$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/5A4C001A77CC11EAB764ED34C4F9AE02.roa File: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (raw, json) Hash identifier: VjkFtnXBH2zgR/7GAmCLy2av4peQDcQ6/XsDR3llBbs= Subject key identifier: C9:4E:FC:1F:17:16:5F:08:DB:08:6E:88:03:73:57:0C:46:55:11:88 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0DBC Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/5A4C001A77CC11EAB764ED34C4F9AE02.roa Signing time: Thu 28 Dec 2023 18:56:45 +0000 ROA not before: Thu 28 Dec 2023 18:56:45 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 24456 IP address blocks: 210.57.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Dec 28 18:56:45 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=658dc4ec-dff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:52:23:c3:99:48:fc:ec:22:ec:26:56:11: 4f:a9:e2:05:5f:7d:52:ce:f6:56:07:90:85:5c:84: 63:8b:87:a9:30:1d:37:3c:1c:82:75:73:6d:f4:84: 85:5b:f6:8a:84:84:23:d6:8c:e0:a0:d1:25:d1:92: 58:16:c0:d4:78:cf:5a:38:fa:2e:03:16:dc:46:5d: 5a:e0:9b:2a:a9:fe:ca:21:b9:67:68:3e:7b:14:82: 8b:d4:ff:da:61:06:dc:b8:dd:a4:a4:36:aa:b4:ce: d3:da:6c:e7:77:da:bb:1c:3f:f6:27:bf:bc:84:9f: 35:49:48:e8:1a:9c:46:a0:1f:20:75:72:48:7a:84: f0:fc:33:85:bc:89:0d:b2:73:83:9f:43:45:34:78: 3c:90:71:e5:d0:7a:46:a8:84:6d:51:b2:45:da:1f: a4:4c:ab:8f:85:0a:f8:f4:6e:65:2f:24:38:f4:fe: ac:78:36:10:1e:93:ab:2c:29:64:b6:fa:40:a9:b0: 63:13:5d:c1:e4:eb:98:3d:37:f7:44:0e:1a:11:44: 6f:92:7a:ce:26:0e:ed:1d:41:36:6b:e6:30:a0:0f: 07:0b:d0:0e:92:02:f0:bf:77:b0:67:5f:ee:40:ec: a1:de:db:e9:44:93:1a:6a:2c:60:97:ee:33:13:ba: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:FC:1F:17:16:5F:08:DB:08:6E:88:03:73:57:0C:46:55:11:88 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/5A4C001A77CC11EAB764ED34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.57.42.0/24 Signature Algorithm: sha256WithRSAEncryption 71:f3:cc:33:a0:b4:31:79:af:d8:5f:08:14:b9:89:f8:aa:52: 50:54:30:07:89:d5:06:d7:f6:8f:28:74:ad:f1:7d:8a:db:41: 09:b3:ef:fc:24:78:38:22:86:be:89:8b:cf:1d:bc:43:a0:ce: d7:4a:6e:a5:10:94:6d:5b:4d:8e:4b:c8:f4:91:77:61:f6:7e: 55:d9:ea:8e:60:2a:36:21:1a:5d:24:d4:09:92:71:75:4e:75: 6a:3f:28:7b:55:18:eb:71:4e:87:c9:79:21:63:e7:c2:f0:50: d7:21:73:df:8d:db:be:33:37:ec:da:49:0c:f7:7b:e8:31:c8: ca:7b:ee:9b:d1:4b:44:1a:e7:3b:6c:84:62:53:62:12:f4:5d: 9e:3a:22:69:52:c2:41:66:f7:84:eb:6a:4d:ac:81:7c:ce:61: f1:f3:4d:c1:2a:64:a1:06:21:5a:d7:56:11:35:f3:b6:23:62: ed:a1:50:5f:9f:82:6e:e0:1c:37:25:36:46:a2:70:b8:7e:ed: 9b:49:8e:ad:6e:b0:81:e9:19:4c:06:a2:54:c1:92:d1:49:fe: fc:74:de:1d:1e:fd:0c:30:68:0e:66:f8:08:9a:80:48:e6:5a: bd:08:c4:85:94:4a:93:a9:7d:f6:13:05:68:9b:64:6d:65:6f: b0:f3:b9:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjMxMjI4MTg1NjQ1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkYzRlYy1kZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk5SI8OZSPzsIuwmVhFPqeIFX31SzvZWB5CFXIRji4epMB03PByCdXNt9ISF W/aKhIQj1ozgoNEl0ZJYFsDUeM9aOPouAxbcRl1a4Jsqqf7KIblnaD57FIKL1P/a YQbcuN2kpDaqtM7T2mznd9q7HD/2J7+8hJ81SUjoGpxGoB8gdXJIeoTw/DOFvIkN snODn0NFNHg8kHHl0HpGqIRtUbJF2h+kTKuPhQr49G5lLyQ49P6seDYQHpOrLClk tvpAqbBjE13B5OuYPTf3RA4aEURvknrOJg7tHUE2a+YwoA8HC9AOkgLwv3ewZ1/u QOyh3tvpRJMaaixgl+4zE7rI4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMlO/B8X Fl8I2whuiANzVwxGVRGIMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvNUE0QzAwMUE3 N0NDMTFFQUI3NjRFRDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSOSowDQYJKoZIhvcNAQELBQADggEBAHHzzDOgtDF5r9hf CBS5ifiqUlBUMAeJ1QbX9o8odK3xfYrbQQmz7/wkeDgihr6Ji88dvEOgztdKbqUQ lG1bTY5LyPSRd2H2flXZ6o5gKjYhGl0k1AmScXVOdWo/KHtVGOtxTofJeSFj58Lw UNchc9+N274zN+zaSQz3e+gxyMp77pvRS0Qa5ztshGJTYhL0XZ46ImlSwkFm94Tr ak2sgXzOYfHzTcEqZKEGIVrXVhE187YjYu2hUF+fgm7gHDclNkaicLh+7ZtJjq1u sIHpGUwGolTBktFJ/vx03h0e/QwwaA5m+AiagEjmWr0IxIWUSpOpffYTBWibZG1l b7Dzudk= -----END CERTIFICATE-----Generated at Thu May 16 19:50:00 2024 by rpki-client on console-fra.rpki-client.org