$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa File: ACC8833824DE11EDAEC0E529C4F9AE02.roa (raw, json) Hash identifier: QGAwZUuCqo2rdVld9FJT3Ob19+cZKtlgVcmXc6DM0f4= Subject key identifier: 89:16:00:C4:8D:C0:CE:8B:AA:2D:3C:AE:2A:36:1D:6D:20:21:CA:FD Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 19E4 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa Signing time: Thu 04 Apr 2024 14:50:39 +0000 ROA not before: Thu 04 Apr 2024 14:50:39 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 2914 IP address blocks: 116.51.15.0/24 maxlen: 24 116.51.16.0/20 maxlen: 20 116.51.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 14:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6628 (0x19e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Apr 4 14:50:39 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660ebe3f-ac70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:eb:8a:3d:bd:75:7a:51:dd:1b:27:cd:3f: 33:95:4f:71:20:f7:f8:10:c5:ed:ad:dd:0c:52:e2: 46:df:b9:c6:d1:ca:57:fb:4c:e2:97:09:67:55:a1: 45:5c:94:55:22:71:d3:d5:a0:24:ce:25:db:a5:31: 04:28:4b:97:ab:7c:d6:99:e2:49:ed:01:f7:72:bc: cf:74:6d:1e:a2:4f:09:a1:fa:85:db:57:37:16:8c: ac:a8:a6:04:a7:45:6b:83:5b:87:55:82:99:74:75: e2:57:e1:cf:73:cb:cd:e0:6d:81:58:30:a7:bd:2e: 88:dd:34:04:1d:38:47:fc:62:be:13:ba:8f:8b:5f: e1:93:33:10:a8:0b:18:9f:31:6f:77:da:14:8a:ed: 47:44:89:5f:90:dd:c5:ff:49:fc:c5:66:23:5f:e0: 04:e0:56:d1:9e:45:a3:fe:23:ac:7e:1f:32:ec:04: 87:b3:94:23:0b:15:29:4d:35:04:6b:1c:09:ea:65: e9:99:2a:5a:39:03:e5:dc:aa:c7:9a:e6:d7:3e:cd: 08:3a:ac:ba:f7:b1:c8:bd:17:85:eb:90:2c:dc:55: 43:48:40:0c:2a:e5:9f:16:9b:c1:68:5a:5a:cf:ac: 16:04:ec:73:64:ec:d4:ee:6b:e9:83:3f:d0:75:57: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:16:00:C4:8D:C0:CE:8B:AA:2D:3C:AE:2A:36:1D:6D:20:21:CA:FD X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.51.15.0-116.51.31.255 116.51.40.0/21 Signature Algorithm: sha256WithRSAEncryption aa:21:03:61:8d:c8:e7:ad:08:53:b0:7e:96:00:5f:f2:90:20: 4b:89:29:b0:62:c7:ab:9d:85:06:b1:e9:6d:5c:ae:6b:f6:59: 64:21:bf:3b:20:a6:e5:f3:19:3b:a1:ea:d9:a6:24:ba:a4:2d: 45:cc:d2:6f:9a:b8:a6:47:32:83:60:2a:02:bb:b5:0a:c6:3b: fc:0d:64:13:49:95:6d:74:a3:32:d3:c6:45:7b:95:47:3f:27: 3d:bf:55:0a:95:6a:cb:d6:5a:6f:95:38:84:8d:4d:d2:c6:89: 10:06:73:9a:0c:f2:09:59:48:a2:f1:e3:03:05:67:80:98:2f: d4:8c:4a:80:8a:67:45:75:91:f4:ec:cd:6a:5b:12:11:81:e8: 47:9a:57:15:18:bf:40:c0:98:be:c9:d0:84:99:3b:b6:cd:89: 95:e0:01:80:7b:6d:e4:e6:72:a7:41:18:79:f8:76:0f:d5:de: f0:29:e8:6c:6a:5f:d1:5d:17:4c:35:3d:34:27:b2:bd:ef:09: a0:43:24:76:9e:88:a3:92:96:90:f6:66:fb:17:18:91:89:dd: 82:58:d6:ae:a8:dd:1f:e2:86:e9:74:3a:f6:ee:ae:10:14:96: c4:ec:ab:8a:c5:2a:b5:36:73:42:31:ef:62:18:c2:81:1d:a8: 82:b5:6b:f6 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICGeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjQwNDA0MTQ1MDM5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlYmUzZi1hYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZHrij29dXpR3RsnzT8zlU9xIPf4EMXtrd0MUuJG37nG0cpX+0zilwlnVaFF XJRVInHT1aAkziXbpTEEKEuXq3zWmeJJ7QH3crzPdG0eok8JofqF21c3FoysqKYE p0Vrg1uHVYKZdHXiV+HPc8vN4G2BWDCnvS6I3TQEHThH/GK+E7qPi1/hkzMQqAsY nzFvd9oUiu1HRIlfkN3F/0n8xWYjX+AE4FbRnkWj/iOsfh8y7ASHs5QjCxUpTTUE axwJ6mXpmSpaOQPl3KrHmubXPs0IOqy697HIvReF65As3FVDSEAMKuWfFpvBaFpa z6wWBOxzZOzU7mvpgz/QdVdLUQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFIkWAMSN wM6Lqi08rio2HW0gIcr9MB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvQUNDODgzMzgy NERFMTFFREFFQzBFNTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEAHQzDwMEBXQzAAMEA3QzKDANBgkqhkiG9w0BAQsFAAOC AQEAqiEDYY3I560IU7B+lgBf8pAgS4kpsGLHq52FBrHpbVyua/ZZZCG/OyCm5fMZ O6Hq2aYkuqQtRczSb5q4pkcyg2AqAru1CsY7/A1kE0mVbXSjMtPGRXuVRz8nPb9V CpVqy9Zab5U4hI1N0saJEAZzmgzyCVlIovHjAwVngJgv1IxKgIpnRXWR9OzNalsS EYHoR5pXFRi/QMCYvsnQhJk7ts2JleABgHtt5OZyp0EYefh2D9Xe8CnobGpf0V0X TDU9NCeyve8JoEMkdp6Io5KWkPZm+xcYkYndgljWrqjdH+KG6XQ69u6uEBSWxOyr isUqtTZzQjHvYhjCgR2ogrVr9g== -----END CERTIFICATE-----Generated at Tue Apr 16 17:34:15 2024 by rpki-client on console-ams.rpki-client.org