$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/328C9E7CDC1A11EC89244C2FC4F9AE02.roa File: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (raw, json) Hash identifier: vg1DEPzwmh8qE2AidumeQ/fULrz80QgxAjtYil40UCo= Subject key identifier: 45:9C:13:C5:BC:10:94:B7:E7:0B:54:26:9C:3B:2F:4C:A4:6E:B7:41 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 01A2 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/328C9E7CDC1A11EC89244C2FC4F9AE02.roa Signing time: Sat 01 Jul 2023 02:52:44 +0000 ROA not before: Sat 01 Jul 2023 02:52:44 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 8943 IP address blocks: 203.11.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Jul 1 02:52:44 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649f94fb-4c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:9d:d1:27:31:c9:16:b0:9c:d5:b2:0b:4e: 23:7c:cb:c6:4c:7b:cf:06:8c:60:24:dd:eb:d5:94: ba:eb:c2:3a:d7:c1:ba:3a:02:b4:ba:67:66:0b:16: 84:2d:62:03:b4:8d:66:3f:f5:e8:15:f5:f4:21:fa: b0:57:dd:6d:53:eb:9d:c7:b7:bf:0c:b1:9d:f1:b3: 8c:74:4e:d9:75:b3:b8:b1:1d:63:bb:3a:6e:f6:1e: e3:77:fc:94:97:00:28:98:c6:aa:ec:e3:80:30:1e: d0:4a:38:c3:77:2b:86:1b:f3:29:1e:fa:8e:d9:5f: 0d:cc:7f:fd:02:e2:e6:06:68:1b:ab:74:2d:f2:d8: ac:23:21:b9:15:0f:c6:8f:78:15:1f:4a:96:ee:a4: 53:49:a8:7a:66:af:6a:bf:a1:eb:33:59:e3:25:ee: 2b:f9:e0:c4:3e:45:a7:71:a6:4c:29:a8:f7:ce:95: 35:77:88:21:96:37:7e:8e:71:82:ed:df:c3:53:8d: 05:e5:d8:f9:0c:12:90:5e:81:98:52:30:f2:a2:5a: 28:7a:18:cc:07:25:4b:bf:50:7e:94:92:4d:12:c9: 02:ac:93:0f:d2:a3:10:11:20:ed:bb:ec:5d:66:40: b8:86:41:89:49:02:e1:69:dc:88:dd:a7:c9:b5:44: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9C:13:C5:BC:10:94:B7:E7:0B:54:26:9C:3B:2F:4C:A4:6E:B7:41 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/328C9E7CDC1A11EC89244C2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.11.114.0/24 Signature Algorithm: sha256WithRSAEncryption 64:06:25:15:1c:f6:45:5a:d1:35:ee:cb:40:87:24:cc:fc:8e: 5b:75:c7:8e:a4:ed:d0:49:d0:9d:dc:f8:04:dd:8d:6c:c2:64: d8:97:7c:b4:14:bb:a3:24:4a:e7:7d:0f:2e:28:ed:d3:a8:1b: dd:8e:6e:c9:c8:d9:b2:36:d8:2c:50:b5:69:57:de:4a:28:87: 96:fd:59:99:15:5e:f2:1f:82:37:c4:4a:a9:59:9f:97:31:5e: 1b:63:53:4d:ca:4c:2d:f7:e7:c6:81:1d:e8:2c:9f:f4:f9:bc: 01:a8:de:27:5b:b5:34:a1:07:d2:c2:09:e5:ca:af:d1:72:a5: 21:96:e5:8c:d2:2c:9a:1a:05:10:4b:95:69:a9:78:2c:58:6c: a6:df:d1:9f:fc:b8:3c:21:41:c5:62:6c:c5:01:f5:18:82:75: 47:3e:73:90:ca:f2:74:18:fe:90:94:25:02:43:c0:9b:78:23: f3:a3:eb:f5:06:3c:f2:f4:6e:5f:c9:9b:92:bb:97:89:28:c8: 2f:da:04:23:5f:60:e8:ae:fd:e3:5f:c5:a2:0c:14:07:e4:9a: 8f:05:0b:ee:52:2b:34:ac:38:5a:21:e0:a1:08:84:84:57:09: 2b:09:ca:6a:4d:66:27:ef:cc:6c:2e:f1:33:80:be:7e:e6:89: 8d:66:c6:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjMwNzAxMDI1MjQ0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDlmOTRmYi00YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRqd0ScxyRawnNWyC04jfMvGTHvPBoxgJN3r1ZS668I618G6OgK0umdmCxaE LWIDtI1mP/XoFfX0IfqwV91tU+udx7e/DLGd8bOMdE7ZdbO4sR1juzpu9h7jd/yU lwAomMaq7OOAMB7QSjjDdyuGG/MpHvqO2V8NzH/9AuLmBmgbq3Qt8tisIyG5FQ/G j3gVH0qW7qRTSah6Zq9qv6HrM1njJe4r+eDEPkWncaZMKaj3zpU1d4ghljd+jnGC 7d/DU40F5dj5DBKQXoGYUjDyolooehjMByVLv1B+lJJNEskCrJMP0qMQESDtu+xd ZkC4hkGJSQLhadyI3afJtUSv/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEWcE8W8 EJS35wtUJpw7L0ykbrdBMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvMzI4QzlFN0NE QzFBMTFFQzg5MjQ0QzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLC3IwDQYJKoZIhvcNAQELBQADggEBAGQGJRUc9kVa0TXu y0CHJMz8jlt1x46k7dBJ0J3c+ATdjWzCZNiXfLQUu6MkSud9Dy4o7dOoG92ObsnI 2bI22CxQtWlX3kooh5b9WZkVXvIfgjfESqlZn5cxXhtjU03KTC3358aBHegsn/T5 vAGo3idbtTShB9LCCeXKr9FypSGW5YzSLJoaBRBLlWmpeCxYbKbf0Z/8uDwhQcVi bMUB9RiCdUc+c5DK8nQY/pCUJQJDwJt4I/Oj6/UGPPL0bl/Jm5K7l4koyC/aBCNf YOiu/eNfxaIMFAfkmo8FC+5SKzSsOFoh4KEIhIRXCSsJympNZifvzGwu8TOAvn7m iY1mxtc= -----END CERTIFICATE-----Generated at Fri May 17 04:44:33 2024 by rpki-client on console-ams.rpki-client.org