$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/36F318D0890A11EE9F4C014DC4F9AE02.roa File: 36F318D0890A11EE9F4C014DC4F9AE02.roa (raw, json) Hash identifier: WEtRl4nbs+OJZFZ5kUbGq6nNTiBQ6/+B2DpVTtW3sUE= Subject key identifier: 3B:DC:46:B7:81:01:C9:6A:25:0D:A1:E2:2F:81:1E:FE:75:82:37:9D Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Certificate serial: 0581 Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/36F318D0890A11EE9F4C014DC4F9AE02.roa Signing time: Wed 22 Nov 2023 07:39:06 +0000 ROA not before: Wed 22 Nov 2023 07:39:06 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 140543 IP address blocks: 2405:f9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Validity Not Before: Nov 22 07:39:06 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=655db01a-0aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:41:b8:f6:40:20:01:00:83:70:f3:24:53: 1e:d9:62:ef:e1:f2:4a:ee:d9:bc:85:ce:00:83:d9: 4b:23:40:54:e2:55:d9:5e:c4:ae:9b:1c:35:20:30: 50:ec:1c:9e:3b:ad:4f:1f:34:11:59:16:ae:69:66: 50:ee:e6:af:68:24:37:32:0d:0e:65:21:d3:ca:16: cb:a7:fb:0c:bc:75:ed:1d:61:c2:90:00:d9:c5:0f: 3b:0f:0f:d2:a6:a3:13:cf:f5:e2:dc:c0:d3:19:ed: 61:f1:80:bd:ff:70:43:3e:cb:bc:66:76:ce:95:8e: af:21:54:4e:f8:69:d9:63:91:4d:5e:a1:0d:22:09: 9d:bc:a3:84:a9:de:ee:2b:30:e9:41:cc:e7:62:8f: 8d:ba:58:22:8e:50:d5:aa:7b:1e:22:b9:1b:06:bf: 5c:6e:0c:0c:0f:c4:c9:64:14:9d:c8:7e:30:42:41: d6:0b:8c:ee:0c:f0:2a:ce:87:9b:10:40:96:a0:bd: 49:cb:fe:fa:96:0e:85:bc:a2:f9:78:94:24:8c:8b: 83:75:07:cb:c5:7b:fc:84:90:05:fb:b3:6b:79:6a: 45:63:4e:f6:14:3c:1f:be:eb:db:db:57:23:2d:00: 5b:68:11:3f:fa:19:ec:be:57:15:5c:d0:8e:cd:57: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DC:46:B7:81:01:C9:6A:25:0D:A1:E2:2F:81:1E:FE:75:82:37:9D X509v3 Authority Key Identifier: keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/36F318D0890A11EE9F4C014DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:f9c0::/48 Signature Algorithm: sha256WithRSAEncryption 56:b0:2c:d8:cb:f8:0c:5a:15:fd:14:39:cb:d7:03:64:3d:a7: be:95:61:18:13:9a:d6:36:df:b3:79:8f:c4:bf:6d:e2:11:75: c1:ca:87:0a:b9:09:2c:68:f1:4d:ef:04:c4:95:61:86:35:4a: 18:bf:5b:63:d2:33:74:ab:23:38:6b:99:57:0a:7e:69:62:58: ec:62:4b:fb:58:f3:28:df:ca:7d:ea:1d:15:81:8c:15:3f:a2: 36:c8:48:a1:3d:32:60:61:10:f0:f2:fb:fa:da:a5:66:7d:6b: a9:87:f1:44:cd:3a:9e:40:54:66:fd:1e:e2:8e:09:bc:9d:33: e2:f2:f5:d0:a7:6d:da:38:76:69:db:64:bc:32:d6:9b:32:af: db:4c:80:23:17:91:e3:9b:d0:63:3b:2b:21:18:51:a6:c1:d2: ee:d5:08:1a:7e:ac:9b:96:b5:8b:61:eb:c5:07:12:80:d1:00: cb:57:84:58:c0:d0:bf:b3:fa:57:71:28:24:34:b4:67:d1:ab: 40:de:f5:d3:fc:ad:ff:12:12:00:af:aa:9a:b8:17:76:0b:d2: 15:af:1a:25:bf:dd:88:fd:90:2e:c2:46:6c:9b:39:a0:47:f2: c0:53:38:2d:32:45:db:03:ba:a4:a3:af:95:53:0b:0c:03:2b: 03:6f:c8:1a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhBQUM2NzBGRkVG QzdCNjlBMUIwHhcNMjMxMTIyMDczOTA2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVkYjAxYS0wYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4JBuPZAIAEAg3DzJFMe2WLv4fJK7tm8hc4Ag9lLI0BU4lXZXsSumxw1IDBQ 7ByeO61PHzQRWRauaWZQ7uavaCQ3Mg0OZSHTyhbLp/sMvHXtHWHCkADZxQ87Dw/S pqMTz/Xi3MDTGe1h8YC9/3BDPsu8ZnbOlY6vIVRO+GnZY5FNXqENIgmdvKOEqd7u KzDpQcznYo+NulgijlDVqnseIrkbBr9cbgwMD8TJZBSdyH4wQkHWC4zuDPAqzoeb EECWoL1Jy/76lg6FvKL5eJQkjIuDdQfLxXv8hJAF+7NreWpFY072FDwfvuvb21cj LQBbaBE/+hnsvlcVXNCOzVf+bwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDvcRreB AclqJQ2h4i+BHv51gjedMB8GA1UdIwQYMBaAFFrJfJEpmi+pyM7YqsZw/+/Htpob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI2MC9ENzhEMkFBMjcx QTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2bkl6dGlxeG5EXzc4ZTJt aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzbDhrU21hTDZuSXp0aXF4bkRfNzhlMm1ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMyNjAvRDc4RDJBQTI3MUE2MTFFQjg3NDUwNDY2QzRGOUFFMDIvMzZGMzE4RDA4 OTBBMTFFRTlGNEMwMTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBfnAAAAwDQYJKoZIhvcNAQELBQADggEBAFawLNjL+Axa Ff0UOcvXA2Q9p76VYRgTmtY237N5j8S/beIRdcHKhwq5CSxo8U3vBMSVYYY1Shi/ W2PSM3SrIzhrmVcKfmliWOxiS/tY8yjfyn3qHRWBjBU/ojbISKE9MmBhEPDy+/ra pWZ9a6mH8UTNOp5AVGb9HuKOCbydM+Ly9dCnbdo4dmnbZLwy1psyr9tMgCMXkeOb 0GM7KyEYUabB0u7VCBp+rJuWtYth68UHEoDRAMtXhFjA0L+z+ldxKCQ0tGfRq0De 9dP8rf8SEgCvqpq4F3YL0hWvGiW/3Yj9kC7CRmybOaBH8sBTOC0yRdsDuqSjr5VT CwwDKwNvyBo= -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:24 2024 by rpki-client on console-ams.rpki-client.org