$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B9D8F9CE89D011EEB603FF75C4F9AE02.roa File: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (raw, json) Hash identifier: l/45mJzVlvrXkvMnYsTOqET7KEWpbH/MA+sFMBUmJ+A= Subject key identifier: F3:9F:05:81:6F:13:CB:AE:DD:52:DB:E7:61:54:34:DB:8C:57:0E:58 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 0193 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B9D8F9CE89D011EEB603FF75C4F9AE02.roa Signing time: Mon 25 Nov 2024 02:25:42 +0000 ROA not before: Mon 25 Nov 2024 02:25:42 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 149201 IP address blocks: 2401:43e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24 Validity Not Before: Nov 25 02:25:42 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6743e026-a400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:34:25:9c:52:b1:28:f8:2e:33:1e:9b:84: 3e:ef:f3:71:7e:06:1b:f7:4b:28:79:60:0c:68:af: b7:56:0d:98:19:4e:2c:22:af:da:b6:62:3c:a0:f2: f3:6c:78:f4:6d:95:1f:75:a9:49:ea:b7:4f:c9:74: 24:0c:29:9d:96:87:02:54:d4:90:39:f2:86:ba:3c: dd:af:20:73:a4:55:6c:c6:f4:aa:89:46:47:b4:34: 1d:2d:5a:cd:5a:f9:a3:74:9d:fc:e2:c0:31:16:63: dd:62:c8:78:7c:fd:a5:48:83:f3:ee:d0:31:87:ca: 36:73:64:75:6c:b2:f0:b4:0c:ea:fa:7a:aa:df:88: a0:90:0c:c4:63:d6:a9:f5:0b:7b:5e:da:06:4d:ff: 35:24:29:70:f8:a2:3b:50:37:3a:2f:5d:13:37:0f: cd:e5:92:c6:06:01:69:36:91:5d:6d:55:ec:6f:2a: f2:1e:e4:2a:55:2a:29:38:8f:6d:49:3c:41:3a:20: 12:a9:88:c8:d0:64:e1:87:bd:70:d0:6d:d5:ea:ce: 0d:a4:38:cf:ff:98:a2:24:0b:fa:32:14:18:0d:65: 70:3e:44:78:47:b8:6c:f4:a9:9f:60:3f:54:be:49: cf:be:c6:37:99:99:9b:9d:7b:e3:51:35:da:1b:19: 31:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9F:05:81:6F:13:CB:AE:DD:52:DB:E7:61:54:34:DB:8C:57:0E:58 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B9D8F9CE89D011EEB603FF75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:43e0::/48 Signature Algorithm: sha256WithRSAEncryption 42:7d:3a:c9:9a:5d:5b:98:1e:9d:00:bb:52:59:96:48:89:95: bf:1f:fe:3d:8b:5e:9c:6d:9f:d0:38:70:71:ff:29:68:e6:bb: 7f:b4:60:32:03:fe:eb:c0:39:22:fc:80:30:67:26:d9:3c:34: 4b:29:83:02:44:05:98:ed:af:d3:ae:07:18:06:13:ef:5c:0b: c5:39:fe:45:77:8a:38:52:06:a4:05:d5:ab:ac:63:b4:43:66: 07:eb:2d:b1:cf:53:7b:ea:d5:56:20:aa:23:41:cc:7c:a1:69: 39:22:ad:bc:21:46:c2:47:80:8f:08:28:ce:66:81:9f:e6:52: 36:eb:f9:12:3a:a1:85:46:8c:eb:87:74:d6:0f:f2:67:b3:ad: 81:7c:22:b7:87:d1:68:e1:dc:66:93:f0:eb:4f:a1:bc:b8:54: 9a:2a:14:9c:2c:87:45:05:32:e3:ed:32:39:2d:68:62:71:06: 63:03:39:5e:74:7c:6c:dd:79:ab:18:a9:10:f1:09:a4:25:c0: cd:67:2c:83:b7:8d:9b:be:71:64:35:1f:70:e7:20:47:47:3f: 96:43:e0:42:3d:22:6d:c3:45:fa:70:70:56:d1:ee:d8:ee:52: dd:0c:96:9f:32:4b:d7:1f:c5:f2:dc:c8:e5:22:e7:90:0c:9b: 13:d6:90:d9 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjQxMTI1MDIyNTQyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQzZTAyNi1hNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcw0JZxSsSj4LjMem4Q+7/NxfgYb90soeWAMaK+3Vg2YGU4sIq/atmI8oPLz bHj0bZUfdalJ6rdPyXQkDCmdlocCVNSQOfKGujzdryBzpFVsxvSqiUZHtDQdLVrN WvmjdJ384sAxFmPdYsh4fP2lSIPz7tAxh8o2c2R1bLLwtAzq+nqq34igkAzEY9ap 9Qt7XtoGTf81JClw+KI7UDc6L10TNw/N5ZLGBgFpNpFdbVXsbyryHuQqVSopOI9t STxBOiASqYjI0GThh71w0G3V6s4NpDjP/5iiJAv6MhQYDWVwPkR4R7hs9KmfYD9U vknPvsY3mZmbnXvjUTXaGxkxLwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPOfBYFv E8uu3VLb52FUNNuMVw5YMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDMjQvMTZDNjEzMTY2QUZBMTFFREI3MDZGRjNDQzRGOUFFMDIvQjlEOEY5Q0U4 OUQwMTFFRUI2MDNGRjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAUPgAAAwDQYJKoZIhvcNAQELBQADggEBAEJ9OsmaXVuY Hp0Au1JZlkiJlb8f/j2LXpxtn9A4cHH/KWjmu3+0YDID/uvAOSL8gDBnJtk8NEsp gwJEBZjtr9OuBxgGE+9cC8U5/kV3ijhSBqQF1ausY7RDZgfrLbHPU3vq1VYgqiNB zHyhaTkirbwhRsJHgI8IKM5mgZ/mUjbr+RI6oYVGjOuHdNYP8mezrYF8IreH0Wjh 3GaT8OtPoby4VJoqFJwsh0UFMuPtMjktaGJxBmMDOV50fGzdeasYqRDxCaQlwM1n LIO3jZu+cWQ1H3DnIEdHP5ZD4EI9Im3DRfpwcFbR7tjuUt0Mlp8yS9cfxfLcyOUi 55AMmxPWkNk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:20:16 2025 by rpki-client