$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/59C7E67C77CC11EAB764ED34C4F9AE02.roa File: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (raw, json) Hash identifier: 1Zg3uJs0B9SBEAEBnlt+lBVE6s62+7/QDv6bVIsWqaU= Subject key identifier: 51:BA:4C:AC:B6:77:16:99:54:C8:4F:A0:4A:A5:BC:DA:5C:A6:40:F6 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0DB6 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/59C7E67C77CC11EAB764ED34C4F9AE02.roa Signing time: Thu 28 Dec 2023 18:56:39 +0000 ROA not before: Thu 28 Dec 2023 18:56:39 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 14969 IP address blocks: 210.57.21.0/24 maxlen: 24 210.57.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Dec 28 18:56:39 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=658dc4e7-a736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:ab:89:f6:17:3e:42:93:90:a7:52:b6:47: e3:da:22:3d:46:13:bb:3d:f2:c7:93:96:ad:6a:69: 42:65:d6:69:0d:a9:c6:7d:4a:1a:0f:a1:47:15:db: 8e:ec:2c:55:cb:fd:c9:fe:3f:28:c7:b4:4d:d3:cf: a7:ee:d8:7a:18:71:2b:c2:a4:e5:99:9d:7d:fc:b5: cf:e9:73:f6:b4:4a:38:50:6a:67:25:a0:f4:d1:1a: 7d:13:a5:eb:9d:9e:04:bf:e4:36:8b:9b:99:e3:d0: f0:c8:68:ee:d4:49:27:35:f7:99:48:1c:ac:2b:7b: 63:21:4e:e3:17:e4:43:23:55:fc:d1:52:1a:a6:77: 75:d2:76:88:6e:b4:0b:d7:dd:83:ab:bd:01:6a:69: 27:e8:df:49:da:5e:0a:14:53:f7:d6:bd:0d:f6:aa: 58:01:e2:19:cc:49:ea:7d:7f:57:93:a1:73:a3:35: 57:34:39:de:0c:b2:6a:d6:29:3e:fb:a8:1b:bc:58: f1:b3:68:39:13:4b:65:36:7e:35:72:bf:d3:88:ec: 36:88:6c:d2:9d:bf:73:d3:02:05:f3:21:e0:e2:54: c8:0b:0a:b5:bc:02:92:27:f8:af:ce:f2:ed:f1:93: 0b:8d:a1:e1:db:23:6d:61:4f:0e:cd:02:8a:84:08: b8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BA:4C:AC:B6:77:16:99:54:C8:4F:A0:4A:A5:BC:DA:5C:A6:40:F6 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/59C7E67C77CC11EAB764ED34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.57.21.0/24 210.57.63.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:bd:e3:08:d7:05:79:b2:ce:db:ac:03:e1:2b:1a:0f:1b:d8: af:17:40:48:b9:dd:f5:b0:46:34:c1:d3:c6:9a:86:fc:e3:b8: c7:56:59:35:63:66:13:28:9b:dc:e6:87:8e:94:26:e2:ac:63: 17:b5:46:77:16:f3:18:0e:22:4b:e8:58:6a:cc:47:5d:37:50: 92:6f:c9:0d:43:85:fd:38:3e:ec:ab:16:5a:f6:32:20:a6:f7: 99:b2:85:62:98:b5:cc:76:a4:95:05:cf:53:e2:3d:29:f9:cb: 54:5a:d0:95:c1:d6:4c:4f:c5:f7:d1:4f:e3:b7:f7:b7:48:29: a5:d5:af:3f:f5:f8:02:6a:cd:b6:5d:46:f0:b7:cb:37:d2:e5: 3f:6c:30:d1:5f:16:40:b0:23:b2:7a:8a:18:19:92:ee:c2:3d: f5:66:11:e6:7d:b0:8c:a7:c6:8e:43:d8:11:89:bd:e2:a2:18: 14:5b:90:6b:c5:25:9f:c1:0d:70:da:72:25:29:f0:49:20:e2: da:2a:18:56:98:7a:4c:63:73:5e:aa:d9:3a:4a:6e:82:71:e4: 07:79:be:ed:b6:e2:1b:9b:32:5c:fa:24:a1:0e:c3:39:02:6f: 41:9f:c6:a7:2c:a5:42:92:4b:27:3d:a9:da:88:98:ec:ff:85: e1:82:5d:13 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjMxMjI4MTg1NjM5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkYzRlNy1hNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyyrifYXPkKTkKdStkfj2iI9RhO7PfLHk5atamlCZdZpDanGfUoaD6FHFduO 7CxVy/3J/j8ox7RN08+n7th6GHErwqTlmZ19/LXP6XP2tEo4UGpnJaD00Rp9E6Xr nZ4Ev+Q2i5uZ49DwyGju1EknNfeZSBysK3tjIU7jF+RDI1X80VIapnd10naIbrQL 192Dq70Bamkn6N9J2l4KFFP31r0N9qpYAeIZzEnqfX9Xk6FzozVXNDneDLJq1ik+ +6gbvFjxs2g5E0tlNn41cr/TiOw2iGzSnb9z0wIF8yHg4lTICwq1vAKSJ/ivzvLt 8ZMLjaHh2yNtYU8OzQKKhAi4UQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFG6TKy2 dxaZVMhPoEqlvNpcpkD2MB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvNTlDN0U2N0M3 N0NDMTFFQUI3NjRFRDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADSORUDBADSOT8wDQYJKoZIhvcNAQELBQADggEBAG+94wjX BXmyztusA+ErGg8b2K8XQEi53fWwRjTB08aahvzjuMdWWTVjZhMom9zmh46UJuKs Yxe1RncW8xgOIkvoWGrMR103UJJvyQ1Dhf04PuyrFlr2MiCm95myhWKYtcx2pJUF z1PiPSn5y1Ra0JXB1kxPxffRT+O397dIKaXVrz/1+AJqzbZdRvC3yzfS5T9sMNFf FkCwI7J6ihgZku7CPfVmEeZ9sIynxo5D2BGJveKiGBRbkGvFJZ/BDXDaciUp8Ekg 4toqGFaYekxjc16q2TpKboJx5Ad5vu224hubMlz6JKEOwzkCb0GfxqcspUKSSyc9 qdqImOz/heGCXRM= -----END CERTIFICATE-----Generated at Thu May 16 20:25:55 2024 by rpki-client on console-ams.rpki-client.org