$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/047E1E9C341C11EE84F4D52CC4F9AE02.roa File: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (raw, json) Hash identifier: wc/nP/I02P9mYhl99EomTi2ak69YgtTLrrtatE7njg0= Subject key identifier: 1F:25:95:47:BC:0D:78:96:43:5F:0A:26:5C:25:0D:B1:41:23:BD:D0 Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Certificate serial: 8B Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/047E1E9C341C11EE84F4D52CC4F9AE02.roa Signing time: Fri 19 Apr 2024 07:09:17 +0000 ROA not before: Fri 19 Apr 2024 07:09:17 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 16509 IP address blocks: 202.36.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Validity Not Before: Apr 19 07:09:17 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6622189c-75eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:60:73:35:80:c8:78:8a:0a:86:a2:0c:ee: bb:f5:2c:3a:fe:7b:d6:1e:aa:d0:ab:1c:f8:6d:1e: 7c:0f:45:3f:65:89:2c:91:9f:c0:00:40:ac:e9:02: 73:02:72:5a:35:2a:80:77:19:20:67:07:77:fe:3e: 81:0b:d7:de:77:4a:97:fd:65:0e:25:a2:fb:59:33: 0a:8f:0b:0d:cb:e5:96:88:14:79:de:6d:63:03:00: a2:65:48:9d:63:fc:36:94:e1:9f:b6:35:07:f1:c9: 69:4b:5f:aa:f0:5e:9b:1a:11:6d:42:db:c3:20:86: 41:98:db:6d:be:00:94:21:34:4f:dd:cd:2b:02:17: 53:a6:39:63:14:f1:95:08:1f:08:de:08:83:11:36: 21:91:70:44:75:fd:b6:3e:a8:0d:1c:52:72:52:19: 6c:78:c3:b1:8f:6e:70:aa:15:fc:47:37:9c:1b:df: 0b:20:40:04:38:c2:76:4c:0f:c6:6d:36:32:b6:2e: e1:5d:9c:2d:8a:1e:9d:ba:58:df:84:3c:a2:f7:e6: ea:6b:ed:cf:99:8d:0a:d0:59:66:bc:36:96:00:0b: e9:10:1d:3c:f0:e9:b2:88:85:5b:b4:ed:84:cf:fa: 6d:cd:2b:58:40:1e:e4:29:4e:9e:3a:ba:d1:cd:02: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:25:95:47:BC:0D:78:96:43:5F:0A:26:5C:25:0D:B1:41:23:BD:D0 X509v3 Authority Key Identifier: keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/047E1E9C341C11EE84F4D52CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.36.70.0/24 Signature Algorithm: sha256WithRSAEncryption 98:31:77:1e:76:dc:de:18:1e:79:ab:a9:c8:4b:8f:be:6b:8a: 44:18:40:17:f2:53:6f:12:a9:76:de:0a:78:a8:78:0d:b7:86: 37:8f:59:37:53:07:3a:e9:92:69:9c:23:62:41:af:f5:2b:f0: 95:5d:61:2e:bc:ba:17:f7:00:25:d3:5b:29:bd:31:4f:28:b8: 5e:ef:c7:e4:5e:1c:f1:ca:29:18:33:6b:ae:3a:cb:77:b9:6e: e9:5b:05:f1:b0:12:9e:31:0f:2e:f1:10:03:a3:81:ee:15:ec: 40:d3:c8:79:ba:0d:f4:a0:1f:32:dd:0d:27:29:ba:e1:f1:e1: 35:01:69:4f:9c:d6:96:a4:8e:f2:8f:40:a5:6f:0f:f4:0c:fc: 80:c1:cf:c8:b2:6b:67:6b:a5:4c:00:ae:ab:32:9d:9c:29:89: e1:7f:34:6c:92:56:d2:90:cf:b4:e7:4e:ac:f6:03:d4:b7:c8: a8:98:c0:43:60:29:3f:db:26:6a:37:82:8d:5f:df:43:b7:ff: 50:58:32:9f:ca:d0:f5:4c:6a:cc:05:62:7c:40:d7:16:35:10: b7:2e:75:00:8f:15:31:67:d5:da:17:90:96:0c:d5:0f:85:20: f0:d2:8f:b5:a7:24:09:ab:a8:83:3e:28:7d:30:a5:d8:91:57: 87:6f:ea:0e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNFNjIxMTAvBgNVBAUTKDg5MDI3ODkwMDMzRDVENjIzQkQ0RTQzOTg2RTg4MEY2 QUIxMzg0OTQwHhcNMjQwNDE5MDcwOTE3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIyMTg5Yy03NWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1JgczWAyHiKCoaiDO679Sw6/nvWHqrQqxz4bR58D0U/ZYkskZ/AAECs6QJz AnJaNSqAdxkgZwd3/j6BC9fed0qX/WUOJaL7WTMKjwsNy+WWiBR53m1jAwCiZUid Y/w2lOGftjUH8clpS1+q8F6bGhFtQtvDIIZBmNttvgCUITRP3c0rAhdTpjljFPGV CB8I3giDETYhkXBEdf22PqgNHFJyUhlseMOxj25wqhX8RzecG98LIEAEOMJ2TA/G bTYyti7hXZwtih6duljfhDyi9+bqa+3PmY0K0FlmvDaWAAvpEB088OmyiIVbtO2E z/ptzStYQB7kKU6eOrrRzQKZCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB8llUe8 DXiWQ18KJlwlDbFBI73QMB8GA1UdIwQYMBaAFIkCeJADPV1iO9TkOYbogParE4SU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0U2Mi8yMUQ1Q0NERTM0 MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhXSTcxT1E1aHVpQTlxc1Ro SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRSjRrQU05WFdJNzFPUTVodWlBOXFzVGhKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNFNjIvMjFENUNDREUzNDFCMTFFRTlGODQ5MDI4QzRGOUFFMDIvMDQ3RTFFOUMz NDFDMTFFRTg0RjRENTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKJEYwDQYJKoZIhvcNAQELBQADggEBAJgxdx523N4YHnmr qchLj75rikQYQBfyU28SqXbeCnioeA23hjePWTdTBzrpkmmcI2JBr/Ur8JVdYS68 uhf3ACXTWym9MU8ouF7vx+ReHPHKKRgza646y3e5bulbBfGwEp4xDy7xEAOjge4V 7EDTyHm6DfSgHzLdDScpuuHx4TUBaU+c1pakjvKPQKVvD/QM/IDBz8iya2drpUwA rqsynZwpieF/NGySVtKQz7TnTqz2A9S3yKiYwENgKT/bJmo3go1f30O3/1BYMp/K 0PVMaswFYnxA1xY1ELcudQCPFTFn1doXkJYM1Q+FIPDSj7WnJAmrqIM+KH0wpdiR V4dv6g4= -----END CERTIFICATE-----Generated at Wed May 1 08:05:05 2024 by rpki-client on console-ams.rpki-client.org