$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/A24D0F54140C11EFBC640B71C4F9AE02.roa File: A24D0F54140C11EFBC640B71C4F9AE02.roa (raw, json) Hash identifier: iTyxeo6fdLY6zYqk38GBrAnxGbLRbpbsfA4HbHTb8W0= Subject key identifier: 3E:B7:C1:92:54:77:78:68:79:A3:C1:1A:EA:B1:87:50:A2:5E:10:B8 Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Certificate serial: ED Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/A24D0F54140C11EFBC640B71C4F9AE02.roa Signing time: Fri 17 May 2024 05:16:37 +0000 ROA not before: Fri 17 May 2024 05:16:37 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150791 IP address blocks: 2001:df2:fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 05:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Validity Not Before: May 17 05:16:37 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6646e834-0a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:5c:14:8d:4f:3d:47:57:d1:90:91:12:bb: 56:fc:21:4d:92:9e:10:ad:55:d5:8f:c4:a3:70:ee: 28:6a:62:bf:f2:fd:b0:71:87:7c:d1:a7:fe:e6:d5: 57:84:25:20:70:fb:d8:f8:c2:aa:55:7e:88:c8:5e: 07:1d:eb:f5:8e:3e:3b:15:1d:38:6a:a9:a2:37:12: 2f:6c:62:52:22:7f:dc:a7:76:3e:45:09:56:f4:f2: be:2f:8f:59:fe:b5:04:bf:61:10:c6:ed:bc:1a:8d: d9:09:d5:7f:b8:f9:2c:2c:35:05:e5:22:94:b1:a3: d3:ec:d1:36:1f:77:a4:e7:c5:8c:0c:64:b6:5a:95: 33:be:0d:04:e4:63:bb:cb:a8:42:64:1d:87:76:46: e5:b1:a1:a0:86:26:ff:bb:cf:6a:1a:bd:fe:02:f1: eb:26:9c:01:c4:28:fd:62:6f:cd:8c:47:04:d0:36: 49:84:3d:40:c6:1a:ae:0b:d0:54:54:40:bf:92:4b: ec:29:ab:2c:ad:34:7f:2c:4a:c8:47:43:ce:30:8e: 90:6b:50:38:76:1d:27:69:6e:36:ef:7e:f7:df:de: fc:38:e2:05:12:d2:36:01:25:21:4c:7e:32:5a:77: 56:5f:65:f1:a1:a5:84:cb:0c:5b:4e:f1:9a:4f:2b: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B7:C1:92:54:77:78:68:79:A3:C1:1A:EA:B1:87:50:A2:5E:10:B8 X509v3 Authority Key Identifier: keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/A24D0F54140C11EFBC640B71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df2:fc0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:6d:06:40:66:1b:0f:1e:46:96:6f:bc:6a:1a:a3:c9:a9:d6: 44:fa:58:ed:9f:ed:b6:cc:e2:fd:4d:bc:a4:c0:45:16:de:f9: 14:ee:06:b4:b4:b5:5e:0e:ba:8c:58:1a:64:ff:80:59:05:8e: 61:58:2b:50:eb:b2:75:bc:59:6b:38:1d:78:a2:fd:14:3c:1f: ce:57:c0:5b:49:e2:d4:66:2b:72:35:79:1a:4d:9d:04:e1:c3: e3:b2:d1:ec:3e:7f:1c:d0:af:0b:dd:9f:f7:96:31:9d:18:be: 04:9f:1a:1e:98:dd:76:0b:40:c8:cf:52:61:77:f0:e7:1b:f8: 75:47:db:de:31:91:a1:0e:95:4c:10:8e:8d:04:c7:b4:65:ab: a2:6f:b5:a8:22:36:94:96:41:00:46:9a:52:b4:72:a0:5d:4a: 54:2f:5f:4a:95:eb:16:f2:bb:ae:34:de:87:9e:ce:69:f3:7b: 15:24:90:4e:09:d2:8a:12:70:c8:24:cf:a5:47:16:38:99:1d: 9f:69:43:ed:d9:ae:58:70:13:20:f6:fa:eb:5e:0a:48:8b:42: 84:9e:6d:d6:1e:50:90:81:ec:d9:af:a5:a8:e8:62:48:f8:95: 7a:e2:d2:51:7d:a0:eb:79:b1:d5:85:0b:79:50:7e:10:aa:d6: 8d:1c:23:95 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBNDAxMTAvBgNVBAUTKDM3QjYyQTc3MjUxQzUyQTA0QjMzQjgyRDJFRDAyMDRD OTI3QTQyOUEwHhcNMjQwNTE3MDUxNjM3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2ZTgzNC0wYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzZcFI1PPUdX0ZCRErtW/CFNkp4QrVXVj8SjcO4oamK/8v2wcYd80af+5tVX hCUgcPvY+MKqVX6IyF4HHev1jj47FR04aqmiNxIvbGJSIn/cp3Y+RQlW9PK+L49Z /rUEv2EQxu28Go3ZCdV/uPksLDUF5SKUsaPT7NE2H3ek58WMDGS2WpUzvg0E5GO7 y6hCZB2HdkblsaGghib/u89qGr3+AvHrJpwBxCj9Ym/NjEcE0DZJhD1AxhquC9BU VEC/kkvsKassrTR/LErIR0POMI6Qa1A4dh0naW4273733978OOIFEtI2ASUhTH4y WndWX2XxoaWEywxbTvGaTysvTQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFD63wZJU d3hoeaPBGuqxh1CiXhC4MB8GA1UdIwQYMBaAFDe2KnclHFKgSzO4LS7QIEySekKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREE0MC85NkYwRDcwQ0JC REExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1VxQkxNN2d0THRBZ1RKSjZR cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL043WXFkeVVjVXFCTE03Z3RMdEFnVEpKNlFwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRBNDAvOTZGMEQ3MENCQkRBMTFFRDg4NzhFRjQ3QzRGOUFFMDIvQTI0RDBGNTQx NDBDMTFFRkJDNjQwQjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3yD8AwDQYJKoZIhvcNAQELBQADggEBAE9tBkBmGw8e RpZvvGoao8mp1kT6WO2f7bbM4v1NvKTARRbe+RTuBrS0tV4OuoxYGmT/gFkFjmFY K1DrsnW8WWs4HXii/RQ8H85XwFtJ4tRmK3I1eRpNnQThw+Oy0ew+fxzQrwvdn/eW MZ0YvgSfGh6Y3XYLQMjPUmF38Ocb+HVH294xkaEOlUwQjo0Ex7Rlq6JvtagiNpSW QQBGmlK0cqBdSlQvX0qV6xbyu6403oeezmnzexUkkE4J0ooScMgkz6VHFjiZHZ9p Q+3ZrlhwEyD2+uteCkiLQoSebdYeUJCB7NmvpajoYkj4lXri0lF9oOt5sdWFC3lQ fhCq1o0cI5U= -----END CERTIFICATE-----Generated at Thu Jun 13 08:02:37 2024 by rpki-client on console-ams.rpki-client.org