$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4B6349ECD79011ED98D6CE6AC4F9AE02.roa File: 4B6349ECD79011ED98D6CE6AC4F9AE02.roa (raw, json) Hash identifier: tYaYyaQsrpnXSYsOGrwwzLRKJ2VgPEGWc1iN6aMv68A= Subject key identifier: 11:DD:5F:51:AC:F0:BA:33:4A:C3:6D:BD:19:59:27:46:AF:D9:65:50 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 19E6 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4B6349ECD79011ED98D6CE6AC4F9AE02.roa Signing time: Thu 04 Apr 2024 14:50:41 +0000 ROA not before: Thu 04 Apr 2024 14:50:41 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 393259 IP address blocks: 116.51.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6630 (0x19e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Apr 4 14:50:41 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660ebe41-0165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:65:fb:09:6f:92:61:9c:47:6b:b5:c3:fe: 10:00:40:cb:7c:9f:71:5b:b3:ac:ce:5b:6b:89:40: 44:62:83:86:c6:32:21:ef:87:61:56:27:7c:65:3a: 55:5c:f2:65:e7:c9:c4:f9:95:02:1a:82:10:14:35: 5c:55:4a:49:63:99:0c:81:7a:26:2d:e9:52:83:81: 98:47:04:5e:07:13:cb:3d:0f:82:19:1e:21:c6:79: d4:19:61:dc:21:38:d2:11:79:bc:77:20:8a:21:11: dc:47:99:25:5a:0b:7a:8a:a0:38:52:42:d4:e5:5b: e9:cc:d9:53:3a:05:f6:22:75:53:18:dc:c9:1d:a7: 6c:28:a4:16:40:7e:b4:81:0e:80:7a:2f:fe:33:11: 3e:6c:de:b1:77:68:4a:e1:b2:44:60:83:c1:6c:b9: 51:53:8e:27:e0:71:94:c9:ed:80:2f:6a:9e:f1:5c: 80:fb:59:97:91:d6:14:7b:3d:d4:82:cc:5f:b2:3f: d0:56:c8:88:79:40:03:89:8a:22:45:68:fd:6e:c6: 67:8d:35:97:ff:69:60:12:cc:34:b0:67:5a:bb:89: 0c:9e:c8:8f:a9:cd:c9:a0:13:1a:1b:d7:e9:f5:42: e5:f7:ae:30:db:1e:27:8a:6a:f9:b0:9c:08:8c:b7: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DD:5F:51:AC:F0:BA:33:4A:C3:6D:BD:19:59:27:46:AF:D9:65:50 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/4B6349ECD79011ED98D6CE6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.51.25.0/24 Signature Algorithm: sha256WithRSAEncryption 36:20:25:93:16:13:e5:04:18:ac:0b:f4:15:54:51:a7:23:c7: bc:18:89:6b:d1:6c:1c:52:2e:94:33:f9:05:43:2c:28:d1:b3: 91:4f:0e:d3:dc:4a:47:88:28:ea:8f:f3:fe:50:93:66:e7:d2: a9:45:33:e7:91:f9:f5:9b:cf:9c:bc:7a:2b:01:3d:65:54:c8: ac:96:04:95:24:30:e9:56:30:3d:04:31:d8:0f:9c:e8:a0:a2: d7:72:94:4a:ce:69:7e:be:06:0a:ba:5f:52:b3:87:15:99:be: 8e:ae:c4:a8:54:52:f2:36:0b:4d:dc:78:33:ba:d7:29:ab:5e: 98:23:71:46:bb:b9:e6:47:45:d7:9c:25:88:f8:a5:a2:c6:66: 4c:13:d8:d7:46:9f:12:81:73:30:61:08:88:96:12:20:17:d7: 69:3e:8b:84:7f:1b:b4:a0:77:92:b0:78:e2:4d:33:2c:72:7e: ba:cb:d4:09:a5:7a:71:3b:1f:87:2e:9b:fa:5a:6e:3e:29:33: 7d:b0:8f:51:84:06:4c:e1:a4:19:b0:7f:22:c1:a1:14:ca:7c: 37:fb:f1:d5:05:5d:e3:fa:28:e8:5c:c4:be:f3:ba:22:16:c0: 63:e5:6b:68:2f:e4:b0:51:2d:24:39:1e:3b:57:15:44:11:f7: 73:cf:e9:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjQwNDA0MTQ1MDQxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlYmU0MS0wMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxY5l+wlvkmGcR2u1w/4QAEDLfJ9xW7OszltriUBEYoOGxjIh74dhVid8ZTpV XPJl58nE+ZUCGoIQFDVcVUpJY5kMgXomLelSg4GYRwReBxPLPQ+CGR4hxnnUGWHc ITjSEXm8dyCKIRHcR5klWgt6iqA4UkLU5VvpzNlTOgX2InVTGNzJHadsKKQWQH60 gQ6Aei/+MxE+bN6xd2hK4bJEYIPBbLlRU44n4HGUye2AL2qe8VyA+1mXkdYUez3U gsxfsj/QVsiIeUADiYoiRWj9bsZnjTWX/2lgEsw0sGdau4kMnsiPqc3JoBMaG9fp 9ULl964w2x4nimr5sJwIjLdRwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBHdX1Gs 8LozSsNtvRlZJ0av2WVQMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvNEI2MzQ5RUNE NzkwMTFFRDk4RDZDRTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB0MxkwDQYJKoZIhvcNAQELBQADggEBADYgJZMWE+UEGKwL 9BVUUacjx7wYiWvRbBxSLpQz+QVDLCjRs5FPDtPcSkeIKOqP8/5Qk2bn0qlFM+eR +fWbz5y8eisBPWVUyKyWBJUkMOlWMD0EMdgPnOigotdylErOaX6+Bgq6X1KzhxWZ vo6uxKhUUvI2C03ceDO61ymrXpgjcUa7ueZHRdecJYj4paLGZkwT2NdGnxKBczBh CIiWEiAX12k+i4R/G7Sgd5KweOJNMyxyfrrL1AmlenE7H4cum/pabj4pM32wj1GE BkzhpBmwfyLBoRTKfDf78dUFXeP6KOhcxL7zuiIWwGPla2gv5LBRLSQ5HjtXFUQR 93PP6Sc= -----END CERTIFICATE-----Generated at Sat May 4 15:45:50 2024 by rpki-client on console-fra.rpki-client.org