$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa File: 64B67878AE7711EA98E12731C4F9AE02.roa (raw, json) Hash identifier: whniw/rt8w3AT9eiCUwlSP3EPH0+CO0/R53FHraLneY= Subject key identifier: C8:6C:21:5F:CB:13:11:13:43:64:20:11:2A:67:AB:BC:77:DF:1D:3B Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0AA8 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa Signing time: Fri 02 Aug 2024 20:29:24 +0000 ROA not before: Fri 02 Aug 2024 20:29:24 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 7262 IP address blocks: 116.66.218.0/24 maxlen: 24 116.66.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Aug 2 20:29:24 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66ad41a3-7246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:55:c6:64:c3:56:02:29:db:c3:b8:9b:47: fa:40:e1:e2:bb:c7:1a:f5:69:21:aa:04:1e:e5:0a: 6c:e4:77:b7:37:62:96:71:9b:3d:66:74:c7:51:73: 94:30:a6:d8:4a:e3:be:9e:f4:b1:1b:c8:5b:a4:5b: 57:48:41:db:a0:ae:41:69:f5:5e:a1:23:af:a0:a8: 6a:5b:7a:36:47:a0:06:6e:2a:82:a6:67:8b:1a:b3: 16:73:eb:07:1b:df:48:e8:ec:d6:be:54:88:26:68: 66:4f:d2:85:a3:2b:af:01:78:75:47:3f:4e:c9:28: f8:df:1c:01:42:df:fc:0e:94:e7:33:53:3f:20:59: 89:96:4e:8f:09:cf:e6:42:a6:f9:c9:da:fa:4b:52: 59:7b:1c:57:d2:39:fe:93:cd:50:79:88:6c:ea:8c: 11:0f:81:54:9e:52:da:1d:43:f1:de:e1:73:d3:dc: 4d:30:c5:94:d8:20:28:c1:f1:aa:5f:67:b5:1e:95: 77:04:03:af:09:d9:31:33:2d:ab:e6:f1:fb:ce:f2: 28:25:a7:58:d8:4c:76:2d:ce:93:65:40:3c:a5:e0: dd:8f:e4:04:69:44:7a:a6:91:64:f1:4c:ff:2d:5b: 83:5b:ca:f2:57:e6:f5:15:41:60:bf:d6:c9:59:75: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6C:21:5F:CB:13:11:13:43:64:20:11:2A:67:AB:BC:77:DF:1D:3B X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.66.218.0/23 Signature Algorithm: sha256WithRSAEncryption 22:ad:d1:0f:bf:51:40:a1:3d:c0:32:53:11:79:0f:d6:bf:21: 4a:e6:46:74:88:38:52:a4:d9:0c:31:10:00:6d:71:a1:cc:29: bc:3d:53:1b:f5:91:53:62:eb:09:a0:eb:ac:cd:9c:fb:38:7c: 48:92:59:19:09:12:76:0c:cd:4b:48:cb:ff:df:80:8f:24:0f: 8a:2c:26:47:7a:47:39:1f:fb:65:97:ed:0b:12:3a:85:7d:b0: 76:b6:b6:fb:c0:c9:fc:60:ef:a3:f3:3f:7f:46:5e:a0:f7:63: 56:d8:7f:ec:d1:98:af:29:cc:99:6e:71:3e:61:4e:a8:bd:db: e1:d5:16:0f:fd:25:e0:ad:91:30:55:97:30:2d:69:75:3a:28: 58:70:23:10:3e:23:41:70:be:ae:1a:ca:cc:85:99:f6:39:34: 8d:93:20:9e:5a:27:16:40:75:cb:c1:d6:f6:bc:58:ce:ce:0a: 55:8e:84:56:14:47:c9:52:39:5a:27:17:d5:2e:27:cd:e6:3a: 66:a6:ce:2b:12:db:a6:1b:4d:ef:be:78:14:b0:76:03:92:e2: 5e:d4:64:05:af:ac:4c:5c:8b:15:d8:53:6a:a5:79:0e:93:33: 27:41:95:98:62:ce:5b:1a:c5:b0:76:1a:7d:f8:b0:92:4f:4e: a0:d2:f4:0e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjQwODAyMjAyOTI0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkNDFhMy03MjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFRVxmTDVgIp28O4m0f6QOHiu8ca9WkhqgQe5Qps5He3N2KWcZs9ZnTHUXOU MKbYSuO+nvSxG8hbpFtXSEHboK5BafVeoSOvoKhqW3o2R6AGbiqCpmeLGrMWc+sH G99I6OzWvlSIJmhmT9KFoyuvAXh1Rz9OySj43xwBQt/8DpTnM1M/IFmJlk6PCc/m Qqb5ydr6S1JZexxX0jn+k81QeYhs6owRD4FUnlLaHUPx3uFz09xNMMWU2CAowfGq X2e1HpV3BAOvCdkxMy2r5vH7zvIoJadY2Ex2Lc6TZUA8peDdj+QEaUR6ppFk8Uz/ LVuDW8ryV+b1FUFgv9bJWXWObQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMhsIV/L ExETQ2QgESpnq7x33x07MB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvNjRCNjc4NzhB RTc3MTFFQTk4RTEyNzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF0QtowDQYJKoZIhvcNAQELBQADggEBACKt0Q+/UUChPcAy UxF5D9a/IUrmRnSIOFKk2QwxEABtcaHMKbw9Uxv1kVNi6wmg66zNnPs4fEiSWRkJ EnYMzUtIy//fgI8kD4osJkd6Rzkf+2WX7QsSOoV9sHa2tvvAyfxg76PzP39GXqD3 Y1bYf+zRmK8pzJlucT5hTqi92+HVFg/9JeCtkTBVlzAtaXU6KFhwIxA+I0Fwvq4a ysyFmfY5NI2TIJ5aJxZAdcvB1va8WM7OClWOhFYUR8lSOVonF9UuJ83mOmamzisS 26YbTe++eBSwdgOS4l7UZAWvrExcixXYU2qleQ6TMydBlZhizlsaxbB2Gn34sJJP TqDS9A4= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:46 2024 by rpki-client on console-ams.rpki-client.org