$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/56C3DC822B0B11EF97C4A74AC4F9AE02.roa File: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (raw, json) Hash identifier: 8wnTmh1W8Y0nXXG10XPmkI991HV3skLyCs5O2FK2VSU= Subject key identifier: F9:94:F1:4C:A4:DA:5D:0A:9F:61:45:10:B9:4E:84:42:B9:2A:F6:B2 Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Certificate serial: 334F Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/56C3DC822B0B11EF97C4A74AC4F9AE02.roa Signing time: Sat 15 Jun 2024 11:35:17 +0000 ROA not before: Sat 15 Jun 2024 11:35:17 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 58779 IP address blocks: 43.243.224.0/22 maxlen: 24 2405:ef00::/32 maxlen: 32 2405:ef00::/32 maxlen: 48 2405:ef00:17::/48 maxlen: 48 2405:ef00:17::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jul 2024 15:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13135 (0x334f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Validity Not Before: Jun 15 11:35:17 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=666d7c75-2e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:8e:32:1a:ae:cc:2a:3a:c9:9a:54:59:76: ef:e7:7a:70:2f:11:ea:fe:3a:a9:49:1b:7f:b1:c5: df:57:ae:24:a1:f8:a5:1d:da:ad:02:f7:f2:2f:f7: 06:8c:f5:08:2f:0a:b0:87:45:a9:6a:56:f1:62:4e: 5d:6f:89:7d:bf:3f:0c:28:68:bb:26:ff:43:41:bd: 99:8d:1c:d5:f6:ab:8a:b7:b6:62:75:c4:8d:66:f9: 6c:d5:f4:29:3d:f8:46:fa:54:f5:26:ba:73:e8:9f: 3d:60:30:90:ea:09:d0:f0:aa:b3:ee:da:23:1c:96: 30:b6:80:13:d1:f8:59:ec:5c:e4:b4:a8:bf:b3:6b: 33:81:e5:ac:bc:68:20:2b:db:ae:c8:5e:60:4e:c4: f0:be:6b:bb:b6:b8:e1:e5:f3:71:c5:df:a9:cb:61: a2:8a:07:98:cd:98:67:34:2e:35:fc:ea:c4:5f:31: cc:af:09:6e:f8:c3:fd:75:27:e5:27:90:46:0b:6b: 80:04:17:78:5c:e2:ca:4c:e2:f4:76:32:eb:82:a9: 6f:38:d2:f4:e3:4a:b9:ea:85:95:30:92:6e:75:4e: 37:a1:fd:24:b0:e9:97:ca:4b:2e:ea:26:20:4b:e4: 9d:08:fb:ec:73:de:96:80:70:b1:41:f6:0f:61:32: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:94:F1:4C:A4:DA:5D:0A:9F:61:45:10:B9:4E:84:42:B9:2A:F6:B2 X509v3 Authority Key Identifier: keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/56C3DC822B0B11EF97C4A74AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.224.0/22 IPv6: 2405:ef00::/32 Signature Algorithm: sha256WithRSAEncryption 8b:7f:bc:c5:45:34:ac:92:94:af:b6:68:2f:97:4c:1c:18:db: 8e:5a:83:37:31:2d:78:5c:7a:53:82:45:ab:8a:97:5e:e8:45: 91:e5:c6:60:70:9c:ba:cf:c4:b4:09:80:8d:a0:35:26:6b:5e: 72:a3:81:16:e9:40:f1:8c:30:32:d5:f4:57:02:88:19:76:f1: 20:bc:3e:d8:fa:b9:af:ad:d2:bc:93:fd:3e:52:ea:b3:da:dd: 4f:cf:eb:66:2b:e5:e8:dd:e7:16:f0:66:26:ec:1c:cd:b5:69: d9:05:3c:5d:46:94:b3:c5:2d:ce:c6:cc:89:85:f2:b5:6d:b6: ac:5f:01:51:41:81:d9:10:ee:0a:71:80:c9:b9:c1:ae:c0:6c: 21:d3:cd:59:d2:cb:5d:65:86:35:95:e8:70:0e:82:c0:fb:73: bf:45:69:85:9b:e7:4a:1f:6a:49:dc:4f:a4:a3:e5:a7:22:6d: 9b:fb:b2:2d:c0:36:11:20:b2:93:6e:ec:0f:60:e2:80:e8:ba: d1:0a:b9:a6:61:d0:ba:72:d8:62:9c:62:84:29:51:4c:c2:30: 76:41:33:a4:c3:c0:a1:d2:97:ab:31:47:28:dd:dc:21:1f:d5: 14:f1:3d:73:52:ee:5c:12:af:0b:41:51:31:79:ba:30:e5:69: ce:1f:a7:f9 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICM08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz QzQ5MzExREIwHhcNMjQwNjE1MTEzNTE3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjZkN2M3NS0yZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmD6OMhquzCo6yZpUWXbv53pwLxHq/jqpSRt/scXfV64kofilHdqtAvfyL/cG jPUILwqwh0WpalbxYk5db4l9vz8MKGi7Jv9DQb2ZjRzV9quKt7ZidcSNZvls1fQp PfhG+lT1Jrpz6J89YDCQ6gnQ8Kqz7tojHJYwtoAT0fhZ7FzktKi/s2szgeWsvGgg K9uuyF5gTsTwvmu7trjh5fNxxd+py2GiigeYzZhnNC41/OrEXzHMrwlu+MP9dSfl J5BGC2uABBd4XOLKTOL0djLrgqlvONL040q56oWVMJJudU43of0ksOmXyksu6iYg S+SdCPvsc96WgHCxQfYPYTK1CQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPmU8Uyk 2l0Kn2FFELlOhEK5KvayMB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThEMjcvQzBDNTgwNzA0MkU5MTFFMjk3NTBBMzJFMjk3OUJCMjAvNTZDM0RDODIy QjBCMTFFRjk3QzRBNzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAIr8+AwDQQCAAIwBwMFACQF7wAwDQYJKoZIhvcNAQELBQAD ggEBAIt/vMVFNKySlK+2aC+XTBwY245agzcxLXhcelOCRauKl17oRZHlxmBwnLrP xLQJgI2gNSZrXnKjgRbpQPGMMDLV9FcCiBl28SC8Ptj6ua+t0ryT/T5S6rPa3U/P 62Yr5ejd5xbwZibsHM21adkFPF1GlLPFLc7GzImF8rVttqxfAVFBgdkQ7gpxgMm5 wa7AbCHTzVnSy11lhjWV6HAOgsD7c79FaYWb50ofakncT6Sj5acibZv7si3ANhEg spNu7A9g4oDoutEKuaZh0Lpy2GKcYoQpUUzCMHZBM6TDwKHSl6sxRyjd3CEf1RTx PXNS7lwSrwtBUTF5ujDlac4fp/k= -----END CERTIFICATE-----Generated at Fri Jun 28 17:11:39 2024 by rpki-client on console-ams.rpki-client.org