$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/345F56F87FE311EF80C0F71FC4F9AE02.roa File: 345F56F87FE311EF80C0F71FC4F9AE02.roa (raw, json) Hash identifier: 3+NsZX9fs90OleisLoi6Xf7dX8rP23oDYkK11SGrzUs= Subject key identifier: D5:A7:52:E5:24:97:95:7D:67:31:10:23:35:83:D8:9E:28:83:C9:24 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0460 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/345F56F87FE311EF80C0F71FC4F9AE02.roa Signing time: Tue 01 Oct 2024 10:52:08 +0000 ROA not before: Tue 01 Oct 2024 10:52:08 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 64071 IP address blocks: 2001:df7:e400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Oct 1 10:52:08 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66fbd458-e74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e5:95:b8:ee:1b:a0:dd:df:f2:5f:c9:91:74: bd:dc:bf:9e:8d:f8:5a:25:6c:e1:3f:97:0d:c2:b1: 03:e8:1d:3b:fb:30:8a:0d:cf:c6:98:e4:bf:06:6d: 5e:3d:49:11:54:e1:49:ae:31:2f:ae:da:60:55:3c: 3c:29:88:c0:52:8f:6a:21:a0:31:52:34:39:af:43: c4:58:e7:a5:87:41:ca:af:52:56:f6:a4:7f:4f:bb: 8a:b7:d0:c1:aa:c4:8b:cf:bb:c0:92:3f:c4:91:8d: 37:68:fc:6c:cf:87:e8:a9:de:16:17:72:21:0b:da: e4:9f:b9:19:e1:b7:6e:60:ca:71:2c:f0:ae:df:56: 7e:43:0b:46:14:f3:ac:3f:7f:66:1c:3f:22:9f:b8: 8b:22:01:51:2d:c8:3f:71:62:c7:99:35:1f:e9:44: 85:d1:b0:e0:50:46:20:22:fd:04:70:4b:c5:41:1d: c3:ef:45:5a:46:61:d2:45:0d:04:ba:cb:ff:58:d9: 99:3e:13:fc:76:05:43:dd:1c:dc:4e:d0:f7:29:a7: b3:bf:1d:b0:54:d3:28:e5:85:96:08:5d:dc:f2:b2: 10:87:62:8b:e2:f1:ac:76:cd:9b:d7:5d:c7:ba:f1: c8:2f:e2:30:6a:1f:b2:25:ee:a2:77:99:00:dd:50: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A7:52:E5:24:97:95:7D:67:31:10:23:35:83:D8:9E:28:83:C9:24 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/345F56F87FE311EF80C0F71FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df7:e400::/48 Signature Algorithm: sha256WithRSAEncryption a4:af:a4:dc:6b:2d:0d:35:97:c7:77:1a:15:10:1d:38:45:bf: e9:aa:85:46:c4:dc:d8:e6:f7:d4:db:a2:b1:99:4f:e9:e9:c5: 74:9d:1b:d5:50:ed:d8:ef:13:8a:1b:f1:0c:1f:77:84:15:2a: 6e:20:98:cb:e2:55:33:85:50:6d:4d:82:64:7a:c2:8d:e8:19: 65:53:dc:71:05:11:1c:c9:fa:06:c7:8e:c0:2a:ae:70:c7:f4: d1:73:ee:2b:a6:f7:81:77:dc:7b:91:b5:d6:cf:8e:43:12:6c: 53:a1:dd:86:aa:47:52:b1:32:e3:d9:0b:6b:4e:ff:52:57:cf: 99:7a:26:c0:fe:e2:12:13:d5:89:93:ce:67:aa:1d:b7:73:30: dd:f6:da:ed:e0:be:fd:d1:7c:07:57:95:7d:ea:70:f3:2c:46: 6c:b8:0f:f7:19:83:52:e5:9e:c3:d6:f6:54:88:b8:44:ef:31: 6e:e8:c9:2c:52:21:d5:1f:65:96:19:57:c3:eb:66:91:c1:00: 3b:25:52:fc:7e:85:39:8c:33:7b:92:2f:a1:9c:5a:6a:fd:3b: 63:53:4b:cd:30:42:3c:f6:34:6a:2c:f0:a9:ea:55:74:9a:34: b1:d3:74:64:c1:fd:95:a7:ea:6e:42:b7:aa:bf:cf:ea:6c:78: 58:ab:63:d4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjQxMDAxMTA1MjA4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZiZDQ1OC1lNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+WVuO4boN3f8l/JkXS93L+ejfhaJWzhP5cNwrED6B07+zCKDc/GmOS/Bm1e PUkRVOFJrjEvrtpgVTw8KYjAUo9qIaAxUjQ5r0PEWOelh0HKr1JW9qR/T7uKt9DB qsSLz7vAkj/EkY03aPxsz4foqd4WF3IhC9rkn7kZ4bduYMpxLPCu31Z+QwtGFPOs P39mHD8in7iLIgFRLcg/cWLHmTUf6USF0bDgUEYgIv0EcEvFQR3D70VaRmHSRQ0E usv/WNmZPhP8dgVD3RzcTtD3Kaezvx2wVNMo5YWWCF3c8rIQh2KL4vGsds2b113H uvHIL+Iwah+yJe6id5kA3VC3MQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNWnUuUk l5V9ZzEQIzWD2J4og8kkMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvMzQ1RjU2Rjg3 RkUzMTFFRjgwQzBGNzFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ335AAwDQYJKoZIhvcNAQELBQADggEBAKSvpNxrLQ01 l8d3GhUQHThFv+mqhUbE3Njm99TborGZT+npxXSdG9VQ7djvE4ob8Qwfd4QVKm4g mMviVTOFUG1NgmR6wo3oGWVT3HEFERzJ+gbHjsAqrnDH9NFz7ium94F33HuRtdbP jkMSbFOh3YaqR1KxMuPZC2tO/1JXz5l6JsD+4hIT1YmTzmeqHbdzMN322u3gvv3R fAdXlX3qcPMsRmy4D/cZg1LlnsPW9lSIuETvMW7oySxSIdUfZZYZV8PrZpHBADsl Uvx+hTmMM3uSL6GcWmr9O2NTS80wQjz2NGos8KnqVXSaNLHTdGTB/ZWn6m5Ct6q/ z+pseFirY9Q= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org