$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa File: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (raw, json) Hash identifier: GEK6jcGIe//8LlsnmmOKojpjhgPgAdo098fH+Bv7usk= Subject key identifier: 58:C9:70:90:79:97:40:01:22:14:21:A4:54:B1:74:06:CE:BE:6B:41 Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 33E8 Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa Signing time: Sat 02 Mar 2024 15:21:02 +0000 ROA not before: Sat 02 Mar 2024 15:21:02 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 45642 IP address blocks: 58.82.178.0/24 maxlen: 24 218.100.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 15:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13288 (0x33e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Mar 2 15:21:02 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e343dd-ece7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:66:e8:70:58:3f:00:02:71:3c:a4:9f:ea: b0:26:45:06:e8:3b:2f:6f:f1:00:2c:80:7d:f3:da: e9:06:7d:7b:32:30:b4:67:64:a9:bf:a5:ea:39:91: f8:20:fa:94:33:4b:f1:43:25:ae:83:df:06:d0:2f: 9c:3c:ef:65:9c:bf:c2:28:d9:d1:4c:b8:4e:39:77: 80:35:e2:5f:36:49:34:05:a7:67:5c:ca:f4:c9:fb: ae:ef:e0:31:6f:75:eb:bb:b4:37:62:be:5d:ad:4c: c5:81:1e:98:f4:96:0f:0c:e3:71:b1:a7:d3:ce:c3: 28:d2:bf:a1:09:f3:64:53:4f:75:89:4c:23:8b:91: 67:6c:2c:8b:9d:d5:cc:68:3f:19:27:0e:4d:f1:ad: a0:d9:29:ac:4a:a7:5f:c7:fe:de:92:21:ca:15:17: 51:0d:d8:ac:25:ae:0a:12:c4:74:27:1b:c9:b6:c7: ab:de:e4:a8:5e:aa:81:44:96:9e:49:8a:b9:d1:da: ab:81:9a:97:d1:e3:a8:a4:e2:db:ef:ec:69:f5:48: b5:82:6f:96:1e:1e:a9:1e:84:ae:11:7b:9e:ce:97: 09:08:e1:19:fa:21:5a:84:9e:48:ab:bb:b3:b2:ee: 2f:bc:8d:39:62:dd:01:d5:09:cb:f8:82:28:88:27: 1b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C9:70:90:79:97:40:01:22:14:21:A4:54:B1:74:06:CE:BE:6B:41 X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.82.178.0/24 218.100.66.0/24 Signature Algorithm: sha256WithRSAEncryption 03:a7:fc:bc:5a:ad:b5:81:6d:27:20:ab:b1:aa:f7:34:48:0d: bd:06:68:23:80:20:33:2f:43:56:b5:9f:a8:3b:54:6a:91:b4: 5e:35:9a:c9:59:18:94:21:45:25:e2:fc:1f:dc:ad:4d:ec:77: 57:61:6e:56:47:58:cd:68:3e:11:56:b7:89:53:b1:37:aa:a0: 09:ae:6c:e0:ea:3f:f1:c1:8b:b5:b0:12:8a:26:df:7a:92:f6: ae:5b:29:1c:85:e3:54:00:48:ee:a1:bb:9b:60:65:68:08:4e: d5:66:4e:ce:01:78:0b:e2:68:d9:8d:83:b6:8e:52:9c:0c:a8: 9f:f8:19:02:97:ea:ab:18:4d:11:9d:3f:96:3b:d7:b9:8e:6f: 52:8d:de:8b:60:25:ad:22:b8:c6:d9:d0:35:5a:f8:cb:19:b4: fc:1a:36:e2:e8:fc:76:c2:36:65:2d:98:61:f8:c5:b9:30:66: 99:79:7c:a5:db:e0:b9:35:ab:7d:6c:29:6b:b8:e2:00:30:49: f3:ef:3b:b7:9a:31:8c:3c:f2:a6:5e:43:43:15:db:7b:e6:7f: 31:c6:1a:e5:10:de:28:cd:42:8e:0c:ee:d6:df:5e:42:7f:ca: 52:d4:d0:5f:b9:3d:94:a3:3e:28:b2:3f:77:b0:28:44:53:0b: 5c:aa:fd:ac -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICM+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjQwMzAyMTUyMTAyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzNDNkZC1lY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWFm6HBYPwACcTykn+qwJkUG6Dsvb/EALIB989rpBn17MjC0Z2Spv6XqOZH4 IPqUM0vxQyWug98G0C+cPO9lnL/CKNnRTLhOOXeANeJfNkk0BadnXMr0yfuu7+Ax b3Xru7Q3Yr5drUzFgR6Y9JYPDONxsafTzsMo0r+hCfNkU091iUwji5FnbCyLndXM aD8ZJw5N8a2g2SmsSqdfx/7ekiHKFRdRDdisJa4KEsR0JxvJtser3uSoXqqBRJae SYq50dqrgZqX0eOopOLb7+xp9Ui1gm+WHh6pHoSuEXuezpcJCOEZ+iFahJ5Iq7uz su4vvI05Yt0B1QnL+IIoiCcb6wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFjJcJB5 l0ABIhQhpFSxdAbOvmtBMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvNTg2QjVEOUVE OUY4MTFFOUE2ODc0RjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA6UrIDBADaZEIwDQYJKoZIhvcNAQELBQADggEBAAOn/Lxa rbWBbScgq7Gq9zRIDb0GaCOAIDMvQ1a1n6g7VGqRtF41mslZGJQhRSXi/B/crU3s d1dhblZHWM1oPhFWt4lTsTeqoAmubODqP/HBi7WwEoom33qS9q5bKRyF41QASO6h u5tgZWgITtVmTs4BeAviaNmNg7aOUpwMqJ/4GQKX6qsYTRGdP5Y717mOb1KN3otg Ja0iuMbZ0DVa+MsZtPwaNuLo/HbCNmUtmGH4xbkwZpl5fKXb4Lk1q31sKWu44gAw SfPvO7eaMYw88qZeQ0MV23vmfzHGGuUQ3ijNQo4M7tbfXkJ/ylLU0F+5PZSjPiiy P3ewKERTC1yq/aw= -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:14 2024 by rpki-client on console-fra.rpki-client.org