$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/93F95BE673C711E98CD6D335C4F9AE02.roa File: 93F95BE673C711E98CD6D335C4F9AE02.roa (raw, json) Hash identifier: 3MSFHXUSgf0AKKXZWKrpEa1VTfu7VTdMazqelLMvGYM= Subject key identifier: A7:2E:8C:78:D9:53:BB:21:7F:24:44:60:BD:41:84:F9:13:B2:29:4C Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1057 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/93F95BE673C711E98CD6D335C4F9AE02.roa Signing time: Thu 28 Mar 2024 18:26:12 +0000 ROA not before: Thu 28 Mar 2024 18:26:12 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138990 IP address blocks: 2404:7ac0:680::/48 maxlen: 48 2404:7ac0:681::/48 maxlen: 48 2404:7ac0:682::/48 maxlen: 48 2404:7ac0:683::/48 maxlen: 48 2404:7ac0:684::/48 maxlen: 48 2404:7ac0:685::/48 maxlen: 48 2404:7ac0:686::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4183 (0x1057) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Mar 28 18:26:12 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6605b644-f242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:5e:95:34:a4:69:6e:a3:51:76:2f:e2:b3: 1b:72:6c:92:b0:42:31:5f:e8:de:67:59:ad:2a:09: 71:77:7c:ac:49:cf:71:02:b9:76:f7:6b:99:87:5f: 8e:93:22:f8:8a:4a:75:a2:02:bb:ce:4c:5b:49:c9: 10:0b:a6:4c:35:11:2c:e3:9a:28:15:5e:22:c3:bf: aa:2b:1e:f7:9a:9e:4d:cd:1e:f6:01:60:72:91:29: 12:41:80:b9:12:a3:e2:be:99:1a:90:c5:f6:2c:3a: 06:57:c6:c4:81:52:21:5f:cf:69:09:15:61:54:a6: ee:ac:56:2c:21:5b:b7:99:80:35:d5:17:d7:e2:ae: 4a:7f:f1:99:e1:ff:98:ba:90:cc:31:8c:10:e1:94: d7:52:07:77:c1:b8:0d:b5:d4:10:12:ed:c1:12:d8: d4:11:18:6c:65:b5:45:39:41:2a:20:12:e3:a9:24: 49:99:7d:34:92:62:23:93:f6:f4:81:ae:c3:e7:ce: 05:49:6b:35:4a:03:dc:59:dc:68:73:96:a7:0a:d4: 80:a6:98:93:b7:9e:11:7e:e6:3f:c6:af:b4:45:f6: 59:2d:d2:46:bd:76:7b:5f:6c:8c:ff:6d:60:58:1b: 3a:4d:22:2e:18:b0:dc:51:9b:b8:9e:57:9a:cc:f1: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2E:8C:78:D9:53:BB:21:7F:24:44:60:BD:41:84:F9:13:B2:29:4C X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/93F95BE673C711E98CD6D335C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:7ac0:680::-2404:7ac0:686:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 97:e9:63:d7:16:49:41:23:34:9b:ce:5f:49:52:0c:4f:d5:cc: fe:e2:c9:6c:83:c7:db:6b:85:c2:31:80:eb:dd:f8:a7:bd:b8: 7a:55:9f:21:f3:e8:f9:a7:4e:38:7f:75:22:f0:ae:5b:35:4f: 4e:8b:bd:28:76:1b:53:2a:b3:7b:64:a7:d1:4a:0b:03:e8:41: b1:ba:0a:99:89:01:05:ad:40:75:05:86:d2:05:c5:46:2a:72: 04:49:bf:96:0a:97:3d:1b:f8:99:b9:17:03:fb:fd:1b:44:86: e1:ab:ef:cd:80:ab:28:8b:ec:04:8a:ab:b2:b5:83:79:9d:86: dd:7f:6f:d7:34:b4:1e:d3:c4:21:90:2b:fc:9f:dc:4a:12:95: 3c:56:0b:f3:89:3b:c6:17:6a:92:c7:f7:29:6c:cb:e7:08:c8: c7:24:25:3c:b3:d5:22:d9:21:fe:0c:07:a7:38:f8:73:f1:e5: da:23:6d:61:a0:d2:69:9e:16:00:7b:45:1f:a9:21:93:6b:a9: ce:3c:3a:07:0d:ca:50:63:e3:6d:4f:b0:f5:c8:f5:45:d1:e0: e1:e1:5f:ad:07:e6:8f:e9:04:08:dc:05:f7:a7:a4:90:36:ef: 2f:4d:2b:12:65:09:ad:af:55:5f:61:37:e1:08:f0:29:01:0d: 6a:c0:f1:a6 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICEFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjQwMzI4MTgyNjEyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjA1YjY0NC1mMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AtelTSkaW6jUXYv4rMbcmySsEIxX+jeZ1mtKglxd3ysSc9xArl292uZh1+O kyL4ikp1ogK7zkxbSckQC6ZMNREs45ooFV4iw7+qKx73mp5NzR72AWBykSkSQYC5 EqPivpkakMX2LDoGV8bEgVIhX89pCRVhVKburFYsIVu3mYA11RfX4q5Kf/GZ4f+Y upDMMYwQ4ZTXUgd3wbgNtdQQEu3BEtjUERhsZbVFOUEqIBLjqSRJmX00kmIjk/b0 ga7D584FSWs1SgPcWdxoc5anCtSAppiTt54RfuY/xq+0RfZZLdJGvXZ7X2yM/21g WBs6TSIuGLDcUZu4nleazPF23wIDAQABo4ICozCCAp8wHQYDVR0OBBYEFKcujHjZ U7shfyREYL1BhPkTsilMMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2QTMvNzcyN0NFNUMzOEM3MTFFOUE3QjVDMjMzQzRGOUFFMDIvOTNGOTVCRTY3 M0M3MTFFOThDRDZEMzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgACMBQwEgMHByQEesAGgAMHACQEesAGhjANBgkqhkiG9w0BAQsFAAOC AQEAl+lj1xZJQSM0m85fSVIMT9XM/uLJbIPH22uFwjGA6934p724elWfIfPo+adO OH91IvCuWzVPTou9KHYbUyqze2Sn0UoLA+hBsboKmYkBBa1AdQWG0gXFRipyBEm/ lgqXPRv4mbkXA/v9G0SG4avvzYCrKIvsBIqrsrWDeZ2G3X9v1zS0HtPEIZAr/J/c ShKVPFYL84k7xhdqksf3KWzL5wjIxyQlPLPVItkh/gwHpzj4c/Hl2iNtYaDSaZ4W AHtFH6khk2upzjw6Bw3KUGPjbU+w9cj1RdHg4eFfrQfmj+kECNwF96ekkDbvL00r EmUJra9VX2E34QjwKQENasDxpg== -----END CERTIFICATE-----Generated at Fri May 31 19:47:53 2024 by rpki-client on console-fra.rpki-client.org