$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF4F8FC0D0CA11EA9E2F6F79C4F9AE02.roa File: BF4F8FC0D0CA11EA9E2F6F79C4F9AE02.roa (raw, json) Hash identifier: K9fSKNsonGGhYdNxj57MVlvipLl9QTdocQaNNC7mhkA= Subject key identifier: 68:97:1B:43:ED:77:92:E2:BB:20:95:29:29:C9:67:C1:72:E6:D2:57 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 0BD1 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF4F8FC0D0CA11EA9E2F6F79C4F9AE02.roa Signing time: Wed 24 May 2023 23:25:51 +0000 ROA not before: Wed 24 May 2023 23:25:51 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 55453 IP address blocks: 202.92.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3025 (0xbd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: May 24 23:25:51 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=646e9cff-8ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:c8:e6:57:a3:6c:0b:f7:bf:e6:3e:a4:c9: 61:ff:08:b3:08:bc:f8:2e:ec:02:a7:e0:92:d2:a7: 11:6b:b2:96:0b:85:f2:ba:da:a1:90:8c:fe:67:06: e3:4e:21:37:55:e9:bc:d2:1f:5d:e4:f3:67:a7:d5: 3f:9f:85:42:42:09:ef:9e:c7:6b:9a:33:9f:df:9e: 5d:45:20:77:73:df:a5:bb:96:6d:4a:d6:5c:14:f4: 24:b6:a0:82:62:06:88:e5:e8:73:24:9e:3c:2a:dd: 27:da:73:d2:e5:ac:07:97:5c:de:0e:4f:22:c9:2a: f6:06:5e:d1:71:83:0c:94:41:be:41:75:e6:cd:2e: 7b:db:39:39:13:2d:ec:92:f6:5f:4e:83:4a:a6:05: 32:74:2a:7f:5f:28:92:c3:86:c1:b5:78:c2:b6:d4: 5e:1c:7d:a6:2b:f7:69:6d:d8:bf:ae:32:06:40:a2: ee:76:30:ca:78:ff:7d:5b:02:6d:61:cc:63:51:98: 5e:da:c5:15:e9:b7:d7:b5:99:fb:6a:a7:f0:e4:06: da:4a:93:a6:54:55:0c:d6:7d:c9:11:7c:49:a7:d4: d3:05:37:cc:29:a4:f0:02:06:ce:fc:5e:34:16:7b: 3d:3b:fb:ec:f7:0d:4b:6a:16:4c:f7:e6:a8:ec:b1: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:97:1B:43:ED:77:92:E2:BB:20:95:29:29:C9:67:C1:72:E6:D2:57 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF4F8FC0D0CA11EA9E2F6F79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.92.22.0/24 Signature Algorithm: sha256WithRSAEncryption a0:79:06:8f:09:3d:b1:c5:12:71:16:a0:11:29:85:3e:ea:34: c1:95:24:e4:0b:20:6c:6b:a5:de:ba:45:3d:98:90:5e:15:ef: 0a:0e:71:3e:70:d2:dc:ad:4f:9a:72:2a:e6:7e:21:49:df:ac: b7:42:08:8a:29:fd:fc:6d:0e:95:ca:36:26:00:a7:38:cf:77: 0d:df:d3:e3:27:e8:6a:24:d2:43:9a:a1:45:1d:8d:74:34:a9: 91:e7:45:c1:aa:44:af:71:68:1a:1d:1b:e4:7e:94:e2:44:1c: 07:13:d6:1f:8a:9f:94:1c:e0:5a:74:c4:ef:d6:b9:59:a1:bb: 77:49:b7:6b:70:27:f3:9c:08:41:5f:bb:d0:b4:d3:d5:56:6e: ce:dd:66:64:9a:21:2d:1b:04:e3:30:13:4e:9f:a0:d2:b3:f6: 7b:27:e5:33:f5:3e:fa:ce:97:d9:03:a6:99:d8:0b:e5:0b:32: cf:dc:c9:89:c5:39:d8:5a:2d:06:6f:35:78:f6:58:32:5b:11: 21:7b:6d:da:b9:f5:bb:96:29:83:ca:21:37:e0:83:d0:d7:bc: bd:a8:3f:be:9c:80:e6:36:50:d0:53:b5:43:8c:3a:1c:ec:b4: 48:e3:0c:4e:ec:a5:fe:94:d9:e7:ac:59:c9:6f:4b:ac:9d:67: db:41:1a:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjMwNTI0MjMyNTUxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDZlOWNmZi04YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjnI5lejbAv3v+Y+pMlh/wizCLz4LuwCp+CS0qcRa7KWC4XyutqhkIz+Zwbj TiE3Vem80h9d5PNnp9U/n4VCQgnvnsdrmjOf355dRSB3c9+lu5ZtStZcFPQktqCC YgaI5ehzJJ48Kt0n2nPS5awHl1zeDk8iySr2Bl7RcYMMlEG+QXXmzS572zk5Ey3s kvZfToNKpgUydCp/XyiSw4bBtXjCttReHH2mK/dpbdi/rjIGQKLudjDKeP99WwJt YcxjUZhe2sUV6bfXtZn7aqfw5AbaSpOmVFUM1n3JEXxJp9TTBTfMKaTwAgbO/F40 Fns9O/vs9w1LahZM9+ao7LFbUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGiXG0Pt d5LiuyCVKSnJZ8Fy5tJXMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQkY0RjhGQzBE MENBMTFFQTlFMkY2Rjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKXBYwDQYJKoZIhvcNAQELBQADggEBAKB5Bo8JPbHFEnEW oBEphT7qNMGVJOQLIGxrpd66RT2YkF4V7woOcT5w0tytT5pyKuZ+IUnfrLdCCIop /fxtDpXKNiYApzjPdw3f0+Mn6Gok0kOaoUUdjXQ0qZHnRcGqRK9xaBodG+R+lOJE HAcT1h+Kn5Qc4Fp0xO/WuVmhu3dJt2twJ/OcCEFfu9C009VWbs7dZmSaIS0bBOMw E06foNKz9nsn5TP1PvrOl9kDppnYC+ULMs/cyYnFOdhaLQZvNXj2WDJbESF7bdq5 9buWKYPKITfgg9DXvL2oP76cgOY2UNBTtUOMOhzstEjjDE7spf6U2eesWclvS6yd Z9tBGtg= -----END CERTIFICATE-----Generated at Wed Apr 24 23:34:37 2024 by rpki-client on console-ams.rpki-client.org