$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/9B3FE178A7FA11EFA7886875C4F9AE02.roa File: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (raw, json) Hash identifier: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM= Subject key identifier: CC:CD:B0:E0:70:97:A2:C1:08:F1:DF:4F:77:5E:EE:4B:A9:5F:83:FD Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Certificate serial: 02 Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/9B3FE178A7FA11EFA7886875C4F9AE02.roa Signing time: Thu 21 Nov 2024 11:20:26 +0000 ROA not before: Thu 21 Nov 2024 11:20:26 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139469 IP address blocks: 2001:df4:a6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Validity Not Before: Nov 21 11:20:26 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=673f177a-ea37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:c7:3d:52:5a:eb:5b:fa:fc:4b:96:d5:d5: b2:bb:c0:fd:d3:c5:e1:1a:b9:8b:fc:11:c8:ed:68: 70:7f:d6:52:d8:38:56:6b:ee:67:86:d5:a9:21:ee: 84:38:83:ba:83:1f:98:bb:30:c8:7c:4e:52:0a:b3: 1d:ca:91:22:8e:61:7e:d2:7f:12:3e:f2:4b:66:ac: 9c:2b:4e:29:f4:0e:8c:36:74:4d:dd:bf:35:c4:b0: 2a:5b:af:c5:42:27:12:85:5e:a9:64:57:31:76:04: 0c:68:45:71:c4:8a:5a:a9:db:07:ff:4c:d2:cd:fa: b7:2d:bd:f0:9c:99:ae:ec:ad:e0:ff:0d:05:bd:14: f2:e4:03:5d:f5:11:84:fb:2a:87:9d:88:2a:3e:e2: ae:09:4f:b1:ed:54:7f:a4:22:7f:ad:a8:b6:79:e4: 7b:2c:3f:18:ee:86:78:7d:79:2b:80:80:d1:1c:e5: 54:ab:65:ae:04:0e:3b:b7:f9:ef:28:21:f5:02:97: 5e:e5:97:55:83:cf:08:e8:80:8e:69:07:6d:26:ab: 63:f1:9e:3d:bd:66:a4:b6:d0:7b:b2:ed:d9:7b:5a: fc:9d:70:fd:86:53:b7:de:1b:58:82:d7:3d:6a:1e: 8e:73:8e:73:76:4c:be:c1:b8:80:7d:25:12:48:01: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CD:B0:E0:70:97:A2:C1:08:F1:DF:4F:77:5E:EE:4B:A9:5F:83:FD X509v3 Authority Key Identifier: keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/9B3FE178A7FA11EFA7886875C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:a6c0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:d6:45:ed:f1:36:cd:3b:33:6a:d3:f1:f5:8c:77:07:04:49: a5:70:78:13:c6:7c:06:da:8b:df:01:5a:20:7f:c5:71:0d:57: 98:ec:49:91:14:3d:fc:51:b1:10:ca:fe:e8:a4:83:8d:62:7f: 01:0c:9e:28:f9:9c:9d:a3:64:78:bb:92:da:69:93:d2:31:61: 7b:2a:31:ab:c6:00:66:86:cb:30:6e:47:7a:5c:d5:4f:1a:06: 00:3e:41:cb:91:e1:1e:36:d9:10:81:cc:77:cc:bc:1e:50:dd: 7f:34:ef:52:81:bb:28:56:ff:a1:34:fb:6e:eb:82:b3:21:88: fb:25:58:4b:a0:77:da:ad:69:e1:9d:ed:62:73:26:5e:53:07: bd:2e:f8:a0:6e:3a:e3:e4:76:14:0a:93:12:da:9b:dc:7a:c7: a3:6f:e8:c2:c1:4c:cd:34:ad:3b:f5:e4:08:dc:bd:8b:de:b4: 3a:50:4d:36:37:17:bf:42:f3:96:00:63:47:40:9a:3c:a7:3f: 6c:ea:48:44:b1:14:b1:18:60:69:90:b6:1a:22:65:f9:f3:7b: 5e:da:29:c2:d2:1c:53:d8:ee:a7:c9:a3:3e:06:5e:ac:01:0f: 5e:d1:91:7f:2e:66:6c:e6:cd:3a:69:ad:f9:8a:ad:d4:a5:64: 35:68:0b:22 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDM5MUQ5QTcwRTg5M0U3NTFCQzYxMjg5QzU0NDE3Qjg3 QTEwNDU1OTAeFw0yNDExMjExMTIwMjZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3M2YxNzdhLWVhMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOysc9UlrrW/r8S5bV1bK7wP3TxeEauYv8EcjtaHB/1lLYOFZr7meG1akh7oQ4 g7qDH5i7MMh8TlIKsx3KkSKOYX7SfxI+8ktmrJwrTin0Dow2dE3dvzXEsCpbr8VC JxKFXqlkVzF2BAxoRXHEilqp2wf/TNLN+rctvfCcma7sreD/DQW9FPLkA131EYT7 KoediCo+4q4JT7HtVH+kIn+tqLZ55HssPxjuhnh9eSuAgNEc5VSrZa4EDju3+e8o IfUCl17ll1WDzwjogI5pB20mq2Pxnj29ZqS20Huy7dl7WvydcP2GU7feG1iC1z1q Ho5zjnN2TL7BuIB9JRJIAcIzAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUzM2w4HCX osEI8d9Pd17uS6lfg/0wHwYDVR0jBBgwFoAUA5HZpw6JPnUbxhKJxUQXuHoQRVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3L0E3RUJDMUQyQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVIWnB3NkpQblVieGhLSnhVUVh1SG9RUlZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBGNy9BN0VCQzFEMkE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi85QjNGRTE3OEE3 RkExMUVGQTc4ODY4NzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfSmwDANBgkqhkiG9w0BAQsFAAOCAQEAa9ZF7fE2zTsz atPx9Yx3BwRJpXB4E8Z8BtqL3wFaIH/FcQ1XmOxJkRQ9/FGxEMr+6KSDjWJ/AQye KPmcnaNkeLuS2mmT0jFheyoxq8YAZobLMG5HelzVTxoGAD5By5HhHjbZEIHMd8y8 HlDdfzTvUoG7KFb/oTT7buuCsyGI+yVYS6B32q1p4Z3tYnMmXlMHvS74oG464+R2 FAqTEtqb3HrHo2/owsFMzTStO/XkCNy9i960OlBNNjcXv0LzlgBjR0CaPKc/bOpI RLEUsRhgaZC2GiJl+fN7XtopwtIcU9jup8mjPgZerAEPXtGRfy5mbObNOmmt+Yqt 1KVkNWgLIg== -----END CERTIFICATE-----Generated at Mon Nov 25 07:14:53 2024 by rpki-client on console-fra.rpki-client.org