$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A084D2B2F92E11EA8946AD6AC4F9AE02.roa File: A084D2B2F92E11EA8946AD6AC4F9AE02.roa (raw, json) Hash identifier: 3WTQb9InUjzjpsYZoB/tC2okIAQpQba8dHrj64ClTNk= Subject key identifier: E9:14:83:93:19:8E:A3:48:EE:DC:21:4D:6E:42:96:7C:64:5A:C6:BA Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC Certificate serial: 17FE Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A084D2B2F92E11EA8946AD6AC4F9AE02.roa Signing time: Fri 02 Aug 2024 17:06:56 +0000 ROA not before: Fri 02 Aug 2024 17:06:56 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 14618 IP address blocks: 116.90.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6142 (0x17fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B33E Validity Not Before: Aug 2 17:06:56 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66ad1230-d924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4a:41:23:cc:8b:d3:ff:9e:d2:5e:fb:22:5d: 97:44:1d:ef:fe:f1:46:07:fd:8c:37:fa:c4:d2:dc: 62:ef:50:bf:9a:0f:f8:8d:53:fe:e6:6f:b2:44:c9: 48:2a:c8:95:c4:04:98:80:aa:0b:98:8c:9b:e6:08: b4:a3:2e:c5:b0:6a:8a:5b:0f:56:5c:61:fa:a0:fe: 06:3f:1a:49:38:d2:84:90:77:f5:59:bd:30:81:af: 2b:da:64:c0:bc:e9:f1:a6:30:75:97:36:26:62:e1: 34:ac:c4:2b:f6:b0:79:17:ad:ee:30:f9:d9:7e:09: 5f:39:e9:c8:f8:8c:82:2b:d9:0a:d3:e7:1c:a6:82: 86:36:8b:7c:82:d5:f0:19:ca:05:66:6e:62:38:af: c1:c5:a9:57:ec:1b:ea:9c:3c:42:35:01:a5:93:ce: 96:75:d2:9b:fc:56:98:0a:44:1d:62:c7:af:bc:4d: 7c:dd:4c:2a:3d:cc:08:58:ee:46:60:50:c6:d8:89: 88:d4:b5:a9:d8:78:87:ca:0b:f6:72:da:21:3b:c0: fd:7b:9b:f4:90:d6:99:b4:8a:67:0a:89:18:71:61: 4b:38:ee:fd:cb:f9:4c:56:2a:2f:b7:af:25:5e:ab: 7a:09:af:1c:2d:7d:70:c3:42:f3:5d:a1:13:73:80: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:14:83:93:19:8E:A3:48:EE:DC:21:4D:6E:42:96:7C:64:5A:C6:BA X509v3 Authority Key Identifier: keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A084D2B2F92E11EA8946AD6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.90.32.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:f8:18:4b:1f:78:a6:22:e7:55:27:4a:0b:99:90:68:21:56: f0:72:23:9c:1f:8c:96:42:67:de:af:40:bd:d4:62:f8:54:39: cf:02:39:06:cb:be:54:f4:cc:bd:2c:d6:01:5a:99:57:92:32: 45:af:68:73:c9:97:63:18:69:5a:58:51:66:6e:dc:bd:bd:5c: d4:ef:51:55:73:64:0f:61:a2:31:69:d7:d1:a9:77:87:fe:0e: 82:f2:8c:44:8f:31:f3:68:5f:26:54:43:0b:4d:ae:1c:63:05: 14:ed:60:d8:27:83:ab:ff:2e:e2:ab:7f:ef:01:d7:ca:db:18: 0d:09:07:59:b6:e2:51:7a:ed:c9:9f:10:e7:f3:c0:45:a7:2b: e8:52:b6:13:0f:77:a9:a3:99:9b:25:60:a1:43:ae:b6:5a:24: 62:8c:79:dd:bd:2b:85:76:b1:ce:ca:98:4f:3a:6a:63:22:30: 90:30:db:3b:28:b5:38:84:64:0d:44:c4:23:c3:19:a4:46:11: 0b:64:dd:05:c8:39:42:6a:37:35:c4:a4:5f:b9:12:65:ca:4e: bf:7b:42:81:41:fe:9a:6e:c9:cc:32:0d:78:60:a3:ef:0d:ba: 97:ae:7e:72:f2:f9:6b:2c:c8:74:3b:ed:aa:9a:52:d2:f8:6e: e8:87:b7:af -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICF/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw REQzQTMzRUMwHhcNMjQwODAyMTcwNjU2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkMTIzMC1kOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UpBI8yL0/+e0l77Il2XRB3v/vFGB/2MN/rE0txi71C/mg/4jVP+5m+yRMlI KsiVxASYgKoLmIyb5gi0oy7FsGqKWw9WXGH6oP4GPxpJONKEkHf1Wb0wga8r2mTA vOnxpjB1lzYmYuE0rMQr9rB5F63uMPnZfglfOenI+IyCK9kK0+ccpoKGNot8gtXw GcoFZm5iOK/BxalX7BvqnDxCNQGlk86WddKb/FaYCkQdYsevvE183UwqPcwIWO5G YFDG2ImI1LWp2HiHygv2ctohO8D9e5v0kNaZtIpnCokYcWFLOO79y/lMViovt68l Xqt6Ca8cLX1ww0LzXaETc4BFTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOkUg5MZ jqNI7twhTW5ClnxkWsa6MB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4 M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIzM0UvMkY2NkI1N0FCODNFMTFFN0EwMUQ2NjUwQzRGOUFFMDIvQTA4NEQyQjJG OTJFMTFFQTg5NDZBRDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN0WiAwDQYJKoZIhvcNAQELBQADggEBAIv4GEsfeKYi51Un SguZkGghVvByI5wfjJZCZ96vQL3UYvhUOc8COQbLvlT0zL0s1gFamVeSMkWvaHPJ l2MYaVpYUWZu3L29XNTvUVVzZA9hojFp19Gpd4f+DoLyjESPMfNoXyZUQwtNrhxj BRTtYNgng6v/LuKrf+8B18rbGA0JB1m24lF67cmfEOfzwEWnK+hSthMPd6mjmZsl YKFDrrZaJGKMed29K4V2sc7KmE86amMiMJAw2zsotTiEZA1ExCPDGaRGEQtk3QXI OUJqNzXEpF+5EmXKTr97QoFB/ppuycwyDXhgo+8NupeufnLy+WssyHQ77aqaUtL4 buiHt68= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:08 2025 by rpki-client