$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/5DCDC4FE8E5611E9A403BF44C4F9AE02.roa File: 5DCDC4FE8E5611E9A403BF44C4F9AE02.roa (raw, json) Hash identifier: ESHAZFQ3N4xus0VWTNPV81i6ivAkzaFgejXUoFrz+sM= Subject key identifier: 62:11:F2:A1:4F:A6:97:62:C9:1D:67:63:8E:ED:87:9A:6E:71:57:CF Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0D9B Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/5DCDC4FE8E5611E9A403BF44C4F9AE02.roa Signing time: Tue 02 Jan 2024 18:36:23 +0000 ROA not before: Tue 02 Jan 2024 18:36:23 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 135425 IP address blocks: 203.19.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3483 (0xd9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: Jan 2 18:36:23 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659457a7-bb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:12:aa:d9:78:fc:19:af:fe:58:ed:3d:90: 5c:cd:20:fd:ef:30:8f:00:0e:cd:c5:b9:80:d2:d9: c4:d8:1d:f8:b9:7b:08:7f:9e:0f:49:2b:cc:10:97: 82:d8:ee:06:f4:6a:e9:ce:ff:12:84:c4:65:01:13: 16:73:60:13:bc:24:36:3c:a2:4a:d7:7e:3b:48:ab: 29:fa:35:de:0c:e8:ea:1c:30:94:b0:ea:49:9b:73: b5:fd:bb:42:d4:7e:92:10:db:b1:97:e2:98:0b:bc: 51:86:32:c1:09:c5:f9:c1:16:ca:65:f0:67:1a:4c: 0a:7e:6f:3b:02:f4:75:2c:b2:e1:70:ea:a3:d5:45: dc:a5:b7:7e:71:d4:c3:32:ca:42:18:78:0d:6c:03: cc:8d:94:03:3a:49:6b:07:29:8f:a2:d1:3d:da:60: c0:92:48:71:af:f5:a9:bd:ac:5a:14:83:b1:fc:f9: d3:f5:44:e3:b6:4d:1b:e2:c0:b2:a1:dc:88:da:cf: 44:3b:48:93:d4:0b:9e:24:0e:0f:5b:c7:48:d2:cd: 7e:e7:26:f2:9b:39:a5:2a:b3:0e:e5:42:16:17:9b: 6f:c6:86:36:a9:42:48:1e:fe:85:07:20:92:3a:1b: 14:06:53:e6:e9:72:f9:d1:61:f0:09:af:a0:6d:a5: cc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:11:F2:A1:4F:A6:97:62:C9:1D:67:63:8E:ED:87:9A:6E:71:57:CF X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/5DCDC4FE8E5611E9A403BF44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.19.132.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c8:3a:40:92:2a:0d:30:7b:56:81:b5:2a:f7:3b:aa:bb:5e: e9:01:dc:56:e0:36:c5:d3:05:d0:e1:9b:54:ee:46:46:64:0c: a2:53:e8:94:af:50:d5:e8:b7:14:05:14:63:8d:49:ac:6a:db: e9:4c:0a:b3:fc:d9:9d:06:39:40:6d:1d:82:30:eb:93:35:1b: b7:db:f7:fd:e3:6a:ee:64:a0:16:e1:29:90:14:ee:3a:1f:ea: 7a:31:d6:98:53:52:ee:2b:51:93:43:6b:dd:aa:99:59:e3:0c: 05:0a:52:d4:dd:32:4d:94:2d:75:97:a3:ee:2a:c0:85:94:d2: f4:dc:8f:08:4d:0d:67:3a:01:61:fc:9f:49:a7:77:9c:eb:03: 15:46:ed:60:90:3f:30:fd:59:08:42:8a:16:b1:2a:7c:21:4d: 05:1c:29:75:56:2f:94:a9:28:fc:27:87:3a:55:d4:66:67:ea: 3f:1b:b6:ec:fa:95:3a:eb:fa:2c:b0:69:70:84:30:f5:a2:e9: 92:db:7c:07:8e:2c:20:0a:71:cb:93:1a:e8:0c:99:94:26:80: 95:bc:c2:0b:d8:8d:ac:0b:ee:95:d8:b9:bf:7d:22:48:af:61: 35:96:fd:2a:6c:50:eb:54:dd:85:37:d4:28:d3:1c:d5:0a:59: 76:58:e7:be -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjQwMTAyMTgzNjIzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0NTdhNy1iYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CUSqtl4/Bmv/ljtPZBczSD97zCPAA7NxbmA0tnE2B34uXsIf54PSSvMEJeC 2O4G9Grpzv8ShMRlARMWc2ATvCQ2PKJK1347SKsp+jXeDOjqHDCUsOpJm3O1/btC 1H6SENuxl+KYC7xRhjLBCcX5wRbKZfBnGkwKfm87AvR1LLLhcOqj1UXcpbd+cdTD MspCGHgNbAPMjZQDOklrBymPotE92mDAkkhxr/WpvaxaFIOx/PnT9UTjtk0b4sCy odyI2s9EO0iT1AueJA4PW8dI0s1+5ybymzmlKrMO5UIWF5tvxoY2qUJIHv6FByCS OhsUBlPm6XL50WHwCa+gbaXM4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGIR8qFP ppdiyR1nY47th5pucVfPMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUMyMjUvNDk5RkRGOTA4RTU1MTFFOTgwRDA5QTQyQzRGOUFFMDIvNURDREM0RkU4 RTU2MTFFOUE0MDNCRjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLE4QwDQYJKoZIhvcNAQELBQADggEBAHrIOkCSKg0we1aB tSr3O6q7XukB3FbgNsXTBdDhm1TuRkZkDKJT6JSvUNXotxQFFGONSaxq2+lMCrP8 2Z0GOUBtHYIw65M1G7fb9/3jau5koBbhKZAU7jof6nox1phTUu4rUZNDa92qmVnj DAUKUtTdMk2ULXWXo+4qwIWU0vTcjwhNDWc6AWH8n0mnd5zrAxVG7WCQPzD9WQhC ihaxKnwhTQUcKXVWL5SpKPwnhzpV1GZn6j8btuz6lTrr+iywaXCEMPWi6ZLbfAeO LCAKccuTGugMmZQmgJW8wgvYjawL7pXYub99IkivYTWW/SpsUOtU3YU31CjTHNUK WXZY574= -----END CERTIFICATE-----Generated at Thu May 16 19:10:57 2024 by rpki-client on console-fra.rpki-client.org