$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/323430353a393234303a3a2f33322d3332203d3e203631333137.roa File: 323430353a393234303a3a2f33322d3332203d3e203631333137.roa (raw, json) Hash identifier: T3lI5I0ibMwot2kfzDeDXjdHqZ3J+lsRr0fSaqNQxq8= Subject key identifier: 5F:DC:B2:F5:45:F5:8B:B7:6D:60:5C:D7:76:12:F6:DC:73:80:2B:29 Certificate issuer: /CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24 Certificate serial: 1713DAB5C7B0AB7A13173474E0A3EED62AB30C4D Authority key identifier: BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91857810000/0/323430353a393234303a3a2f33322d3332203d3e203631333137.roa Signing time: Tue 27 Feb 2024 10:58:54 +0000 ROA not before: Tue 27 Feb 2024 10:53:54 +0000 ROA not after: Tue 25 Feb 2025 10:58:54 +0000 asID: 61317 IP address blocks: 2405:9240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:13:da:b5:c7:b0:ab:7a:13:17:34:74:e0:a3:ee:d6:2a:b3:0c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24 Validity Not Before: Feb 27 10:53:54 2024 GMT Not After : Feb 25 10:58:54 2025 GMT Subject: CN=5FDCB2F545F58BB76D605CD77612F6DC73802B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:af:00:f6:36:4f:7d:10:19:27:c6:c6:ac: 4e:1f:a7:12:17:62:a9:f0:c1:e6:fc:54:13:92:b9: 24:ca:5b:a5:ce:1c:88:38:80:0d:9e:40:23:99:21: 09:64:49:dd:d3:c6:e8:1d:69:73:29:09:5b:03:69: 50:e4:ea:50:46:2e:97:64:ee:6e:b3:57:41:24:66: a4:73:88:e9:5e:46:0b:28:2c:81:5a:41:7d:55:b7: cf:05:75:9f:78:e6:be:2a:cc:ca:88:67:c3:66:be: cf:ae:82:b4:1b:ee:b8:45:7a:05:e3:37:71:2e:ac: 7f:59:d7:1b:e3:a5:7f:27:8e:2d:6e:49:b3:2d:59: 09:01:57:77:7d:50:cb:4b:f0:31:bb:97:e4:03:b9: 54:9e:fa:ac:3d:72:c3:03:8f:93:88:57:36:fe:d5: 6e:a4:c0:88:b5:ed:4c:da:d8:87:18:cf:fd:cc:cd: 7d:fc:99:8f:69:f0:af:83:2f:89:58:44:d4:a0:c7: a0:b6:23:9e:11:bd:12:cd:43:5e:65:0c:e3:4a:eb: 5e:4b:d5:64:06:16:d6:d9:5c:58:d8:0c:51:72:e5: 8d:71:f5:8d:97:75:65:62:53:12:09:4f:c1:d3:5e: 07:ba:f5:79:cd:1a:30:53:b6:f2:7a:01:ff:a1:ef: 0c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DC:B2:F5:45:F5:8B:B7:6D:60:5C:D7:76:12:F6:DC:73:80:2B:29 X509v3 Authority Key Identifier: keyid:BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/323430353a393234303a3a2f33322d3332203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:9240::/32 Signature Algorithm: sha256WithRSAEncryption 3b:dc:2a:91:2a:fb:e9:19:a6:c0:99:8f:e0:07:d9:d5:e1:ab: 3b:03:bf:b2:5c:f5:01:9f:de:2a:83:1a:09:00:91:93:d2:6c: 41:d4:3c:71:78:8e:71:74:2e:78:49:39:5d:21:ad:87:84:59: 