$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/525850829D5111EC9F57A656C4F9AE02.roa File: 525850829D5111EC9F57A656C4F9AE02.roa (raw, json) Hash identifier: KLi+RuL0kWYsQutlxJmXaGEc3B/mauom1PQZyGoffTY= Subject key identifier: 1B:A9:B8:CE:5E:DB:E9:35:D8:02:11:68:BD:45:07:3E:60:B5:2F:2A Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 07E5 Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/525850829D5111EC9F57A656C4F9AE02.roa Signing time: Sat 14 Oct 2023 21:09:02 +0000 ROA not before: Sat 14 Oct 2023 21:09:02 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 9441 IP address blocks: 202.58.252.0/24 maxlen: 24 202.58.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Oct 14 21:09:02 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=652b036d-9024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:64:5f:16:b5:17:69:f6:22:6f:9e:e1:1b: 83:6d:cc:4a:bd:94:e9:b2:10:27:ff:a8:b4:20:1c: 27:14:92:a9:12:5a:4c:a7:b4:7a:43:a3:e0:f3:90: 9c:c7:ec:5e:46:a8:9a:f8:bb:96:f4:c9:90:6d:f2: d5:f9:27:6a:18:05:24:ba:0a:f2:f9:ae:c4:7e:a2: e7:76:8b:46:9e:e1:85:bc:ec:e9:7b:4d:24:50:ab: fc:ba:02:cb:47:c9:de:d0:e0:cc:c8:2c:77:5f:a8: 3e:4a:39:9d:b2:83:d4:ad:b0:bf:32:95:2e:b3:76: e0:e0:85:05:00:27:e5:8a:f8:de:0a:af:76:a7:ef: b5:32:37:88:bf:8e:99:3c:b5:c2:fb:19:c6:be:66: 37:fd:2b:09:42:b4:eb:76:79:d9:bd:ac:b5:a2:d2: 85:96:4b:4f:e0:32:57:bd:10:ba:1f:6a:a5:ab:d8: 04:9d:49:37:cb:98:5d:bd:7a:53:cf:20:ab:20:f2: c3:a7:50:48:aa:15:87:6d:e6:f6:e6:97:25:e2:0f: 27:2a:61:85:d4:d3:fe:0a:b2:ef:b6:72:1f:68:41: 83:d2:95:72:71:d1:88:e9:a6:7a:ef:1a:af:fa:69: 6a:bf:55:61:78:e2:f9:d1:52:97:69:f2:21:05:36: 46:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A9:B8:CE:5E:DB:E9:35:D8:02:11:68:BD:45:07:3E:60:B5:2F:2A X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/525850829D5111EC9F57A656C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.252.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:a2:12:03:91:0d:bf:95:b3:aa:9b:84:aa:83:cb:4d:c7:49: 86:5a:23:d2:7f:b7:8d:2f:c8:80:67:2a:4d:9d:af:ca:03:53: bc:47:72:c0:2d:0d:26:0d:9a:49:b2:75:f8:70:c3:69:56:49: 50:25:dc:68:6d:dd:38:66:28:fe:6e:34:fd:e2:c5:8e:0e:ed: 21:34:11:0f:c2:93:a7:44:c4:c9:7c:70:bc:41:49:71:bd:df: db:d4:e7:e5:62:d7:56:34:85:62:eb:97:84:77:90:fe:e0:1f: f6:06:f7:ab:34:77:60:e7:15:31:99:9c:78:3c:eb:bf:9c:9d: 1e:ff:23:9b:da:f5:58:17:08:5b:80:c2:10:48:f0:d7:c9:a8: df:b7:2b:76:7a:26:01:06:7e:4c:a7:eb:72:a4:bf:9f:a1:43: c0:0f:78:76:a3:a5:9a:65:1d:1e:a6:22:7d:50:52:25:10:65: b5:f2:3f:af:4d:a5:2b:db:e7:59:23:c6:76:2a:31:75:47:47: cf:3d:3f:c0:37:14:f5:a3:f1:7f:98:af:66:4d:4d:f5:c2:08: be:c2:ff:c7:73:88:1f:6e:03:d6:0c:8d:fc:a9:cd:60:94:b5: ac:ff:4d:0a:74:72:a9:37:08:82:a4:fb:67:bb:1f:40:f5:4b: 2f:14:df:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjMxMDE0MjEwOTAyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJiMDM2ZC05MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mJkXxa1F2n2Im+e4RuDbcxKvZTpshAn/6i0IBwnFJKpElpMp7R6Q6Pg85Cc x+xeRqia+LuW9MmQbfLV+SdqGAUkugry+a7EfqLndotGnuGFvOzpe00kUKv8ugLL R8ne0ODMyCx3X6g+SjmdsoPUrbC/MpUus3bg4IUFACflivjeCq92p++1MjeIv46Z PLXC+xnGvmY3/SsJQrTrdnnZvay1otKFlktP4DJXvRC6H2qlq9gEnUk3y5hdvXpT zyCrIPLDp1BIqhWHbeb25pcl4g8nKmGF1NP+CrLvtnIfaEGD0pVycdGI6aZ67xqv +mlqv1VheOL50VKXafIhBTZGjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBupuM5e 2+k12AIRaL1FBz5gtS8qMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQ2ODUvMkQxNTkxODJBOTczMTFFQTlBQUJFOTIzQzRGOUFFMDIvNTI1ODUwODI5 RDUxMTFFQzlGNTdBNjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKOvwwDQYJKoZIhvcNAQELBQADggEBADyiEgORDb+Vs6qb hKqDy03HSYZaI9J/t40vyIBnKk2dr8oDU7xHcsAtDSYNmkmydfhww2lWSVAl3Ght 3ThmKP5uNP3ixY4O7SE0EQ/Ck6dExMl8cLxBSXG939vU5+Vi11Y0hWLrl4R3kP7g H/YG96s0d2DnFTGZnHg867+cnR7/I5va9VgXCFuAwhBI8NfJqN+3K3Z6JgEGfkyn 63Kkv5+hQ8APeHajpZplHR6mIn1QUiUQZbXyP69NpSvb51kjxnYqMXVHR889P8A3 FPWj8X+Yr2ZNTfXCCL7C/8dziB9uA9YMjfypzWCUtaz/TQp0cqk3CIKk+2e7H0D1 Sy8U3yo= -----END CERTIFICATE-----Generated at Sun May 26 22:43:31 2024 by rpki-client on console-fra.rpki-client.org