$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa File: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (raw, json) Hash identifier: FB0V4RMdFHeXRpqHQF3eni47ItP+S5H4Tlgoc4AQRYQ= Subject key identifier: 67:94:78:AF:17:4A:D5:9E:02:B0:59:31:C8:CB:18:E1:13:E9:07:10 Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Certificate serial: 05 Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa Signing time: Tue 19 Mar 2024 05:13:58 +0000 ROA not before: Tue 19 Mar 2024 05:13:58 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152594 IP address blocks: 2001:df3:8240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Validity Not Before: Mar 19 05:13:58 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f91f16-0e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:44:0a:c8:ed:e9:50:e9:05:45:15:8e:5d: 73:55:1f:f6:e8:d5:32:8c:4d:41:27:ba:73:95:e2: 1d:c8:3a:61:d2:33:4a:dc:0c:cb:b5:71:fa:31:d7: 7d:87:49:67:65:ee:0b:00:d2:f4:98:cd:ce:98:4e: bd:36:4f:2d:39:53:aa:8e:4b:cb:2a:e5:c7:5f:5a: 35:16:76:ef:8d:05:1c:11:72:a9:f1:60:31:1e:01: a7:c7:74:25:c9:2e:48:d5:b0:5c:45:9b:34:50:84: 6e:ee:57:b8:f0:50:95:b0:8f:02:dc:fb:83:f4:ce: 2b:43:41:5c:d9:57:df:cb:88:a7:84:b2:d1:a3:3d: 61:83:81:bb:04:85:be:35:63:92:26:c7:cd:28:08: ef:9b:92:19:06:91:02:98:e2:16:48:c5:ea:b7:85: 2f:a2:f8:b5:e0:e5:94:3e:32:8f:93:dd:9f:78:e7: 26:71:26:59:24:8a:0e:9f:c5:09:fb:af:5d:26:68: 7a:93:a2:5d:99:2e:f8:7c:af:39:61:e9:de:08:61: 28:dd:c4:3a:42:83:33:24:3e:88:85:e7:ff:38:54: 71:b1:68:ac:e4:64:0a:c0:fc:29:f1:f9:d4:f7:a5: a9:09:87:65:d7:13:de:fb:e3:73:84:81:1f:35:85: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:94:78:AF:17:4A:D5:9E:02:B0:59:31:C8:CB:18:E1:13:E9:07:10 X509v3 Authority Key Identifier: keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:8240::/48 Signature Algorithm: sha256WithRSAEncryption 40:65:0e:6c:f7:af:7c:db:6e:28:7f:d7:a2:a2:87:58:b1:e9: f9:2e:48:84:29:6e:07:0c:4b:ef:0b:39:86:ee:b1:c0:cf:6e: 21:cb:96:c4:4a:b8:6f:13:76:5e:3b:da:32:15:20:dd:74:27: fd:ad:8b:8d:02:74:63:ca:6b:4c:69:5f:16:40:35:06:ad:31: ee:25:f1:48:cc:ca:4f:47:8b:f7:13:a4:81:85:c2:4a:3f:cc: 73:c9:4f:52:0e:a8:9e:53:bd:93:53:85:8c:d3:20:5f:bd:19: 52:de:fb:ad:06:1e:bd:3d:8d:dc:39:e2:1c:b2:e6:06:f4:e9: 17:c6:ee:ce:7a:36:ee:fb:67:7b:e0:86:c7:fc:17:c7:16:3c: 41:cb:be:b9:15:a7:07:cc:5f:b4:c7:2a:0b:e8:f2:28:7a:07: 27:40:36:07:f6:51:ec:fe:d8:89:4d:4e:ec:25:0f:f1:27:49: dd:9d:d8:a4:a7:77:1b:ac:e3:db:3f:8e:bc:21:14:3a:8a:76: 96:9d:b0:17:9c:af:c8:fb:d1:99:bd:52:86:0c:09:cd:fd:40: aa:99:48:fc:6b:af:9c:fd:8c:a2:72:17:f2:af:76:97:ff:aa: 67:3d:cd:95:6e:43:56:3d:d1:47:8a:5b:bd:32:91:a3:a7:7e: 24:ca:35:5b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjVBQzExMC8GA1UEBRMoNzMwNjFCQTkwNDAxODFFQzBBRUI0RDhGNkUwMDNGODM4 RkM5QzQ4RjAeFw0yNDAzMTkwNTEzNThaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjkxZjE2LTBlNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4IEQKyO3pUOkFRRWOXXNVH/bo1TKMTUEnunOV4h3IOmHSM0rcDMu1cfox132H SWdl7gsA0vSYzc6YTr02Ty05U6qOS8sq5cdfWjUWdu+NBRwRcqnxYDEeAafHdCXJ LkjVsFxFmzRQhG7uV7jwUJWwjwLc+4P0zitDQVzZV9/LiKeEstGjPWGDgbsEhb41 Y5Imx80oCO+bkhkGkQKY4hZIxeq3hS+i+LXg5ZQ+Mo+T3Z945yZxJlkkig6fxQn7 r10maHqTol2ZLvh8rzlh6d4IYSjdxDpCgzMkPoiF5/84VHGxaKzkZArA/Cnx+dT3 pakJh2XXE97743OEgR81hbHrAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUZ5R4rxdK 1Z4CsFkxyMsY4RPpBxAwHwYDVR0jBBgwFoAUcwYbqQQBgewK602PbgA/g4/JxI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NUFDL0Q0RjNEQjlFRTFF MDExRUVBRjZFMUU2OEM0RjlBRTAyL2N3WWJxUVFCZ2V3SzYwMlBiZ0FfZzRfSnhJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3dZYnFRUUJnZXdLNjAyUGJnQV9nNF9KeEk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVBQy9ENEYzREI5RUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi83RDJFNzY2Q0U1 QUYxMUVFOUEwQTY0MkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfOCQDANBgkqhkiG9w0BAQsFAAOCAQEAQGUObPevfNtu KH/XoqKHWLHp+S5IhCluBwxL7ws5hu6xwM9uIcuWxEq4bxN2XjvaMhUg3XQn/a2L jQJ0Y8prTGlfFkA1Bq0x7iXxSMzKT0eL9xOkgYXCSj/Mc8lPUg6onlO9k1OFjNMg X70ZUt77rQYevT2N3DniHLLmBvTpF8buzno27vtne+CGx/wXxxY8Qcu+uRWnB8xf tMcqC+jyKHoHJ0A2B/ZR7P7YiU1O7CUP8SdJ3Z3YpKd3G6zj2z+OvCEUOop2lp2w F5yvyPvRmb1ShgwJzf1AqplI/GuvnP2MonIX8q92l/+qZz3NlW5DVj3RR4pbvTKR o6d+JMo1Ww== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org