$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/E47A45626F9E11E9B98EF633C4F9AE02.roa File: E47A45626F9E11E9B98EF633C4F9AE02.roa (raw, json) Hash identifier: usLm6ZKXkqgP4LipBRC+8rgtpbIBBfKXyGejQeUCVA0= Subject key identifier: 1B:51:53:FD:9C:FD:9A:2A:46:B8:E1:AD:AA:F3:42:CF:FE:38:BF:AD Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0E12 Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/E47A45626F9E11E9B98EF633C4F9AE02.roa Signing time: Fri 20 Oct 2023 18:06:36 +0000 ROA not before: Fri 20 Oct 2023 18:06:36 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 134684 IP address blocks: 202.128.108.0/23 maxlen: 23 202.128.108.0/24 maxlen: 24 202.128.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3602 (0xe12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: Oct 20 18:06:36 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6532c1ac-ea29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:93:c5:f5:2a:49:d1:8c:71:59:a0:c7:b6:b1: d9:14:1a:48:c2:34:c3:29:8b:b0:0e:84:d1:44:15: 7c:2e:7e:9e:0f:7e:de:c3:8f:13:15:ce:5e:23:d9: 7c:3d:cf:96:28:5e:a0:dd:42:03:7f:06:65:6e:41: 1a:49:ae:02:f0:63:9a:5a:a3:d3:c5:72:1e:50:03: 4a:f6:f1:49:e7:f4:89:91:f1:60:39:07:f3:b5:ce: 19:eb:f0:9c:0d:bc:b6:7f:f0:35:b9:16:f4:99:cf: 18:f4:ab:26:15:59:fc:3c:ca:5f:fe:50:44:2f:7a: 25:04:2d:d4:f6:77:76:1e:b3:86:ce:e3:37:6d:c6: 18:07:da:e4:b7:ac:4d:38:6f:df:a6:e4:26:3a:c5: 11:55:35:e1:6d:6a:19:05:85:f9:23:10:00:b8:2a: b7:87:4d:e3:35:0e:f4:3b:bd:1e:5d:87:17:80:64: 31:ce:57:ce:28:54:c4:11:a4:b7:a9:c2:a8:20:cd: 0c:36:57:54:19:0a:08:b3:c2:14:1e:50:19:7b:2f: 5f:28:6c:d6:61:1f:0c:4f:e6:2a:77:f0:80:31:fa: fb:22:0e:7f:55:a5:43:89:d6:94:11:dd:32:5d:50: f2:77:36:f7:48:22:65:2d:49:a5:0a:b1:5d:8e:1f: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:51:53:FD:9C:FD:9A:2A:46:B8:E1:AD:AA:F3:42:CF:FE:38:BF:AD X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/E47A45626F9E11E9B98EF633C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.128.108.0/23 Signature Algorithm: sha256WithRSAEncryption a2:a5:3f:db:cb:24:e5:46:89:7d:d8:1f:8d:33:60:30:2e:1c: b8:2b:02:48:59:13:45:0e:06:34:c4:c5:bb:4f:69:1d:99:55: b5:f5:83:a1:45:66:3f:b9:0b:2a:32:8c:91:84:ba:be:dd:cf: 82:f4:12:eb:d5:45:fc:6c:d3:95:7f:23:93:7e:39:e8:0b:7a: 87:03:54:2d:92:73:92:b6:d7:2c:7d:d4:53:a1:70:fd:b1:1c: 90:bd:41:46:dc:7b:f7:0a:a5:c9:11:a2:13:7f:e9:2a:03:18: 99:5f:ae:fa:4b:88:e1:98:b3:c5:cf:d9:63:03:a7:21:c5:8b: 0b:98:33:6e:2b:61:14:02:1f:82:f1:fc:f9:7f:7e:b7:3b:23: 45:f9:f0:93:6b:97:10:48:00:36:20:6e:67:c5:a6:8b:06:0d: ae:a8:0e:76:2d:5a:7b:16:44:86:e0:94:60:87:7e:91:d6:d3: 46:3c:eb:a8:62:43:47:f6:96:27:6d:9d:7f:be:8c:52:ab:b7: 48:f8:7b:73:0d:09:f6:ad:e4:7e:a9:c0:e0:c5:b1:d5:1d:07: 4e:95:16:3e:74:3d:0e:cf:cb:65:6c:1d:6a:7a:4e:fc:88:65: f4:c6:83:50:45:21:1d:9d:70:c2:a3:dd:f3:27:a8:f3:54:ce: 28:5f:0e:03 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjMxMDIwMTgwNjM2WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyYzFhYy1lYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJPF9SpJ0YxxWaDHtrHZFBpIwjTDKYuwDoTRRBV8Ln6eD37ew48TFc5eI9l8 Pc+WKF6g3UIDfwZlbkEaSa4C8GOaWqPTxXIeUANK9vFJ5/SJkfFgOQfztc4Z6/Cc Dby2f/A1uRb0mc8Y9KsmFVn8PMpf/lBEL3olBC3U9nd2HrOGzuM3bcYYB9rkt6xN OG/fpuQmOsURVTXhbWoZBYX5IxAAuCq3h03jNQ70O70eXYcXgGQxzlfOKFTEEaS3 qcKoIM0MNldUGQoIs8IUHlAZey9fKGzWYR8MT+Yqd/CAMfr7Ig5/VaVDidaUEd0y XVDydzb3SCJlLUmlCrFdjh/t3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBtRU/2c /ZoqRrjhrarzQs/+OL+tMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVDREEvOEE4OEYxMDQ2RjlDMTFFOUE1MDc0QjJGQzRGOUFFMDIvRTQ3QTQ1NjI2 RjlFMTFFOUI5OEVGNjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKgGwwDQYJKoZIhvcNAQELBQADggEBAKKlP9vLJOVGiX3Y H40zYDAuHLgrAkhZE0UOBjTExbtPaR2ZVbX1g6FFZj+5CyoyjJGEur7dz4L0EuvV Rfxs05V/I5N+OegLeocDVC2Sc5K21yx91FOhcP2xHJC9QUbce/cKpckRohN/6SoD GJlfrvpLiOGYs8XP2WMDpyHFiwuYM24rYRQCH4Lx/Pl/frc7I0X58JNrlxBIADYg bmfFposGDa6oDnYtWnsWRIbglGCHfpHW00Y866hiQ0f2lidtnX++jFKrt0j4e3MN Cfat5H6pwODFsdUdB06VFj50PQ7Py2VsHWp6TvyIZfTGg1BFIR2dcMKj3fMnqPNU zihfDgM= -----END CERTIFICATE-----Generated at Wed Apr 24 21:18:24 2024 by rpki-client on console-ams.rpki-client.org