$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/FDC8E95AC95411EEAF356F5BC4F9AE02.roa File: FDC8E95AC95411EEAF356F5BC4F9AE02.roa (raw, json) Hash identifier: rhY7D8mGpDIXxA7UIL7HVpAUImsoeRI+4jGrb3Ziyio= Subject key identifier: E4:57:CE:BA:0D:2B:16:2E:D4:18:E6:7D:34:B3:91:7F:C8:2A:22:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 05 Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/FDC8E95AC95411EEAF356F5BC4F9AE02.roa Signing time: Mon 12 Feb 2024 03:15:37 +0000 ROA not before: Mon 12 Feb 2024 03:15:37 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 18914 IP address blocks: 2401:7f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Feb 12 03:15:37 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65c98d58-b056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:1f:dc:54:99:f4:83:88:16:e6:b4:0b:1c: e2:a8:98:d3:00:1c:9a:0a:48:30:e2:bc:cb:b2:6b: e2:9a:30:50:08:73:4a:54:48:7e:3c:1e:93:10:e5: 3c:33:4d:e5:9e:ea:c8:0a:28:bc:94:64:24:e9:a2: 22:7f:ed:19:23:5e:fb:af:b7:6f:dc:ad:c7:f8:c0: 11:a7:32:94:73:e6:28:9d:78:f0:4c:a6:2c:7e:3a: 1d:b6:5c:fd:bb:1e:80:ba:b8:02:3e:14:24:27:c7: 7c:11:eb:a5:9a:69:ab:5d:b3:4d:c2:59:16:85:c6: 79:6c:5f:09:4e:b1:92:7d:6b:99:aa:ae:50:56:99: 75:91:11:0a:fb:e7:18:2a:ca:1a:33:65:a6:ca:98: 2f:69:3d:48:ad:9f:98:65:25:a3:bd:ce:08:c1:b6: 04:96:1c:58:09:bb:15:89:b2:ea:c9:ba:f5:c1:07: 3b:e1:b2:69:3b:bc:1a:5b:af:3e:18:8f:03:fb:1b: 69:22:6b:a8:a8:cf:9e:53:2d:b6:f3:61:b6:67:5a: 7b:b6:50:98:25:01:f1:2d:70:b5:e4:df:c2:6a:08: a1:62:c6:53:51:e9:4b:0b:f9:32:b1:10:f7:6c:76: 97:16:d0:52:f6:1d:50:cc:5e:47:ed:58:ca:3f:28: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:CE:BA:0D:2B:16:2E:D4:18:E6:7D:34:B3:91:7F:C8:2A:22:30 X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/FDC8E95AC95411EEAF356F5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:7f60::/32 Signature Algorithm: sha256WithRSAEncryption 71:a8:49:c2:6d:89:0d:35:6d:02:53:15:4f:37:ef:f0:32:bf: 8d:0b:99:34:0d:59:8d:7b:dc:7b:c7:d6:3c:00:e3:10:00:34: 2c:8f:a5:ba:2d:08:19:b5:cf:6d:21:73:25:9c:60:21:92:31: 0c:84:8e:e4:c8:4a:b9:ae:c5:9b:86:5f:70:c6:ef:b5:86:c5: be:6f:18:ae:03:59:ab:de:e0:6c:23:c7:9c:2a:f4:01:ab:0b: 60:bd:a6:52:bc:58:a8:d0:a8:bc:29:01:e5:27:9d:1f:11:fa: 17:3c:a1:f6:5d:20:2a:89:ab:72:47:58:05:53:78:ea:dd:4a: 9a:c0:f6:4b:af:a4:1a:14:e6:e2:b6:30:0e:3f:e6:b3:d7:d5: 45:ff:24:c6:ba:c1:dd:b3:21:20:39:af:f3:58:da:7f:ae:be: d5:3b:a3:d7:f6:54:58:62:fb:67:6a:5d:b3:4d:c1:b3:91:4c: 80:1a:b1:b7:93:e6:9f:94:5c:12:b8:21:eb:c9:73:66:3d:9b: 92:e9:3d:7c:e9:68:26:c1:7c:4f:88:bd:70:63:2d:50:3b:85: ad:f7:08:0b:ac:63:50:8a:97:43:f1:1f:e9:a4:c1:ab:53:ae: 5c:be:71:c4:0a:63:19:fd:7d:5d:53:5d:5c:e7:66:46:02:87: fb:40:95:b0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDlGOTExMC8GA1UEBRMoOTJFRkQ1QzBCOTIwMUE3RUQzOTY1RjJEOThCNkQ5RUI2 NjI5MDUzMDAeFw0yNDAyMTIwMzE1MzdaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Yzk4ZDU4LWIwNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC89R/cVJn0g4gW5rQLHOKomNMAHJoKSDDivMuya+KaMFAIc0pUSH48HpMQ5Twz TeWe6sgKKLyUZCTpoiJ/7RkjXvuvt2/crcf4wBGnMpRz5iidePBMpix+Oh22XP27 HoC6uAI+FCQnx3wR66Waaatds03CWRaFxnlsXwlOsZJ9a5mqrlBWmXWREQr75xgq yhozZabKmC9pPUitn5hlJaO9zgjBtgSWHFgJuxWJsurJuvXBBzvhsmk7vBpbrz4Y jwP7G2kia6ioz55TLbbzYbZnWnu2UJglAfEtcLXk38JqCKFixlNR6UsL+TKxEPds dpcW0FL2HVDMXkftWMo/KDmnAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQU5FfOug0r Fi7UGOZ9NLORf8gqIjAwHwYDVR0jBBgwFoAUku/VwLkgGn7Tll8tmLbZ62YpBTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVEOUY5LzY4NjBENUEwQzk1 MjExRUVCN0FEREQ0RUM0RjlBRTAyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3VfVndMa2dHbjdUbGw4dG1MYlo2MllwQlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9GREM4RTk1QUM5 NTQxMUVFQUYzNTZGNUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBf2AwDQYJKoZIhvcNAQELBQADggEBAHGoScJtiQ01bQJT FU837/Ayv40LmTQNWY173HvH1jwA4xAANCyPpbotCBm1z20hcyWcYCGSMQyEjuTI SrmuxZuGX3DG77WGxb5vGK4DWave4Gwjx5wq9AGrC2C9plK8WKjQqLwpAeUnnR8R +hc8ofZdICqJq3JHWAVTeOrdSprA9kuvpBoU5uK2MA4/5rPX1UX/JMa6wd2zISA5 r/NY2n+uvtU7o9f2VFhi+2dqXbNNwbORTIAasbeT5p+UXBK4IevJc2Y9m5LpPXzp aCbBfE+IvXBjLVA7ha33CAusY1CKl0PxH+mkwatTrly+ccQKYxn9fV1TXVznZkYC h/tAlbA= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:33 2024 by rpki-client on console-fra.rpki-client.org