$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/2B17862A82EE11EAB170FD4BC4F9AE02.roa File: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (raw, json) Hash identifier: G+Hg04K214tOW+obz1Ogpl9COrBHiRBCE7c3okXDxqo= Subject key identifier: 25:F0:01:C8:3D:63:E7:C7:1B:A0:DB:CB:AC:52:6A:F6:83:74:F7:49 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0BC6 Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/2B17862A82EE11EAB170FD4BC4F9AE02.roa Signing time: Mon 10 Jul 2023 18:35:41 +0000 ROA not before: Mon 10 Jul 2023 18:35:41 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 18197 IP address blocks: 116.68.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: Jul 10 18:35:41 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64ac4f7c-7b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:da:45:03:de:0f:5f:3d:f2:74:31:81:b7: 9d:fa:18:9a:28:27:50:5e:26:ab:87:c5:cd:1e:42: ee:b1:98:6b:2f:a8:4c:0b:79:f4:1c:98:41:27:ef: 55:7a:7a:58:17:fb:ac:94:40:15:91:87:ed:0d:59: e3:94:6f:de:ae:fe:b2:43:e7:a5:4d:97:3f:58:ab: 6f:f2:97:0b:9b:32:ad:c8:17:f7:dd:1a:ab:b5:34: 7a:62:4c:1e:05:02:f6:87:c9:f6:50:4e:79:b3:56: b8:b7:23:79:a0:5b:95:7c:8c:af:5d:a2:75:21:72: 30:31:eb:33:66:80:a7:e1:a3:a1:74:e9:c9:7b:b6: fc:ef:c1:fb:5d:e5:b6:9f:45:0e:10:36:96:d1:a9: e3:d8:94:a8:21:1f:2b:09:d4:7d:6d:54:a4:03:ff: 9c:90:25:6d:01:ee:b2:97:f0:4e:b3:5b:62:bc:77: 46:ce:31:c4:47:df:fb:22:df:b2:09:f0:11:59:64: 54:77:02:a3:67:06:2f:a4:64:22:11:97:32:8c:e0: 77:ac:0f:05:f7:5d:24:db:ae:9f:64:6a:e0:60:a2: d2:d0:46:9f:4a:aa:fd:d9:2f:4b:27:8a:e4:79:3c: 5e:56:64:84:e4:e5:5b:56:8e:93:dc:1d:08:4b:ed: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:01:C8:3D:63:E7:C7:1B:A0:DB:CB:AC:52:6A:F6:83:74:F7:49 X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/2B17862A82EE11EAB170FD4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.68.159.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:02:9b:07:33:ce:73:d8:2b:a6:13:4e:ca:02:00:e1:cf:a6: c8:c4:40:8d:e8:73:ba:a7:f3:cd:ea:91:5b:4c:ae:b6:4a:0c: a1:89:f2:bf:50:7a:c4:be:cd:e0:b0:f2:8c:af:2e:b5:ab:91: fb:f4:56:36:02:9a:58:6a:7c:f0:18:4f:ce:ff:22:c8:a3:fc: c2:d8:7c:9a:64:dc:7b:e9:2a:36:df:97:b1:26:b0:de:ce:8c: 6a:ed:91:e3:e6:0c:5b:a2:e0:f2:fe:e1:cd:dc:3f:81:9a:e7: d4:a3:55:56:3f:87:76:48:90:04:d4:4f:fd:5e:a1:cd:6f:d2: d0:f7:84:e6:2a:10:6b:ab:47:a8:60:2c:db:40:df:c1:7c:e8: 59:08:e6:d1:99:69:44:fe:e2:7e:7f:e3:eb:71:b4:2e:67:f4: 12:5b:9d:67:6f:c4:da:df:30:96:5a:2f:3c:18:1d:a8:0c:34: 97:e0:d2:85:2e:08:ab:a5:a2:5c:c8:3f:0f:e0:55:4a:04:c1: e8:99:b6:47:54:ba:49:7d:4e:79:af:3b:64:ab:57:44:41:bb: 19:34:4a:4f:b5:23:b7:a7:62:e8:e2:42:c0:5c:fd:6c:89:a2: f8:c9:88:7b:9e:46:3d:4f:b8:fc:f5:23:3c:e7:98:c2:6a:51: 52:55:b5:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjMwNzEwMTgzNTQxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFjNGY3Yy03YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZfaRQPeD1898nQxgbed+hiaKCdQXiarh8XNHkLusZhrL6hMC3n0HJhBJ+9V enpYF/uslEAVkYftDVnjlG/erv6yQ+elTZc/WKtv8pcLmzKtyBf33RqrtTR6Ykwe BQL2h8n2UE55s1a4tyN5oFuVfIyvXaJ1IXIwMeszZoCn4aOhdOnJe7b878H7XeW2 n0UOEDaW0anj2JSoIR8rCdR9bVSkA/+ckCVtAe6yl/BOs1tivHdGzjHER9/7It+y CfARWWRUdwKjZwYvpGQiEZcyjOB3rA8F910k266fZGrgYKLS0EafSqr92S9LJ4rk eTxeVmSE5OVbVo6T3B0IS+3zMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCXwAcg9 Y+fHG6Dby6xSavaDdPdJMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDY2QTAvNjI1RkY3MjZEOUU3MTFFOTg4MDU0MDE2QzRGOUFFMDIvMkIxNzg2MkE4 MkVFMTFFQUIxNzBGRDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB0RJ8wDQYJKoZIhvcNAQELBQADggEBAJsCmwczznPYK6YT TsoCAOHPpsjEQI3oc7qn883qkVtMrrZKDKGJ8r9QesS+zeCw8oyvLrWrkfv0VjYC mlhqfPAYT87/Isij/MLYfJpk3HvpKjbfl7EmsN7OjGrtkePmDFui4PL+4c3cP4Ga 59SjVVY/h3ZIkATUT/1eoc1v0tD3hOYqEGurR6hgLNtA38F86FkI5tGZaUT+4n5/ 4+txtC5n9BJbnWdvxNrfMJZaLzwYHagMNJfg0oUuCKulolzIPw/gVUoEweiZtkdU ukl9TnmvO2SrV0RBuxk0Sk+1I7enYujiQsBc/WyJovjJiHueRj1PuPz1IzznmMJq UVJVtVk= -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org