$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa File: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (raw, json) Hash identifier: th+RZ3xcn9sdtuIwJJBmfy4OKtZmVHO5KksRG1wLXTE= Subject key identifier: F9:BD:32:D8:59:E0:63:8D:E0:4B:28:27:B2:01:8D:0C:B2:D3:D6:B2 Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Certificate serial: 21 Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa Signing time: Wed 03 Apr 2024 02:58:35 +0000 ROA not before: Wed 03 Apr 2024 02:58:35 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 150746 IP address blocks: 202.9.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Validity Not Before: Apr 3 02:58:35 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660cc5db-9e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:50:24:57:fe:a8:d8:67:d7:96:ca:d9:79: 56:35:0b:b6:7e:9f:85:3c:c2:ea:8e:b2:c9:b8:73: 3d:9c:ad:97:65:83:20:b8:d1:50:39:0d:19:2d:fb: 9d:71:58:5d:bb:0e:bb:8f:43:27:f8:ac:e7:b0:b8: 22:f9:2f:12:8a:45:16:8d:fe:dd:f9:2b:1c:a0:72: 37:ed:8a:f0:2f:7c:6b:46:a0:8f:77:81:9b:6a:ae: 58:2e:1f:9e:bd:30:5d:0c:fe:69:74:fc:c6:29:f0: 81:97:04:0a:95:3e:44:9f:12:8e:d1:0c:ca:d8:08: cd:76:9c:7c:3b:6f:bd:38:55:28:27:6e:3f:19:0d: 49:4f:01:0a:a1:7b:50:6f:41:51:05:36:64:d3:ed: 1b:8a:6c:71:8a:f4:22:94:43:20:61:31:df:f1:75: 79:02:ff:74:b1:50:91:27:cf:ed:af:2e:55:c4:1d: a3:c0:f1:a4:5d:bf:b0:83:9b:92:40:2d:03:f0:58: c8:e3:4a:cc:b4:c3:6c:68:0e:b0:22:50:00:46:e3: 1f:fd:1a:b9:cf:86:2d:c8:a0:b4:ab:d4:9f:81:86: 7a:fe:38:7d:e9:1d:68:8e:36:ee:59:c9:aa:39:d0: 27:eb:68:94:bd:c2:8e:1d:c3:d0:1d:59:52:73:1e: e2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:32:D8:59:E0:63:8D:E0:4B:28:27:B2:01:8D:0C:B2:D3:D6:B2 X509v3 Authority Key Identifier: keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.9.83.0/24 Signature Algorithm: sha256WithRSAEncryption 60:b5:49:26:cb:7a:05:b3:04:03:ef:98:1e:7d:ea:61:ba:76: 5d:52:9b:8c:ea:64:31:7c:e9:b2:c7:1f:3a:70:1c:94:07:1f: ca:c0:15:16:03:9d:7e:82:d2:c3:aa:ad:00:1a:fb:a9:a8:f6: e7:f2:4a:26:52:12:18:5d:3c:e4:ba:ab:99:e1:3f:c2:fd:eb: a4:74:1a:ed:39:50:18:c2:27:7c:e0:a0:52:46:8e:fb:9f:ff: dc:01:aa:39:cf:89:20:e8:cb:61:5e:0d:9f:41:17:7b:99:82: 31:7a:2d:bd:b9:24:76:98:b6:73:6d:83:12:c7:97:75:a2:01: 21:be:f1:db:c1:f5:0f:2b:88:b8:da:ff:82:87:75:8c:5c:c8: aa:3f:8f:34:62:98:33:e2:ec:29:d2:fc:82:4d:55:44:df:32: a6:e4:3d:0e:29:e6:2b:95:96:88:4d:7c:97:9b:1f:e5:6a:a7: 2a:3c:7e:fe:81:9b:93:0c:d1:1f:e7:70:d3:ff:d5:cd:05:e2: 58:d0:bc:20:b5:49:21:c0:36:b2:f5:7c:7d:69:ed:5d:43:d9: 7e:d4:d0:4b:70:74:1f:db:50:74:4f:3f:c5:00:05:88:aa:29: a8:c4:8b:9b:85:a7:df:eb:fc:6a:2a:58:65:d3:e6:7c:a2:fc: d4:8b:4e:a3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlBMjExMC8GA1UEBRMoNkM4MDMwNTJCRjk2QzJBQjRBQkFBOUVEMjZBM0E5QjQ2 Mzk2MDVBMzAeFw0yNDA0MDMwMjU4MzVaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGNjNWRiLTllNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdcVAkV/6o2GfXlsrZeVY1C7Z+n4U8wuqOssm4cz2crZdlgyC40VA5DRkt+51x WF27DruPQyf4rOewuCL5LxKKRRaN/t35KxygcjftivAvfGtGoI93gZtqrlguH569 MF0M/ml0/MYp8IGXBAqVPkSfEo7RDMrYCM12nHw7b704VSgnbj8ZDUlPAQqhe1Bv QVEFNmTT7RuKbHGK9CKUQyBhMd/xdXkC/3SxUJEnz+2vLlXEHaPA8aRdv7CDm5JA LQPwWMjjSsy0w2xoDrAiUABG4x/9GrnPhi3IoLSr1J+Bhnr+OH3pHWiONu5Zyao5 0CfraJS9wo4dw9AdWVJzHuJRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+b0y2Fng Y43gSygnsgGNDLLT1rIwHwYDVR0jBBgwFoAUbIAwUr+WwqtKuqntJqOptGOWBaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OUEyL0JDQkFFMENFQzU0 MTExRUVBQkMyQzM4NUM0RjlBRTAyL2JJQXdVci1Xd3F0S3VxbnRKcU9wdEdPV0Jh TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYklBd1VyLVd3cXRLdXFudEpxT3B0R09XQmFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CQ0JBRTBDRUM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi8wRkJGNTdEMkYx NjYxMUVFQjc1QkU2NDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMoJUzANBgkqhkiG9w0BAQsFAAOCAQEAYLVJJst6BbMEA++Y Hn3qYbp2XVKbjOpkMXzpsscfOnAclAcfysAVFgOdfoLSw6qtABr7qaj25/JKJlIS GF085LqrmeE/wv3rpHQa7TlQGMInfOCgUkaO+5//3AGqOc+JIOjLYV4Nn0EXe5mC MXotvbkkdpi2c22DEseXdaIBIb7x28H1DyuIuNr/god1jFzIqj+PNGKYM+LsKdL8 gk1VRN8ypuQ9DinmK5WWiE18l5sf5WqnKjx+/oGbkwzRH+dw0//VzQXiWNC8ILVJ IcA2svV8fWntXUPZftTQS3B0H9tQdE8/xQAFiKopqMSLm4Wn3+v8aipYZdPmfKL8 1ItOow== -----END CERTIFICATE-----Generated at Fri May 31 10:02:47 2024 by rpki-client on console-ams.rpki-client.org