$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa File: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (raw, json) Hash identifier: lO7bWRMdVQIujCi4o8pQPJbkrtgWtKnNWX6be5e8XsM= Subject key identifier: 60:F3:37:4C:B5:8E:6F:21:88:F6:41:77:85:A2:01:FD:53:08:95:64 Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 34E2 Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa Signing time: Fri 18 Apr 2025 15:31:13 +0000 ROA not before: Fri 18 Apr 2025 15:31:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23670 IP address blocks: 202.51.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13538 (0x34e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: Apr 18 15:31:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68027040-57c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:1b:50:d1:b8:9a:dd:8d:5e:4c:7b:93:4f: 87:e6:e5:e0:2c:e7:30:d8:55:56:de:b8:a1:f3:1d: 99:43:b1:c3:ce:58:54:47:bf:56:33:89:a0:c5:0a: 6a:12:6c:3e:4c:7f:74:96:cf:5b:8d:85:44:3f:93: 8d:41:0a:e0:a6:70:42:9d:be:ce:44:cf:e7:bc:89: 41:57:72:e0:d9:ab:ce:fd:d4:a5:66:2e:61:33:cd: b9:b1:8f:78:00:05:85:08:f6:14:ae:8f:7c:6b:c1: d0:81:7f:c7:c5:32:95:33:8a:a9:94:e2:6d:88:ce: 2d:ed:71:92:08:ee:ca:a5:52:88:1b:d0:4d:6b:44: c7:e2:a5:74:74:0e:8c:0d:3e:92:1c:fa:de:96:bd: e9:4c:c5:77:69:90:dd:be:53:70:4d:52:ac:ea:e5: 08:bc:7d:fc:c7:64:99:7b:91:07:fe:de:a4:4a:47: 60:56:12:80:2f:f1:ec:8b:4b:a6:be:11:07:87:62: c1:97:3f:4d:05:ae:dd:f9:f1:97:18:b1:c3:4e:2a: e4:20:76:e7:d9:20:ae:4d:7f:32:bc:63:65:4f:9b: 11:c2:b3:54:f8:83:1d:d6:f2:21:f4:e9:ab:5c:6c: f7:7d:d9:a5:1d:92:d9:a1:c7:b6:30:ce:28:f7:93: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F3:37:4C:B5:8E:6F:21:88:F6:41:77:85:A2:01:FD:53:08:95:64 X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.51.170.0/24 Signature Algorithm: sha256WithRSAEncryption 17:d3:ea:b4:32:55:27:41:da:bc:27:54:e3:44:b1:ee:63:69: 3e:90:e9:f2:f4:c8:cb:59:e3:3e:98:d6:3a:22:c6:40:42:64: 8a:58:eb:fb:54:f3:94:1b:a8:60:36:7e:c9:13:aa:53:b6:50: d8:a2:94:14:a7:24:65:d3:d8:cd:f2:f4:58:30:48:61:87:e1: 7f:12:3a:b5:23:b3:f3:ed:8f:7b:da:92:4e:6e:96:11:5f:42: 29:15:7f:ab:a0:6a:9f:34:8a:3b:97:5d:8e:52:87:95:d0:ce: e4:8f:12:9d:a5:8d:a3:a3:22:bd:b8:69:54:d4:b8:e8:74:9d: 20:78:90:3f:80:bc:03:de:b9:52:5b:be:21:d0:c7:92:27:ed: c4:a9:38:ee:0b:41:ad:2c:7d:d1:2b:53:54:92:f1:89:0f:02: f3:af:0f:06:0a:63:44:03:d8:15:c9:b1:49:0d:76:d0:2c:da: db:7e:4b:f8:e7:f8:1f:e1:12:0c:8a:59:7d:04:b1:23:ab:cb: 92:f7:26:33:6b:14:4b:23:10:71:bf:0a:80:52:27:ae:98:80: da:e3:42:9d:68:a3:b7:9a:0e:0f:82:d2:a2:22:8d:77:77:04: fe:2d:ee:a6:df:66:d1:30:b2:ea:7f:b9:4c:a7:da:5c:3f:5a: 8f:4c:09:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjUwNDE4MTUzMTEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAyNzA0MC01N2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPIbUNG4mt2NXkx7k0+H5uXgLOcw2FVW3rih8x2ZQ7HDzlhUR79WM4mgxQpq Emw+TH90ls9bjYVEP5ONQQrgpnBCnb7ORM/nvIlBV3Lg2avO/dSlZi5hM825sY94 AAWFCPYUro98a8HQgX/HxTKVM4qplOJtiM4t7XGSCO7KpVKIG9BNa0TH4qV0dA6M DT6SHPrelr3pTMV3aZDdvlNwTVKs6uUIvH38x2SZe5EH/t6kSkdgVhKAL/Hsi0um vhEHh2LBlz9NBa7d+fGXGLHDTirkIHbn2SCuTX8yvGNlT5sRwrNU+IMd1vIh9Omr XGz3fdmlHZLZoce2MM4o95NUZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGDzN0y1 jm8hiPZBd4WiAf1TCJVkMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZEQkEvMDc3ODUxQTQxRDlEMTFFMjk4N0NFRThCMDhCMDJDRDIvNTdDQTVEQjAy RTI4MTFFQkI3NkIxRTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKM6owDQYJKoZIhvcNAQELBQADggEBABfT6rQyVSdB2rwn VONEse5jaT6Q6fL0yMtZ4z6Y1joixkBCZIpY6/tU85QbqGA2fskTqlO2UNiilBSn JGXT2M3y9FgwSGGH4X8SOrUjs/Ptj3vakk5ulhFfQikVf6ugap80ijuXXY5Sh5XQ zuSPEp2ljaOjIr24aVTUuOh0nSB4kD+AvAPeuVJbviHQx5In7cSpOO4LQa0sfdEr U1SS8YkPAvOvDwYKY0QD2BXJsUkNdtAs2tt+S/jn+B/hEgyKWX0EsSOry5L3JjNr FEsjEHG/CoBSJ66YgNrjQp1oo7eaDg+C0qIijXd3BP4t7qbfZtEwsup/uUyn2lw/ Wo9MCQ0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:33 2025 by rpki-client