$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CC1AF1417DC11EE959DE671C4F9AE02.roa File: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: NI6J5d+z3ArFhgiBPBPDcunHpUTiphCrYUnT5exc6r8= Subject key identifier: 67:8F:F8:9F:55:9E:2D:46:3F:A6:BB:7C:BD:80:3C:2C:ED:FD:F2:3D Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0AF1 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CC1AF1417DC11EE959DE671C4F9AE02.roa Signing time: Mon 04 Dec 2023 20:08:14 +0000 ROA not before: Mon 04 Dec 2023 20:08:14 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 65013 IP address blocks: 58.26.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Dec 4 20:08:14 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656e31ae-12ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:09:07:5a:95:c3:1a:4d:39:3c:69:2f:a8: e9:fb:69:97:8e:c1:45:f1:2e:49:78:8e:74:c2:32: a4:ce:c6:5e:89:53:ad:ea:0d:bd:f4:f9:2b:65:7d: 94:dc:5b:62:38:03:44:cc:54:66:ce:ee:48:cf:d3: 9e:f3:8e:20:45:42:87:45:7a:7e:05:de:f9:e6:2f: 06:74:e1:a8:c5:74:0b:57:79:80:78:83:6d:4d:fb: d7:db:72:cf:f6:5c:72:f7:48:2a:70:cf:b7:78:39: d6:0a:22:4a:25:cf:94:ba:54:2e:ce:e1:21:96:39: 43:32:8e:72:dd:54:95:1e:73:d4:05:b9:01:fc:ef: d5:a6:82:7e:c6:27:c9:b1:97:62:c8:10:9c:bd:05: ac:49:a1:23:5d:7a:43:e0:4f:25:5a:d2:2f:6e:2a: 93:73:2c:c7:ac:4e:5a:91:49:c5:41:81:d3:f5:9a: f5:ae:00:e4:97:6e:83:53:8e:84:1d:f1:59:0e:8a: 7f:ce:7d:10:b2:e3:a7:b3:0f:24:9e:b0:2a:20:72: 7d:f9:64:f6:32:25:ee:f5:a7:0c:37:46:e0:2d:c7: f0:46:c6:5b:de:11:cb:8c:fa:88:f2:ab:94:69:cb: 64:77:a2:65:ac:ed:d5:ca:ae:ce:36:75:db:be:5b: be:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8F:F8:9F:55:9E:2D:46:3F:A6:BB:7C:BD:80:3C:2C:ED:FD:F2:3D X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CC1AF1417DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.26.186.0/24 Signature Algorithm: sha256WithRSAEncryption 27:1a:5f:f3:68:2a:b0:a3:89:c2:51:d4:71:a2:e4:87:1e:7a: 5d:dd:db:9e:18:da:87:37:cf:f5:61:23:05:45:88:fe:39:03: 1a:fd:63:8a:d7:12:57:99:ad:fc:e4:d6:8b:d4:2f:d6:c5:17: 0f:40:30:68:c4:c5:66:6b:b2:e1:d0:67:f2:d3:ba:a1:19:7b: 5d:81:21:2f:62:f1:ad:08:56:83:62:c2:8a:ea:12:0e:21:1b: ec:f0:b1:87:86:2c:07:82:c7:51:72:77:b9:4c:94:72:f5:7a: f1:97:d5:96:4a:b2:0e:8f:f3:42:4b:2b:aa:50:f1:ed:8e:0f: 96:32:ab:3e:c7:1a:35:fc:d7:06:0f:ae:a5:63:c5:ad:65:8f: 9a:a7:c8:4a:d6:5d:b2:0c:7b:de:22:2e:2d:da:f6:8b:d6:56: 40:cb:60:ae:1e:9f:d4:cc:2c:1c:82:91:ec:1f:ec:3d:38:77: bf:d0:a2:78:40:24:b5:5c:b7:d1:8a:08:8d:3a:56:b4:6f:c8: 73:9b:8a:fd:9e:9e:3c:4b:6a:72:43:2e:73:a2:7a:3f:0b:c3: 92:86:fc:9c:32:c0:7d:74:33:da:76:ee:6d:27:5f:7c:a8:54: fa:8a:75:ea:d9:17:91:bb:66:00:b6:9c:74:9a:8d:35:ad:6f: 00:ce:98:86 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjMxMjA0MjAwODE0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlMzFhZS0xMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvc0JB1qVwxpNOTxpL6jp+2mXjsFF8S5JeI50wjKkzsZeiVOt6g299PkrZX2U 3FtiOANEzFRmzu5Iz9Oe844gRUKHRXp+Bd755i8GdOGoxXQLV3mAeINtTfvX23LP 9lxy90gqcM+3eDnWCiJKJc+UulQuzuEhljlDMo5y3VSVHnPUBbkB/O/VpoJ+xifJ sZdiyBCcvQWsSaEjXXpD4E8lWtIvbiqTcyzHrE5akUnFQYHT9Zr1rgDkl26DU46E HfFZDop/zn0QsuOnsw8knrAqIHJ9+WT2MiXu9acMN0bgLcfwRsZb3hHLjPqI8quU actkd6JlrO3Vyq7ONnXbvlu+4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGeP+J9V ni1GP6a7fL2APCzt/fI9MB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOENDMUFGMTQx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6GrowDQYJKoZIhvcNAQELBQADggEBACcaX/NoKrCjicJR 1HGi5Iceel3d254Y2oc3z/VhIwVFiP45Axr9Y4rXEleZrfzk1ovUL9bFFw9AMGjE xWZrsuHQZ/LTuqEZe12BIS9i8a0IVoNiworqEg4hG+zwsYeGLAeCx1Fyd7lMlHL1 evGX1ZZKsg6P80JLK6pQ8e2OD5Yyqz7HGjX81wYPrqVjxa1lj5qnyErWXbIMe94i Li3a9ovWVkDLYK4en9TMLByCkewf7D04d7/QonhAJLVct9GKCI06VrRvyHObiv2e njxLanJDLnOiej8Lw5KG/JwywH10M9p27m0nX3yoVPqKderZF5G7ZgC2nHSajTWt bwDOmIY= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:09 2024 by rpki-client on console-ams.rpki-client.org