$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/7F9DD2F04EDF11EFADECB25EC4F9AE02.roa File: 7F9DD2F04EDF11EFADECB25EC4F9AE02.roa (raw, json) Hash identifier: t/UKot4OzseaqVGTSbSCnK3mysWrzHb4pIJPoAJ2Adc= Subject key identifier: 10:22:6C:6B:FA:15:A9:2F:6B:C9:01:CC:30:E2:E7:4E:9C:FC:EB:80 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1A30 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/7F9DD2F04EDF11EFADECB25EC4F9AE02.roa Signing time: Wed 31 Jul 2024 01:52:11 +0000 ROA not before: Wed 31 Jul 2024 01:52:11 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 3949 IP address blocks: 116.51.19.0/24 maxlen: 24 116.51.20.0/24 maxlen: 24 116.51.22.240/28 maxlen: 32 116.51.23.192/27 maxlen: 27 116.51.30.192/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6704 (0x1a30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Jul 31 01:52:11 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66a998ca-cb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7f:2b:d6:4a:8d:ce:ca:95:78:dd:71:c4:eb: 39:5c:5e:49:ca:e7:ed:c3:f8:9f:23:b4:2d:59:e4: 84:51:1f:ed:43:62:5b:f6:4a:3d:2f:90:cd:20:2c: 36:ec:87:51:8e:47:e8:13:9a:94:2d:a3:ab:0e:3d: 81:0e:20:74:aa:e3:ca:71:a3:1b:94:3c:02:15:54: 88:ea:4e:bf:11:a1:3f:3b:5c:6a:d9:93:30:e4:da: 9c:7a:74:1d:f4:d8:8b:7f:65:c8:e0:07:ba:e7:2f: 09:7c:66:21:ae:51:bc:0d:8e:49:a2:b4:91:38:dd: 68:e0:c4:63:3c:c1:81:d0:eb:a7:76:cd:14:ed:ce: 8f:44:24:f6:74:a6:6d:e4:63:f2:13:7c:d2:79:16: f5:73:a3:c3:cf:e9:a4:68:cc:36:af:4b:8b:18:95: b4:25:4a:15:c3:ff:50:25:86:f0:20:d1:51:b9:40: aa:b4:b0:bf:2a:1f:4b:e3:85:ce:d4:a9:51:d7:99: c8:f1:96:88:20:34:7e:7f:33:ff:a0:f5:79:77:af: 77:de:22:ea:19:d5:1f:78:c3:dd:c2:25:99:ed:8d: 01:8a:68:5f:d8:a8:26:07:13:ba:cb:0d:b7:62:dc: 06:33:06:1f:41:b7:b7:0e:14:2a:05:6d:1a:db:99: 05:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:22:6C:6B:FA:15:A9:2F:6B:C9:01:CC:30:E2:E7:4E:9C:FC:EB:80 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/7F9DD2F04EDF11EFADECB25EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.51.19.0-116.51.20.255 116.51.22.240/28 116.51.23.192/27 116.51.30.192/27 Signature Algorithm: sha256WithRSAEncryption 5f:1e:29:e4:55:e2:6b:36:7c:0c:9a:c6:e2:20:fa:2a:1f:29: 50:6d:e1:ce:23:d2:5d:cd:c6:0b:55:3e:13:2e:ae:59:32:b4: 17:78:5d:3e:3c:fa:3d:0a:11:21:2e:10:3a:ae:71:6e:10:e6: 35:fd:84:aa:94:57:ab:13:5b:0f:24:e3:57:80:05:e6:a7:e8: 71:ee:66:af:38:9e:da:48:fd:d4:82:e8:3e:8c:84:04:18:fe: e4:f9:7b:1e:07:4a:36:77:d4:64:34:23:e7:e2:96:26:0a:81: 55:7b:61:c4:87:be:aa:ab:58:9d:19:ae:64:5f:3e:76:f2:7b: d3:c6:b1:1f:70:b9:aa:b0:2b:12:33:ad:8d:ba:28:3f:00:d1: 22:0f:4d:b5:a6:bd:12:14:6a:67:60:85:0e:0a:df:aa:4a:4c: ef:f7:c0:31:b6:d8:53:73:4c:cc:1c:fe:3d:0c:cf:34:b3:0f: c6:60:33:cd:82:cf:fd:35:c3:d6:48:c5:46:c8:b8:62:e8:81: 68:04:64:33:66:97:78:01:ca:50:93:d8:7a:08:36:0a:69:92: ac:fc:42:b5:98:9a:69:ac:e6:7d:2d:b4:be:02:78:c8:9f:e0: 83:01:1a:be:c0:b4:a2:e1:e5:ef:e4:f5:46:8a:b5:aa:22:bd: c0:53:d9:13 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICGjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjQwNzMxMDE1MjExWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5OThjYS1jYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy38r1kqNzsqVeN1xxOs5XF5Jyuftw/ifI7QtWeSEUR/tQ2Jb9ko9L5DNICw2 7IdRjkfoE5qULaOrDj2BDiB0quPKcaMblDwCFVSI6k6/EaE/O1xq2ZMw5NqcenQd 9NiLf2XI4Ae65y8JfGYhrlG8DY5JorSRON1o4MRjPMGB0Ounds0U7c6PRCT2dKZt 5GPyE3zSeRb1c6PDz+mkaMw2r0uLGJW0JUoVw/9QJYbwINFRuUCqtLC/Kh9L44XO 1KlR15nI8ZaIIDR+fzP/oPV5d6933iLqGdUfeMPdwiWZ7Y0Bimhf2KgmBxO6yw23 YtwGMwYfQbe3DhQqBW0a25kFCwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFBAibGv6 Fakva8kBzDDi506c/OuAMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvN0Y5REQyRjA0 RURGMTFFRkFERUNCMjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMCkEAgABMCMwDAMEAHQzEwMEAHQzFAMFBHQzFvADBQV0MxfAAwUFdDMewDAN BgkqhkiG9w0BAQsFAAOCAQEAXx4p5FXiazZ8DJrG4iD6Kh8pUG3hziPSXc3GC1U+ Ey6uWTK0F3hdPjz6PQoRIS4QOq5xbhDmNf2EqpRXqxNbDyTjV4AF5qfoce5mrzie 2kj91ILoPoyEBBj+5Pl7HgdKNnfUZDQj5+KWJgqBVXthxIe+qqtYnRmuZF8+dvJ7 08axH3C5qrArEjOtjbooPwDRIg9Ntaa9EhRqZ2CFDgrfqkpM7/fAMbbYU3NMzBz+ PQzPNLMPxmAzzYLP/TXD1kjFRsi4YuiBaARkM2aXeAHKUJPYegg2CmmSrPxCtZia aazmfS20vgJ4yJ/ggwEavsC0ouHl7+T1Roq1qiK9wFPZEw== -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:19 2024 by rpki-client on console-ams.rpki-client.org