$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/A1258398391F11EBAD1E3A2CC4F9AE02.roa File: A1258398391F11EBAD1E3A2CC4F9AE02.roa (raw, json) Hash identifier: Da5NIAHcmdMgp5JxJkO45xluMyV/GqRZnPfn2LZAkWg= Subject key identifier: D2:A0:85:6C:F2:22:2C:A5:B8:00:EC:6F:39:22:FF:8A:B8:E9:CD:63 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 05D9 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/A1258398391F11EBAD1E3A2CC4F9AE02.roa Signing time: Sat 22 Apr 2023 07:00:47 +0000 ROA not before: Sat 22 Apr 2023 07:00:47 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 17819 IP address blocks: 51.162.16.0/20 maxlen: 20 51.162.80.0/21 maxlen: 21 51.162.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Apr 22 07:00:47 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6443861f-d050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:1d:56:ba:4b:7e:08:18:be:6c:7b:34:fe: 4f:c1:19:bf:3b:da:8c:3c:51:ed:9b:b4:5c:32:0f: 3e:95:1e:36:3e:83:c7:7b:c5:c4:55:a1:67:ad:b5: f8:ae:01:01:23:3d:af:ea:2f:3e:13:46:54:2f:7f: 14:54:76:cc:95:10:39:43:54:3c:c8:63:96:67:e1: 1b:ef:ec:5e:b9:8d:1e:98:27:c5:20:2c:63:6c:18: 8f:97:1c:49:46:e5:f1:79:ce:74:77:1e:23:f7:ac: a7:13:66:88:19:6c:f2:58:0e:6f:f3:59:e5:7c:0a: 2f:b6:28:ea:39:6e:58:45:04:3c:87:cc:0b:95:0b: 85:39:a7:65:d5:d0:10:21:62:70:7e:26:2d:30:23: 04:6c:b9:7e:ad:94:a8:83:de:7f:43:e5:9b:3f:ff: f6:aa:73:73:11:0f:3c:3a:9f:41:74:4f:c6:44:56: 50:19:68:04:8f:94:f1:4c:0c:01:ae:64:b9:57:45: 7a:5d:cb:05:50:23:a3:13:42:70:98:80:bc:a4:73: 06:95:ca:8e:63:d1:14:b8:a9:fe:4f:48:f0:69:4f: cf:90:80:99:1b:7d:2d:0a:74:95:2b:95:0d:96:fb: 77:db:f0:a1:1b:53:b3:f4:4a:fd:f1:8c:94:01:d4: 19:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A0:85:6C:F2:22:2C:A5:B8:00:EC:6F:39:22:FF:8A:B8:E9:CD:63 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/A1258398391F11EBAD1E3A2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 51.162.16.0/20 51.162.80.0/21 Signature Algorithm: sha256WithRSAEncryption 63:f9:23:d1:9b:e2:9f:59:30:cb:a2:ad:b9:83:2d:bc:06:2b: e3:33:9c:f1:63:bb:4c:c7:ae:41:a4:48:bc:a3:5a:e5:1c:52: 69:a7:80:b1:55:b0:4c:77:14:2f:8c:cc:ac:77:ed:7a:ba:79: fa:e6:e5:0c:97:b4:a5:bc:92:f4:18:a2:6f:7a:22:dc:41:5e: c2:91:3d:97:d2:50:9c:a4:d9:b0:a8:c6:d1:b9:3f:e2:b2:15: 93:f7:48:80:3b:82:fa:9a:b2:9a:02:f7:ba:54:dd:5b:a1:f1: 06:7c:ef:ca:51:56:cd:bd:df:93:9b:2b:21:3b:06:36:de:23: 94:44:db:4d:4b:03:14:84:e2:c9:08:31:79:9f:bc:05:ae:50: 4e:f9:f3:23:72:cb:dc:b9:e6:b7:94:63:b3:c5:d0:7f:04:91: ea:5a:21:bb:fd:c5:9e:97:57:66:60:0a:a6:8e:55:58:fa:8f: 03:a2:f9:74:e2:d4:4a:8c:c1:92:b0:b9:49:5c:d3:ae:57:2a: 1a:a7:7d:e8:e0:42:79:52:42:34:d0:68:b4:ea:de:bc:38:0c: 5b:5d:65:93:64:a7:2e:8f:ec:0a:30:33:e5:64:b7:0f:00:8c: 4d:fe:c4:93:ab:02:83:d4:2f:b0:08:71:7b:66:44:ef:44:1c: ea:22:2c:61 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjMwNDIyMDcwMDQ3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDQzODYxZi1kMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv48dVrpLfggYvmx7NP5PwRm/O9qMPFHtm7RcMg8+lR42PoPHe8XEVaFnrbX4 rgEBIz2v6i8+E0ZUL38UVHbMlRA5Q1Q8yGOWZ+Eb7+xeuY0emCfFICxjbBiPlxxJ RuXxec50dx4j96ynE2aIGWzyWA5v81nlfAovtijqOW5YRQQ8h8wLlQuFOadl1dAQ IWJwfiYtMCMEbLl+rZSog95/Q+WbP//2qnNzEQ88Op9BdE/GRFZQGWgEj5TxTAwB rmS5V0V6XcsFUCOjE0JwmIC8pHMGlcqOY9EUuKn+T0jwaU/PkICZG30tCnSVK5UN lvt32/ChG1Oz9Er98YyUAdQZPQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNKghWzy IiyluADsbzki/4q46c1jMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBRjEvODZEQjJDQ0MyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvQTEyNTgzOTgz OTFGMTFFQkFEMUUzQTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAQzohADBAMzolAwDQYJKoZIhvcNAQELBQADggEBAGP5I9Gb 4p9ZMMuirbmDLbwGK+MznPFju0zHrkGkSLyjWuUcUmmngLFVsEx3FC+MzKx37Xq6 efrm5QyXtKW8kvQYom96ItxBXsKRPZfSUJyk2bCoxtG5P+KyFZP3SIA7gvqaspoC 97pU3Vuh8QZ878pRVs2935ObKyE7BjbeI5RE201LAxSE4skIMXmfvAWuUE758yNy y9y55reUY7PF0H8EkepaIbv9xZ6XV2ZgCqaOVVj6jwOi+XTi1EqMwZKwuUlc065X KhqnfejgQnlSQjTQaLTq3rw4DFtdZZNkpy6P7AowM+Vktw8AjE3+xJOrAoPUL7AI cXtmRO9EHOoiLGE= -----END CERTIFICATE-----Generated at Thu Apr 18 23:55:18 2024 by rpki-client on console-fra.rpki-client.org