25:96:5e:be:89:2d:cb:e1:85:2a:d2:ec:65:95:31:c8:fa:51: 77:a5:51:a6:2a:8a:08:0b:4e:10:d5:cb:69:97:71:02:db:3b: a9:51:31:6c:d6:b7:7f:f1:dd:20:61:5d:76:e8:d0:5d:d3:87: 1e:66:81:74:08:45:c0:bb:cb:e4:8f:ba:1b:79:99:26:45:5a: 18:80:d8:e3:5f:31:b5:65:a8:2f:a8:5d:5d:e8:b7:8d:48:70: 07:89:d2:7e:6c:f9:89:b3:69:33:83:d6:c6:09:a6:96:92:97: 8c:93:d6:7b:24:e3:ba:d7:6c:54:e1:8d:d1:bf:d6:cf:d8:bf: 1c:3c:03:e5:fd:08:93:b3:e0:7f:5e:fc:42:99:94:22:b5:18: 74:f2:c1:8b:31:2b:ec:3a:35:b0:da:60:6f:f9:6b:4c:06:d4: 2a:be:ea:9c:39:95:48:e3:77:36:ea:61:7f:02:4a:4c:4e:01: e4:1a:62:47:96:84:63:65:fe:98:45:73:82:64:00:b6:bb:af: 45:08:39:f7 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUFxPatcewq3oTFzR04KPu1iqzDE0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODU3ODEwMDAwMTEwLwYDVQQFEyhCRUNFQjZGNzZB MTlCODEyMDhGM0QzNDAyNjE3RjUxQUU2OUU4QzI0MB4XDTI0MDIyNzEwNTM1NFoX DTI1MDIyNTEwNTg1NFowMzExMC8GA1UEAxMoNUZEQ0IyRjU0NUY1OEJCNzZENjA1 Q0Q3NzYxMkY2REM3MzgwMkIyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7FrwD2Nk99EBknxsasTh+nEhdiqfDB5vxUE5K5JMpbpc4ciDiADZ5AI5kh CWRJ3dPG6B1pcykJWwNpUOTqUEYul2TubrNXQSRmpHOI6V5GCygsgVpBfVW3zwV1 n3jmvirMyohnw2a+z66CtBvuuEV6BeM3cS6sf1nXG+OlfyeOLW5Jsy1ZCQFXd31Q y0vwMbuX5AO5VJ76rD1ywwOPk4hXNv7VbqTAiLXtTNrYhxjP/czNffyZj2nwr4Mv iVhE1KDHoLYjnhG9Es1DXmUM40rrXkvVZAYW1tlcWNgMUXLljXH1jZd1ZWJTEglP wdNeB7r1ec0aMFO28noB/6HvDGkCAwEAAaOCAhAwggIMMB0GA1UdDgQWBBRf3LL1 RfWLt21gXNd2Evbcc4ArKTAfBgNVHSMEGDAWgBS+zrb3ahm4Egjz00AmF/Ua5p6M JDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4NTc4MTAwMDAvMC9CRUNFQjZG NzZBMTlCODEyMDhGM0QzNDAyNjE3RjUxQUU2OUU4QzI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92czYyOTJvWnVC SUk4OU5BSmhmMUd1YWVqQ1EuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxODU3 ODEwMDAwLzAvMzIzNDMwMzUzYTM5MzIzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2Qz ZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggr BgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFkkAwDQYJKoZIhvcNAQELBQADggEB ADvcKpEq++kZpsCZj+AH2dXhqzsDv7Jc9QGf3iqDGgkAkZPSbEHUPHF4jnF0LnhJ OV0hrYeEWSWWXr6JLcvhhSrS7GWVMcj6UXelUaYqiggLThDVy2mXcQLbO6lRMWzW t3/x3SBhXXbo0F3Thx5mgXQIRcC7y+SPuht5mSZFWhiA2ONfMbVlqC+oXV3ot41I cAeJ0n5s+YmzaTOD1sYJppaSl4yT1nsk47rXbFThjdG/1s/Yvxw8A+X9CJOz4H9e /EKZlCK1GHTywYsxK+w6NbDaYG/5a0wG1Cq+6pw5lUjjdzbqYX8CSkxOAeQaYkeW hGNl/phFc4JkALa7r0UIOfc= -----END CERTIFICATE-----Generated at Sat May 4 10:28:30 2024 by rpki-client on console-fra.rpki-client.org