$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/FEEC2C90643811EB9D7F624EC4F9AE02.roa File: FEEC2C90643811EB9D7F624EC4F9AE02.roa (raw, json) Hash identifier: J1xLa8yTtXAlg7OlLT4nxVjtOt9A7iYZpXvZJDERl8o= Subject key identifier: C3:62:9C:92:3B:9F:79:85:6E:48:91:CC:FD:9B:BC:A6:4A:CB:ED:CF Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 07ED Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/FEEC2C90643811EB9D7F624EC4F9AE02.roa Signing time: Tue 28 May 2024 23:03:11 +0000 ROA not before: Tue 28 May 2024 23:03:11 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134963 IP address blocks: 202.63.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2029 (0x7ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: May 28 23:03:11 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665662af-f2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:e2:f0:3b:3f:4d:71:e0:45:dd:39:6f:7e: b9:a0:ed:3b:85:3b:0c:61:88:f6:08:7c:94:e7:77: 8e:b2:7a:23:d7:af:94:d6:14:62:f8:6e:05:f9:9d: d5:90:78:47:ec:fc:51:47:ff:31:45:aa:14:83:57: 6e:3d:9d:c9:07:e1:bf:0f:78:67:d6:8a:43:f9:e7: 43:6e:3c:b0:37:03:ae:7d:a7:05:95:a5:53:d2:f9: 45:35:3e:c1:18:9f:2c:94:48:68:87:4b:db:51:b0: 0b:f1:7a:c8:0e:c6:0c:a4:9b:15:00:e9:23:ff:88: 18:72:15:24:f9:0f:17:22:38:a1:6d:3d:99:52:cd: f4:c0:9f:76:73:89:85:73:3e:30:53:55:16:38:1d: 18:6e:1f:8f:94:47:ad:31:83:d8:c4:23:35:9c:a3: 7a:6b:fa:05:09:81:49:d5:60:fa:b8:73:dd:97:3c: b6:64:c2:01:10:1a:5f:f6:d6:24:28:f8:db:92:08: fb:0a:90:3c:3d:86:66:5f:9f:26:a0:1e:32:53:21: 55:9b:92:e9:39:3f:b4:d5:10:e6:af:57:19:15:c7: 9b:a7:e9:e2:66:e2:64:cd:5a:85:8f:70:5c:98:6e: b2:9f:0f:d0:f9:48:d2:d2:f2:33:43:1f:08:da:09: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:62:9C:92:3B:9F:79:85:6E:48:91:CC:FD:9B:BC:A6:4A:CB:ED:CF X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/FEEC2C90643811EB9D7F624EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.63.46.0/24 Signature Algorithm: sha256WithRSAEncryption 29:51:b2:0d:96:24:c8:6c:2f:22:d0:e4:63:66:b3:4d:21:06: 1e:65:b9:e6:a0:54:4f:b2:96:f4:bf:70:72:20:2a:2d:fb:25: 8a:67:e1:70:ec:eb:51:c9:e2:3e:ea:ae:16:1a:e8:44:46:09: 4b:3f:80:dc:84:26:04:9e:48:24:c7:60:07:70:dc:cb:69:1b: 70:46:3e:33:71:10:b7:05:3c:c6:0f:43:48:73:58:0b:8e:0c: 41:d0:0d:c8:d1:83:d9:ac:0c:1a:b7:92:f4:41:bb:35:c3:92: 6f:f8:b0:fc:bc:72:9e:1f:c8:e0:80:5d:c2:83:72:16:7e:1c: 3f:9c:35:21:92:1d:0f:31:9f:fe:15:c9:33:38:b3:a7:24:c9: cc:a7:64:c3:c5:9e:20:be:3e:7e:66:17:27:0a:70:f1:27:53: 81:71:6d:59:48:cd:30:b6:6e:b2:2b:23:21:38:73:59:88:0f: 83:2f:b4:48:03:08:8d:d2:77:94:13:56:d5:d4:73:c3:41:f5: f3:4a:ad:56:4c:aa:e2:07:b5:df:74:e7:a8:ba:5a:39:71:a1: 58:1c:1d:14:65:b4:7f:d1:99:21:c3:62:cd:4a:08:a5:36:77: 18:35:81:27:50:3d:83:5e:30:f6:fc:87:0e:17:48:05:51:86: 04:ab:bf:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjQwNTI4MjMwMzExWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU2NjJhZi1mMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZji8Ds/TXHgRd05b365oO07hTsMYYj2CHyU53eOsnoj16+U1hRi+G4F+Z3V kHhH7PxRR/8xRaoUg1duPZ3JB+G/D3hn1opD+edDbjywNwOufacFlaVT0vlFNT7B GJ8slEhoh0vbUbAL8XrIDsYMpJsVAOkj/4gYchUk+Q8XIjihbT2ZUs30wJ92c4mF cz4wU1UWOB0Ybh+PlEetMYPYxCM1nKN6a/oFCYFJ1WD6uHPdlzy2ZMIBEBpf9tYk KPjbkgj7CpA8PYZmX58moB4yUyFVm5LpOT+01RDmr1cZFcebp+niZuJkzVqFj3Bc mG6ynw/Q+UjS0vIzQx8I2gn/EQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMNinJI7 n3mFbkiRzP2bvKZKy+3PMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvRkVFQzJDOTA2 NDM4MTFFQjlEN0Y2MjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKPy4wDQYJKoZIhvcNAQELBQADggEBAClRsg2WJMhsLyLQ 5GNms00hBh5lueagVE+ylvS/cHIgKi37JYpn4XDs61HJ4j7qrhYa6ERGCUs/gNyE JgSeSCTHYAdw3MtpG3BGPjNxELcFPMYPQ0hzWAuODEHQDcjRg9msDBq3kvRBuzXD km/4sPy8cp4fyOCAXcKDchZ+HD+cNSGSHQ8xn/4VyTM4s6ckycynZMPFniC+Pn5m FycKcPEnU4FxbVlIzTC2brIrIyE4c1mID4MvtEgDCI3Sd5QTVtXUc8NB9fNKrVZM quIHtd9056i6WjlxoVgcHRRltH/RmSHDYs1KCKU2dxg1gSdQPYNeMPb8hw4XSAVR hgSrvx4= -----END CERTIFICATE-----Generated at Fri May 31 23:53:09 2024 by rpki-client on console-fra.rpki-client.org