cb:c9:e9: 32:95:49:04:de:3c:a1:ec:b6:79:73:a4:f1:dc:cd:3c:68:04: 30:b0:17:0d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUYzMTExMC8GA1UEBRMoNjlBMzJENzNFMDM4QTMwRDQ3QUNBQ0VCODFDRDczMTJB Rjc1M0FCOTAeFw0yNDAzMTQwOTU3NDhaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjJjYTFjLTBiYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjvN9q25HjDD4e1LRACBuE4G5YsrVUn3y+4k1tJsz8v0RVRP6Bt95PtkbMG1o/ XAaDVMIA1KiLtUbtk0f3stMCiMaTO0YU0gEPclC7E5X9jP7Ap/vh1+vDCN+OqI1S DMJpIeKqxpXHQ3DYTeowUVYy+kdiPP60xhmAovEn/b4fiD1f1yD5WjkrpAcPShub DVK/7iOBc/2+tQYzLqjnXmBjOmmoM7SgwjfQKMFy2gRxcYf+lD8pLvRsUVTuCdow XOyqoEkr6jRMK71oDYWgJTIILH1vdK3KkTDdlip7AeYp/PvJXJte10iMWCi0+9pr Qnh1dxL9DBUE4L8ASS3dPT8XAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzmsSruI9 qmmZ7wk+mrzbGL5VthwwHwYDVR0jBBgwFoAUaaMtc+A4ow1HrKzrgc1zEq91Orkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRjMxL0EwRjRFMEQwRTFC RTExRUVCMDQ1RUIyNkM0RjlBRTAyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9y ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWFNdGMtQTRvdzFIckt6cmdjMXpFcTkxT3JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9FRTg5RUYyQUUx QkUxMUVFOUE1RjdCMjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcolLjANBgkqhkiG9w0BAQsFAAOCAQEAbRzvMLkjgcjcjuck e55ZbL1+1wpoEvfyNAFlysUazJCUFbjVrsFshTxZtk0RyBXVCdbJe4L3y4+9Xa4B g4crprrEBM5AOeC+GQIOSR0Lj37KxjYEGmJF2UvcRMegydDZtMcJDL/K0cpYXHtg oulHJ7YadMXkCU7zeRVVc07v1XCRZPaKYtigijAtLdOqFNrX8fZ27Io4B5gyrs0o 9xcYq4OVKU5Ms9aKATaCPsoxEMeQ3sgY0TT5/hhX1vcTYaFjxAnmFfUaju/ZxrVJ ebBtMnQ+YzKaVq60BHlekb3bSroORJi0ThjDy8npMpVJBN48oey2eXOk8dzNPGgE MLAXDQ== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:35 2024 by rpki-client on console-ams.rpki-client.org