$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa File: 866314EE5FCC11EF8416052EC4F9AE02.roa (raw, json) Hash identifier: 3AqN5CbYpWEtnxWi7Et2B3/yQBF6JM8e4+/OE5L6X9w= Subject key identifier: B7:92:ED:48:34:0C:38:C0:4F:50:DE:93:8A:C3:26:C1:8B:D2:5B:E3 Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Certificate serial: 07 Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa Signing time: Wed 21 Aug 2024 14:49:10 +0000 ROA not before: Wed 21 Aug 2024 14:49:10 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 16509 IP address blocks: 64.251.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3 Validity Not Before: Aug 21 14:49:10 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66c5fe66-5def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:65:5b:2d:78:d2:62:25:d7:11:4d:89:06: 3f:d9:53:12:8c:67:8d:99:a0:61:9b:3b:b1:e0:ef: 1d:f4:f1:40:a8:5c:e3:4e:c7:8e:d3:a9:52:95:8d: 1f:6a:43:8d:d8:25:ff:cd:2a:c9:fc:cb:2a:6c:11: 02:6a:68:73:c6:27:ce:56:67:2e:52:62:b3:6e:b7: f3:ee:50:4c:01:5d:d2:39:52:7a:40:e0:bb:3c:42: e6:4e:b5:ef:7a:2c:87:bb:46:5f:6b:0a:44:95:30: 30:b2:6a:6e:ec:29:92:e5:d0:a1:9e:2b:7f:42:87: 81:7f:f1:6a:9a:89:58:89:4b:ab:95:ab:b7:d0:e4: ce:b8:38:5d:94:ed:04:c8:4d:8d:8d:30:28:a2:e3: 1a:6e:24:64:87:65:41:d4:92:dd:25:f2:83:78:9a: 3f:ec:03:b1:bf:5f:30:bd:23:90:e4:9f:1b:1c:39: 41:84:bd:10:71:d1:49:2e:aa:c3:2f:44:62:8f:d4: 0c:20:f8:8d:1c:58:ad:05:70:ed:d5:94:56:9a:67: 12:d8:bd:37:dc:59:9f:d7:ba:7d:7e:37:28:9b:fc: d1:d5:e7:f4:d2:10:c5:53:8c:27:c2:0d:8c:42:db: 16:45:7b:86:dd:82:bd:74:2f:43:f6:ca:db:20:55: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:92:ED:48:34:0C:38:C0:4F:50:DE:93:8A:C3:26:C1:8B:D2:5B:E3 X509v3 Authority Key Identifier: keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.251.192.0/21 Signature Algorithm: sha256WithRSAEncryption 19:62:8d:71:01:bd:f3:23:2e:db:72:a6:ca:ee:71:31:74:55: f1:6d:5a:04:df:1e:33:a9:61:48:d1:54:24:72:83:21:db:ad: 24:4a:55:87:ef:05:8b:c1:ee:69:0b:f4:19:ba:d0:12:4b:9c: f9:d1:08:bf:60:e6:26:61:a2:67:f2:6f:27:be:cd:02:e4:94: 04:b9:c4:1b:22:3d:9a:d3:7f:9a:e1:3d:e1:71:2b:62:de:da: c3:67:6a:16:33:74:40:7f:ab:a7:bc:4e:c9:68:bf:90:41:2d: 2d:03:e3:78:d7:47:f3:5c:8e:d7:75:eb:3d:81:74:ba:2b:d7: 00:78:99:e6:c8:a9:a4:97:71:4d:ff:7e:fe:50:56:ba:26:98: 87:f3:86:51:80:3d:34:0e:96:e5:86:73:44:41:88:bb:30:29: 0c:0e:be:b2:bd:61:10:a0:ba:64:e8:b2:57:64:d3:1d:f3:08: d5:ec:f2:c0:bf:6b:91:a3:3c:3e:77:2e:9a:b0:da:97:ce:95: b2:29:75:b8:74:0c:27:43:d2:23:3a:61:a9:53:dd:9e:2c:7e: ba:59:8b:4e:d1:38:28:de:e3:86:da:ba:0d:c6:ca:5d:56:f8: eb:eb:30:8e:cb:fe:eb:33:16:66:76:cc:09:e5:2a:7e:57:7e: f6:d1:2c:6a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODNEMzExMC8GA1UEBRMoRUIzQzhGMjRCQkFEQzk0MTM0ODcxRDZFNUZEMEI3QzU4 QjQ5RDNDOTAeFw0yNDA4MjExNDQ5MTBaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YzVmZTY2LTVkZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb7GVbLXjSYiXXEU2JBj/ZUxKMZ42ZoGGbO7Hg7x308UCoXONOx47TqVKVjR9q Q43YJf/NKsn8yypsEQJqaHPGJ85WZy5SYrNut/PuUEwBXdI5UnpA4Ls8QuZOte96 LIe7Rl9rCkSVMDCyam7sKZLl0KGeK39Ch4F/8WqaiViJS6uVq7fQ5M64OF2U7QTI TY2NMCii4xpuJGSHZUHUkt0l8oN4mj/sA7G/XzC9I5DknxscOUGEvRBx0UkuqsMv RGKP1Awg+I0cWK0FcO3VlFaaZxLYvTfcWZ/Xun1+Nyib/NHV5/TSEMVTjCfCDYxC 2xZFe4bdgr10L0P2ytsgVZRVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUt5LtSDQM OMBPUN6TisMmwYvSW+MwHwYDVR0jBBgwFoAU6zyPJLutyUE0hx1uX9C3xYtJ08kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4M0QzLzhEMDNFRjM2NUUz NjExRUZBQzkyRDMxNEM0RjlBRTAyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNnp5UEpMdXR5VUUwaHgxdVg5QzN4WXRKMDhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy84RDAzRUYzNjVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi84NjYzMTRFRTVG Q0MxMUVGODQxNjA1MkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA0D7wDANBgkqhkiG9w0BAQsFAAOCAQEAGWKNcQG98yMu23Km yu5xMXRV8W1aBN8eM6lhSNFUJHKDIdutJEpVh+8Fi8HuaQv0GbrQEkuc+dEIv2Dm JmGiZ/JvJ77NAuSUBLnEGyI9mtN/muE94XErYt7aw2dqFjN0QH+rp7xOyWi/kEEt LQPjeNdH81yO13XrPYF0uivXAHiZ5sippJdxTf9+/lBWuiaYh/OGUYA9NA6W5YZz REGIuzApDA6+sr1hEKC6ZOiyV2TTHfMI1ezywL9rkaM8PncumrDal86Vsil1uHQM J0PSIzphqVPdnix+ulmLTtE4KN7jhtq6DcbKXVb46+swjsv+6zMWZnbMCeUqfld+ 9tEsag== -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:22 2025 by rpki-client