$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa File: 8862654086CF11EF901ED838C4F9AE02.roa (raw, json) Hash identifier: FfPgO3eeUl8IdKgqCPYYQsbKqty7XuG6xdX4tJjDBxw= Subject key identifier: C8:B1:CD:39:41:EF:A8:BF:81:7E:00:D8:E0:1F:5D:5C:A7:7C:AD:9B Certificate issuer: /CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7 Certificate serial: 39 Authority key identifier: 78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa Signing time: Thu 10 Oct 2024 06:18:58 +0000 ROA not before: Thu 10 Oct 2024 06:18:58 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 152928 IP address blocks: 2001:df3:f640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7 Validity Not Before: Oct 10 06:18:58 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=670771d1-9197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4a:65:88:5e:8c:9c:15:7f:63:6f:33:57:ee: 2f:8d:a8:8f:95:79:c6:ab:c5:13:e9:e5:c2:95:4e: 80:f2:49:49:84:69:3a:92:0d:18:e8:26:4d:64:f2: 83:1c:3c:82:8d:8d:7e:d7:8b:cd:15:8d:43:83:69: 6f:2b:36:65:45:d8:15:54:e5:36:2f:30:68:8c:11: 73:71:fe:96:76:08:6d:79:e9:80:06:67:a5:39:57: 5a:18:aa:bf:42:f0:56:7d:10:d9:3f:86:20:9c:bb: aa:11:8a:be:14:ac:4b:46:2e:f6:09:cf:8a:46:ed: e0:b7:73:85:ff:75:76:5a:ec:20:1f:66:9f:e6:42: fc:52:c1:8b:12:ba:6d:29:b6:84:d9:02:50:94:45: 29:8a:ed:03:52:76:cf:45:17:e6:16:a0:92:55:80: 0b:9c:a0:7a:37:bf:0b:cb:81:78:ae:db:98:28:05: a5:b2:24:f6:11:f5:66:0d:0a:a1:75:f1:3c:00:7a: 6d:84:70:83:bd:76:d0:b0:25:08:ba:90:1f:ff:d9: d8:5f:b2:63:f9:a2:a5:f9:ab:fc:c1:aa:72:cb:ae: 3c:6f:aa:fc:9e:12:59:5b:d6:68:42:48:94:89:86: b5:a1:b1:c8:7f:fc:51:80:d3:4f:b1:52:3e:5d:c3: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B1:CD:39:41:EF:A8:BF:81:7E:00:D8:E0:1F:5D:5C:A7:7C:AD:9B X509v3 Authority Key Identifier: keyid:78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:f640::/48 Signature Algorithm: sha256WithRSAEncryption 85:1f:88:15:87:52:bc:ee:62:4f:c2:ed:ce:c4:e8:8d:8b:f1: 20:89:33:00:91:a3:37:cf:f3:6d:0d:b1:2f:4f:98:64:88:b9: 69:10:2e:1b:22:a2:ec:5d:ad:ca:12:c9:c6:9a:d6:0e:96:f2: 1e:b5:7d:b1:76:63:ce:72:d3:3f:64:88:97:de:98:d2:48:d6: 6d:9d:52:19:d1:0d:d4:c2:54:db:73:c0:32:c9:15:b8:a0:a4: 23:63:5b:d6:b0:21:0a:ac:ef:1d:ca:00:17:51:18:1d:fe:43: 59:35:21:17:45:6a:2f:53:88:e0:b1:99:b8:67:69:ab:8f:05: ce:2a:9c:76:fc:c4:33:0a:13:d8:b4:33:8e:c9:2d:af:bc:71: 36:d2:cd:08:d3:1f:44:40:06:1f:03:f5:7f:11:95:d4:b4:71: 2f:d9:90:b4:e8:5c:c7:81:e6:9d:d9:e3:de:83:37:4d:7f:18: 62:c4:e6:4f:eb:fe:75:26:16:d7:70:f1:fd:59:da:84:d4:11: bc:73:a1:2c:f8:97:4b:09:83:ee:4d:4e:34:17:25:76:96:55: 16:e7:e5:8d:74:1e:fc:31:96:6f:7e:3f:b3:fe:f4:13:5a:39: 86:1e:9a:43:e7:58:70:38:9b:53:49:81:a5:ce:7e:64:6d:3a: a8:8c:bc:dc -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDZDNzExMC8GA1UEBRMoNzhGQkZDRDhENTMyQkZCQkFCN0Q3OUM1MUE3NzM4RUE0 OTRDMjZCNzAeFw0yNDEwMTAwNjE4NThaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MDc3MWQxLTkxOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDySmWIXoycFX9jbzNX7i+NqI+VecarxRPp5cKVToDySUmEaTqSDRjoJk1k8oMc PIKNjX7Xi80VjUODaW8rNmVF2BVU5TYvMGiMEXNx/pZ2CG156YAGZ6U5V1oYqr9C 8FZ9ENk/hiCcu6oRir4UrEtGLvYJz4pG7eC3c4X/dXZa7CAfZp/mQvxSwYsSum0p toTZAlCURSmK7QNSds9FF+YWoJJVgAucoHo3vwvLgXiu25goBaWyJPYR9WYNCqF1 8TwAem2EcIO9dtCwJQi6kB//2dhfsmP5oqX5q/zBqnLLrjxvqvyeEllb1mhCSJSJ hrWhsch//FGA00+xUj5dw1XHAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUyLHNOUHv qL+BfgDY4B9dXKd8rZswHwYDVR0jBBgwFoAUePv82NUyv7urfXnFGnc46klMJrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNkM3Lzc3QjY5NDM0MzIw RTExRUZCNkUwREE3NkM0RjlBRTAyL2VQdjgyTlV5djd1cmZYbkZHbmM0NmtsTUpy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVB2ODJOVXl2N3VyZlhuRkduYzQ2a2xNSnJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDZDNy83N0I2OTQzNDMyMEUxMUVGQjZFMERBNzZDNEY5QUUwMi84ODYyNjU0MDg2 Q0YxMUVGOTAxRUQ4MzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfP2QDANBgkqhkiG9w0BAQsFAAOCAQEAhR+IFYdSvO5i T8LtzsTojYvxIIkzAJGjN8/zbQ2xL0+YZIi5aRAuGyKi7F2tyhLJxprWDpbyHrV9 sXZjznLTP2SIl96Y0kjWbZ1SGdEN1MJU23PAMskVuKCkI2Nb1rAhCqzvHcoAF1EY Hf5DWTUhF0VqL1OI4LGZuGdpq48FziqcdvzEMwoT2LQzjsktr7xxNtLNCNMfREAG HwP1fxGV1LRxL9mQtOhcx4Hmndnj3oM3TX8YYsTmT+v+dSYW13Dx/VnahNQRvHOh LPiXSwmD7k1ONBcldpZVFufljXQe/DGWb34/s/70E1o5hh6aQ+dYcDibU0mBpc5+ ZG06qIy83A== -----END CERTIFICATE-----Generated at Thu Oct 17 06:45:43 2024 by rpki-client on console-fra.rpki-client.org