$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/3492D2F083BA11EA8728F076C4F9AE02.roa File: 3492D2F083BA11EA8728F076C4F9AE02.roa (raw, json) Hash identifier: cmgG299OngXHgb8B4Pq7fkieTX+aOQOIHfQQXpkXXJk= Subject key identifier: 70:67:11:CD:62:99:F5:D5:F5:43:50:6B:48:02:8C:1E:85:D1:F6:E8 Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Certificate serial: 0877 Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/3492D2F083BA11EA8728F076C4F9AE02.roa Signing time: Sat 26 Aug 2023 20:37:58 +0000 ROA not before: Sat 26 Aug 2023 20:37:58 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 681 IP address blocks: 2001:df0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Validity Not Before: Aug 26 20:37:58 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ea62a6-63f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0b:45:19:1e:4c:2c:5d:27:e8:16:ce:97:9f: 7e:4a:5d:1c:f1:e1:35:a0:34:98:a5:4c:ab:a2:a6: e6:89:28:d6:e6:e7:03:1e:24:f8:2a:4f:72:9a:7b: cd:96:2a:97:35:bd:57:29:5e:b2:9d:1a:44:4e:65: 48:65:df:4a:09:b2:fe:4c:7a:26:ad:6d:bf:87:1d: c1:49:b8:c0:4e:cc:d7:f9:f0:0c:bd:b7:49:fd:e5: ca:7c:76:c0:fe:06:13:32:5f:8a:e8:4a:88:4e:ea: d6:8f:6c:88:62:45:16:03:6e:ba:16:56:6e:ff:01: c8:52:e1:59:37:69:6e:66:2a:e5:9a:ee:c8:b2:41: 50:bc:22:50:b9:d5:f4:7b:66:5e:22:14:86:e6:73: e7:7d:c0:7b:25:4c:97:ed:c5:6c:e3:ee:1c:2d:56: 8b:91:da:ad:34:66:32:97:05:5a:bf:64:5d:0d:0f: 9e:79:90:35:59:f4:d9:14:5c:47:c6:f3:1a:df:24: 34:6a:7f:ca:aa:6b:74:35:61:a2:f9:4b:dd:64:2f: 78:db:e8:49:63:16:01:2a:ec:fe:9a:ce:b8:ad:a8: c1:32:68:e3:06:61:ad:79:1b:bc:5b:6d:00:79:af: a7:be:4f:16:18:1d:5d:0f:cb:ac:50:70:79:5d:66: af:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:67:11:CD:62:99:F5:D5:F5:43:50:6B:48:02:8C:1E:85:D1:F6:E8 X509v3 Authority Key Identifier: keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/3492D2F083BA11EA8728F076C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:4::/48 Signature Algorithm: sha256WithRSAEncryption 6d:42:d9:b7:61:51:ac:98:01:c9:fa:34:d8:60:3d:d0:65:ef: 93:56:1c:3f:86:ba:6e:24:bf:bb:a6:e5:e5:db:ac:61:ef:e5: 71:c2:43:93:2a:52:91:ef:14:35:f0:d7:9b:4f:24:ed:c9:3d: 5e:7c:db:13:5d:79:8b:d1:dc:6d:ff:b0:c1:55:4b:61:25:d4: 2a:62:90:44:ac:83:d5:93:6e:21:e7:79:1b:13:de:b2:60:82: 45:dc:eb:98:fe:f4:51:09:c8:dc:14:ea:c7:3a:da:bb:9c:7b: 84:ba:02:3a:ba:c9:a4:64:a6:26:94:16:2b:5a:da:10:b8:79: 06:2b:c4:8f:60:f8:4a:84:3b:b6:b2:a5:66:6d:0c:a4:44:a7: cf:07:1f:7f:61:ab:61:f9:ae:cd:b0:99:d7:16:34:a6:20:fc: 9f:41:02:86:97:d0:df:99:d3:7b:89:89:f0:55:fb:90:ef:18: 56:6f:40:63:e4:18:a6:52:44:6b:d0:08:aa:9e:d4:2c:43:f7: a8:55:75:31:9e:94:04:32:4c:cd:bd:2e:f8:02:5b:e4:46:00: 4a:ac:b8:1b:4c:4c:c1:8e:d0:66:cc:66:f0:75:73:db:6a:88: d1:dc:dc:bc:23:2c:d9:5b:30:8a:fb:64:3e:c4:29:75:0e:3a: 62:d0:f7:d6 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU0MDQ3RDI3Q0VGNzM0NkY0MTc1RUZBQzczNDQ5NEFE QkIwNTdCNTUwHhcNMjMwODI2MjAzNzU4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVhNjJhNi02M2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQtFGR5MLF0n6BbOl59+Sl0c8eE1oDSYpUyroqbmiSjW5ucDHiT4Kk9ymnvN liqXNb1XKV6ynRpETmVIZd9KCbL+THomrW2/hx3BSbjATszX+fAMvbdJ/eXKfHbA /gYTMl+K6EqITurWj2yIYkUWA266FlZu/wHIUuFZN2luZirlmu7IskFQvCJQudX0 e2ZeIhSG5nPnfcB7JUyX7cVs4+4cLVaLkdqtNGYylwVav2RdDQ+eeZA1WfTZFFxH xvMa3yQ0an/Kqmt0NWGi+UvdZC942+hJYxYBKuz+ms64rajBMmjjBmGteRu8W20A ea+nvk8WGB1dD8usUHB5XWavawIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHBnEc1i mfXV9UNQa0gCjB6F0fboMB8GA1UdIwQYMBaAFFQEfSfO9zRvQXXvrHNElK27BXtV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS81MzQ0NzJDQzgz QjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05HOUJkZS1zYzBTVXJic0Zl MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBUjlKODczTkc5QmRlLXNjMFNVcmJzRmUxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI3QzEvNTM0NDcyQ0M4M0I5MTFFQTg1MkExNTc2QzRGOUFFMDIvMzQ5MkQyRjA4 M0JBMTFFQTg3MjhGMDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3wAAQwDQYJKoZIhvcNAQELBQADggEBAG1C2bdhUayY Acn6NNhgPdBl75NWHD+Gum4kv7um5eXbrGHv5XHCQ5MqUpHvFDXw15tPJO3JPV58 2xNdeYvR3G3/sMFVS2El1CpikESsg9WTbiHneRsT3rJggkXc65j+9FEJyNwU6sc6 2ruce4S6Ajq6yaRkpiaUFita2hC4eQYrxI9g+EqEO7aypWZtDKREp88HH39hq2H5 rs2wmdcWNKYg/J9BAoaX0N+Z03uJifBV+5DvGFZvQGPkGKZSRGvQCKqe1CxD96hV dTGelAQyTM29LvgCW+RGAEqsuBtMTMGO0GbMZvB1c9tqiNHc3LwjLNlbMIr7ZD7E KXUOOmLQ99Y= -----END CERTIFICATE-----Generated at Wed Apr 24 23:34:21 2024 by rpki-client on console-ams.rpki-client.org