$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa File: BA0AE43CF6D811EE99425F2EC4F9AE02.roa (raw, json) Hash identifier: HAFMSftt4Hesf5G6nV8qUh2dhC8PvxJynmtRbQzTqkI= Subject key identifier: 10:2D:E5:EE:61:DB:B2:5A:E2:B7:3A:46:F1:70:07:52:F8:47:9F:82 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 42E8 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa Signing time: Wed 10 Apr 2024 01:21:59 +0000 ROA not before: Wed 10 Apr 2024 01:21:59 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 151903 IP address blocks: 2001:df3:63c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 14:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17128 (0x42e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Apr 10 01:21:59 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6615e9b7-a6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:e3:40:45:fb:b4:ec:bb:5b:51:46:33:18: c4:87:2e:d3:5d:b1:4a:71:c1:46:c9:79:fc:ad:1f: f4:8d:c1:25:a6:9d:56:68:04:de:04:50:cf:52:90: 38:fc:02:04:43:7e:74:39:64:a9:45:cb:4a:97:76: 88:74:75:29:3e:63:04:e0:2d:0f:59:4a:07:45:02: a7:1f:4a:4a:bb:0f:6a:09:e7:52:0f:74:e9:0b:22: 45:fb:e3:70:05:5b:fd:61:f4:c2:2d:80:f6:53:2a: b6:fe:c5:af:15:7d:cf:41:bc:81:18:6d:be:15:dd: 9e:f3:11:d5:bf:8d:fd:41:b7:32:09:60:1f:6f:f1: 00:db:5e:04:78:4a:46:14:6d:67:05:1f:8e:2a:82: 86:e3:fa:cf:33:b4:15:bf:98:7f:9e:70:8c:12:6b: 5a:41:a7:a2:be:f8:b7:01:e6:06:7b:f8:0f:d9:2f: 78:a5:c4:1d:9d:5c:39:ee:8c:7d:d2:19:21:6c:29: cd:2a:0d:b7:68:77:40:ae:72:46:21:32:78:8d:f4: bf:98:07:f3:37:43:16:5d:67:d1:cb:67:9a:3d:48: f1:58:11:e7:4c:fa:11:96:fc:0a:76:91:b2:27:34: 0a:d5:5a:88:92:a5:30:3a:0c:25:54:b3:d9:0d:55: 97:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2D:E5:EE:61:DB:B2:5A:E2:B7:3A:46:F1:70:07:52:F8:47:9F:82 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:63c0::/48 Signature Algorithm: sha256WithRSAEncryption 61:9f:c4:96:5c:97:63:84:85:2c:7c:4e:e5:d3:e0:ca:b0:5e: 04:e5:8f:9a:45:99:1c:f7:00:54:13:31:66:a4:7f:f7:3c:b1: c5:7f:ca:5b:33:85:f9:7b:7a:aa:d2:4c:9c:36:9f:09:69:d6: 78:04:da:5f:2e:45:04:b1:28:c8:5f:91:93:19:66:5d:15:79: 41:ae:85:1b:c1:60:17:ec:5f:ae:35:7b:3b:38:fe:0c:7d:77: 1d:8d:42:f8:ec:91:6d:42:bd:8f:67:53:f6:20:b5:45:f0:ea: 1e:0f:d6:01:87:a5:2c:19:4c:cb:0b:89:d3:6f:d3:36:f8:a5: cf:70:72:69:a3:2b:87:f0:19:0e:df:8a:83:68:9a:72:65:6d: 0d:d0:c6:17:02:77:83:a4:fd:3f:62:79:4a:22:91:93:01:9d: 3b:a3:99:3d:0c:98:83:98:10:91:9b:95:e5:77:e0:17:d9:0c: c6:c8:1e:32:e1:fc:36:0d:7c:bc:b1:3a:81:fc:cb:29:4a:9f: 5c:74:11:47:18:ea:d8:a4:62:91:6e:d0:f0:f9:58:79:0d:ec: a1:85:1f:42:bb:a8:ab:ea:6f:0c:fa:15:03:16:e6:24:4b:75: 1a:67:83:ce:ae:99:c2:e8:41:da:10:26:f1:42:ec:d9:aa:0e: 27:5c:a3:3e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICQugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwNDEwMDEyMTU5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE1ZTliNy1hNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf3jQEX7tOy7W1FGMxjEhy7TXbFKccFGyXn8rR/0jcElpp1WaATeBFDPUpA4 /AIEQ350OWSpRctKl3aIdHUpPmME4C0PWUoHRQKnH0pKuw9qCedSD3TpCyJF++Nw BVv9YfTCLYD2Uyq2/sWvFX3PQbyBGG2+Fd2e8xHVv439QbcyCWAfb/EA214EeEpG FG1nBR+OKoKG4/rPM7QVv5h/nnCMEmtaQaeivvi3AeYGe/gP2S94pcQdnVw57ox9 0hkhbCnNKg23aHdArnJGITJ4jfS/mAfzN0MWXWfRy2eaPUjxWBHnTPoRlvwKdpGy JzQK1VqIkqUwOgwlVLPZDVWXDwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBAt5e5h 27Ja4rc6RvFwB1L4R5+CMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkEwQUU0M0NG NkQ4MTFFRTk5NDI1RjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zY8AwDQYJKoZIhvcNAQELBQADggEBAGGfxJZcl2OE hSx8TuXT4MqwXgTlj5pFmRz3AFQTMWakf/c8scV/ylszhfl7eqrSTJw2nwlp1ngE 2l8uRQSxKMhfkZMZZl0VeUGuhRvBYBfsX641ezs4/gx9dx2NQvjskW1CvY9nU/Yg tUXw6h4P1gGHpSwZTMsLidNv0zb4pc9wcmmjK4fwGQ7fioNomnJlbQ3QxhcCd4Ok /T9ieUoikZMBnTujmT0MmIOYEJGbleV34BfZDMbIHjLh/DYNfLyxOoH8yylKn1x0 EUcY6tikYpFu0PD5WHkN7KGFH0K7qKvqbwz6FQMW5iRLdRpng86umcLoQdoQJvFC 7NmqDidcoz4= -----END CERTIFICATE-----Generated at Fri Jun 14 19:10:33 2024 by rpki-client on console-ams.rpki-client.org