$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CC57C044E84911EE9947A115C4F9AE02.roa File: CC57C044E84911EE9947A115C4F9AE02.roa (raw, json) Hash identifier: 8ep9fejIYcO1oyTxPGricb+ARf1ahFMYbBwrMkvOlA4= Subject key identifier: 79:5F:5B:9A:F3:62:CA:FB:A5:FB:52:76:86:5E:3F:79:5D:EC:29:53 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 0602 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CC57C044E84911EE9947A115C4F9AE02.roa Signing time: Fri 22 Mar 2024 12:43:35 +0000 ROA not before: Fri 22 Mar 2024 12:43:35 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 61112 IP address blocks: 36.255.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Mar 22 12:43:35 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65fd7cf7-0088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:d8:41:69:06:d5:b8:93:6b:3f:8c:80:1f: f1:7e:de:3d:e8:27:07:80:fb:4d:30:f2:4d:2d:a7: 39:eb:a0:d5:23:a8:24:a2:41:75:9c:f9:7c:d9:ef: b1:c7:ee:2a:4c:ef:dd:15:e3:2b:b9:27:dc:31:b5: 1b:ce:3c:84:63:ac:b0:ab:03:81:0d:b5:64:a4:b8: 09:6e:6f:f3:59:28:4a:4d:54:53:e6:76:9d:bb:2b: 9a:42:96:e9:b0:f6:36:ea:55:25:86:12:eb:ca:e4: a5:67:c7:9c:b2:80:44:4f:0d:fb:0c:85:63:11:23: 34:7c:94:fb:65:f3:9b:cd:96:6d:18:bc:ea:19:e2: 8f:d3:7b:f1:e4:16:65:f3:e4:41:20:bb:0b:4d:bb: bb:e2:5f:09:7a:df:9c:a5:9b:0e:f5:eb:8d:ba:ca: dd:be:dc:c9:51:5e:79:ec:64:39:7e:7d:47:f5:8d: 06:61:a4:7f:ab:45:4d:82:35:17:53:60:57:c4:8c: 25:5e:16:72:a0:71:01:3a:6b:32:dc:f2:27:f2:27: 73:5c:90:50:e8:57:2c:cc:2f:e7:9b:c9:28:ce:4d: f2:f2:8c:a2:95:db:62:7f:46:86:26:bd:29:44:dd: 8c:2c:a2:62:1d:50:5e:51:9d:60:65:6a:1c:5d:ce: 69:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5F:5B:9A:F3:62:CA:FB:A5:FB:52:76:86:5E:3F:79:5D:EC:29:53 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CC57C044E84911EE9947A115C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.199.0/24 Signature Algorithm: sha256WithRSAEncryption 75:87:a7:e6:41:ed:65:bf:9d:d1:54:ad:fb:ae:50:fb:c4:0f: d0:0d:a9:d7:16:0b:80:d3:b8:17:60:04:cd:f1:50:2e:1f:ca: a5:d7:e8:e1:e0:1b:7b:1c:f5:c9:8a:a2:86:22:87:06:ca:6e: f4:13:4e:53:3f:3c:a2:55:29:c2:98:ba:cb:15:2a:60:5a:c9: 43:7a:95:d0:2f:61:45:8f:ad:81:52:53:84:1b:45:4c:65:af: a6:45:ea:98:28:5e:89:64:7a:3c:17:cc:67:22:ca:99:ce:65: 17:d6:69:25:81:ac:5d:d5:6c:65:83:da:2a:06:43:10:18:9d: aa:d8:ca:8a:33:da:0b:39:10:2f:f0:fd:e1:20:ee:a9:f1:bb: 49:e8:18:98:3c:91:b6:ae:7d:6f:a6:ea:12:ea:5d:54:e6:ef: c8:39:ca:4c:2b:30:c2:7a:0b:55:22:8b:3b:6b:de:6e:23:97: 8e:4e:f5:a9:dd:83:5d:54:64:73:e6:8d:96:b3:be:8a:cb:a2: 51:69:62:9f:af:e6:9f:cb:88:b0:6e:19:f5:47:50:da:3a:e4: e7:6a:9b:ac:f5:09:cf:06:20:b1:09:d6:3d:f1:49:11:ad:b5: c6:dc:5c:91:b4:e7:74:e3:7a:65:15:9f:a0:ef:7c:ae:6e:a7: 50:e4:fd:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjQwMzIyMTI0MzM1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZkN2NmNy0wMDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvojYQWkG1biTaz+MgB/xft496CcHgPtNMPJNLac566DVI6gkokF1nPl82e+x x+4qTO/dFeMruSfcMbUbzjyEY6ywqwOBDbVkpLgJbm/zWShKTVRT5naduyuaQpbp sPY26lUlhhLryuSlZ8ecsoBETw37DIVjESM0fJT7ZfObzZZtGLzqGeKP03vx5BZl 8+RBILsLTbu74l8Jet+cpZsO9euNusrdvtzJUV557GQ5fn1H9Y0GYaR/q0VNgjUX U2BXxIwlXhZyoHEBOmsy3PIn8idzXJBQ6FcszC/nm8kozk3y8oyildtif0aGJr0p RN2MLKJiHVBeUZ1gZWocXc5pHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHlfW5rz Ysr7pftSdoZeP3ld7ClTMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvQ0M1N0MwNDRF ODQ5MTFFRTk5NDdBMTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAk/8cwDQYJKoZIhvcNAQELBQADggEBAHWHp+ZB7WW/ndFU rfuuUPvED9ANqdcWC4DTuBdgBM3xUC4fyqXX6OHgG3sc9cmKooYihwbKbvQTTlM/ PKJVKcKYussVKmBayUN6ldAvYUWPrYFSU4QbRUxlr6ZF6pgoXolkejwXzGciypnO ZRfWaSWBrF3VbGWD2ioGQxAYnarYyooz2gs5EC/w/eEg7qnxu0noGJg8kbaufW+m 6hLqXVTm78g5ykwrMMJ6C1Uiiztr3m4jl45O9andg11UZHPmjZazvorLolFpYp+v 5p/LiLBuGfVHUNo65Odqm6z1Cc8GILEJ1j3xSRGttcbcXJG053TjemUVn6DvfK5u p1Dk/UY= -----END CERTIFICATE-----Generated at Fri May 17 01:02:50 2024 by rpki-client on console-ams.rpki-client.org