$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/8D93B9E0D8E911EE85D9881FC4F9AE02.roa File: 8D93B9E0D8E911EE85D9881FC4F9AE02.roa (raw, json) Hash identifier: AmGEU/vI25utL7crZoKrtfl5OSwvLwWyEhptdWMwqps= Subject key identifier: 28:AC:33:51:63:9A:97:91:5D:90:2C:A4:13:B1:B3:CE:C6:A7:CC:2A Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 21A0 Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/8D93B9E0D8E911EE85D9881FC4F9AE02.roa Signing time: Thu 02 May 2024 16:33:57 +0000 ROA not before: Thu 02 May 2024 16:33:57 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 36980 IP address blocks: 2402:5380:6f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8608 (0x21a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: May 2 16:33:57 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6633c075-4a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:ca:f6:a9:9d:e2:8a:b2:cb:6e:58:53:29: 47:5e:98:bb:47:c3:37:50:7a:9c:8a:1f:e3:0e:fb: 27:89:de:7c:c7:31:2c:28:26:f3:58:a9:86:18:0e: 02:cc:aa:7b:34:98:07:b1:f4:43:48:de:49:72:fd: e3:71:1c:44:e7:4c:fb:2a:30:15:5c:00:ac:44:eb: 90:32:bb:c3:d1:6c:a9:38:a4:ee:d6:5c:1c:ac:63: e0:be:9b:88:e9:e3:af:02:66:92:86:77:d3:8d:16: 66:94:ab:26:2c:9a:fe:a7:24:a3:89:ba:4b:c0:61: c2:6d:ec:75:99:3d:3f:25:d8:eb:98:43:5c:e7:45: de:9e:af:12:de:cb:e3:73:35:09:a7:5c:4d:d9:ac: 8a:40:fe:7f:54:6a:b5:b9:fc:11:9e:2c:96:47:89: d3:21:f5:ee:c1:67:67:80:aa:d9:be:32:a6:8e:45: 2d:dc:8e:84:f5:d4:27:12:9a:b1:0b:a4:c7:6c:8d: a2:83:6d:43:85:53:d6:e4:ff:49:05:04:42:07:45: 70:e5:bc:aa:32:e1:3a:09:cb:e7:b1:33:19:9c:4a: f5:a1:20:2f:fa:9e:4e:df:81:22:99:45:32:f8:37: f7:16:49:8a:aa:ae:d2:90:0c:3b:7c:c7:49:45:77: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AC:33:51:63:9A:97:91:5D:90:2C:A4:13:B1:B3:CE:C6:A7:CC:2A X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/8D93B9E0D8E911EE85D9881FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:5380:6f00::/40 Signature Algorithm: sha256WithRSAEncryption 94:48:c6:75:d3:2a:70:4f:b4:10:8c:bb:8d:d0:76:9a:e4:e6: 6e:47:cc:d5:99:42:f4:05:a3:f9:d0:0b:0a:f0:44:2b:94:2c: 13:9b:53:7c:9c:a9:95:81:20:6d:c5:99:c2:65:a1:a6:cd:34: e8:ca:14:04:b7:e0:01:28:9d:f0:30:93:83:b4:30:86:fc:b6: 74:0a:39:94:f1:9b:de:d4:48:cd:f7:96:bb:66:ef:80:19:1a: 7d:65:d2:a8:60:ac:aa:e2:08:41:53:76:89:39:23:fa:93:59: 17:83:1b:a5:df:59:0e:31:5a:ee:d9:b4:0e:0e:6f:63:33:bc: a0:eb:c1:b1:e5:b6:c0:34:1b:0b:53:25:4b:ba:5f:31:d4:f2: 52:8a:45:7d:25:ce:2b:7f:59:96:28:19:5b:6f:ef:a4:ed:de: b1:ea:96:00:12:bf:c8:14:90:e0:b3:00:f8:94:06:f3:47:09: ab:1d:eb:08:e8:e8:25:e3:81:24:d4:2b:42:5d:23:53:1b:11: db:d0:16:c1:d5:31:1e:b3:df:26:29:93:c7:ea:b1:ab:3f:24: 93:0a:b1:5a:ed:da:fa:e4:d3:f4:09:be:f6:6f:7f:8d:20:10: e5:e2:95:64:0d:ff:dd:0f:87:05:9a:6d:6e:fc:56:5d:5f:b4: c0:d8:d9:3a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICIaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjQwNTAyMTYzMzU3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzYzA3NS00YThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxLK9qmd4oqyy25YUylHXpi7R8M3UHqcih/jDvsnid58xzEsKCbzWKmGGA4C zKp7NJgHsfRDSN5Jcv3jcRxE50z7KjAVXACsROuQMrvD0WypOKTu1lwcrGPgvpuI 6eOvAmaShnfTjRZmlKsmLJr+pySjibpLwGHCbex1mT0/JdjrmENc50Xenq8S3svj czUJp1xN2ayKQP5/VGq1ufwRniyWR4nTIfXuwWdngKrZvjKmjkUt3I6E9dQnEpqx C6THbI2ig21DhVPW5P9JBQRCB0Vw5byqMuE6CcvnsTMZnEr1oSAv+p5O34EimUUy +Df3FkmKqq7SkAw7fMdJRXdQJwIDAQABo4IClzCCApMwHQYDVR0OBBYEFCisM1Fj mpeRXZAspBOxs87Gp8wqMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJBMUMvNjNCMjE0QTJDODE1MTFFNTgxRDIwODg0QzRGOUFFMDIvOEQ5M0I5RTBE OEU5MTFFRTg1RDk4ODFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkAlOAbzANBgkqhkiG9w0BAQsFAAOCAQEAlEjGddMqcE+0 EIy7jdB2muTmbkfM1ZlC9AWj+dALCvBEK5QsE5tTfJyplYEgbcWZwmWhps006MoU BLfgASid8DCTg7Qwhvy2dAo5lPGb3tRIzfeWu2bvgBkafWXSqGCsquIIQVN2iTkj +pNZF4Mbpd9ZDjFa7tm0Dg5vYzO8oOvBseW2wDQbC1MlS7pfMdTyUopFfSXOK39Z ligZW2/vpO3eseqWABK/yBSQ4LMA+JQG80cJqx3rCOjoJeOBJNQrQl0jUxsR29AW wdUxHrPfJimTx+qxqz8kkwqxWu3a+uTT9Am+9m9/jSAQ5eKVZA3/3Q+HBZptbvxW XV+0wNjZOg== -----END CERTIFICATE-----Generated at Sun Jun 16 17:33:35 2024 by rpki-client on console-ams.rpki-client.org