$ rpki-client -vvf rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/05A966C652DB11EF990CB840C4F9AE02.roa File: 05A966C652DB11EF990CB840C4F9AE02.roa (raw, json) Hash identifier: 7cyDiCG+GWMMc47d/9wE/tr8+3lmCjNtDuQzc5Jy9ng= Subject key identifier: 24:EE:6B:C9:F0:C7:AD:B5:6C:B1:19:BF:D6:0D:B4:15:2C:81:59:C5 Certificate issuer: /CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8 Certificate serial: 04 Authority key identifier: DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/05A966C652DB11EF990CB840C4F9AE02.roa Signing time: Mon 05 Aug 2024 03:30:12 +0000 ROA not before: Mon 05 Aug 2024 03:30:12 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 132895 IP address blocks: 2401:5e80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8 Validity Not Before: Aug 5 03:30:12 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b04744-e4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:61:8f:9c:63:e5:76:e4:73:73:f7:59:2a: 76:1c:ba:9b:e0:19:c3:2c:41:b7:2d:71:b2:ab:bb: 6a:38:0f:6d:d4:ce:2a:cf:0b:7f:e7:19:68:f4:3e: b1:82:b7:6b:6c:7d:06:2a:e5:d7:18:8b:7a:51:a4: 89:d6:6f:4b:95:6d:6a:23:db:08:37:a9:bf:02:68: 8a:0d:b3:5d:d0:92:4f:89:34:6e:6f:79:2a:5d:57: 97:80:6e:d6:ae:8a:3c:7e:39:6c:52:5e:f3:ac:c8: 6b:cf:9a:65:82:98:b5:6a:26:25:24:da:70:74:8b: 13:e1:90:32:96:c6:fa:da:57:e5:66:19:9d:9f:5b: 5c:f9:4d:f6:5d:51:f7:21:7b:e0:aa:dc:13:9d:38: 64:14:78:13:80:1c:ed:d7:dd:63:43:35:1e:18:db: 50:c8:b4:66:d0:d6:51:46:5b:7e:6e:48:46:18:23: 92:c1:b1:ed:99:20:ae:b3:f3:56:f4:d5:e6:da:48: 8b:76:9b:b7:92:46:51:d3:ca:3e:a9:70:19:a2:d6: 82:0a:16:88:6f:77:ee:7b:b6:8a:f9:40:2b:91:92: 35:dd:94:d6:37:a1:08:5e:58:99:36:f1:95:93:36: cf:45:0f:3c:c3:2d:77:68:95:11:3a:aa:14:08:4f: 21:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:6B:C9:F0:C7:AD:B5:6C:B1:19:BF:D6:0D:B4:15:2C:81:59:C5 X509v3 Authority Key Identifier: keyid:DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/05A966C652DB11EF990CB840C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:5e80::/32 Signature Algorithm: sha256WithRSAEncryption 15:5a:ed:6e:5e:b2:f4:78:c1:97:97:65:b5:61:3c:f3:d8:ec: 2c:8f:1f:a4:ec:83:37:7c:32:d2:ec:b0:17:b6:d3:e8:68:df: 70:db:f5:a7:62:fb:78:15:9e:e9:ea:04:ef:a7:e1:78:37:b9: 6c:21:18:d1:97:76:a9:d3:47:82:f9:ba:d4:da:d1:19:17:50: 47:fc:8f:53:43:40:29:41:c2:0f:04:c3:4f:c1:d7:84:c2:54: fa:13:35:dc:6e:95:60:b8:56:1c:4e:26:a1:60:f3:34:52:9c: ec:a7:6f:49:20:52:ad:d5:8b:07:cf:49:b8:31:4d:51:96:11: bd:da:8b:1e:9d:a6:d3:47:3b:0f:33:47:38:41:52:99:b0:4d: db:1c:81:3d:e0:5f:bb:8c:17:92:27:2b:92:cd:d4:2d:12:b1: 13:dd:4f:28:ea:6e:6b:0b:2d:ef:5d:71:e7:ae:cd:d2:3e:42: ca:ed:45:b3:81:04:2f:68:b4:b6:2b:7b:a7:dd:fb:47:38:ef: ba:09:fe:0c:62:49:3b:6c:5c:0e:b1:65:cb:4b:85:a3:18:94: 85:44:ba:ad:4e:f8:91:92:99:a1:1a:fa:45:9d:c3:d1:f6:7b: 23:6f:4d:41:d2:bf:a9:cf:9b:8f:ef:b4:95:d4:18:c8:f7:40: 85:4d:29:ce -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTNCRTExMC8GA1UEBRMoREE0NzI3OEE3N0JCREZGMkFEOUY5OEEwMTFBMkE3QTJF N0NENjBEODAeFw0yNDA4MDUwMzMwMTJaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YjA0NzQ0LWU0YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkV2GPnGPlduRzc/dZKnYcupvgGcMsQbctcbKru2o4D23UzirPC3/nGWj0PrGC t2tsfQYq5dcYi3pRpInWb0uVbWoj2wg3qb8CaIoNs13Qkk+JNG5veSpdV5eAbtau ijx+OWxSXvOsyGvPmmWCmLVqJiUk2nB0ixPhkDKWxvraV+VmGZ2fW1z5TfZdUfch e+Cq3BOdOGQUeBOAHO3X3WNDNR4Y21DItGbQ1lFGW35uSEYYI5LBse2ZIK6z81b0 1ebaSIt2m7eSRlHTyj6pcBmi1oIKFohvd+57tor5QCuRkjXdlNY3oQheWJk28ZWT Ns9FDzzDLXdolRE6qhQITyHvAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUJO5ryfDH rbVssRm/1g20FSyBWcUwHwYDVR0jBBgwFoAU2kcnine73/Ktn5igEaKnoufNYNgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5M0JFLzc3NDE2MTRDNTJE MzExRUZCQUVEREMxRUM0RjlBRTAyLzJrY25pbmU3M19LdG41aWdFYUtub3VmTllO Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmtjbmluZTczX0t0bjVpZ0VhS25vdWZOWU5nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTNCRS83NzQxNjE0QzUyRDMxMUVGQkFFRERDMUVDNEY5QUUwMi8wNUE5NjZDNjUy REIxMUVGOTkwQ0I4NDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBXoAwDQYJKoZIhvcNAQELBQADggEBABVa7W5esvR4wZeX ZbVhPPPY7CyPH6Tsgzd8MtLssBe20+ho33Db9adi+3gVnunqBO+n4Xg3uWwhGNGX dqnTR4L5utTa0RkXUEf8j1NDQClBwg8Ew0/B14TCVPoTNdxulWC4VhxOJqFg8zRS nOynb0kgUq3ViwfPSbgxTVGWEb3aix6dptNHOw8zRzhBUpmwTdscgT3gX7uMF5In K5LN1C0SsRPdTyjqbmsLLe9dceeuzdI+QsrtRbOBBC9otLYre6fd+0c477oJ/gxi STtsXA6xZctLhaMYlIVEuq1O+JGSmaEa+kWdw9H2eyNvTUHSv6nPm4/vtJXUGMj3 QIVNKc4= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:23 2024 by rpki-client on console-fra.rpki-client.org