$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/FAA6AEE45F6C11EE8C65650FC4F9AE02.roa File: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (raw, json) Hash identifier: WzRXpKDilUFwYKhAUuih5hJVeMcKdBUGSiqbxZVmTTE= Subject key identifier: 79:2C:1D:4B:AC:50:7A:0A:A4:7D:EF:A7:33:BB:49:CF:FB:3E:01:EC Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 09F7 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/FAA6AEE45F6C11EE8C65650FC4F9AE02.roa Signing time: Sat 30 Sep 2023 08:40:16 +0000 ROA not before: Sat 30 Sep 2023 08:40:16 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 395753 IP address blocks: 116.66.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Sep 30 08:40:16 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6517def0-62ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:11:23:88:62:e2:d1:28:1b:fa:49:ba:d1: 93:81:74:38:c7:ba:08:70:c5:ad:4b:1c:06:49:b7: 12:51:bb:2b:d4:23:e1:f8:e7:9d:65:34:e2:88:cb: 15:a0:df:14:74:4e:2b:81:0c:4c:59:fb:5b:b9:28: d7:79:48:24:38:29:8f:42:e8:bc:1e:22:ae:01:1d: fd:33:5f:47:29:a2:6d:d7:54:9c:b3:7d:71:b2:40: ac:64:ee:e6:06:cc:aa:b8:42:fd:c9:00:6e:cf:7e: df:51:81:b1:f9:33:6b:4c:16:9e:43:d8:7b:1b:d9: 63:af:7d:6f:7f:bc:3b:c9:0b:df:e9:c6:0d:52:1b: 98:79:62:15:06:cd:cc:92:e4:fc:6b:02:e2:e1:ed: b2:97:53:12:97:8d:60:85:9c:93:10:ea:f6:4e:71: f3:eb:6c:5a:5e:69:f9:c1:a5:15:1e:c6:60:57:1e: e4:53:1a:8a:ba:b5:a9:5f:d7:c3:df:f5:42:24:1e: 7b:3d:88:cb:37:87:d2:ad:ad:c5:83:95:3d:5c:41: 89:30:b1:e2:5b:34:e9:79:5d:7f:9a:04:89:7f:92: 63:48:35:2c:34:8c:63:4e:cc:c9:ec:60:0a:cc:b7: f4:b0:c7:9c:c8:1d:40:e8:05:fe:2d:13:b0:68:ad: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2C:1D:4B:AC:50:7A:0A:A4:7D:EF:A7:33:BB:49:CF:FB:3E:01:EC X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/FAA6AEE45F6C11EE8C65650FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.66.211.0/24 Signature Algorithm: sha256WithRSAEncryption a0:73:99:1f:a8:26:9b:7f:51:92:52:d5:84:15:9e:8c:17:87: 75:1c:e9:0c:bb:8f:73:14:ff:9a:0c:9c:66:4f:66:f1:a3:89: 24:da:8c:f1:9a:65:d8:ea:bf:c8:a6:da:b1:a8:76:f5:6e:fd: e4:3e:2d:4a:b5:6f:e1:57:31:5d:2a:02:5b:6f:71:26:ac:b5: 87:cf:bb:b6:4a:7c:65:cb:62:5a:c7:41:6c:1f:ca:f2:cf:17: 3c:7b:2d:7d:45:b1:50:b7:36:2b:42:1a:aa:49:ba:4c:d6:56: 54:ed:45:1a:6c:34:be:2e:d2:f8:b9:5d:39:6b:5d:d2:b7:2d: 54:45:b1:40:5a:8c:30:8b:c3:03:f5:ae:1d:d2:5e:c9:81:fd: 41:d5:24:7e:cd:34:5d:69:79:e0:d1:92:91:56:bb:5a:c5:8d: 23:be:e9:32:49:78:61:2b:79:b8:6e:ce:f4:de:92:38:f3:75: 82:98:3b:39:fc:85:2f:02:d7:0b:cb:36:d2:bc:93:9e:5f:cf: c4:b2:22:00:f5:74:1d:52:3a:f8:aa:98:ae:6c:20:88:43:5b: 2a:a3:2f:4f:06:cd:a5:3a:92:c0:96:fc:17:19:24:ff:23:f0: a4:17:53:6c:2d:91:fd:bd:45:d5:c1:7a:1e:75:85:fb:87:05: 6c:61:48:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjMwOTMwMDg0MDE2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE3ZGVmMC02MmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKoRI4hi4tEoG/pJutGTgXQ4x7oIcMWtSxwGSbcSUbsr1CPh+OedZTTiiMsV oN8UdE4rgQxMWftbuSjXeUgkOCmPQui8HiKuAR39M19HKaJt11Scs31xskCsZO7m BsyquEL9yQBuz37fUYGx+TNrTBaeQ9h7G9ljr31vf7w7yQvf6cYNUhuYeWIVBs3M kuT8awLi4e2yl1MSl41ghZyTEOr2TnHz62xaXmn5waUVHsZgVx7kUxqKurWpX9fD 3/VCJB57PYjLN4fSra3Fg5U9XEGJMLHiWzTpeV1/mgSJf5JjSDUsNIxjTszJ7GAK zLf0sMecyB1A6AX+LROwaK1pdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHksHUus UHoKpH3vpzO7Sc/7PgHsMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvRkFBNkFFRTQ1 RjZDMTFFRThDNjU2NTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB0QtMwDQYJKoZIhvcNAQELBQADggEBAKBzmR+oJpt/UZJS 1YQVnowXh3Uc6Qy7j3MU/5oMnGZPZvGjiSTajPGaZdjqv8im2rGodvVu/eQ+LUq1 b+FXMV0qAltvcSastYfPu7ZKfGXLYlrHQWwfyvLPFzx7LX1FsVC3NitCGqpJukzW VlTtRRpsNL4u0vi5XTlrXdK3LVRFsUBajDCLwwP1rh3SXsmB/UHVJH7NNF1peeDR kpFWu1rFjSO+6TJJeGErebhuzvTekjjzdYKYOzn8hS8C1wvLNtK8k55fz8SyIgD1 dB1SOviqmK5sIIhDWyqjL08GzaU6ksCW/BcZJP8j8KQXU2wtkf29RdXBeh51hfuH BWxhSPg= -----END CERTIFICATE-----Generated at Fri May 17 14:07:57 2024 by rpki-client on console-fra.rpki-client.org