$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A16366C6FDF811EEA4D57274C4F9AE02.roa File: A16366C6FDF811EEA4D57274C4F9AE02.roa (raw, json) Hash identifier: XPJpmrYNcSNbm9TnuwsF2hc9Dluf13QgHRh9YOFG7n8= Subject key identifier: B4:9E:D2:05:BE:4D:74:03:8E:22:1B:CE:C1:3C:C2:21:C4:F9:C4:20 Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: D6 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A16366C6FDF811EEA4D57274C4F9AE02.roa Signing time: Mon 01 Jul 2024 05:46:41 +0000 ROA not before: Mon 01 Jul 2024 05:46:41 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 16509 IP address blocks: 217.10.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9 Validity Not Before: Jul 1 05:46:41 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=668242c1-31ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:87:13:1b:4d:fd:3b:29:79:27:00:6c:7a:b6: e5:f1:03:ce:cf:2d:fe:c3:7c:64:0e:88:b6:8a:1f: 02:e0:d7:0c:3a:2f:ff:aa:ef:7f:86:80:7f:fb:90: af:12:d0:56:3c:a7:73:2e:d1:73:0d:09:ea:a0:c8: d3:0f:53:31:92:3a:07:be:51:7a:48:b8:ee:03:a1: 2d:9d:3b:17:e5:bb:a4:a3:ff:12:e2:bc:d8:49:ce: 7e:68:3f:9f:7a:6e:fa:21:de:cc:30:dd:42:5e:ac: 82:2e:70:29:df:72:b2:53:68:1c:d8:89:32:8e:95: 63:c4:af:6d:e5:92:93:cc:b2:40:d3:42:59:5f:f8: 4f:76:04:c1:22:a2:9d:5c:4d:39:55:4a:1c:98:a2: 44:67:e7:9b:67:95:6a:69:0f:40:9e:6d:de:1d:f4: 3b:4b:dc:81:a7:15:2c:65:f9:8d:3e:4f:19:b5:f8: c7:ed:1a:4f:4f:c0:b8:50:08:2a:b8:69:0e:32:4c: ca:89:0f:cb:d1:f3:48:c5:56:1c:a6:ec:bf:35:50: e8:62:97:13:b3:10:de:0a:f0:a9:73:b4:eb:45:0d: 1e:ae:ef:09:c2:5c:d7:37:16:73:7b:f4:ee:bb:a3: d3:cd:d2:55:9a:9e:ba:11:30:82:67:a3:cc:07:6d: 09:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9E:D2:05:BE:4D:74:03:8E:22:1B:CE:C1:3C:C2:21:C4:F9:C4:20 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A16366C6FDF811EEA4D57274C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 217.10.231.0/24 Signature Algorithm: sha256WithRSAEncryption 23:2c:67:26:d7:87:62:cf:42:1b:71:97:20:b4:79:eb:71:58: 8e:fe:8d:ff:f3:37:02:38:30:1e:a3:b4:07:b1:c9:c5:6c:71: 2e:3d:1c:96:98:8e:f9:dd:d9:ee:3c:2f:bb:cc:38:90:a3:dc: a4:a1:2d:d4:e6:50:55:13:51:d1:81:aa:76:f3:9c:08:56:35: 51:b5:e8:2f:56:ca:cf:b3:8d:17:4e:be:2e:a7:43:45:16:85: e9:ef:51:f6:a9:1c:a7:fa:86:a5:f4:b5:e0:4a:34:ef:44:23: 90:9b:3a:5c:84:e2:6b:f0:c9:f5:fc:bd:72:65:9c:c2:0d:35: 40:68:d0:43:69:e9:9f:20:d0:1a:54:b4:fb:7a:21:13:01:cc: 8d:ba:23:1f:aa:10:aa:5f:ae:28:82:43:c2:54:de:98:40:8a: 4b:65:3f:9b:85:63:9f:77:58:6e:61:7d:98:17:45:b9:ed:a7: 93:bd:fc:4b:29:cb:9e:0b:a3:c4:fa:41:b9:ac:76:59:23:c2: 2f:12:15:aa:7f:09:58:f2:fb:2f:54:97:c5:18:81:28:39:a6: ea:11:66:e4:13:59:e8:15:f6:85:2e:84:a9:d7:11:c5:54:b0: 1a:f5:34:ed:fb:05:a3:35:46:c3:f8:ae:2c:25:18:5c:1f:af: c5:90:50:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjQwNzAxMDU0NjQxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjgyNDJjMS0zMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+IcTG039Oyl5JwBserbl8QPOzy3+w3xkDoi2ih8C4NcMOi//qu9/hoB/+5Cv EtBWPKdzLtFzDQnqoMjTD1MxkjoHvlF6SLjuA6EtnTsX5buko/8S4rzYSc5+aD+f em76Id7MMN1CXqyCLnAp33KyU2gc2IkyjpVjxK9t5ZKTzLJA00JZX/hPdgTBIqKd XE05VUocmKJEZ+ebZ5VqaQ9Anm3eHfQ7S9yBpxUsZfmNPk8ZtfjH7RpPT8C4UAgq uGkOMkzKiQ/L0fNIxVYcpuy/NVDoYpcTsxDeCvCpc7TrRQ0eru8JwlzXNxZze/Tu u6PTzdJVmp66ETCCZ6PMB20JHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLSe0gW+ TXQDjiIbzsE8wiHE+cQgMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkVCRTkvOTRDOUI4NzgwMDVEMTFFRUJFN0E5MjQxQzRGOUFFMDIvQTE2MzY2QzZG REY4MTFFRUE0RDU3Mjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADZCucwDQYJKoZIhvcNAQELBQADggEBACMsZybXh2LPQhtx lyC0eetxWI7+jf/zNwI4MB6jtAexycVscS49HJaYjvnd2e48L7vMOJCj3KShLdTm UFUTUdGBqnbznAhWNVG16C9Wys+zjRdOvi6nQ0UWhenvUfapHKf6hqX0teBKNO9E I5CbOlyE4mvwyfX8vXJlnMINNUBo0ENp6Z8g0BpUtPt6IRMBzI26Ix+qEKpfriiC Q8JU3phAiktlP5uFY593WG5hfZgXRbntp5O9/Espy54Lo8T6Qbmsdlkjwi8SFap/ CVjy+y9Ul8UYgSg5puoRZuQTWegV9oUuhKnXEcVUsBr1NO37BaM1RsP4riwlGFwf r8WQUGI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:41 2025 by rpki-client