$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa File: 443241A0321B11EA83044473C4F9AE02.roa (raw, json) Hash identifier: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM= Subject key identifier: 2F:0E:2D:A9:99:AC:12:7F:3E:0C:76:CA:C0:91:3E:BC:FF:70:24:51 Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Certificate serial: 1300 Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa Signing time: Tue 10 Dec 2024 17:15:13 +0000 ROA not before: Tue 10 Dec 2024 17:15:13 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 24474 IP address blocks: 2001:dd8:24::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4864 (0x1300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91771E3 Validity Not Before: Dec 10 17:15:13 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67587721-7b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:3c:fe:b5:0b:b8:d8:c8:3f:63:98:6b:77: 79:fa:63:8c:a3:6a:91:29:13:5e:a5:98:f8:7a:35: 45:95:c3:4a:b9:ad:c6:2c:05:df:9e:58:4f:a3:c0: 2f:ef:ad:ff:b4:76:d3:ad:4e:ce:66:e9:c7:00:4f: 89:8d:d5:0b:33:18:e5:03:15:64:e1:61:60:7a:04: 66:cb:0a:c3:e4:1b:8e:e6:43:b9:75:09:94:43:61: 61:b2:52:4f:97:30:69:44:4b:2f:20:6a:13:b0:67: 83:bc:e7:4f:68:44:c5:49:65:87:75:92:dd:b0:78: 03:0d:de:32:94:08:7d:3e:90:05:42:53:b9:fd:2e: 70:cf:aa:39:cd:c6:d3:b5:1b:4d:cb:61:b5:11:5c: 6c:12:bd:a0:ad:aa:77:3b:ad:28:ee:b8:c1:a2:db: cc:51:f9:5c:5e:c8:75:c2:fd:c7:b3:60:51:ff:df: ff:53:a1:57:f7:fa:90:98:c3:fa:61:fc:4b:88:46: 88:d8:72:f0:73:c1:81:6a:14:e8:90:57:b9:8b:af: 40:65:2d:35:e1:cf:5e:25:13:9e:b0:49:ae:0f:c0: a0:3a:2c:32:b6:d8:3f:c1:c9:ac:5b:54:e5:b9:3a: c1:89:74:30:47:78:22:04:13:1e:75:a6:14:64:65: 8d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0E:2D:A9:99:AC:12:7F:3E:0C:76:CA:C0:91:3E:BC:FF:70:24:51 X509v3 Authority Key Identifier: keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:dd8:24::/47 Signature Algorithm: sha256WithRSAEncryption 4b:01:e2:2f:df:31:58:2a:50:2d:5b:27:4a:e5:4e:7a:06:78: 09:6a:8a:86:16:13:28:8e:69:0f:ca:6c:b1:5d:85:8b:28:83: fa:72:de:7f:cd:78:2f:d3:40:36:77:e7:8a:fa:65:c8:4d:0e: af:c1:c8:d9:19:30:5b:3c:91:9a:d7:f0:34:32:6e:3e:82:96: 6a:4d:64:70:93:be:0e:a1:3f:1d:6b:16:ed:4d:2f:26:61:b2: 77:f9:b9:6d:0b:84:51:eb:67:40:72:be:6e:0b:97:3c:b7:c9: 96:60:71:5f:e7:0f:1a:36:bf:d6:26:6a:64:a5:88:8a:1e:8b: 70:bb:42:15:e6:3f:cb:c1:85:86:1c:24:8c:68:22:da:a3:5c: 88:ff:be:d1:2e:84:36:62:89:00:7f:0d:62:ee:d2:10:1f:94: 92:76:ec:30:c4:da:60:9e:eb:00:82:6e:27:80:6f:00:74:83: 18:e6:5e:bb:a1:4f:a9:8d:92:a4:ff:4a:22:7c:86:c9:55:0b: f3:fc:ba:0a:ab:b0:f3:a2:88:d7:44:a2:b3:94:97:02:5c:9e: bd:6a:88:47:d6:f4:33:e7:78:0d:9d:7a:04:be:4e:84:08:ce: 5b:cd:1f:79:c0:bf:18:44:c5:33:e6:66:de:e5:37:c5:b2:50: 8e:02:a6:62 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICEwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz NDEzNzAxQTUwHhcNMjQxMjEwMTcxNTEzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU4NzcyMS03Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbk8/rULuNjIP2OYa3d5+mOMo2qRKRNepZj4ejVFlcNKua3GLAXfnlhPo8Av 763/tHbTrU7OZunHAE+JjdULMxjlAxVk4WFgegRmywrD5BuO5kO5dQmUQ2FhslJP lzBpREsvIGoTsGeDvOdPaETFSWWHdZLdsHgDDd4ylAh9PpAFQlO5/S5wz6o5zcbT tRtNy2G1EVxsEr2grap3O60o7rjBotvMUflcXsh1wv3Hs2BR/9//U6FX9/qQmMP6 YfxLiEaI2HLwc8GBahTokFe5i69AZS014c9eJROesEmuD8CgOiwyttg/wcmsW1Tl uTrBiXQwR3giBBMedaYUZGWN2QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFC8OLamZ rBJ/Pgx2ysCRPrz/cCRRMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcxRTMvOTM4M0U2NDZBRDY1MTFFOEFDQkQwRDZBQzRGOUFFMDIvNDQzMjQxQTAz MjFCMTFFQTgzMDQ0NDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEgAQ3YACQwDQYJKoZIhvcNAQELBQADggEBAEsB4i/fMVgq UC1bJ0rlTnoGeAlqioYWEyiOaQ/KbLFdhYsog/py3n/NeC/TQDZ354r6ZchNDq/B yNkZMFs8kZrX8DQybj6ClmpNZHCTvg6hPx1rFu1NLyZhsnf5uW0LhFHrZ0Byvm4L lzy3yZZgcV/nDxo2v9YmamSliIoei3C7QhXmP8vBhYYcJIxoItqjXIj/vtEuhDZi iQB/DWLu0hAflJJ27DDE2mCe6wCCbieAbwB0gxjmXruhT6mNkqT/SiJ8hslVC/P8 ugqrsPOiiNdEorOUlwJcnr1qiEfW9DPneA2degS+ToQIzlvNH3nAvxhExTPmZt7l N8WyUI4CpmI= -----END CERTIFICATE-----Generated at Sat Apr 5 07:22:35 2025 by rpki-client