$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/5C818B14EEF911ED891BBB4EC4F9AE02.roa File: 5C818B14EEF911ED891BBB4EC4F9AE02.roa (raw, json) Hash identifier: L2w0Fzx0VxoM82eKyoPgr1hCZprmQxiXYiAMQCUIaXY= Subject key identifier: 7D:BD:18:39:D5:B8:FA:4A:8D:FF:83:26:F0:64:C8:4F:96:41:38:B5 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 19E8 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/5C818B14EEF911ED891BBB4EC4F9AE02.roa Signing time: Thu 04 Apr 2024 14:50:43 +0000 ROA not before: Thu 04 Apr 2024 14:50:43 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 3949 IP address blocks: 116.51.19.0/24 maxlen: 24 116.51.20.0/24 maxlen: 24 116.51.23.192/27 maxlen: 27 116.51.30.192/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6632 (0x19e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Apr 4 14:50:43 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660ebe42-f7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:15:d8:c5:3c:90:f9:d5:aa:37:d3:53:6e: 67:63:3f:63:20:ad:ba:df:f5:a4:73:39:a8:d8:c4: b2:fa:b3:5c:06:12:52:c8:29:88:bb:03:ee:fe:97: 68:74:72:2f:82:2e:47:17:ca:ab:11:5d:a2:6e:45: 66:39:d9:99:7d:65:72:77:19:fb:d8:b4:b2:0d:86: 1b:ad:f9:93:ae:2f:40:85:9a:c7:43:db:c4:57:a6: a9:fe:2e:7e:f1:b8:1c:06:27:fd:83:0d:bd:f3:ba: f3:48:51:27:01:f8:23:44:ce:7e:a5:10:6f:32:8e: 46:cd:58:1e:b5:5b:e1:83:45:85:77:58:ba:ef:ef: 17:30:74:38:3c:4c:08:52:5c:bb:e7:24:32:e8:5e: 34:22:24:7f:8f:17:6c:86:0b:a8:9d:a3:8b:7f:92: 09:fa:20:4f:21:ea:04:60:f8:75:ed:55:cf:87:c4: 9b:94:c4:5d:fa:ce:64:75:6a:bc:82:47:46:d9:b8: 58:de:bb:29:bd:73:e3:98:22:0e:b0:7e:b7:40:60: 80:0b:ea:e2:0c:39:a5:fb:91:a6:b3:d7:b5:3f:3f: c8:6c:a2:08:bc:f8:7f:e5:c7:ec:6e:dc:4b:65:a8: 33:8e:82:d0:70:c4:92:64:82:3c:55:ff:f5:8e:17: da:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BD:18:39:D5:B8:FA:4A:8D:FF:83:26:F0:64:C8:4F:96:41:38:B5 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/5C818B14EEF911ED891BBB4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.51.19.0-116.51.20.255 116.51.23.192/27 116.51.30.192/27 Signature Algorithm: sha256WithRSAEncryption 74:e2:c5:f2:ec:46:39:c4:13:25:f6:ae:bf:4f:32:df:05:56: 2c:22:c1:77:ca:85:ec:ca:79:9c:32:55:58:76:a1:80:7b:38: 1d:fe:82:d0:e2:2b:ad:93:3e:a8:cc:aa:08:6e:a3:68:64:f3: 0f:12:b4:c4:6f:00:1d:af:31:bb:29:3b:93:cb:71:4b:12:e7: 79:ec:4f:a6:d2:e7:10:04:4f:37:fa:a2:66:9a:b8:ea:cd:a5: 55:71:3a:aa:5f:17:d8:8e:76:d2:11:76:12:d8:94:37:ac:7e: 1d:9c:3e:01:ac:d6:2d:b9:d2:42:ad:2e:ce:98:78:bb:43:e5: f1:0d:e7:cd:9f:12:5a:55:2f:71:3c:a5:a7:a2:7e:54:20:83: 6f:fb:33:d0:bf:a3:e3:ea:09:1d:7e:08:69:b5:2d:17:21:ac: 6b:61:df:5f:e1:f3:1d:31:bd:a0:19:50:a6:c7:73:ad:5a:bb: 3e:7b:e4:db:24:4b:45:3c:32:71:90:43:04:48:47:fd:b3:54: 93:cf:48:1d:83:b6:f6:b8:cf:7b:3a:46:f9:b7:c5:41:54:93: ed:2e:bc:1d:e4:6d:62:64:bb:bf:86:bc:c3:cd:d6:8c:7f:7d: 31:16:d1:77:e4:5e:c6:d2:2d:4d:e7:a3:96:64:eb:da:cc:2c: bc:07:62:00 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICGegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjQwNDA0MTQ1MDQzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlYmU0Mi1mN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOAV2MU8kPnVqjfTU25nYz9jIK263/Wkczmo2MSy+rNcBhJSyCmIuwPu/pdo dHIvgi5HF8qrEV2ibkVmOdmZfWVydxn72LSyDYYbrfmTri9AhZrHQ9vEV6ap/i5+ 8bgcBif9gw2987rzSFEnAfgjRM5+pRBvMo5GzVgetVvhg0WFd1i67+8XMHQ4PEwI Uly75yQy6F40IiR/jxdshguonaOLf5IJ+iBPIeoEYPh17VXPh8SblMRd+s5kdWq8 gkdG2bhY3rspvXPjmCIOsH63QGCAC+riDDml+5Gms9e1Pz/IbKIIvPh/5cfsbtxL ZagzjoLQcMSSZII8Vf/1jhfaNwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFH29GDnV uPpKjf+DJvBkyE+WQTi1MB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvNUM4MThCMTRF RUY5MTFFRDg5MUJCQjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAHQzEwMEAHQzFAMFBXQzF8ADBQV0Mx7AMA0GCSqGSIb3 DQEBCwUAA4IBAQB04sXy7EY5xBMl9q6/TzLfBVYsIsF3yoXsynmcMlVYdqGAezgd /oLQ4iutkz6ozKoIbqNoZPMPErTEbwAdrzG7KTuTy3FLEud57E+m0ucQBE83+qJm mrjqzaVVcTqqXxfYjnbSEXYS2JQ3rH4dnD4BrNYtudJCrS7OmHi7Q+XxDefNnxJa VS9xPKWnon5UIINv+zPQv6Pj6gkdfghptS0XIaxrYd9f4fMdMb2gGVCmx3OtWrs+ e+TbJEtFPDJxkEMESEf9s1STz0gdg7b2uM97Okb5t8VBVJPtLrwd5G1iZLu/hrzD zdaMf30xFtF35F7G0i1N56OWZOvazCy8B2IA -----END CERTIFICATE-----Generated at Sat May 4 15:55:04 2024 by rpki-client on console-ams.rpki-client.org