$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/FDF0B5F2242611EF8A0A792BC4F9AE02.roa File: FDF0B5F2242611EF8A0A792BC4F9AE02.roa (raw, json) Hash identifier: ikClNHsuH4Xrv5p8gtxw89AwDBkJXYefG+sokuY3Wfk= Subject key identifier: DC:2D:0B:07:00:94:F9:8F:EF:98:60:10:9D:B8:EA:9F:3E:FA:17:EC Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 0385 Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/FDF0B5F2242611EF8A0A792BC4F9AE02.roa Signing time: Thu 06 Jun 2024 17:05:36 +0000 ROA not before: Thu 06 Jun 2024 17:05:36 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 136272 IP address blocks: 116.204.140.0/22 maxlen: 22 116.204.140.0/23 maxlen: 23 116.204.143.0/24 maxlen: 24 2400:c7c0::/32 maxlen: 32 2400:c7c0::/34 maxlen: 34 2400:c7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: Jun 6 17:05:36 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6661ec60-6d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:a7:b7:43:86:15:b8:54:9e:22:a3:ec:24: d7:65:3b:33:4f:96:8c:fe:34:85:cc:f3:09:69:74: 21:c1:a8:bc:03:a8:fd:46:90:e8:b8:23:c8:d2:f1: 80:fa:61:97:3a:e9:c1:14:01:d7:c5:16:85:87:5b: 5d:da:1e:1c:78:d7:ea:2d:27:9b:b9:60:d8:65:34: 43:ed:a4:34:03:1e:b2:3f:0b:53:b4:88:04:54:c1: c5:84:c3:82:b8:64:a4:a7:a6:46:9e:6b:1f:59:ba: ab:9b:7f:7d:e4:9c:89:30:45:a2:7d:28:00:e9:90: 84:57:5f:72:1d:5a:05:c7:d2:fe:bf:9a:c7:70:7a: 45:78:d6:4d:0f:ef:86:47:a8:9e:f3:b3:8f:c4:e1: 28:78:c7:0c:97:f5:09:1e:1f:cd:fa:9d:63:ba:6c: c1:1d:ba:6f:22:9f:b9:41:d4:02:5d:0d:1a:2c:62: 4c:05:0e:da:5a:7d:7a:8c:e3:2e:e4:dc:2e:4e:8b: a7:37:21:9a:d1:9b:73:be:d8:3d:5c:b7:14:7f:b8: af:2a:fb:dc:1a:48:e2:cf:63:34:b5:a2:38:dd:b2: 85:3f:a4:79:4b:df:de:a4:65:28:7b:4d:fd:2c:23: 1a:07:43:6f:9b:f6:93:81:c4:7d:a6:2b:41:8d:2d: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2D:0B:07:00:94:F9:8F:EF:98:60:10:9D:B8:EA:9F:3E:FA:17:EC X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/FDF0B5F2242611EF8A0A792BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.204.140.0/22 IPv6: 2400:c7c0::/32 Signature Algorithm: sha256WithRSAEncryption 8e:a1:89:c6:7a:da:00:d2:0c:4b:3a:b0:7b:1f:ce:02:4a:e5: 70:4b:c2:7d:93:d7:af:a0:0f:21:23:61:14:7d:0f:4c:19:9d: 69:a2:de:23:3a:ba:fa:59:65:27:7f:fa:7e:58:e3:7d:bf:f3: 41:26:60:c2:a7:f4:7b:ea:d6:f3:fc:42:12:c6:96:76:f9:ef: 20:d3:fe:24:ce:81:d7:20:65:ee:2a:d9:c5:0f:23:d0:81:75: 6f:51:61:ba:c2:ef:5a:6e:c7:78:12:3f:cb:20:be:05:a9:6a: b9:3b:94:a9:59:42:28:cd:77:30:74:67:08:52:5a:bc:e0:30: a7:dd:b0:af:cd:e3:0b:61:75:27:07:b4:51:29:8d:38:1e:94: 24:1a:76:ef:7d:3d:30:78:cc:39:5d:53:c1:9a:d7:29:76:56: d1:61:68:fe:04:de:11:dc:fb:56:c8:75:9b:a0:06:af:03:4a: a0:f0:f4:b1:a2:03:40:5c:6f:4b:b9:d0:ba:b9:9f:7d:71:f9: 4d:0a:3c:e0:18:a2:23:58:81:a6:70:27:51:d8:58:ba:ed:e6: c2:61:63:cd:d2:62:16:52:30:33:a7:10:25:0d:3b:da:77:94: e0:4b:8c:8e:6a:65:90:7d:c3:4b:0f:2e:32:fa:dd:33:dc:ca: 04:87:36:e4 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjQwNjA2MTcwNTM2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYxZWM2MC02ZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnint0OGFbhUniKj7CTXZTszT5aM/jSFzPMJaXQhwai8A6j9RpDouCPI0vGA +mGXOunBFAHXxRaFh1td2h4ceNfqLSebuWDYZTRD7aQ0Ax6yPwtTtIgEVMHFhMOC uGSkp6ZGnmsfWbqrm3995JyJMEWifSgA6ZCEV19yHVoFx9L+v5rHcHpFeNZND++G R6ie87OPxOEoeMcMl/UJHh/N+p1jumzBHbpvIp+5QdQCXQ0aLGJMBQ7aWn16jOMu 5NwuTounNyGa0Ztzvtg9XLcUf7ivKvvcGkjiz2M0taI43bKFP6R5S9/epGUoe039 LCMaB0Nvm/aTgcR9pitBjS1Y6QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNwtCwcA lPmP75hgEJ246p8++hfsMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM2MUIvNTFFRkZBMzA4MjY5MTFFQ0FEMkU5NTI0QzRGOUFFMDIvRkRGMEI1RjIy NDI2MTFFRjhBMEE3OTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJ0zIwwDQQCAAIwBwMFACQAx8AwDQYJKoZIhvcNAQELBQAD ggEBAI6hicZ62gDSDEs6sHsfzgJK5XBLwn2T16+gDyEjYRR9D0wZnWmi3iM6uvpZ ZSd/+n5Y432/80EmYMKn9Hvq1vP8QhLGlnb57yDT/iTOgdcgZe4q2cUPI9CBdW9R YbrC71pux3gSP8sgvgWpark7lKlZQijNdzB0ZwhSWrzgMKfdsK/N4wthdScHtFEp jTgelCQadu99PTB4zDldU8Ga1yl2VtFhaP4E3hHc+1bIdZugBq8DSqDw9LGiA0Bc b0u50Lq5n31x+U0KPOAYoiNYgaZwJ1HYWLrt5sJhY83SYhZSMDOnECUNO9p3lOBL jI5qZZB9w0sPLjL63TPcygSHNuQ= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org