$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9AF5FECA2C11EEA0064F35C4F9AE02.roa File: AC9AF5FECA2C11EEA0064F35C4F9AE02.roa (raw, json) Hash identifier: wGcLFBnQM/0L7MvoZfNzWEYEe1vJrzT2oMMtF8j6jjU= Subject key identifier: 37:A6:6C:BA:6B:A4:7A:C9:25:09:FF:DD:7C:9B:79:4B:50:A7:61:99 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 82D2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9AF5FECA2C11EEA0064F35C4F9AE02.roa Signing time: Tue 13 Feb 2024 04:59:32 +0000 ROA not before: Tue 13 Feb 2024 04:59:32 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151710 IP address blocks: 116.199.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33490 (0x82d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Feb 13 04:59:32 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65caf734-9790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7e:e4:ce:12:cd:c7:eb:1e:3b:7f:6e:bc:70: 04:47:8e:dd:0b:3f:71:f9:68:68:67:5e:3e:95:4e: c5:a3:e0:5d:5c:95:26:22:e8:be:3b:ad:9e:1a:f8: 46:79:a1:96:02:6b:ed:63:53:42:f3:d7:46:74:3f: a5:eb:c9:7f:86:49:bd:8f:10:41:f0:fa:cd:67:c4: 65:d0:11:d1:f3:b0:46:a1:0f:c0:e3:12:74:45:2c: b7:99:fe:ee:5c:56:93:53:2f:57:dc:95:06:2e:7f: c9:62:51:0d:46:44:ac:a6:76:9d:43:52:9f:eb:c5: 64:6e:52:f7:49:a9:80:8c:6f:ea:47:15:e0:ae:05: 5e:6c:f6:69:38:6a:f0:36:32:23:24:1e:cf:80:ac: 67:41:cb:aa:53:39:58:ce:eb:64:6a:c5:96:11:5f: 4d:ec:61:5d:ff:59:53:e2:47:e9:cf:9d:22:21:b7: f6:f2:2d:3b:ee:54:7e:9a:d1:c6:07:7f:ac:0c:03: f0:b6:c7:a5:27:7e:4b:97:b4:ec:20:c4:51:15:17: b4:01:f2:e7:a9:1f:0c:2b:a9:18:74:a4:a8:10:fe: 4b:96:98:d7:ae:67:d2:f6:ab:95:2a:5c:92:03:b1: d2:36:03:7c:bd:99:08:5d:f7:08:e4:ff:d1:51:0f: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A6:6C:BA:6B:A4:7A:C9:25:09:FF:DD:7C:9B:79:4B:50:A7:61:99 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9AF5FECA2C11EEA0064F35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.199.206.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:bd:cf:83:d9:39:02:4e:e4:c7:d8:f0:c7:33:96:a4:92:9d: 13:00:ea:98:95:e9:bf:20:52:f7:57:d7:ea:34:be:b4:c6:f9: db:9c:5b:cc:d0:b9:41:ab:32:56:82:89:35:8a:2d:1a:fd:fc: 4e:78:0d:52:87:e7:41:29:dc:c8:4e:ae:31:a7:96:c8:12:63: 8c:61:6f:9e:53:72:ee:3e:67:93:f6:05:a2:6a:13:3d:53:5f: 66:2a:72:74:c2:d5:c5:bc:81:60:f5:76:b4:ed:28:74:e5:d7: 9b:15:20:8e:8d:7b:c0:08:19:6e:c8:e4:75:af:a4:ff:b7:02: c8:6e:90:ec:72:b1:1b:d2:a9:9b:a4:64:e7:e0:85:f1:ff:28: 20:29:c6:1e:92:c0:c5:f9:79:5e:4d:25:91:34:4a:f3:3a:94: d2:60:85:05:ef:85:c9:a8:3e:79:d0:f6:ab:06:7c:e9:98:bf: 3b:24:93:79:0c:fc:7a:fd:53:62:aa:39:99:7c:b8:0c:b3:17: 9d:a5:8d:31:88:a8:64:00:0e:e4:bf:d4:e4:27:21:0a:0d:4b: 50:b0:9c:cf:8b:f1:d1:0f:4e:de:da:bb:04:d4:a0:57:51:05: da:a0:37:53:d4:5f:1c:4a:39:a0:f1:c2:1f:b0:94:3f:8d:d3: ae:10:cd:40 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAILSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDIxMzA0NTkzMloXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVjYWY3MzQtOTc5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPF+5M4SzcfrHjt/brxwBEeO3Qs/cfloaGdePpVOxaPgXVyVJiLovjutnhr4 RnmhlgJr7WNTQvPXRnQ/pevJf4ZJvY8QQfD6zWfEZdAR0fOwRqEPwOMSdEUst5n+ 7lxWk1MvV9yVBi5/yWJRDUZErKZ2nUNSn+vFZG5S90mpgIxv6kcV4K4FXmz2aThq 8DYyIyQez4CsZ0HLqlM5WM7rZGrFlhFfTexhXf9ZU+JH6c+dIiG39vItO+5UfprR xgd/rAwD8LbHpSd+S5e07CDEURUXtAHy56kfDCupGHSkqBD+S5aY165n0varlSpc kgOx0jYDfL2ZCF33COT/0VEPQ+kCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQ3pmy6 a6R6ySUJ/918m3lLUKdhmTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FDOUFGNUZF Q0EyQzExRUVBMDA2NEYzNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBdMfOMA0GCSqGSIb3DQEBCwUAA4IBAQAavc+D2TkCTuTH 2PDHM5akkp0TAOqYlem/IFL3V9fqNL60xvnbnFvM0LlBqzJWgok1ii0a/fxOeA1S h+dBKdzITq4xp5bIEmOMYW+eU3LuPmeT9gWiahM9U19mKnJ0wtXFvIFg9Xa07Sh0 5debFSCOjXvACBluyOR1r6T/twLIbpDscrEb0qmbpGTn4IXx/yggKcYeksDF+Xle TSWRNErzOpTSYIUF74XJqD550ParBnzpmL87JJN5DPx6/VNiqjmZfLgMsxedpY0x iKhkAA7kv9TkJyEKDUtQsJzPi/HRD07e2rsE1KBXUQXaoDdT1F8cSjmg8cIfsJQ/ jdOuEM1A -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org