$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa File: B8201598BED111EC93B74C4FC4F9AE02.roa (raw, json) Hash identifier: kTFOK3ynHOox0BEylY/R7Pu/xXeyAHugoAvaLZ+re6g= Subject key identifier: 18:D0:C2:71:53:AC:9D:63:70:DE:10:61:3F:7A:07:BA:4F:A9:5B:CC Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 3335 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa Signing time: Tue 08 Aug 2023 15:30:54 +0000 ROA not before: Tue 08 Aug 2023 15:30:54 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 45172 IP address blocks: 2405:9400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13109 (0x3335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Aug 8 15:30:54 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64d25fae-dcb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:3d:29:fe:09:d8:9f:1a:46:b1:61:c5:ed: db:98:95:f1:c0:ed:13:ef:d9:90:59:ea:23:b8:30: ab:96:41:9d:56:70:aa:7b:9d:21:4f:2d:50:ae:f0: 81:9f:f0:89:cd:be:a3:f2:f5:be:6c:54:15:ad:47: 9e:d1:91:ca:89:f4:5c:63:9e:07:21:fb:7b:fb:29: 8c:a2:7c:25:8f:9f:85:49:35:01:24:21:cb:6d:93: dd:39:05:9a:c3:99:b0:1a:64:3a:b0:e1:76:5c:13: a5:7b:85:b1:e1:26:1c:37:62:0a:fe:ac:b4:4e:98: ef:ad:03:d5:d1:e2:5c:2d:93:45:a3:fc:10:75:21: da:4e:af:50:2e:8b:13:00:4c:54:77:95:38:9f:09: a6:6f:b8:c8:a4:b4:a1:68:9d:c9:77:63:9e:0c:aa: d2:a4:56:1b:48:94:6a:c6:73:fe:fb:d2:53:54:b1: 0f:de:58:d0:f3:97:fd:02:c5:28:86:e9:e7:3c:dc: b7:7b:1f:0b:4d:79:36:fe:8b:68:a9:08:a3:61:81: 98:37:a4:c5:39:43:6f:d6:41:cd:b5:87:72:f4:03: ee:50:ab:dc:dc:00:1d:1b:2a:1a:df:fc:6b:fd:c8: 65:71:ac:a8:aa:55:80:7a:b7:17:83:23:66:0d:93: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D0:C2:71:53:AC:9D:63:70:DE:10:61:3F:7A:07:BA:4F:A9:5B:CC X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:9400::/32 Signature Algorithm: sha256WithRSAEncryption 49:aa:68:c4:35:96:fb:b3:c4:f8:a0:f8:e6:f7:80:6d:03:f0: d0:66:61:b1:ca:bf:7b:b3:11:61:c0:d1:c4:81:63:99:df:6a: e4:4e:d0:02:c0:b0:59:b3:4b:fa:3b:ec:1e:7f:f3:59:f9:63: 9f:62:a0:01:75:2a:01:12:57:56:f2:86:86:d1:d0:f0:51:b7: c6:34:c1:91:cd:8c:3c:f9:f5:19:3a:4e:d6:87:e9:e0:b7:9a: 1a:b4:6b:36:8c:6f:d2:b6:5f:ab:13:3f:3e:ac:83:5d:11:67: be:02:37:1a:f1:a5:17:1a:52:08:cc:db:37:02:14:ee:9a:61: bd:36:1b:b2:a7:ce:bc:45:a4:64:f9:f1:9b:46:45:fc:a6:8d: 7e:7b:b7:56:63:80:c7:e5:ac:03:45:06:6c:dd:07:3d:1c:e9: e4:c9:d1:e3:57:c3:29:49:60:fe:77:bd:9a:66:4f:eb:64:09: 63:94:eb:65:8c:05:0a:cc:db:ae:86:88:f8:b5:49:d7:a2:fe: 77:36:bb:ae:b2:13:fd:24:36:eb:80:0e:ca:28:e1:16:25:43: 0c:4c:b8:24:44:c3:2e:90:94:6f:83:98:ef:8d:53:05:f6:5e: 74:86:d3:49:21:81:7d:cc:e4:00:5f:f3:04:b3:c0:06:59:b9: 5e:f8:61:54 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICMzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjMwODA4MTUzMDU0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQyNWZhZS1kY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHA9Kf4J2J8aRrFhxe3bmJXxwO0T79mQWeojuDCrlkGdVnCqe50hTy1QrvCB n/CJzb6j8vW+bFQVrUee0ZHKifRcY54HIft7+ymMonwlj5+FSTUBJCHLbZPdOQWa w5mwGmQ6sOF2XBOle4Wx4SYcN2IK/qy0TpjvrQPV0eJcLZNFo/wQdSHaTq9QLosT AExUd5U4nwmmb7jIpLShaJ3Jd2OeDKrSpFYbSJRqxnP++9JTVLEP3ljQ85f9AsUo hunnPNy3ex8LTXk2/otoqQijYYGYN6TFOUNv1kHNtYdy9APuUKvc3AAdGyoa3/xr /chlcayoqlWAercXgyNmDZPbuwIDAQABo4ICljCCApIwHQYDVR0OBBYEFBjQwnFT rJ1jcN4QYT96B7pPqVvMMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyOEMvNTJGQ0M2NDgxREEwMTFFMkI2RDg3MDkxMDhCMDJDRDIvQjgyMDE1OThC RUQxMTFFQzkzQjc0QzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBZQAMA0GCSqGSIb3DQEBCwUAA4IBAQBJqmjENZb7s8T4 oPjm94BtA/DQZmGxyr97sxFhwNHEgWOZ32rkTtACwLBZs0v6O+wef/NZ+WOfYqAB dSoBEldW8oaG0dDwUbfGNMGRzYw8+fUZOk7Wh+ngt5oatGs2jG/Stl+rEz8+rINd EWe+Ajca8aUXGlIIzNs3AhTummG9Nhuyp868RaRk+fGbRkX8po1+e7dWY4DH5awD RQZs3Qc9HOnkydHjV8MpSWD+d72aZk/rZAljlOtljAUKzNuuhoj4tUnXov53Nruu shP9JDbrgA7KKOEWJUMMTLgkRMMukJRvg5jvjVMF9l50htNJIYF9zOQAX/MEs8AG Wble+GFU -----END CERTIFICATE-----Generated at Fri May 31 16:41:45 2024 by rpki-client on console-ams.rpki-client.org