$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/500DFDA8578611EA8CC3B124C4F9AE02.roa File: 500DFDA8578611EA8CC3B124C4F9AE02.roa (raw, json) Hash identifier: dWNwojX+FbKzMLZhyhzAIove+AbYk3aE5UjX6l18gfU= Subject key identifier: 43:27:FA:47:5B:2D:91:2B:10:92:BD:CE:39:2E:27:6C:30:44:76:D3 Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1DDC Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/500DFDA8578611EA8CC3B124C4F9AE02.roa Signing time: Wed 04 Oct 2023 16:33:17 +0000 ROA not before: Wed 04 Oct 2023 16:33:17 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 17501 IP address blocks: 2407:6200::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 16:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7644 (0x1ddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: Oct 4 16:33:17 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651d93cd-3fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:31:4d:1c:2f:1f:9a:76:f0:1a:d9:e2:e4: 9f:85:5a:77:c7:2c:fc:40:fd:a5:dd:35:bc:a3:67: ea:bf:e8:6e:a1:ad:48:55:72:17:d9:f7:1a:06:76: 8c:28:8e:55:bf:c2:03:02:f3:06:71:8a:23:df:46: c4:46:22:33:97:54:ae:ed:c1:18:be:74:32:85:b7: bd:9c:4e:d5:5e:63:ee:f0:41:02:93:17:55:9f:ab: 19:ff:53:4d:cb:3c:69:de:15:1d:7f:68:66:94:1c: f6:37:07:84:23:eb:31:b3:79:7d:2a:81:a2:88:40: ca:d8:b2:d3:68:da:46:0f:cf:4b:f9:bc:7c:20:d2: dd:71:f8:57:45:52:ec:fc:d0:ee:f4:b4:1a:83:72: dc:c3:ad:67:32:d5:00:5c:82:01:e1:d4:d9:2b:24: 42:2c:85:cd:42:1c:88:f7:22:94:8a:4e:81:64:b5: 2a:0f:1e:05:56:b3:11:d0:ae:2a:a1:03:34:f4:66: b8:8d:c8:79:aa:93:cc:c1:ec:3d:e9:19:6c:37:18: 0c:47:dc:d2:71:df:24:90:4b:62:2c:77:69:b7:bc: 75:32:51:25:91:b1:d8:d6:88:aa:ef:95:11:e4:02: dc:52:40:1c:58:12:2c:ce:87:21:93:4a:39:2f:14: 77:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:27:FA:47:5B:2D:91:2B:10:92:BD:CE:39:2E:27:6C:30:44:76:D3 X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/500DFDA8578611EA8CC3B124C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:6200::/32 Signature Algorithm: sha256WithRSAEncryption 4d:a2:17:2d:24:dd:27:f1:1d:65:ec:c3:cb:01:ac:ab:fa:84: be:d2:ac:9e:b0:08:07:fe:6b:1c:be:7b:03:2e:b0:e1:08:fa: ae:5d:38:1d:82:6a:e2:1b:3a:bb:12:6b:24:5c:32:59:7b:8d: 94:7d:2b:f6:aa:b0:63:72:f8:0f:d9:e4:35:9a:3f:11:09:b4: 68:2a:fa:3f:c9:4b:d7:f0:f4:b8:a6:37:e7:ce:2c:e5:21:df: 50:00:47:e5:2a:79:c5:1f:18:7c:c0:ef:21:2e:c5:fc:26:a7: 7b:5e:93:6f:ef:e1:97:e3:ef:6f:18:38:22:f0:0a:65:35:b5: bf:77:5b:22:3b:c1:76:1a:91:6d:24:07:ce:ea:02:bf:25:bf: 8d:93:86:14:1f:85:51:6d:47:9f:01:eb:77:a0:b9:7f:15:22: fc:80:5d:44:80:74:78:8a:94:01:0f:fd:7a:44:3d:6a:ae:cf: 43:dd:77:ec:64:6e:f1:ae:5f:90:dc:e4:16:cd:9b:4b:6d:cf: 50:65:73:58:b5:e0:6d:a9:17:83:e0:c6:31:22:fe:eb:12:4a: a5:05:40:6a:6f:15:14:60:64:12:73:94:2e:33:76:9f:37:c0: aa:17:cb:3c:ce:15:f6:33:af:13:02:91:97:4c:22:9a:84:61: 15:11:bb:46 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICHdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjMxMDA0MTYzMzE3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFkOTNjZC0zZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX8xTRwvH5p28BrZ4uSfhVp3xyz8QP2l3TW8o2fqv+huoa1IVXIX2fcaBnaM KI5Vv8IDAvMGcYoj30bERiIzl1Su7cEYvnQyhbe9nE7VXmPu8EECkxdVn6sZ/1NN yzxp3hUdf2hmlBz2NweEI+sxs3l9KoGiiEDK2LLTaNpGD89L+bx8INLdcfhXRVLs /NDu9LQag3Lcw61nMtUAXIIB4dTZKyRCLIXNQhyI9yKUik6BZLUqDx4FVrMR0K4q oQM09Ga4jch5qpPMwew96RlsNxgMR9zScd8kkEtiLHdpt7x1MlElkbHY1oiq75UR 5ALcUkAcWBIszochk0o5LxR3ZQIDAQABo4ICljCCApIwHQYDVR0OBBYEFEMn+kdb LZErEJK9zjkuJ2wwRHbTMB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzMxRUEvOUFGM0VEMjg1RUVDMTFFNjg4NkVDNTFCQzRGOUFFMDIvNTAwREZEQTg1 Nzg2MTFFQThDQzNCMTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkB2IAMA0GCSqGSIb3DQEBCwUAA4IBAQBNohctJN0n8R1l 7MPLAayr+oS+0qyesAgH/mscvnsDLrDhCPquXTgdgmriGzq7EmskXDJZe42UfSv2 qrBjcvgP2eQ1mj8RCbRoKvo/yUvX8PS4pjfnzizlId9QAEflKnnFHxh8wO8hLsX8 Jqd7XpNv7+GX4+9vGDgi8AplNbW/d1siO8F2GpFtJAfO6gK/Jb+Nk4YUH4VRbUef Aet3oLl/FSL8gF1EgHR4ipQBD/16RD1qrs9D3XfsZG7xrl+Q3OQWzZtLbc9QZXNY teBtqReD4MYxIv7rEkqlBUBqbxUUYGQSc5QuM3afN8CqF8s8zhX2M68TApGXTCKa hGEVEbtG -----END CERTIFICATE-----Generated at Thu Jun 6 18:47:49 2024 by rpki-client on console-fra.rpki-client.org