$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C6B95F6D85F11E991811862C4F9AE02.roa File: 1C6B95F6D85F11E991811862C4F9AE02.roa (raw, json) Hash identifier: HRmt7w8eNQ8TJ1/UBK3wU94rgwAtH9aamo0m+X/0jNA= Subject key identifier: 10:05:1B:88:F2:E1:94:A6:52:A4:D3:6A:BF:22:EF:D8:09:31:8D:F7 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2813 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C6B95F6D85F11E991811862C4F9AE02.roa Signing time: Thu 28 Dec 2023 16:02:52 +0000 ROA not before: Thu 28 Dec 2023 16:02:52 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 136040 IP address blocks: 58.64.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 16:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10259 (0x2813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 28 16:02:52 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658d9c2c-e84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:39:d9:fe:0c:ca:a2:0e:14:7a:f6:fe:de: 22:5c:d1:79:ac:62:d6:d9:95:05:1e:25:12:91:f9: 4a:ea:f2:24:47:d6:95:90:f1:9b:18:b7:ee:cb:11: b4:75:36:1e:29:32:d6:b8:19:14:e5:15:ad:63:98: fc:68:6e:9e:ab:90:25:cb:da:0f:f3:bb:09:b4:28: fd:e8:0a:86:7c:d1:4e:95:75:b6:c2:78:ab:be:33: 04:eb:a8:72:fd:ba:19:65:57:92:35:c9:55:99:c2: 7d:5c:03:24:e4:2e:19:5a:15:53:57:5d:1d:34:f4: dd:1e:33:e0:b6:ba:0e:50:ab:d2:1d:4d:92:d7:6d: c4:34:61:31:5f:51:c4:49:f5:7b:1d:e8:b6:ce:ef: 1a:45:ee:61:be:1b:da:be:d3:96:b1:47:7a:d2:84: 6f:b9:3c:94:e6:0b:8b:b6:fb:d9:ab:f6:f5:46:bc: b4:6c:f2:10:f7:12:97:fb:d3:2b:25:ec:a4:09:7b: 1b:7c:04:f3:1b:d0:f5:59:32:67:a8:1b:4b:a9:55: d6:19:06:a2:2c:a6:c6:f2:9b:b6:19:49:dd:b0:35: 06:ef:41:4d:2b:9c:4f:9b:f0:11:a8:b1:c6:8f:27: cd:a8:63:fa:eb:9b:d6:60:4e:b7:9f:00:7a:65:cf: 89:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:05:1B:88:F2:E1:94:A6:52:A4:D3:6A:BF:22:EF:D8:09:31:8D:F7 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C6B95F6D85F11E991811862C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.10.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:b1:93:1b:20:0d:6b:c0:62:fb:fc:33:b5:2f:f1:5e:33:53: 12:8a:9d:c1:ea:29:f8:9d:d8:7c:49:0e:3b:74:06:f9:04:a5: 0d:df:2f:f1:2d:83:6c:57:bb:c3:b2:04:29:0f:ef:de:79:8a: a8:52:d6:d7:92:ee:f8:ed:30:34:8d:f2:a2:25:99:e8:c8:f0: 18:47:8c:68:d7:d5:e8:ed:2d:9e:5c:ff:53:19:97:ea:50:3c: e4:8e:29:17:4e:94:a4:93:ea:90:c4:2f:30:39:1e:c9:74:ca: f1:6b:b6:9c:a9:8f:ef:95:55:d1:0d:3d:41:94:10:17:2e:4a: 57:ab:07:88:96:a9:48:7b:23:8a:a7:11:bd:af:4d:ea:2d:4a: 6a:8a:40:a6:ec:19:ba:57:c6:90:82:c9:a4:22:2f:c0:60:cd: 1b:66:5e:04:10:ae:6f:d3:85:68:1c:c3:6f:33:3d:1a:f5:25: 3c:12:2a:eb:95:65:2c:69:99:66:64:53:91:25:ce:fd:7e:f8: 1d:49:eb:a5:d7:32:b8:e0:4c:63:b3:00:4b:cf:86:9a:fe:47: de:f6:e6:db:45:4e:9a:c8:5e:7a:a5:9d:72:c9:6c:85:76:4b: 2a:4d:2f:fc:77:9a:30:89:26:26:31:fe:a0:10:ec:38:57:68: e3:35:7a:54 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjMxMjI4MTYwMjUyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkOWMyYy1lODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG852f4MyqIOFHr2/t4iXNF5rGLW2ZUFHiUSkflK6vIkR9aVkPGbGLfuyxG0 dTYeKTLWuBkU5RWtY5j8aG6eq5Aly9oP87sJtCj96AqGfNFOlXW2wnirvjME66hy /boZZVeSNclVmcJ9XAMk5C4ZWhVTV10dNPTdHjPgtroOUKvSHU2S123ENGExX1HE SfV7Hei2zu8aRe5hvhvavtOWsUd60oRvuTyU5guLtvvZq/b1Rry0bPIQ9xKX+9Mr JeykCXsbfATzG9D1WTJnqBtLqVXWGQaiLKbG8pu2GUndsDUG70FNK5xPm/ARqLHG jyfNqGP665vWYE63nwB6Zc+JAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBAFG4jy 4ZSmUqTTar8i79gJMY33MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMUM2Qjk1RjZE ODVGMTFFOTkxODExODYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6QAowDQYJKoZIhvcNAQELBQADggEBAGqxkxsgDWvAYvv8 M7Uv8V4zUxKKncHqKfid2HxJDjt0BvkEpQ3fL/Etg2xXu8OyBCkP7955iqhS1teS 7vjtMDSN8qIlmejI8BhHjGjX1ejtLZ5c/1MZl+pQPOSOKRdOlKST6pDELzA5Hsl0 yvFrtpypj++VVdENPUGUEBcuSlerB4iWqUh7I4qnEb2vTeotSmqKQKbsGbpXxpCC yaQiL8BgzRtmXgQQrm/ThWgcw28zPRr1JTwSKuuVZSxpmWZkU5Elzv1++B1J66XX MrjgTGOzAEvPhpr+R9725ttFTprIXnqlnXLJbIV2SypNL/x3mjCJJiYx/qAQ7DhX aOM1elQ= -----END CERTIFICATE-----Generated at Thu Jun 6 21:10:30 2024 by rpki-client on console-ams.rpki-client.org