$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/3EABAF20D8E311EC8F274181C4F9AE02.roa File: 3EABAF20D8E311EC8F274181C4F9AE02.roa (raw, json) Hash identifier: H4uvOPnOQR7kaTV0mxINyaPGqrlb9ZsfEdxZE+ZhLPI= Subject key identifier: DF:94:BC:66:47:DE:7D:A7:4A:44:EF:63:00:CC:F4:7C:77:CC:09:B8 Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Certificate serial: 022A Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/3EABAF20D8E311EC8F274181C4F9AE02.roa Signing time: Sun 31 Mar 2024 03:55:50 +0000 ROA not before: Sun 31 Mar 2024 03:55:50 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 58626 IP address blocks: 202.5.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Validity Not Before: Mar 31 03:55:50 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6608dec6-5876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:7a:bd:0c:fe:c4:ed:c7:74:06:7e:f9:a9: a5:4a:47:57:62:85:54:25:0b:f9:fa:2f:4d:4f:bc: e7:1f:da:d5:88:dd:ac:45:c8:7e:d7:64:43:7d:0e: be:83:05:77:fa:a1:fc:7a:21:4e:34:c8:05:c4:69: b1:dd:26:55:f9:57:19:f2:25:f1:25:23:2d:47:89: 8d:31:83:59:67:24:3f:a9:b2:e2:2b:7e:94:da:32: f6:86:db:cb:75:c2:ff:95:c4:2c:4c:c8:82:86:c5: aa:3a:36:57:74:4c:dc:1d:90:ce:87:d6:29:1f:df: f1:16:a3:23:11:91:f2:63:d5:4e:e8:ee:9b:72:1d: 15:0f:85:08:53:54:ac:d6:3e:c1:d6:c5:74:96:0e: d8:48:a9:48:33:17:36:c3:d3:2b:49:ed:63:28:5d: ba:af:35:bd:67:8e:52:a7:83:9d:8a:ce:66:e8:6b: b4:4d:13:7a:37:3d:22:c6:da:81:51:99:6f:bf:72: f2:4c:bc:5f:f4:ec:90:59:69:05:23:df:9e:7d:1e: 06:f8:ac:66:2c:80:01:05:47:a2:aa:6e:1b:18:12: 1c:e6:4f:e1:03:a2:36:c3:d4:5d:48:2f:91:cb:dd: 20:8c:32:72:b2:97:97:99:32:80:87:21:5c:90:d9: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:94:BC:66:47:DE:7D:A7:4A:44:EF:63:00:CC:F4:7C:77:CC:09:B8 X509v3 Authority Key Identifier: keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/3EABAF20D8E311EC8F274181C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.5.133.0/24 Signature Algorithm: sha256WithRSAEncryption 85:6d:5e:f0:a8:9e:57:96:6a:d1:9c:a9:da:d6:12:b3:a9:cc: df:7a:59:f0:4f:b5:18:15:49:26:57:ba:46:4b:c7:2f:43:ce: fc:da:90:5b:7b:bc:05:fe:39:91:d6:0d:38:2e:05:64:6a:7c: c4:d6:7b:77:f1:3a:af:ab:b0:35:4d:2c:a3:88:4a:ee:79:18: 2f:84:f3:e8:b4:29:e0:fe:e2:70:83:7d:c9:34:99:81:9f:c4: f9:5a:e3:71:b3:78:f9:30:67:6d:8b:7b:0e:ba:ff:05:c9:5a: 62:65:3a:15:33:bb:a0:54:7e:ee:53:0f:5a:b8:47:81:f2:5b: 22:65:d6:b2:18:ae:ab:e9:bd:7f:da:49:df:2b:3c:46:90:b6: ee:64:f6:ec:db:ec:97:5a:c7:74:98:f4:03:bb:94:38:1f:d1: fd:8c:39:15:44:f1:3a:a5:a2:86:f3:42:03:7d:a4:32:b5:df: 7d:77:48:72:24:de:5f:0f:98:3a:b9:53:9f:2d:96:94:e8:0f: ff:2a:b6:80:97:1d:35:fd:16:da:8c:2a:e5:a9:9c:e5:5c:da: 65:c7:39:9e:80:a6:3b:44:6b:db:f5:41:71:7a:80:2a:4b:5d: e4:30:f9:07:32:c8:85:bb:4b:4c:3a:66:5b:95:e7:e5:d0:78: 45:64:09:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx MjA5RDNGM0EwHhcNMjQwMzMxMDM1NTUwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjA4ZGVjNi01ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmB6vQz+xO3HdAZ++amlSkdXYoVUJQv5+i9NT7znH9rViN2sRch+12RDfQ6+ gwV3+qH8eiFONMgFxGmx3SZV+VcZ8iXxJSMtR4mNMYNZZyQ/qbLiK36U2jL2htvL dcL/lcQsTMiChsWqOjZXdEzcHZDOh9YpH9/xFqMjEZHyY9VO6O6bch0VD4UIU1Ss 1j7B1sV0lg7YSKlIMxc2w9MrSe1jKF26rzW9Z45Sp4Odis5m6Gu0TRN6Nz0ixtqB UZlvv3LyTLxf9OyQWWkFI9+efR4G+KxmLIABBUeiqm4bGBIc5k/hA6I2w9RdSC+R y90gjDJyspeXmTKAhyFckNn7UwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN+UvGZH 3n2nSkTvYwDM9Hx3zAm4MB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4 REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YwNTEvNUFBRDlEN0VEOEREMTFFQ0E1REQwQzUwQzRGOUFFMDIvM0VBQkFGMjBE OEUzMTFFQzhGMjc0MTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKBYUwDQYJKoZIhvcNAQELBQADggEBAIVtXvConleWatGc qdrWErOpzN96WfBPtRgVSSZXukZLxy9DzvzakFt7vAX+OZHWDTguBWRqfMTWe3fx Oq+rsDVNLKOISu55GC+E8+i0KeD+4nCDfck0mYGfxPla43GzePkwZ22Lew66/wXJ WmJlOhUzu6BUfu5TD1q4R4HyWyJl1rIYrqvpvX/aSd8rPEaQtu5k9uzb7Jdax3SY 9AO7lDgf0f2MORVE8TqloobzQgN9pDK13313SHIk3l8PmDq5U58tlpToD/8qtoCX HTX9FtqMKuWpnOVc2mXHOZ6ApjtEa9v1QXF6gCpLXeQw+QcyyIW7S0w6ZluV5+XQ eEVkCZ4= -----END CERTIFICATE-----Generated at Mon May 27 04:53:39 2024 by rpki-client on console-fra.rpki-client.org