$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/0D207E32BE8711EE9C60D31CC4F9AE02.roa File: 0D207E32BE8711EE9C60D31CC4F9AE02.roa (raw, json) Hash identifier: z+GKrvEqjCCqvC/1p+CkC2KpPlD1Xh1mIWkhDZjsfHA= Subject key identifier: 18:28:1E:C3:7D:E4:99:7B:A2:A9:ED:82:14:B5:E5:E1:6A:B2:D6:E6 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 0246 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/0D207E32BE8711EE9C60D31CC4F9AE02.roa Signing time: Fri 22 Mar 2024 14:57:22 +0000 ROA not before: Fri 22 Mar 2024 14:57:22 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 151499 IP address blocks: 202.12.89.0/24 maxlen: 24 203.0.12.0/24 maxlen: 24 203.0.13.0/24 maxlen: 24 203.12.236.0/22 maxlen: 22 203.12.236.0/24 maxlen: 24 203.12.237.0/24 maxlen: 24 203.12.238.0/24 maxlen: 24 203.12.239.0/24 maxlen: 24 203.14.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Mar 22 14:57:22 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65fd9c51-ea0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:e5:cd:ca:d9:63:f3:93:e7:dc:99:7b:d7: 87:4f:b7:c9:0f:d4:93:ca:6e:dd:03:e9:f4:fe:c1: 96:db:71:3a:d7:38:18:9a:18:39:31:16:ac:95:70: bb:93:68:d6:4b:ce:28:43:8b:25:57:39:cf:90:5f: 73:0a:c5:cc:5f:ec:fc:d1:5d:6e:a7:0c:ac:8b:0f: 4e:be:29:6f:20:95:23:fa:10:90:93:aa:f7:f2:38: 77:34:eb:a1:3f:f3:2a:3c:26:9f:0a:53:15:ef:ff: 07:59:54:e8:46:1b:29:98:24:bc:9d:2e:14:c1:62: 31:93:db:02:10:f2:44:11:65:80:6c:ce:96:8d:90: 70:68:86:ae:fc:85:f2:3a:2f:77:83:95:80:85:34: b9:c6:09:c3:8d:af:4e:26:07:a9:39:99:c6:ae:f0: 78:ef:41:b0:88:67:0f:95:4e:f2:51:4a:53:de:da: ab:57:58:4f:64:4e:74:6d:56:fb:f9:b7:2d:c1:85: f3:4c:77:81:df:9e:2e:25:35:dc:b4:c7:c2:d8:79: 0f:19:0f:8d:63:ab:f8:27:cf:4b:36:6a:20:d0:b8: ac:9a:2e:27:10:44:c7:84:0d:4a:fb:f6:13:30:1f: 80:ef:1d:58:d2:5f:f5:b4:6f:47:8f:56:6a:bc:78: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:1E:C3:7D:E4:99:7B:A2:A9:ED:82:14:B5:E5:E1:6A:B2:D6:E6 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/0D207E32BE8711EE9C60D31CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.89.0/24 203.0.12.0/23 203.12.236.0/22 203.14.158.0/23 Signature Algorithm: sha256WithRSAEncryption ba:8e:3a:8e:e7:60:81:e3:c0:68:f7:00:42:0f:9a:ba:09:c5: fe:87:38:c4:32:9f:73:41:8e:cf:1b:bf:9f:67:75:1e:34:5a: 8b:27:b9:6e:6b:bc:71:e8:65:fc:1a:73:12:45:52:8d:ab:dc: 2f:0b:18:71:c8:f4:d7:77:b8:5f:98:5f:3a:0b:52:da:f1:f5: 9c:aa:e1:57:a8:a9:4f:33:c1:13:5a:6f:8c:3b:f3:63:05:0d: 8f:af:0b:c1:e1:aa:f9:d0:ef:78:6b:68:6a:c8:d5:02:16:7f: 62:ec:36:bb:81:b3:3e:38:80:24:00:cb:db:6c:b2:27:d0:3f: 77:e9:24:23:c2:4b:55:d7:bf:74:77:00:43:65:2a:43:3b:28: 8e:9c:5b:82:9e:62:83:77:0a:ee:eb:7f:c3:45:53:d9:0f:e6: f0:5f:af:51:f8:56:75:72:ea:f9:75:ef:ae:40:fc:07:4c:1f: 54:03:68:54:01:5c:5b:3b:fc:94:32:68:e1:09:66:7c:fd:ea: 88:71:0d:88:89:3f:9c:e1:0a:5f:35:82:54:3c:09:d1:e9:f2: 48:8e:04:1e:18:43:94:5c:dc:59:68:ec:ba:3b:9d:2f:85:11: 13:c7:24:41:bb:0e:56:0e:3f:8c:45:1a:1a:4e:f1:59:8a:8f: ee:14:92:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjQwMzIyMTQ1NzIyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZkOWM1MS1lYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdPlzcrZY/OT59yZe9eHT7fJD9STym7dA+n0/sGW23E61zgYmhg5MRaslXC7 k2jWS84oQ4slVznPkF9zCsXMX+z80V1upwysiw9OvilvIJUj+hCQk6r38jh3NOuh P/MqPCafClMV7/8HWVToRhspmCS8nS4UwWIxk9sCEPJEEWWAbM6WjZBwaIau/IXy Oi93g5WAhTS5xgnDja9OJgepOZnGrvB470GwiGcPlU7yUUpT3tqrV1hPZE50bVb7 +bctwYXzTHeB354uJTXctMfC2HkPGQ+NY6v4J89LNmog0Lismi4nEETHhA1K+/YT MB+A7x1Y0l/1tG9Hj1ZqvHgChQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBgoHsN9 5Jl7oqntghS15eFqstbmMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvMEQyMDdFMzJC RTg3MTFFRTlDNjBEMzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBADKDFkDBAHLAAwDBALLDOwDBAHLDp4wDQYJKoZIhvcNAQEL BQADggEBALqOOo7nYIHjwGj3AEIPmroJxf6HOMQyn3NBjs8bv59ndR40WosnuW5r vHHoZfwacxJFUo2r3C8LGHHI9Nd3uF+YXzoLUtrx9Zyq4VeoqU8zwRNab4w782MF DY+vC8HhqvnQ73hraGrI1QIWf2LsNruBsz44gCQAy9tssifQP3fpJCPCS1XXv3R3 AENlKkM7KI6cW4KeYoN3Cu7rf8NFU9kP5vBfr1H4VnVy6vl1765A/AdMH1QDaFQB XFs7/JQyaOEJZnz96ohxDYiJP5zhCl81glQ8CdHp8kiOBB4YQ5Rc3Flo7Lo7nS+F ERPHJEG7DlYOP4xFGhpO8VmKj+4UkjU= -----END CERTIFICATE-----Generated at Fri May 17 04:44:33 2024 by rpki-client on console-ams.rpki-client.org