$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/C4BA1CE6E69211EE99E71B6AC4F9AE02.roa File: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (raw, json) Hash identifier: IY8DaCEG1YRTotH1n6mpqd+3bhzVn9WvsX3TpMpoT3M= Subject key identifier: 4B:43:42:8C:05:69:A9:55:5E:5E:B7:CA:3B:C8:48:19:53:82:87:86 Certificate issuer: /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Certificate serial: 03 Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/C4BA1CE6E69211EE99E71B6AC4F9AE02.roa Signing time: Wed 20 Mar 2024 08:20:53 +0000 ROA not before: Wed 20 Mar 2024 08:20:53 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 152458 IP address blocks: 2001:df3:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Validity Not Before: Mar 20 08:20:53 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65fa9c65-2a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fc:1e:cb:48:f7:1a:5f:0b:26:71:d5:46:30: 55:aa:70:be:26:64:77:7c:c9:5a:63:58:1c:56:00: bd:64:bd:6f:d2:b2:14:e6:8f:b5:dd:85:c3:05:8d: 08:80:89:fc:74:f9:e8:64:7f:54:a0:0f:f6:33:79: ff:29:38:2f:27:4d:58:3b:d0:68:1d:dc:1f:a6:d5: 28:55:11:d7:9c:e9:91:24:2d:ef:e3:60:b8:f7:e9: 89:dc:4b:7a:f8:39:67:a6:cb:a9:d6:e9:b5:64:f1: 6b:82:c9:e6:74:f1:83:cb:65:56:4f:53:5b:5c:d0: 21:4e:21:99:82:49:63:e6:a5:e9:f9:7b:16:18:e7: d6:54:43:76:7f:e5:bf:7a:24:60:90:0f:ac:a1:9d: 61:fb:de:d6:4c:b1:14:a5:19:a4:ad:96:d8:4c:89: ca:c4:57:dd:01:9f:a7:0d:3c:94:8f:8b:9d:05:16: 98:77:01:25:e2:9e:97:2a:c5:dd:9e:74:72:2f:b0: 20:ed:31:14:20:2d:50:91:66:ad:fd:7b:bc:e1:9b: 11:a6:b3:26:f6:a3:85:89:bd:27:2f:ed:ba:18:8a: 46:8c:38:60:f4:d8:60:ed:7a:4e:eb:37:50:a8:ce: 96:fb:2a:35:fb:b8:25:b7:ab:31:43:9a:1a:92:0f: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:43:42:8C:05:69:A9:55:5E:5E:B7:CA:3B:C8:48:19:53:82:87:86 X509v3 Authority Key Identifier: keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/C4BA1CE6E69211EE99E71B6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:7140::/48 Signature Algorithm: sha256WithRSAEncryption ba:2d:67:70:3e:a8:ee:6f:cd:ed:ed:51:16:e5:1d:50:7a:17: 2c:5c:5e:b2:b1:c5:76:9d:f9:76:7e:03:6c:65:81:24:cd:6c: e3:ab:97:af:1e:01:e6:7d:f7:fa:c0:fb:ab:9e:30:e2:70:cd: 50:93:38:b0:7f:06:ce:09:50:80:b2:38:70:33:94:1a:bc:4b: ce:b6:07:0f:c0:1d:f0:bb:20:30:71:55:c3:48:5a:e4:3b:13: a5:3a:40:17:1c:63:ae:dd:53:be:0c:f2:72:7a:cd:19:08:c2: c5:6f:c5:77:f2:3c:02:8b:16:dd:e0:e1:28:62:aa:b0:be:e9: bf:a9:e3:f1:0d:7a:1c:80:ea:a8:83:1b:e6:1b:4e:1a:19:39: 57:25:c2:13:9c:83:fe:eb:e0:37:05:77:d6:53:19:52:ce:33: c9:9b:9a:49:45:c0:93:97:ef:de:2e:cf:62:98:87:e9:a7:8b: 7e:53:fc:c6:bb:21:bc:12:06:50:a9:00:e1:3c:a1:b2:ae:2f: 6c:5f:df:d6:ae:2e:ec:5b:2d:05:af:3b:db:c2:49:c1:00:1e: 42:7f:2e:ac:82:19:47:40:15:0a:b2:f7:60:41:18:9f:25:89: 44:72:8d:42:9e:2f:33:7e:9e:a9:e2:31:36:d6:a6:95:19:95: 4f:ea:3d:ba -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjZCMzExMC8GA1UEBRMoMDA0QkJCQzAxQzU3MUZBNzBGMjBFQTQ0MDUwMDU3RDlE QzlFQkFEMjAeFw0yNDAzMjAwODIwNTNaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZmE5YzY1LTJhMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj/B7LSPcaXwsmcdVGMFWqcL4mZHd8yVpjWBxWAL1kvW/SshTmj7XdhcMFjQiA ifx0+ehkf1SgD/Yzef8pOC8nTVg70Ggd3B+m1ShVEdec6ZEkLe/jYLj36YncS3r4 OWemy6nW6bVk8WuCyeZ08YPLZVZPU1tc0CFOIZmCSWPmpen5exYY59ZUQ3Z/5b96 JGCQD6yhnWH73tZMsRSlGaStlthMicrEV90Bn6cNPJSPi50FFph3ASXinpcqxd2e dHIvsCDtMRQgLVCRZq39e7zhmxGmsyb2o4WJvScv7boYikaMOGD02GDtek7rN1Co zpb7KjX7uCW3qzFDmhqSDwmRAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUS0NCjAVp qVVeXrfKO8hIGVOCh4YwHwYDVR0jBBgwFoAUAEu7wBxXH6cPIOpEBQBX2dyeutIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNkIzL0NFOUYxNkZFRTY5 MTExRUVCRjA1ODkzMkM0RjlBRTAyL0FFdTd3QnhYSDZjUElPcEVCUUJYMmR5ZXV0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUV1N3dCeFhINmNQSU9wRUJRQlgyZHlldXRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DRTlGMTZGRUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DNEJBMUNFNkU2 OTIxMUVFOTlFNzFCNkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfNxQDANBgkqhkiG9w0BAQsFAAOCAQEAui1ncD6o7m/N 7e1RFuUdUHoXLFxesrHFdp35dn4DbGWBJM1s46uXrx4B5n33+sD7q54w4nDNUJM4 sH8GzglQgLI4cDOUGrxLzrYHD8Ad8LsgMHFVw0ha5DsTpTpAFxxjrt1TvgzycnrN GQjCxW/Fd/I8AosW3eDhKGKqsL7pv6nj8Q16HIDqqIMb5htOGhk5VyXCE5yD/uvg NwV31lMZUs4zyZuaSUXAk5fv3i7PYpiH6aeLflP8xrshvBIGUKkA4Tyhsq4vbF/f 1q4u7FstBa8728JJwQAeQn8urIIZR0AVCrL3YEEYnyWJRHKNQp4vM36eqeIxNtam lRmVT+o9ug== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:10 2024 by rpki-client on console-ams.rpki-client.org