$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa File: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (raw, json) Hash identifier: oHHg7bVGlcuVHigapoywJfWF7AaNUZbxOeF71G2cdao= Subject key identifier: 98:DA:12:4B:96:53:B9:FD:6E:F0:3D:DB:5D:C7:23:42:12:11:14:FB Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 3426 Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa Signing time: Thu 02 May 2024 15:30:59 +0000 ROA not before: Thu 02 May 2024 15:30:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 23670 IP address blocks: 202.51.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 15:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13350 (0x3426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: May 2 15:30:59 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633b1b3-747b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:53:8c:c6:6f:2d:77:ed:b3:42:77:65:3a: 1f:cb:89:b0:63:57:cd:af:29:49:29:cf:2c:80:63: 90:b9:76:4a:9a:ae:97:71:eb:47:5f:ba:1c:73:5a: 73:e8:bd:9c:c2:11:01:6a:a7:e1:d1:6a:58:65:96: c3:e5:96:b2:43:16:92:b7:56:a6:cc:34:e4:4a:47: e8:84:73:e5:d0:d2:7d:f7:de:9a:e2:45:7b:28:84: d5:e2:7c:c4:94:3a:a4:fa:01:04:ea:38:00:1e:3c: 49:55:89:7a:c9:e1:09:a2:dc:02:f7:00:d1:9c:ee: 3c:a5:18:54:6d:cb:b1:b8:08:97:d2:3f:7f:0a:ff: bf:f2:ad:f9:4c:28:ab:69:4e:73:8e:45:05:45:d4: cf:7a:09:d8:17:5c:6f:ea:1a:6e:aa:d6:34:ce:32: 46:4b:d6:f9:da:31:f6:09:55:5a:c3:16:e8:fe:b0: 77:2f:48:c5:1c:f5:51:99:87:b5:52:5b:42:c7:d5: 1d:b7:30:50:f7:46:c2:e6:92:db:6b:be:ae:cf:98: 65:5c:2b:08:a2:24:db:94:37:2a:92:8f:4f:22:78: 70:05:e6:ee:0f:33:f7:19:44:03:af:ee:1d:bd:c6: fd:1e:11:e5:55:59:e0:ff:a2:37:6f:d8:4c:29:84: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DA:12:4B:96:53:B9:FD:6E:F0:3D:DB:5D:C7:23:42:12:11:14:FB X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.51.170.0/24 Signature Algorithm: sha256WithRSAEncryption 69:d1:c3:c5:f1:a1:de:18:30:62:41:1f:c6:1d:43:8c:d3:2c: 45:bc:86:11:42:ec:31:17:2f:05:91:a7:87:d3:be:7f:3b:bc: fa:8d:09:38:b0:a4:6e:43:2e:6f:47:4c:b3:41:00:1a:f9:78: 40:0d:0a:3e:a7:e7:88:b3:89:8a:1e:05:e3:ca:b3:0c:31:64: ae:93:db:76:80:7c:f7:ec:53:95:e5:fc:51:88:a5:c6:83:b9: bb:45:9e:c5:43:0e:2f:67:f5:00:05:ea:e7:ae:d4:6d:22:61: c7:f7:7b:e7:cc:2b:4a:b2:8f:0b:36:60:63:06:81:60:ce:46: cd:38:4e:2f:21:91:41:f2:4d:9b:e2:1f:46:fe:97:49:b7:df: a5:d3:24:d4:39:8c:d7:a7:b5:19:a2:27:12:fb:c5:3a:48:77: d8:9c:13:2f:4f:55:e6:13:a9:37:a9:81:6b:17:cc:65:3b:0f: d1:9a:5d:72:3d:67:3f:09:1a:7b:d8:8b:a8:f5:24:51:ff:17: ff:53:83:4b:1c:e0:14:82:85:20:38:62:15:da:2e:59:9e:47: 8b:95:92:b1:9a:2b:e6:bd:43:97:d3:37:0e:d7:70:27:92:df: 82:10:c5:52:f3:2a:2e:20:6c:e2:73:7e:a5:b8:91:fb:b9:4b: bc:4f:3c:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjQwNTAyMTUzMDU5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzYjFiMy03NDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2FTjMZvLXfts0J3ZTofy4mwY1fNrylJKc8sgGOQuXZKmq6XcetHX7occ1pz 6L2cwhEBaqfh0WpYZZbD5ZayQxaSt1amzDTkSkfohHPl0NJ9996a4kV7KITV4nzE lDqk+gEE6jgAHjxJVYl6yeEJotwC9wDRnO48pRhUbcuxuAiX0j9/Cv+/8q35TCir aU5zjkUFRdTPegnYF1xv6hpuqtY0zjJGS9b52jH2CVVawxbo/rB3L0jFHPVRmYe1 UltCx9UdtzBQ90bC5pLba76uz5hlXCsIoiTblDcqko9PInhwBebuDzP3GUQDr+4d vcb9HhHlVVng/6I3b9hMKYTpOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJjaEkuW U7n9bvA9213HI0ISERT7MB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZEQkEvMDc3ODUxQTQxRDlEMTFFMjk4N0NFRThCMDhCMDJDRDIvNTdDQTVEQjAy RTI4MTFFQkI3NkIxRTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKM6owDQYJKoZIhvcNAQELBQADggEBAGnRw8Xxod4YMGJB H8YdQ4zTLEW8hhFC7DEXLwWRp4fTvn87vPqNCTiwpG5DLm9HTLNBABr5eEANCj6n 54iziYoeBePKswwxZK6T23aAfPfsU5Xl/FGIpcaDubtFnsVDDi9n9QAF6ueu1G0i Ycf3e+fMK0qyjws2YGMGgWDORs04Ti8hkUHyTZviH0b+l0m336XTJNQ5jNentRmi JxL7xTpId9icEy9PVeYTqTepgWsXzGU7D9GaXXI9Zz8JGnvYi6j1JFH/F/9Tg0sc 4BSChSA4YhXaLlmeR4uVkrGaK+a9Q5fTNw7XcCeS34IQxVLzKi4gbOJzfqW4kfu5 S7xPPKA= -----END CERTIFICATE-----Generated at Sun May 26 19:10:22 2024 by rpki-client on console-ams.rpki-client.org