$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa File: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (raw, json) Hash identifier: zfIXPPCdkOaknfqYs53DeFIT3TNh9PqHIQnfhYmK5wM= Subject key identifier: A5:57:91:19:E4:93:42:18:DC:AE:94:A1:8B:57:A9:C9:35:79:6F:67 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0DC5 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa Signing time: Fri 06 Sep 2024 18:37:07 +0000 ROA not before: Fri 06 Sep 2024 18:37:07 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 51089 IP address blocks: 2405:84c0:fd00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3525 (0xdc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 6 18:37:07 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66db4bd3-3181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:21:a4:a6:2e:5f:cd:55:41:92:f8:dd:99: 42:72:f7:b5:c6:f2:52:c8:0a:39:c9:0d:f3:59:93: 92:8d:3e:c7:f4:ec:8d:c0:19:ed:26:8e:74:b3:17: 39:c5:a6:93:be:57:e0:65:f3:60:09:ce:d6:da:3a: d6:66:1b:8e:19:b7:fe:45:10:af:c0:b8:3b:37:11: 56:2f:da:d2:e7:01:bf:7c:48:de:1e:03:bc:e4:9c: 5b:35:64:86:79:bf:6f:c7:ba:ec:5b:15:9b:6b:51: 93:8f:6a:22:82:b3:f0:36:c3:64:89:12:64:19:23: 67:6b:30:78:61:09:42:b7:bb:2c:0a:31:93:28:d2: 7d:b2:d8:64:54:41:23:4c:e7:27:ed:f6:7d:9e:33: 4a:a0:6d:b6:3f:e2:d8:30:23:38:d4:f8:fd:6d:57: 63:7b:40:6d:1c:29:4e:bc:b4:49:93:29:76:a8:80: f3:73:6b:80:00:d0:c5:37:47:e9:98:4b:4f:30:2f: cb:28:1c:44:80:8b:b6:3f:c6:60:81:9b:8d:b6:d2: 00:1b:d9:e6:b4:8f:9f:01:ae:77:1e:47:db:75:c0: bf:a0:13:13:d4:c9:ff:b6:73:36:53:f6:3c:68:3e: 6a:a0:35:aa:52:f6:a8:a8:29:c1:d4:7c:2e:e4:58: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:57:91:19:E4:93:42:18:DC:AE:94:A1:8B:57:A9:C9:35:79:6F:67 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:84c0:fd00::/40 Signature Algorithm: sha256WithRSAEncryption 2a:c2:90:5d:73:39:e2:c0:80:31:99:b8:e1:d2:10:66:2d:4d: 4a:e6:b6:63:b7:60:d2:bf:a6:8b:fb:b5:65:b6:ff:ec:bb:ee: 2e:20:07:26:48:04:3c:9e:2b:21:b5:ba:01:9f:c8:7e:00:08: ae:3a:a4:01:89:99:e3:15:be:86:3c:a0:79:ef:a8:19:19:0e: 45:e6:51:df:da:a0:d1:3f:38:68:1c:69:d7:be:1f:e9:da:06: 63:2f:c3:e9:f0:6e:06:7a:7f:cd:f0:1e:91:f3:76:2a:a7:87: 21:00:2a:41:ab:96:15:40:cf:97:4f:d0:c5:0f:bc:cf:97:7f: 66:58:42:1f:1e:6c:9c:8d:1f:19:48:95:d1:d3:4a:32:46:12: 3d:e1:0f:3a:25:f7:84:90:a2:16:9a:86:9c:be:eb:3d:81:0c: 7d:e6:b7:d8:f6:b4:4f:b0:2d:9a:75:10:f2:51:10:c5:1c:c0: bb:d1:92:6a:f1:74:75:c0:25:e2:02:f9:8b:42:a5:37:0c:1c: 8f:2c:ce:13:a7:bf:59:94:0d:50:ce:0f:59:3c:c8:85:27:d3: d7:49:a8:b0:6d:70:46:91:a2:68:63:c4:f3:fb:d7:bf:74:92: c8:c2:bb:f9:cc:17:4c:76:3e:08:52:d9:b4:2c:bf:e9:fe:28: fd:67:75:5f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICDcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjQwOTA2MTgzNzA3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRiNGJkMy0zMTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5EhpKYuX81VQZL43ZlCcve1xvJSyAo5yQ3zWZOSjT7H9OyNwBntJo50sxc5 xaaTvlfgZfNgCc7W2jrWZhuOGbf+RRCvwLg7NxFWL9rS5wG/fEjeHgO85JxbNWSG eb9vx7rsWxWba1GTj2oigrPwNsNkiRJkGSNnazB4YQlCt7ssCjGTKNJ9sthkVEEj TOcn7fZ9njNKoG22P+LYMCM41Pj9bVdje0BtHClOvLRJkyl2qIDzc2uAANDFN0fp mEtPMC/LKBxEgIu2P8ZggZuNttIAG9nmtI+fAa53HkfbdcC/oBMT1Mn/tnM2U/Y8 aD5qoDWqUvaoqCnB1Hwu5Fi7tQIDAQABo4IClzCCApMwHQYDVR0OBBYEFKVXkRnk k0IY3K6UoYtXqck1eW9nMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvRURFM0UxRUUz MDZEMTFFQjlBRUUzRTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkBYTA/TANBgkqhkiG9w0BAQsFAAOCAQEAKsKQXXM54sCA MZm44dIQZi1NSua2Y7dg0r+mi/u1Zbb/7LvuLiAHJkgEPJ4rIbW6AZ/IfgAIrjqk AYmZ4xW+hjygee+oGRkOReZR39qg0T84aBxp174f6doGYy/D6fBuBnp/zfAekfN2 KqeHIQAqQauWFUDPl0/QxQ+8z5d/ZlhCHx5snI0fGUiV0dNKMkYSPeEPOiX3hJCi FpqGnL7rPYEMfea32Pa0T7AtmnUQ8lEQxRzAu9GSavF0dcAl4gL5i0KlNwwcjyzO E6e/WZQNUM4PWTzIhSfT10mosG1wRpGiaGPE8/vXv3SSyMK7+cwXTHY+CFLZtCy/ 6f4o/Wd1Xw== -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:04 2024 by rpki-client on console-ams.rpki-client.org