$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/711F090E8AB411EA89D83541C4F9AE02.roa File: 711F090E8AB411EA89D83541C4F9AE02.roa (raw, json) Hash identifier: BRuFC7zf6VXlceKjS5xzZ4XHUrmuAxFBfkUSNuAiOAc= Subject key identifier: E4:0B:BE:C8:F0:C0:A9:2B:4E:11:6A:E0:82:AE:22:A1:68:9E:C6:06 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1B85 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/711F090E8AB411EA89D83541C4F9AE02.roa Signing time: Fri 20 Oct 2023 14:40:32 +0000 ROA not before: Fri 20 Oct 2023 14:40:32 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 17557 IP address blocks: 202.61.59.0/24 maxlen: 24 202.61.60.0/24 maxlen: 24 202.61.61.0/24 maxlen: 24 202.61.62.0/24 maxlen: 24 202.61.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7045 (0x1b85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Oct 20 14:40:32 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6532915f-6b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:56:cf:76:72:37:e1:80:64:72:ba:87:c7: 7b:d6:74:01:cd:71:5a:9f:c6:ed:13:c7:19:4e:17: d0:0c:ea:f8:f8:6e:d4:51:d4:6b:61:4a:af:9b:96: 19:33:3f:88:23:ca:c1:72:45:b4:22:63:b4:81:a4: 9d:33:43:77:54:5b:ef:d5:10:9d:de:49:ae:f1:21: 2a:37:64:d6:c0:f7:86:6e:ef:72:a4:d7:4c:47:21: d0:4d:6f:cc:a2:c8:09:db:91:26:4c:55:d2:47:84: 66:40:62:c3:07:12:57:cb:a4:7f:a9:a5:71:fc:79: 5f:e9:e3:ef:72:05:3b:a5:0c:26:d4:71:00:69:ae: 6d:30:b5:0c:f7:43:a9:e6:e6:3b:9e:d6:fe:ae:84: 80:b6:29:f1:c1:0a:95:ca:d4:57:9f:71:26:e5:05: 1c:59:7f:15:83:9d:80:6e:b2:1b:5a:cc:84:63:47: c2:31:f2:15:98:74:2e:a9:f6:97:49:04:ad:08:7a: 4a:aa:9c:07:b0:83:8d:fe:6d:cc:d1:a3:25:41:9f: 09:bc:7a:e9:d0:a7:a1:30:7a:0f:72:ad:fc:79:23: 8a:1e:30:d1:cb:de:54:e3:58:93:92:a8:a0:62:01: 69:18:e0:ac:5a:ff:0e:12:b1:9e:fc:c0:5d:7a:06: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0B:BE:C8:F0:C0:A9:2B:4E:11:6A:E0:82:AE:22:A1:68:9E:C6:06 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/711F090E8AB411EA89D83541C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.61.59.0-202.61.63.255 Signature Algorithm: sha256WithRSAEncryption 1e:89:13:67:15:8e:8b:b5:76:2c:fa:c2:1d:37:a1:2f:68:83: ec:6b:93:31:c8:37:ec:5e:18:b7:fe:41:92:e3:41:04:53:1e: 57:d2:70:19:bd:87:ed:1b:fd:67:aa:0d:2c:5d:32:1f:0a:c6: b7:e4:6f:a7:49:eb:f1:57:f6:b0:ad:eb:b5:c8:a4:7f:d4:4a: 6a:b4:8c:73:50:a2:7d:e2:ca:34:b2:28:6d:f1:4a:25:cf:5f: 90:12:87:d6:ef:a6:9e:44:6d:83:3f:9b:0e:62:ae:e5:ee:a6: 97:b5:f1:6f:60:71:33:c8:9a:12:2b:53:b0:20:8f:48:07:4e: da:37:f6:44:da:5c:1e:13:5e:81:49:21:18:2d:89:cc:08:2c: e9:6a:f7:89:3a:90:2b:53:f3:3f:55:8e:f2:25:cc:32:9b:cd: bd:3d:b5:1c:bf:f0:90:72:82:95:ad:98:4f:47:0b:2b:54:e7: 09:5e:a9:21:48:f7:5e:02:b8:0a:a6:61:5d:ae:ca:23:72:d7: 14:d5:22:e7:c2:51:c0:ff:48:de:83:89:6c:25:11:07:58:d9: c0:62:60:c7:f4:d2:3d:ad:9e:54:1d:07:ff:80:88:a6:e8:77: d9:d4:d3:6d:64:64:2a:e3:7c:83:45:95:41:d0:66:2e:c9:ad: 1d:f2:83:d2 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICG4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjMxMDIwMTQ0MDMyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyOTE1Zi02YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OtWz3ZyN+GAZHK6h8d71nQBzXFan8btE8cZThfQDOr4+G7UUdRrYUqvm5YZ Mz+II8rBckW0ImO0gaSdM0N3VFvv1RCd3kmu8SEqN2TWwPeGbu9ypNdMRyHQTW/M osgJ25EmTFXSR4RmQGLDBxJXy6R/qaVx/Hlf6ePvcgU7pQwm1HEAaa5tMLUM90Op 5uY7ntb+roSAtinxwQqVytRXn3Em5QUcWX8Vg52AbrIbWsyEY0fCMfIVmHQuqfaX SQStCHpKqpwHsION/m3M0aMlQZ8JvHrp0KehMHoPcq38eSOKHjDRy95U41iTkqig YgFpGOCsWv8OErGe/MBdegY1fwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFOQLvsjw wKkrThFq4IKuIqFonsYGMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvNzExRjA5MEU4 QUI0MTFFQTg5RDgzNTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAMo9OwMEBso9ADANBgkqhkiG9w0BAQsFAAOCAQEAHokT ZxWOi7V2LPrCHTehL2iD7GuTMcg37F4Yt/5BkuNBBFMeV9JwGb2H7Rv9Z6oNLF0y HwrGt+Rvp0nr8Vf2sK3rtcikf9RKarSMc1CifeLKNLIobfFKJc9fkBKH1u+mnkRt gz+bDmKu5e6ml7Xxb2BxM8iaEitTsCCPSAdO2jf2RNpcHhNegUkhGC2JzAgs6Wr3 iTqQK1PzP1WO8iXMMpvNvT21HL/wkHKCla2YT0cLK1TnCV6pIUj3XgK4CqZhXa7K I3LXFNUi58JRwP9I3oOJbCURB1jZwGJgx/TSPa2eVB0H/4CIpuh32dTTbWRkKuN8 g0WVQdBmLsmtHfKD0g== -----END CERTIFICATE-----Generated at Sun Jun 2 18:46:22 2024 by rpki-client on console-ams.rpki-client.org