$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa File: A3C2B7D25DBC11EE80E75075C4F9AE02.roa (raw, json) Hash identifier: ykjggEgGtfriXUSxEsNiycrZxjEiOssTNeUSbxEJhFg= Subject key identifier: 4B:F4:6C:68:13:13:5A:13:86:1D:6E:FC:7E:68:16:86:03:96:9F:57 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 280A Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa Signing time: Thu 28 Dec 2023 16:02:43 +0000 ROA not before: Thu 28 Dec 2023 16:02:43 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 132821 IP address blocks: 58.64.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10250 (0x280a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 28 16:02:43 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658d9c23-bfd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:03:e2:0b:81:6f:eb:49:58:6e:b8:ed:4b: 2a:cb:e5:87:b0:66:7b:2b:a4:7e:ac:21:7e:e1:b0: 3b:3d:6e:5b:9b:9e:36:88:29:f9:fe:d7:30:78:84: d4:0d:b6:20:c5:1d:36:f9:9f:48:a5:67:ca:51:cb: 60:fe:b9:e9:4b:09:25:f5:81:13:96:64:e8:4f:ce: ce:ce:94:31:33:3d:a2:33:5f:52:61:36:ec:ac:6e: b1:77:74:21:60:13:e8:f4:37:af:34:be:dd:8d:9d: 3c:6e:23:f0:be:55:a2:2f:a8:47:76:36:9d:71:7a: 4c:98:0d:cc:60:8e:6b:53:4e:e1:60:fe:df:6f:82: 0b:6f:78:af:b2:c2:c6:5b:a1:6c:5f:94:0d:57:ea: c7:1a:71:6a:c0:e0:59:71:d2:2a:cb:ad:05:bb:2e: 65:bf:b9:43:8f:ee:3e:de:1c:81:57:7b:be:70:8c: fc:4c:8a:f9:cd:03:9e:8d:32:7b:d7:3e:fe:1a:2a: b5:49:c7:21:43:d4:f6:24:1e:cf:2c:ec:ec:80:18: 6f:a4:45:89:45:c6:19:6e:0e:23:be:94:f3:2d:7e: 42:c5:9c:14:e4:78:9a:f3:9d:eb:85:aa:df:77:35: 99:ab:dd:e3:0a:08:a5:bc:52:93:e6:61:f5:b7:3f: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F4:6C:68:13:13:5A:13:86:1D:6E:FC:7E:68:16:86:03:96:9F:57 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.36.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:8a:ff:2b:bf:a7:fd:af:46:57:a3:25:46:a9:eb:c3:72:7d: ba:d3:df:90:c3:cf:3b:5b:e5:9c:14:1e:d6:30:9d:e1:c8:fe: 37:48:e1:91:17:53:6f:d9:b6:47:34:69:58:ed:09:bf:0f:e9: 72:d6:7f:94:44:0d:6a:ed:6a:1a:3b:fd:61:d3:aa:bc:7f:b5: 34:cd:01:51:89:06:57:c6:da:ba:54:3e:93:99:73:61:84:70: c4:f2:19:8f:43:20:f8:93:9f:3d:a2:61:c0:5b:7f:31:d1:57: ab:d4:ac:02:a3:68:dc:72:46:d8:5a:c4:88:3e:d7:cb:e1:02: 64:22:72:28:59:94:f4:75:77:1f:e2:c3:8b:23:f6:ff:c1:20: 12:36:30:a2:66:0d:90:62:b9:3e:9d:de:0a:f5:47:e2:02:6a: 6c:d8:69:ac:cd:d6:15:a6:f1:dd:cf:bd:0a:92:8b:57:2d:0f: 13:60:03:0b:66:28:41:dc:3c:4a:e4:8f:d4:4b:1f:4f:ba:2b: c1:99:46:0e:61:7d:6b:e9:9f:7a:51:c1:14:2c:08:85:1c:ae: 5c:74:eb:b8:f2:ab:d5:7b:8e:86:43:0d:2b:19:88:72:26:68: e0:3d:23:b9:7b:74:2c:43:34:56:a8:ce:c9:74:e7:ab:22:07: cf:6f:95:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjMxMjI4MTYwMjQzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkOWMyMy1iZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzU0D4guBb+tJWG647Usqy+WHsGZ7K6R+rCF+4bA7PW5bm542iCn5/tcweITU DbYgxR02+Z9IpWfKUctg/rnpSwkl9YETlmToT87OzpQxMz2iM19SYTbsrG6xd3Qh YBPo9DevNL7djZ08biPwvlWiL6hHdjadcXpMmA3MYI5rU07hYP7fb4ILb3ivssLG W6FsX5QNV+rHGnFqwOBZcdIqy60Fuy5lv7lDj+4+3hyBV3u+cIz8TIr5zQOejTJ7 1z7+Giq1ScchQ9T2JB7PLOzsgBhvpEWJRcYZbg4jvpTzLX5CxZwU5Hia853rharf dzWZq93jCgilvFKT5mH1tz9k4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEv0bGgT E1oThh1u/H5oFoYDlp9XMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQTNDMkI3RDI1 REJDMTFFRTgwRTc1MDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6QCQwDQYJKoZIhvcNAQELBQADggEBAI+K/yu/p/2vRlej JUap68NyfbrT35DDzztb5ZwUHtYwneHI/jdI4ZEXU2/Ztkc0aVjtCb8P6XLWf5RE DWrtaho7/WHTqrx/tTTNAVGJBlfG2rpUPpOZc2GEcMTyGY9DIPiTnz2iYcBbfzHR V6vUrAKjaNxyRthaxIg+18vhAmQicihZlPR1dx/iw4sj9v/BIBI2MKJmDZBiuT6d 3gr1R+ICamzYaazN1hWm8d3PvQqSi1ctDxNgAwtmKEHcPErkj9RLH0+6K8GZRg5h fWvpn3pRwRQsCIUcrlx067jyq9V7joZDDSsZiHImaOA9I7l7dCxDNFaozsl056si B89vlc0= -----END CERTIFICATE-----Generated at Fri May 31 20:33:57 2024 by rpki-client on console-ams.rpki-client.org