$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86D8B1B0F8F211EC80881019C4F9AE02.roa File: 86D8B1B0F8F211EC80881019C4F9AE02.roa (raw, json) Hash identifier: YQ5oNpm5ktm1PxqDN7DJnYXijhbr+4452iEkqQuZnKk= Subject key identifier: 4B:20:C5:CD:83:58:4A:EA:6C:68:0B:E9:FC:72:ED:F1:12:7F:18:C8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7190 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86D8B1B0F8F211EC80881019C4F9AE02.roa Signing time: Wed 10 May 2023 16:48:52 +0000 ROA not before: Wed 10 May 2023 16:48:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45661 IP address blocks: 116.199.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29072 (0x7190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:48:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcaf3-f14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:bd:6c:1d:55:9a:d3:a1:81:b5:3d:5a:1b: 99:24:d5:2d:17:1d:35:64:a9:43:d0:8c:bd:f4:64: 6b:37:04:d5:1e:c1:a4:ca:83:92:c8:5d:f2:5a:e1: 17:46:f6:3a:c5:61:82:ce:dc:3c:a7:e8:27:ee:34: b8:ae:92:2f:0c:60:4b:19:76:3e:f6:eb:0f:40:88: 53:96:3e:66:2d:ff:fe:98:65:83:6c:e8:a8:c5:86: f1:28:05:4a:11:b2:83:2f:ad:c5:1e:55:80:5a:36: 9c:49:cd:d0:46:fe:ab:0d:77:f0:bb:c7:e7:6f:ba: b9:05:d4:f8:11:b9:d8:9c:c3:b9:22:d1:03:bb:d3: e0:a9:92:d0:e4:0a:77:d4:ee:fd:ed:9d:1a:0d:3c: 5e:21:e7:9b:ce:a2:a0:fb:16:70:e2:5e:b4:47:72: 4a:49:b6:f2:61:8f:3e:82:17:53:6f:bd:26:71:4a: f2:cf:42:bc:e5:c5:56:0e:c1:c9:0c:b0:33:73:9a: 15:7a:cf:e1:51:62:f7:63:c1:cb:8c:64:30:73:8a: 63:1c:46:75:40:ad:d2:8c:c1:83:b8:37:ce:9c:06: 51:a1:48:62:42:dc:28:c7:9d:b9:24:14:ac:94:aa: e4:26:af:ff:53:96:7c:10:94:b9:78:e8:d2:fe:00: 42:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:20:C5:CD:83:58:4A:EA:6C:68:0B:E9:FC:72:ED:F1:12:7F:18:C8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86D8B1B0F8F211EC80881019C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.199.168.0/21 Signature Algorithm: sha256WithRSAEncryption 14:2f:a2:b2:50:ee:4e:98:b7:6d:db:d6:47:81:7f:bc:ac:0a: fd:37:fc:a1:9b:99:53:98:e3:ab:bf:06:5d:03:6e:7c:5d:65: 6d:55:9e:03:4b:cb:88:53:19:6b:85:25:bc:a3:0e:1c:d4:34: 8a:56:6e:7a:34:bb:ec:b6:0d:07:f4:23:07:cc:95:fb:3b:9c: a3:b3:16:5c:77:5c:32:0c:68:97:67:5f:67:be:85:2f:55:d5: 07:89:c2:f5:0e:94:61:7f:24:cd:2b:65:f5:de:25:8e:c0:02: 4f:3f:3d:d9:85:71:62:ad:55:6e:3d:00:92:2c:3c:2d:78:d8: 34:6d:18:64:42:c5:c1:e9:ed:5e:ad:71:b8:d4:c4:c5:24:45: f8:c6:e1:0a:c8:cb:cd:1b:2d:dd:eb:8a:a7:7b:95:38:83:00: 2e:c6:09:e1:45:3f:fa:63:e8:51:61:35:cb:22:23:d8:59:72: 1c:bd:1d:42:19:c4:03:7e:62:eb:9e:16:3f:14:d0:a0:5a:90: 71:98:3d:66:3f:e6:1c:d4:f8:05:1e:2c:ba:65:fd:a6:83:98: ea:23:53:ae:2d:58:28:5d:4c:d0:e3:c3:ee:6d:6b:02:a6:73: b5:96:e9:98:e6:e8:1c:c6:bb:23:90:aa:f6:8b:a5:f7:62:d5: 16:8d:61:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0ODUyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FmMy1mMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouK9bB1VmtOhgbU9WhuZJNUtFx01ZKlD0Iy99GRrNwTVHsGkyoOSyF3yWuEX RvY6xWGCztw8p+gn7jS4rpIvDGBLGXY+9usPQIhTlj5mLf/+mGWDbOioxYbxKAVK EbKDL63FHlWAWjacSc3QRv6rDXfwu8fnb7q5BdT4EbnYnMO5ItEDu9PgqZLQ5Ap3 1O797Z0aDTxeIeebzqKg+xZw4l60R3JKSbbyYY8+ghdTb70mcUryz0K85cVWDsHJ DLAzc5oVes/hUWL3Y8HLjGQwc4pjHEZ1QK3SjMGDuDfOnAZRoUhiQtwox525JBSs lKrkJq//U5Z8EJS5eOjS/gBCuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEsgxc2D WErqbGgL6fxy7fESfxjIMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODZEOEIxQjBG OEYyMTFFQzgwODgxMDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN0x6gwDQYJKoZIhvcNAQELBQADggEBABQvorJQ7k6Yt23b 1keBf7ysCv03/KGbmVOY46u/Bl0DbnxdZW1VngNLy4hTGWuFJbyjDhzUNIpWbno0 u+y2DQf0IwfMlfs7nKOzFlx3XDIMaJdnX2e+hS9V1QeJwvUOlGF/JM0rZfXeJY7A Ak8/PdmFcWKtVW49AJIsPC142DRtGGRCxcHp7V6tcbjUxMUkRfjG4QrIy80bLd3r iqd7lTiDAC7GCeFFP/pj6FFhNcsiI9hZchy9HUIZxAN+YuueFj8U0KBakHGYPWY/ 5hzU+AUeLLpl/aaDmOojU64tWChdTNDjw+5tawKmc7WW6Zjm6BzGuyOQqvaLpfdi 1RaNYWU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org