$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1D0B40BAD85F11E991811862C4F9AE02.roa File: 1D0B40BAD85F11E991811862C4F9AE02.roa (raw, json) Hash identifier: /zFrBcrb04SMzzcnOSx2c0XMCvNvUR4XwwQkYOrDJjw= Subject key identifier: 68:3D:0D:26:D7:26:87:11:D9:2B:6F:C5:4B:EB:54:24:E1:BB:29:7D Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2829 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1D0B40BAD85F11E991811862C4F9AE02.roa Signing time: Thu 28 Dec 2023 16:03:12 +0000 ROA not before: Thu 28 Dec 2023 16:03:12 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 18256 IP address blocks: 58.64.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10281 (0x2829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 28 16:03:12 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658d9c40-8a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:4a:c0:80:27:e3:0a:5d:65:77:34:bd:2b: b7:76:cf:0a:34:18:8a:50:5a:d5:e4:83:a6:71:31: 65:d5:f4:e4:ce:3e:08:f7:0a:ca:15:55:14:49:3f: bd:81:c0:c8:5c:4e:4b:db:c9:13:7a:73:5c:aa:d7: 50:37:dd:e7:cb:92:8d:23:a3:d8:f0:a4:0f:fe:24: 9a:ac:7f:5c:98:27:ba:99:84:09:70:7b:45:00:df: 88:01:e6:90:94:53:79:18:c7:d4:58:86:17:1d:4b: 2f:22:ab:68:67:bf:6e:75:5b:04:09:7c:fb:53:20: a7:37:ad:4b:67:2f:cf:c2:20:a2:8b:b8:30:68:d7: 30:cd:fb:3c:ad:cf:d5:0a:57:01:80:c9:5c:57:e1: 99:39:9e:09:24:f7:31:1d:d5:0d:ce:ce:93:7c:ad: 33:32:13:f2:60:77:99:90:6b:84:b0:96:e6:27:bd: b1:33:df:27:16:10:a9:60:18:09:0d:8a:38:fa:10: b4:ac:2d:b4:bb:1d:5f:b4:62:1d:52:8f:f4:36:b6: 9a:68:b6:e8:22:5f:25:57:54:05:68:d1:ce:5a:d6: 94:ff:62:7f:d3:dc:04:39:08:92:44:f3:fb:07:5f: 4b:f7:ce:08:a2:ff:b2:3e:12:2a:30:fd:2e:b6:55: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3D:0D:26:D7:26:87:11:D9:2B:6F:C5:4B:EB:54:24:E1:BB:29:7D X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1D0B40BAD85F11E991811862C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.42.0/24 Signature Algorithm: sha256WithRSAEncryption 78:40:79:c0:0c:aa:e9:58:fe:2c:19:dc:14:ca:9d:85:d0:b8: 24:48:1f:e4:10:3a:5b:dc:50:4f:ed:a8:c7:09:81:6e:5f:85: 71:15:7d:3f:b7:6d:94:09:49:77:46:9c:86:e8:3c:83:c7:08: 8b:2d:47:e9:7a:06:aa:8b:30:69:1f:61:74:77:b7:de:75:3e: 58:ef:4e:a3:9c:04:ce:d0:a5:02:e3:57:e4:48:aa:ec:fb:cb: c5:24:85:34:29:31:b9:28:da:48:40:5e:57:17:63:a7:78:d2: 59:f0:ab:0d:f3:a0:54:1d:7e:df:37:0a:e4:23:03:9b:b2:5e: 60:a3:56:55:a9:61:bf:40:b2:2c:6b:47:f1:8b:00:83:fd:7d: 19:54:a0:f8:07:f5:9e:54:b5:86:94:de:21:37:7f:9c:57:36: 78:2b:60:b4:31:37:b2:42:27:15:89:53:37:0f:a4:31:27:31: b1:be:b1:16:17:30:4f:7d:9d:e0:ab:d9:ff:2f:fe:9b:92:f4: 54:ac:8e:28:3b:51:2e:dd:0c:9b:05:c9:41:22:6f:44:6c:3e: 3f:fd:62:df:8f:2a:46:b2:5e:ef:e7:7c:3e:e8:01:72:1a:6b: b3:dd:50:54:bc:f7:19:e0:58:02:36:54:ec:de:0d:9d:cf:83: 1d:01:79:92 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjMxMjI4MTYwMzEyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkOWM0MC04YTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0BKwIAn4wpdZXc0vSu3ds8KNBiKUFrV5IOmcTFl1fTkzj4I9wrKFVUUST+9 gcDIXE5L28kTenNcqtdQN93ny5KNI6PY8KQP/iSarH9cmCe6mYQJcHtFAN+IAeaQ lFN5GMfUWIYXHUsvIqtoZ79udVsECXz7UyCnN61LZy/PwiCii7gwaNcwzfs8rc/V ClcBgMlcV+GZOZ4JJPcxHdUNzs6TfK0zMhPyYHeZkGuEsJbmJ72xM98nFhCpYBgJ DYo4+hC0rC20ux1ftGIdUo/0NraaaLboIl8lV1QFaNHOWtaU/2J/09wEOQiSRPP7 B19L984Iov+yPhIqMP0utlW0YwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGg9DSbX JocR2StvxUvrVCThuyl9MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMUQwQjQwQkFE ODVGMTFFOTkxODExODYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6QCowDQYJKoZIhvcNAQELBQADggEBAHhAecAMqulY/iwZ 3BTKnYXQuCRIH+QQOlvcUE/tqMcJgW5fhXEVfT+3bZQJSXdGnIboPIPHCIstR+l6 BqqLMGkfYXR3t951PljvTqOcBM7QpQLjV+RIquz7y8UkhTQpMbko2khAXlcXY6d4 0lnwqw3zoFQdft83CuQjA5uyXmCjVlWpYb9AsixrR/GLAIP9fRlUoPgH9Z5UtYaU 3iE3f5xXNngrYLQxN7JCJxWJUzcPpDEnMbG+sRYXME99neCr2f8v/puS9FSsjig7 US7dDJsFyUEib0RsPj/9Yt+PKkayXu/nfD7oAXIaa7PdUFS89xngWAI2VOzeDZ3P gx0BeZI= -----END CERTIFICATE-----Generated at Fri May 31 17:44:21 2024 by rpki-client on console-fra.rpki-client.org