$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7D920C1AB0CD11E58B55FC73C4F9AE02.roa File: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (raw, json) Hash identifier: BSMjWbafIqq8yLgIrzC661RluMtE07f15/2lXA/YQYE= Subject key identifier: 6F:A5:A1:3A:50:4F:89:27:72:82:01:5C:61:B6:5A:73:6C:FE:8D:DB Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 34AF Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7D920C1AB0CD11E58B55FC73C4F9AE02.roa Signing time: Fri 08 Dec 2023 14:40:36 +0000 ROA not before: Fri 08 Dec 2023 14:40:36 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 24551 IP address blocks: 202.69.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Dec 8 14:40:36 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65732ae4-f72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:14:ed:ef:2b:fc:f4:8d:d2:12:88:e1:6e:f2: c0:e4:81:4f:f2:f5:19:f8:56:87:a0:14:15:6f:bf: 00:95:58:15:a8:44:5d:9e:5d:e8:d6:a0:8d:f2:32: 63:a4:e4:c2:74:f9:39:6b:7d:1d:64:26:ae:ff:03: 5c:51:37:b2:f8:6e:6c:7a:d8:32:31:82:fc:bc:e9: de:30:38:89:37:76:63:42:30:52:41:ee:d4:09:a7: 7f:d1:48:43:50:5f:c7:0e:1a:21:91:09:3a:6d:ce: 8b:bf:28:cf:91:b5:7b:8a:a0:34:b0:19:26:68:88: 32:19:e5:5d:4d:ec:6f:3a:fe:93:dd:41:a7:6a:25: 1f:00:db:4b:80:3e:1e:90:65:fd:91:82:0b:fb:1b: d2:b1:20:18:bb:f9:81:e7:50:e1:ed:0e:8a:5b:b2: 71:93:74:f0:66:99:13:4e:40:cb:c2:75:01:44:a3: ce:99:26:1c:3f:00:cc:fa:9d:77:20:6d:0a:bb:55: e0:fb:4a:4a:33:73:a2:56:af:28:05:c8:31:ff:0c: e4:4c:af:7c:20:a7:5c:0c:5f:15:3f:1f:7a:c6:77: 1c:f1:b5:3e:a7:75:38:52:d7:92:5a:7e:7a:aa:d8: b9:db:ce:7c:13:e6:0d:79:64:0d:a2:7c:cd:47:c2: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A5:A1:3A:50:4F:89:27:72:82:01:5C:61:B6:5A:73:6C:FE:8D:DB X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7D920C1AB0CD11E58B55FC73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.69.163.0/24 Signature Algorithm: sha256WithRSAEncryption 27:65:cd:71:35:6c:c5:73:c8:11:af:2a:4e:ef:5f:d8:72:5f: 38:bc:6d:3f:3b:c0:e5:cd:86:6d:de:c6:0d:e4:53:a3:88:f6: ec:68:16:e6:86:44:ab:c5:44:7e:e9:b1:ab:9a:8c:e0:5e:bb: 5d:5a:75:6e:66:b1:37:a5:91:61:84:f8:f5:61:bf:a2:bc:05: 68:02:b7:c7:31:0c:b5:99:26:fd:b9:90:ef:63:68:4f:f9:fe: 1c:32:9b:61:44:1a:a2:cb:d6:f1:3d:26:bf:f7:02:64:9d:15: a3:de:21:7e:ec:08:90:39:f6:a3:c7:0d:19:23:e5:45:f6:5c: f4:34:99:a6:5f:a7:76:1c:ae:75:72:a8:db:1a:92:bb:c5:67: e4:0f:ad:ed:ca:b2:6e:63:18:19:49:3f:6f:f7:5a:c7:bf:26: 41:69:61:f7:b8:5c:a9:f5:a5:b9:94:22:5d:d6:96:ba:7f:35: f4:31:c8:82:7d:8b:05:5a:f4:f2:24:70:5f:53:f3:f8:a2:d1: ca:a1:94:c7:e1:93:7e:6c:9f:34:c0:57:db:98:dd:dd:0b:14: 50:75:96:03:9e:69:5c:83:d4:c5:f7:9d:c7:dc:df:7d:87:b2: d6:6a:97:6b:4f:15:94:e4:99:4d:63:c1:0b:85:ce:c7:6a:62: 95:07:eb:de -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjMxMjA4MTQ0MDM2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczMmFlNC1mNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BTt7yv89I3SEojhbvLA5IFP8vUZ+FaHoBQVb78AlVgVqERdnl3o1qCN8jJj pOTCdPk5a30dZCau/wNcUTey+G5setgyMYL8vOneMDiJN3ZjQjBSQe7UCad/0UhD UF/HDhohkQk6bc6LvyjPkbV7iqA0sBkmaIgyGeVdTexvOv6T3UGnaiUfANtLgD4e kGX9kYIL+xvSsSAYu/mB51Dh7Q6KW7Jxk3TwZpkTTkDLwnUBRKPOmSYcPwDM+p13 IG0Ku1Xg+0pKM3OiVq8oBcgx/wzkTK98IKdcDF8VPx96xncc8bU+p3U4UteSWn56 qti52858E+YNeWQNonzNR8L33wIDAQABo4IClTCCApEwHQYDVR0OBBYEFG+loTpQ T4kncoIBXGG2WnNs/o3bMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvN0Q5MjBDMUFC MENEMTFFNThCNTVGQzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKRaMwDQYJKoZIhvcNAQELBQADggEBACdlzXE1bMVzyBGv Kk7vX9hyXzi8bT87wOXNhm3exg3kU6OI9uxoFuaGRKvFRH7psauajOBeu11adW5m sTelkWGE+PVhv6K8BWgCt8cxDLWZJv25kO9jaE/5/hwym2FEGqLL1vE9Jr/3AmSd FaPeIX7sCJA59qPHDRkj5UX2XPQ0maZfp3YcrnVyqNsakrvFZ+QPre3Ksm5jGBlJ P2/3Wse/JkFpYfe4XKn1pbmUIl3Wlrp/NfQxyIJ9iwVa9PIkcF9T8/ii0cqhlMfh k35snzTAV9uY3d0LFFB1lgOeaVyD1MX3ncfc332HstZql2tPFZTkmU1jwQuFzsdq YpUH694= -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:05 2024 by rpki-client on console-ams.rpki-client.org