$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/73E82004BCA111ED914D176DC4F9AE02.roa File: 73E82004BCA111ED914D176DC4F9AE02.roa (raw, json) Hash identifier: 6J/+qa4ndqIy2bgiH0rAtIyRGJ9+5Tg7hxefbddl5wU= Subject key identifier: 87:DD:9B:19:76:CA:95:B9:48:6B:42:9B:37:3F:13:52:7E:5F:4C:97 Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5 Certificate serial: 02EF Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/73E82004BCA111ED914D176DC4F9AE02.roa Signing time: Thu 05 Dec 2024 01:15:31 +0000 ROA not before: Thu 05 Dec 2024 01:15:31 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 150137 IP address blocks: 2001:df1:c082::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324 Validity Not Before: Dec 5 01:15:31 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6750feb3-adc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:cc:f7:db:a0:00:87:a4:fd:3d:ff:46:77: 88:37:c2:cf:70:81:f6:c8:a0:70:9d:5c:58:e2:22: 83:4f:25:19:04:90:53:fb:ed:15:2e:fe:49:dc:86: 6d:b5:06:89:e4:c8:05:30:4e:16:d9:df:7f:aa:8e: 1b:1b:3e:76:fc:73:de:1b:53:bb:d5:e7:de:15:83: 4b:6c:3a:07:4a:34:a6:95:79:41:78:f9:29:e2:dd: 21:c1:7a:f4:af:cd:5a:f5:4e:40:bf:96:4f:20:de: d4:7b:c8:83:09:19:26:0c:9a:9a:4b:72:12:55:08: 10:7f:a2:2b:2f:cc:c9:fd:ea:8f:41:23:0b:2f:3e: 29:0e:65:2d:e4:30:8c:d6:16:5c:7e:6c:e0:b7:51: 81:a3:76:a4:2f:10:53:cd:a1:90:0d:a8:89:dd:87: 00:3a:eb:57:97:da:58:3e:04:c1:76:11:6c:d5:0b: 65:c3:a5:dc:a6:8c:11:cf:15:c3:65:ca:03:b5:26: 60:68:a5:69:1f:f6:b8:22:08:bf:98:19:2b:df:36: da:9f:c8:51:97:d5:9e:da:da:b5:f6:62:46:11:f6: 5a:7f:42:2c:2d:e6:72:2f:bf:ec:a0:db:6b:dc:ad: c5:80:3c:91:9a:5f:b4:2e:69:16:74:07:e3:9b:41: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DD:9B:19:76:CA:95:B9:48:6B:42:9B:37:3F:13:52:7E:5F:4C:97 X509v3 Authority Key Identifier: keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/73E82004BCA111ED914D176DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:c082::/48 Signature Algorithm: sha256WithRSAEncryption 2b:74:e2:d5:ee:65:80:19:36:8d:08:9a:47:b6:1d:87:e6:23: a6:3e:67:c5:a0:5c:d2:fa:46:f3:52:26:97:96:4c:c9:be:b1: 0f:09:97:af:76:ed:88:5d:8a:91:33:eb:de:81:9e:d2:49:58: e6:a1:73:b2:6a:42:b6:e1:67:13:58:3a:85:c6:f0:b7:e1:6d: c8:88:b9:51:34:70:09:2e:3b:b1:5a:69:90:aa:eb:5f:46:ad: b8:0d:df:a0:51:a0:e7:26:ae:46:31:4e:ba:3d:2e:e1:3a:13: 78:cc:12:8c:30:d7:5e:ea:ae:73:c9:55:f2:43:52:63:c9:16: e3:58:9a:30:05:37:e7:da:2e:47:15:30:a8:bd:6f:ed:bd:7c: fc:46:54:ff:1a:1e:4c:18:e5:e8:a5:40:44:33:99:6d:db:7b: ef:2e:53:c6:82:7c:80:47:4f:49:48:8a:9e:16:b9:18:f1:32: 7f:99:83:09:c4:3e:ec:82:55:72:e5:87:e2:e1:98:0a:4b:09: f1:22:7c:7e:8e:b2:76:0e:fb:8f:cb:c3:2e:d6:50:ff:d1:32: e3:6a:13:a0:07:0a:8b:c1:55:78:34:d3:59:9a:26:30:dc:16: bf:40:7a:e3:91:fe:61:2c:6b:d9:28:34:cb:e4:56:35:3b:4d: eb:d5:66:bf -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDc3Mjg0MUEyNjMyNjMxNEVBMkU0MzgzNDc1REUzMUI2 RENFN0RCQTUwHhcNMjQxMjA1MDExNTMxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwZmViMy1hZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdvM99ugAIek/T3/RneIN8LPcIH2yKBwnVxY4iKDTyUZBJBT++0VLv5J3IZt tQaJ5MgFME4W2d9/qo4bGz52/HPeG1O71efeFYNLbDoHSjSmlXlBePkp4t0hwXr0 r81a9U5Av5ZPIN7Ue8iDCRkmDJqaS3ISVQgQf6IrL8zJ/eqPQSMLLz4pDmUt5DCM 1hZcfmzgt1GBo3akLxBTzaGQDaiJ3YcAOutXl9pYPgTBdhFs1Qtlw6XcpowRzxXD ZcoDtSZgaKVpH/a4Igi/mBkr3zban8hRl9We2tq19mJGEfZaf0IsLeZyL7/soNtr 3K3FgDyRml+0LmkWdAfjm0HyjQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIfdmxl2 ypW5SGtCmzc/E1J+X0yXMB8GA1UdIwQYMBaAFHcoQaJjJjFOouQ4NHXeMbbc59ul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC9FRjgzRTMwRUQw MDkxMUVDOTJBMTZBM0NDNEY5QUUwMi9keWhCb21NbU1VNmk1RGcwZGQ0eHR0em4y NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5aEJvbU1tTVU2aTVEZzBkZDR4dHR6bjI2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzMjQvRUY4M0UzMEVEMDA5MTFFQzkyQTE2QTNDQzRGOUFFMDIvNzNFODIwMDRC Q0ExMTFFRDkxNEQxNzZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xwIIwDQYJKoZIhvcNAQELBQADggEBACt04tXuZYAZ No0Imke2HYfmI6Y+Z8WgXNL6RvNSJpeWTMm+sQ8Jl6927YhdipEz696BntJJWOah c7JqQrbhZxNYOoXG8LfhbciIuVE0cAkuO7FaaZCq619GrbgN36BRoOcmrkYxTro9 LuE6E3jMEoww117qrnPJVfJDUmPJFuNYmjAFN+faLkcVMKi9b+29fPxGVP8aHkwY 5eilQEQzmW3be+8uU8aCfIBHT0lIip4WuRjxMn+ZgwnEPuyCVXLlh+LhmApLCfEi fH6OsnYO+4/Lwy7WUP/RMuNqE6AHCovBVXg001maJjDcFr9AeuOR/mEsa9koNMvk VjU7TevVZr8= -----END CERTIFICATE-----Generated at Fri Apr 4 23:52:34 2025 by rpki-client