$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa File: B86FBE4A2E3611EB84E66039C4F9AE02.roa (raw, json) Hash identifier: R4wrT8zc1K+DV4H+c/LYTsZfoq1c/8r9FMd3l3K1fsM= Subject key identifier: B8:1D:62:91:A0:EA:91:1C:1C:57:DB:D6:49:BE:87:61:B3:82:8E:D2 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0DBA Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa Signing time: Thu 28 Dec 2023 18:56:43 +0000 ROA not before: Thu 28 Dec 2023 18:56:43 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 19905 IP address blocks: 210.57.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3514 (0xdba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Dec 28 18:56:43 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=658dc4eb-ddfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:57:e2:49:67:cc:71:f5:b1:ee:23:99:29: 53:07:3c:e4:7b:14:99:90:19:a8:d7:a2:24:fe:90: ed:1e:3a:ab:60:59:ca:36:b8:eb:78:96:53:2f:50: 6c:4b:7a:84:b4:fb:ba:f5:2e:05:12:16:21:c2:e7: 18:51:00:31:cb:fa:22:99:fb:16:d5:d8:49:6a:f4: c8:b1:98:9f:c5:c5:f8:30:27:e0:00:a5:d5:db:50: 91:46:47:60:89:12:07:65:27:c8:b0:78:ee:ed:72: 40:7e:c1:dc:22:d4:81:d0:14:58:f6:8f:b3:cd:fd: 23:0d:67:93:37:8d:df:ee:a5:04:c8:24:48:b3:53: 7a:fc:08:59:b3:c7:a1:4e:e0:48:51:22:f4:71:69: ff:be:c7:be:8d:8f:fc:a0:f3:62:11:32:24:58:5f: 51:f4:39:1d:b3:ea:51:ee:f5:a0:13:76:13:7e:2e: b8:e0:ce:2f:74:2a:24:d8:62:67:0f:67:8b:cd:b9: da:0f:d6:3b:1b:c1:38:93:d4:96:b6:e4:5a:4e:57: c1:58:cd:c3:9f:1a:d6:5a:02:a8:fe:ca:02:c7:e1: e2:f5:23:49:48:83:50:e9:6c:aa:9e:5e:b3:c1:59: dc:55:09:c5:46:42:4f:0c:08:ff:e8:36:9c:9b:af: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1D:62:91:A0:EA:91:1C:1C:57:DB:D6:49:BE:87:61:B3:82:8E:D2 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/B86FBE4A2E3611EB84E66039C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.57.42.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:7a:75:59:f7:30:00:6a:68:2c:47:40:6c:b0:0f:0b:f7:e1: 8a:bc:0a:a4:f4:5b:65:db:6a:31:e6:12:cb:22:97:91:04:b1: 75:90:19:77:0f:68:d7:16:e6:1b:59:d4:a5:15:ba:d2:f4:8c: 34:83:14:e9:51:86:3f:85:35:66:c1:34:df:3b:c6:00:7f:7d: 2f:00:81:5d:b0:63:b2:d3:83:51:f5:f0:6c:a1:08:66:f9:b6: 99:13:dd:b6:85:d1:79:70:c7:cd:cb:9e:a8:7b:46:0c:f4:0f: f1:ff:e8:88:88:97:b2:e7:6d:32:b9:aa:06:6e:81:9f:b2:29: ef:f4:12:c6:d2:6b:43:39:72:3d:00:32:ed:70:be:b0:62:b8: df:ff:59:50:2e:be:d5:98:51:d3:2f:c6:ca:8c:ab:2c:38:13: c0:b9:30:60:b2:43:3a:8b:32:2e:af:6f:08:58:9e:b3:75:09: 52:40:cc:52:ff:ff:72:c1:19:ee:7e:fc:11:e3:d1:f4:bf:50: 22:11:f8:64:65:ed:fa:a4:93:48:f9:ac:50:02:c7:2a:4c:9a: ea:fd:c9:07:0d:e5:e1:00:ea:e4:d2:27:93:0d:7e:29:da:60: dc:4e:e8:c9:55:ac:1a:d5:32:e1:8d:35:c6:c2:63:d5:a8:a1: 8e:9c:2e:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjMxMjI4MTg1NjQzWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkYzRlYi1kZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UdX4klnzHH1se4jmSlTBzzkexSZkBmo16Ik/pDtHjqrYFnKNrjreJZTL1Bs S3qEtPu69S4FEhYhwucYUQAxy/oimfsW1dhJavTIsZifxcX4MCfgAKXV21CRRkdg iRIHZSfIsHju7XJAfsHcItSB0BRY9o+zzf0jDWeTN43f7qUEyCRIs1N6/AhZs8eh TuBIUSL0cWn/vse+jY/8oPNiETIkWF9R9Dkds+pR7vWgE3YTfi644M4vdCok2GJn D2eLzbnaD9Y7G8E4k9SWtuRaTlfBWM3DnxrWWgKo/soCx+Hi9SNJSINQ6Wyqnl6z wVncVQnFRkJPDAj/6Dacm688UQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLgdYpGg 6pEcHFfb1km+h2Gzgo7SMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvQjg2RkJFNEEy RTM2MTFFQjg0RTY2MDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSOSowDQYJKoZIhvcNAQELBQADggEBABp6dVn3MABqaCxH QGywDwv34Yq8CqT0W2XbajHmEssil5EEsXWQGXcPaNcW5htZ1KUVutL0jDSDFOlR hj+FNWbBNN87xgB/fS8AgV2wY7LTg1H18GyhCGb5tpkT3baF0Xlwx83Lnqh7Rgz0 D/H/6IiIl7LnbTK5qgZugZ+yKe/0EsbSa0M5cj0AMu1wvrBiuN//WVAuvtWYUdMv xsqMqyw4E8C5MGCyQzqLMi6vbwhYnrN1CVJAzFL//3LBGe5+/BHj0fS/UCIR+GRl 7fqkk0j5rFACxypMmur9yQcN5eEA6uTSJ5MNfinaYNxO6MlVrBrVMuGNNcbCY9Wo oY6cLsA= -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:06 2024 by rpki-client on console-fra.rpki-client.org