$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa File: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (raw, json) Hash identifier: 4wQ5LjqSM96xFhHK6HeLt7NKLyEGVLbwI0jCZEvZFQE= Subject key identifier: 2F:91:1D:46:D4:4A:4E:53:BC:40:3D:C7:B7:3A:2C:70:1C:07:EF:DF Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: 1D Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa Signing time: Wed 17 Jan 2024 06:21:20 +0000 ROA not before: Wed 17 Jan 2024 06:21:20 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152137 IP address blocks: 210.79.182.0/23 maxlen: 23 210.79.182.0/24 maxlen: 24 210.79.183.0/24 maxlen: 24 2001:df3:3bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: Jan 17 06:21:20 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a771df-e4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:56:a3:6a:dc:6a:9e:bd:ec:61:d6:b7:3b: 96:e0:7b:61:69:3f:fe:dc:59:8c:7c:f2:8b:35:dd: ae:3a:de:f2:ee:ca:25:39:4d:b1:23:44:ec:c3:21: 43:39:79:37:a2:8e:5a:27:8a:f3:65:75:5c:74:36: a6:df:4c:07:c1:a9:c8:a0:71:56:2c:26:86:0a:a1: 0e:a5:d3:6b:ed:68:44:a7:97:ca:f9:8f:d1:38:1c: 48:a9:7f:22:2a:f9:9b:ed:b1:03:7e:d5:9d:ca:07: c4:46:8b:9e:eb:f2:93:f2:87:c4:45:90:90:35:40: 92:f0:8e:c2:d0:6d:cb:36:59:43:6d:0c:f6:33:bf: 34:d9:2d:7c:31:aa:2e:e8:ec:a5:e2:33:2b:2f:d6: db:e3:bf:a3:af:7f:46:c0:2c:8f:da:ee:3d:65:aa: 27:0a:ae:da:1b:20:4b:b5:ec:fc:ae:de:9c:5b:3e: 8f:b2:8c:4a:5c:ae:a1:0f:f4:fd:9b:e5:04:2a:ed: df:e8:00:78:63:c1:f4:a4:5a:7e:ab:ec:16:0a:63: 9d:ed:4f:a7:74:1a:26:9f:f4:df:50:14:d2:9d:7e: dc:37:82:ab:70:08:85:10:ce:90:7c:b0:9f:53:94: a3:f4:10:6b:f0:1d:32:d3:ed:c2:51:28:ba:d1:d0: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:91:1D:46:D4:4A:4E:53:BC:40:3D:C7:B7:3A:2C:70:1C:07:EF:DF X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.182.0/23 IPv6: 2001:df3:3bc0::/48 Signature Algorithm: sha256WithRSAEncryption 93:66:c4:b4:53:7a:a1:bd:9c:ca:da:3d:c5:b3:e2:d4:27:f3: 29:a5:e5:14:59:ad:72:1e:9f:ae:f6:12:09:ee:c9:d8:2d:7f: 1c:20:30:c5:a4:c5:02:5a:9b:05:ff:b6:86:75:5c:26:0d:e9: bd:32:fa:9e:5b:96:31:a0:ff:77:a2:6a:9c:a9:7d:85:2b:a0: c9:a5:af:65:a1:32:b2:97:e2:7c:ef:18:39:28:d6:9c:50:1d: 0e:bf:22:b5:b9:e8:fd:33:b7:30:5b:b4:ff:c5:91:87:d0:10: e0:37:73:9b:5a:f2:25:71:97:a6:70:e5:24:ed:4b:e9:fa:e8: b4:ab:ca:10:29:9d:3d:fc:c6:0f:5f:f8:26:1f:f5:7f:64:58: 1f:c2:fb:16:2e:e0:fa:43:f5:79:2c:07:ce:d2:a9:6d:d1:95: e3:04:f3:0c:4d:d3:fa:93:fb:07:70:88:bd:72:93:5d:f5:79: d8:66:64:13:63:a3:d0:77:6e:80:f6:ef:30:6c:bd:7a:da:52: 28:cd:0e:c3:23:87:20:b6:08:e8:0c:a5:4e:c5:34:80:bf:43: b3:e6:68:97:38:0b:9e:10:5a:5f:5e:1e:1a:6d:e2:22:36:bb: 6c:90:d4:68:8d:47:0e:c7:f6:4d:db:67:da:a8:af:b9:fb:6f: 89:97:52:3b -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjNGMjExMC8GA1UEBRMoNUNDOTFBRkQ1QjhCMzdFRDhDNTA5RjYxMTg5RjQ0OEU3 MzEyMUY5NzAeFw0yNDAxMTcwNjIxMjBaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YTc3MWRmLWU0YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfWFajatxqnr3sYda3O5bge2FpP/7cWYx88os13a463vLuyiU5TbEjROzDIUM5 eTeijlonivNldVx0NqbfTAfBqcigcVYsJoYKoQ6l02vtaESnl8r5j9E4HEipfyIq +ZvtsQN+1Z3KB8RGi57r8pPyh8RFkJA1QJLwjsLQbcs2WUNtDPYzvzTZLXwxqi7o 7KXiMysv1tvjv6Ovf0bALI/a7j1lqicKrtobIEu17Pyu3pxbPo+yjEpcrqEP9P2b 5QQq7d/oAHhjwfSkWn6r7BYKY53tT6d0Giaf9N9QFNKdftw3gqtwCIUQzpB8sJ9T lKP0EGvwHTLT7cJRKLrR0HY/AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUL5EdRtRK TlO8QD3HtzoscBwH798wHwYDVR0jBBgwFoAUXMka/VuLN+2MUJ9hGJ9EjnMSH5cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCM0YyLzAwNTFEQkNDOTdF MjExRUU4OTgxM0QyM0M0RjlBRTAyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWE1rYV9WdUxOLTJNVUo5aEdKOUVqbk1TSDVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi8xNjA4M0UxMEE5 NUUxMUVFQkMwQTdFNUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAdJPtjAPBAIAAjAJAwcAIAEN8zvAMA0GCSqGSIb3DQEBCwUA A4IBAQCTZsS0U3qhvZzK2j3Fs+LUJ/MppeUUWa1yHp+u9hIJ7snYLX8cIDDFpMUC WpsF/7aGdVwmDem9MvqeW5YxoP93omqcqX2FK6DJpa9loTKyl+J87xg5KNacUB0O vyK1uej9M7cwW7T/xZGH0BDgN3ObWvIlcZemcOUk7Uvp+ui0q8oQKZ09/MYPX/gm H/V/ZFgfwvsWLuD6Q/V5LAfO0qlt0ZXjBPMMTdP6k/sHcIi9cpNd9XnYZmQTY6PQ d26A9u8wbL162lIozQ7DI4cgtgjoDKVOxTSAv0Oz5miXOAueEFpfXh4abeIiNrts kNRojUcOx/ZN22faqK+5+2+Jl1I7 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org