$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B57F14B86A8D11EB82AF1144C4F9AE02.roa File: B57F14B86A8D11EB82AF1144C4F9AE02.roa (raw, json) Hash identifier: 1s2d1lIxE1Al4H+SZIxvtOih3sTW4LAs63WiK1XPzmk= Subject key identifier: D9:64:10:68:6D:D2:7A:54:57:BB:93:B3:81:6E:5E:31:9D:C2:EB:4A Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 0622 Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B57F14B86A8D11EB82AF1144C4F9AE02.roa Signing time: Fri 10 Nov 2023 23:31:39 +0000 ROA not before: Fri 10 Nov 2023 23:31:39 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 9381 IP address blocks: 58.64.128.0/17 maxlen: 24 59.188.0.0/16 maxlen: 24 103.84.32.0/22 maxlen: 24 113.10.128.0/17 maxlen: 24 123.1.128.0/17 maxlen: 24 192.188.82.0/23 maxlen: 24 202.4.162.0/23 maxlen: 24 203.98.128.0/18 maxlen: 24 203.176.192.0/18 maxlen: 24 210.209.64.0/18 maxlen: 24 210.245.128.0/17 maxlen: 24 2401:4a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Nov 10 23:31:39 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=654ebd5b-ee52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:cc:1a:a8:cd:00:29:cd:64:21:07:db:89: dd:ea:c9:25:2f:76:0d:e8:63:33:c4:71:86:eb:d3: 4e:5d:32:48:cf:5d:02:f9:64:ca:68:7b:2e:3e:54: d3:5d:12:8d:a9:52:1d:9f:83:fd:0d:19:3d:31:66: 2b:2a:db:b4:a3:32:63:d6:ba:eb:24:07:1f:c2:fe: 63:22:84:bd:fc:58:70:43:39:6d:e3:10:37:1c:bf: 72:a1:1c:0d:22:f3:83:51:04:8c:e3:df:2c:a6:18: df:95:7e:1b:db:ec:e0:03:ec:56:4b:9b:2d:46:10: af:6e:27:d4:7c:94:fd:57:10:1a:09:39:d6:35:70: fc:ce:20:57:a8:90:79:39:9d:19:40:62:17:fa:16: 80:45:b6:8e:e6:05:41:b1:e4:3e:f8:5a:41:5e:4a: 5b:f6:c9:f2:df:73:a7:0a:51:aa:95:5c:94:a6:48: 12:ca:0f:ec:da:58:26:4e:80:da:ca:4a:6f:d3:bb: c8:28:8f:e9:57:99:23:31:dd:1a:5a:90:0c:27:c3: 98:dc:22:b0:f8:e5:db:18:ba:42:57:46:e3:6a:7e: 38:fb:b7:c2:2b:db:86:dd:36:af:c5:9b:6a:c7:98: e6:39:3d:8c:3f:0a:c6:04:38:c4:d3:bb:dc:eb:2d: eb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:64:10:68:6D:D2:7A:54:57:BB:93:B3:81:6E:5E:31:9D:C2:EB:4A X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B57F14B86A8D11EB82AF1144C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.128.0/17 59.188.0.0/16 103.84.32.0/22 113.10.128.0/17 123.1.128.0/17 192.188.82.0/23 202.4.162.0/23 203.98.128.0/18 203.176.192.0/18 210.209.64.0/18 210.245.128.0/17 IPv6: 2401:4a00::/32 Signature Algorithm: sha256WithRSAEncryption 70:90:80:78:5f:80:26:82:75:ec:61:25:b2:ef:01:2a:77:fc: fc:24:dc:19:71:c5:4a:0e:9d:c3:5d:cb:bd:f0:16:a8:f6:63: b7:3d:64:f3:9c:f1:7f:68:da:32:87:15:a0:96:d0:2f:43:7f: e2:6e:50:fa:45:09:5e:6a:ed:e3:2d:01:c5:85:28:f0:fa:69: 1c:79:8d:c7:72:ff:46:2d:fe:0c:ad:40:34:60:2e:74:18:47: 76:f5:de:94:36:fb:7c:6d:e9:b4:46:c9:06:d3:42:d1:34:6e: ed:c7:40:3c:79:d4:d6:98:79:f3:0d:33:fd:43:c4:0c:5c:71: 1d:4f:f7:53:0d:cf:bf:4f:b5:84:51:d1:a5:9e:44:53:77:9e: ee:37:0c:cc:ac:c4:93:2a:62:05:63:33:63:07:a3:67:92:15: c5:46:d7:1d:60:fb:7b:ee:65:20:4c:db:75:c2:13:9b:82:df: b4:c7:cf:2c:ac:5a:64:61:63:25:5f:9f:7c:13:a1:74:67:b8: eb:0d:fd:e0:36:aa:ac:24:81:d3:8a:07:dd:b0:48:75:22:87: dc:ee:0a:8f:ce:d1:af:43:c6:df:4b:2a:86:05:67:40:61:18: f1:00:e6:8a:14:b2:2a:24:96:7a:7d:f5:bc:46:60:94:17:91: aa:b0:f7:db -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjMxMTEwMjMzMTM5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRlYmQ1Yi1lZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSrMGqjNACnNZCEH24nd6sklL3YN6GMzxHGG69NOXTJIz10C+WTKaHsuPlTT XRKNqVIdn4P9DRk9MWYrKtu0ozJj1rrrJAcfwv5jIoS9/FhwQzlt4xA3HL9yoRwN IvODUQSM498sphjflX4b2+zgA+xWS5stRhCvbifUfJT9VxAaCTnWNXD8ziBXqJB5 OZ0ZQGIX+haARbaO5gVBseQ++FpBXkpb9sny33OnClGqlVyUpkgSyg/s2lgmToDa ykpv07vIKI/pV5kjMd0aWpAMJ8OY3CKw+OXbGLpCV0bjan44+7fCK9uG3TavxZtq x5jmOT2MPwrGBDjE07vc6y3rbQIDAQABo4IC3zCCAtswHQYDVR0OBBYEFNlkEGht 0npUV7uTs4FuXjGdwutKMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGMUYvRjVDQjZFNkE1QzUzMTFFQkI2NjI3ODUzQzRGOUFFMDIvQjU3RjE0Qjg2 QThEMTFFQjgyQUYxMTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaQYIKwYBBQUHAQcBAf8E WjBYMEcEAgABMEEDBAc6QIADAwA7vAMEAmdUIAMEB3EKgAMEB3sBgAMEAcC8UgME AcoEogMEBstigAMEBsuwwAMEBtLRQAMEB9L1gDANBAIAAjAHAwUAJAFKADANBgkq hkiG9w0BAQsFAAOCAQEAcJCAeF+AJoJ17GElsu8BKnf8/CTcGXHFSg6dw13LvfAW qPZjtz1k85zxf2jaMocVoJbQL0N/4m5Q+kUJXmrt4y0BxYUo8PppHHmNx3L/Ri3+ DK1ANGAudBhHdvXelDb7fG3ptEbJBtNC0TRu7cdAPHnU1ph58w0z/UPEDFxxHU/3 Uw3Pv0+1hFHRpZ5EU3ee7jcMzKzEkypiBWMzYwejZ5IVxUbXHWD7e+5lIEzbdcIT m4LftMfPLKxaZGFjJV+ffBOhdGe46w394DaqrCSB04oH3bBIdSKH3O4Kj87Rr0PG 30sqhgVnQGEY8QDmihSyKiSWen31vEZglBeRqrD32w== -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:10 2024 by rpki-client on console-ams.rpki-client.org