$ rpki-client -vvf rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/4FE2CBA0F74C11EEA9368831C4F9AE02.roa File: 4FE2CBA0F74C11EEA9368831C4F9AE02.roa (raw, json) Hash identifier: wUtWWtOblDmN2oZ3l5tp2ZFVmOtLMYWVgUpV6mOP4KI= Subject key identifier: E5:67:2B:6F:50:6E:14:20:CB:04:87:FF:AF:41:54:E2:5C:10:08:3D Certificate issuer: /CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF Certificate serial: 0B39 Authority key identifier: AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/4FE2CBA0F74C11EEA9368831C4F9AE02.roa Signing time: Wed 10 Apr 2024 15:24:26 +0000 ROA not before: Wed 10 Apr 2024 15:24:26 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150001 IP address blocks: 2404:1c0::/32 maxlen: 32 2404:1c0::/33 maxlen: 33 2404:1c0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 19:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF Validity Not Before: Apr 10 15:24:26 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6616af2a-6a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:78:65:89:9e:59:e9:5f:2d:07:70:b0:06: 9b:da:17:64:54:0d:1e:31:d0:27:fe:27:53:de:4a: 42:83:51:a5:a5:50:98:7e:5e:dc:48:c3:d3:d7:7a: 5f:3e:b4:49:56:14:56:02:9d:6f:ad:18:0c:73:78: b9:21:00:e4:69:7a:15:ca:23:7f:ff:87:6d:6d:20: 50:2d:a6:11:7d:16:16:13:fe:22:d1:6b:9b:be:fb: d1:ec:7f:24:ce:f0:8f:97:ae:d2:a4:ec:f1:d1:e9: 87:e1:7b:17:d6:56:1c:10:4a:a3:58:5e:1a:9a:2c: 6c:2c:1f:e1:4c:7f:a4:60:d7:ea:4e:68:a6:2a:e9: 85:12:23:c8:14:38:8e:f5:8f:a4:96:66:90:0e:dd: 3c:df:58:d7:47:79:c9:c5:b8:74:36:07:26:f7:d3: 9a:96:f6:19:06:80:13:0d:cb:0b:79:8b:43:11:72: 13:dd:c1:da:c2:33:c9:fb:4b:37:85:59:0b:27:6c: 30:e8:9c:e2:8d:69:fb:d7:1c:35:63:f3:8d:c4:c4: a3:a8:83:38:93:4a:a2:64:47:57:29:bc:4a:a3:42: 03:45:b8:b7:4b:e1:5f:03:e6:7a:58:05:8a:14:b0: c2:87:2e:f4:6d:85:38:7d:68:68:c8:2c:b9:c3:c2: 79:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:67:2B:6F:50:6E:14:20:CB:04:87:FF:AF:41:54:E2:5C:10:08:3D X509v3 Authority Key Identifier: keyid:AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/4FE2CBA0F74C11EEA9368831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:1c0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:99:7b:26:c1:01:f1:da:5b:9a:53:15:29:c9:55:a7:4a:fb: 7c:bd:2b:02:91:c3:75:2f:13:11:e4:bd:7d:66:6b:f8:c9:ea: 87:d9:c7:f1:f6:20:0f:8f:b8:16:6a:f8:3e:3b:5a:98:98:e5: 30:72:37:41:77:eb:42:5b:26:5c:67:07:9b:8a:64:64:c9:81: 91:9c:00:1f:0a:8f:86:e6:e6:4c:b4:e5:73:f1:58:61:b3:f0: 60:bb:85:1d:08:c5:f8:5f:1f:83:05:6b:51:d5:7e:6a:ad:f1: e8:6f:f9:9d:5d:6b:b0:81:a9:c4:b6:86:09:0b:93:9f:b8:7d: 9a:b9:52:09:6d:91:0a:1a:07:7d:a5:f6:f7:ad:5f:41:3d:1e: a6:29:d3:6a:4b:13:99:89:0d:76:2f:0e:ce:ee:92:e2:33:8c: 75:c1:58:8f:2f:8c:f4:5c:03:ce:81:49:41:9b:33:2e:28:21: 31:d3:c6:c8:22:13:8d:12:85:f8:74:ad:6d:86:8f:14:c7:05: 49:3d:e6:d2:71:dd:26:c4:91:73:b8:bb:22:ef:d2:09:e5:9f: 7b:cc:db:a7:e3:f9:f1:7a:f7:ac:2a:cf:a7:c6:9c:1b:90:d5: 20:cf:3f:e3:ef:ca:5a:98:ab:cd:bd:5a:2b:36:6d:2a:70:74: 6c:e7:f1:37 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQjMxMTAvBgNVBAUTKEFDRDA0RTQ5QzhCNzJCQkUwMUUzNTM3NTU5Q0Y0Qzk0 NzMwRUQ1REYwHhcNMjQwNDEwMTUyNDI2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE2YWYyYS02YTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TJ4ZYmeWelfLQdwsAab2hdkVA0eMdAn/idT3kpCg1GlpVCYfl7cSMPT13pf PrRJVhRWAp1vrRgMc3i5IQDkaXoVyiN//4dtbSBQLaYRfRYWE/4i0WubvvvR7H8k zvCPl67SpOzx0emH4XsX1lYcEEqjWF4amixsLB/hTH+kYNfqTmimKumFEiPIFDiO 9Y+klmaQDt0831jXR3nJxbh0Ngcm99OalvYZBoATDcsLeYtDEXIT3cHawjPJ+0s3 hVkLJ2ww6JzijWn71xw1Y/ONxMSjqIM4k0qiZEdXKbxKo0IDRbi3S+FfA+Z6WAWK FLDChy70bYU4fWhoyCy5w8J5AQIDAQABo4ICljCCApIwHQYDVR0OBBYEFOVnK29Q bhQgywSH/69BVOJcEAg9MB8GA1UdIwQYMBaAFKzQTknItyu+AeNTdVnPTJRzDtXf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFCMy9DNkRBMjkyQzE4 NDYxMUVBOUI4NDJGMjdDNEY5QUUwMi9yTkJPU2NpM0s3NEI0MU4xV2M5TWxITU8x ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQk9TY2kzSzc0QjQxTjFXYzlNbEhNTzFkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDExQjMvQzZEQTI5MkMxODQ2MTFFQTlCODQyRjI3QzRGOUFFMDIvNEZFMkNCQTBG NzRDMTFFRUE5MzY4ODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBAHAMA0GCSqGSIb3DQEBCwUAA4IBAQB9mXsmwQHx2lua UxUpyVWnSvt8vSsCkcN1LxMR5L19Zmv4yeqH2cfx9iAPj7gWavg+O1qYmOUwcjdB d+tCWyZcZwebimRkyYGRnAAfCo+G5uZMtOVz8Vhhs/Bgu4UdCMX4Xx+DBWtR1X5q rfHob/mdXWuwganEtoYJC5OfuH2auVIJbZEKGgd9pfb3rV9BPR6mKdNqSxOZiQ12 Lw7O7pLiM4x1wViPL4z0XAPOgUlBmzMuKCEx08bIIhONEoX4dK1tho8UxwVJPebS cd0mxJFzuLsi79IJ5Z97zNun4/nxevesKs+nxpwbkNUgzz/j78pamKvNvVorNm0q cHRs5/E3 -----END CERTIFICATE-----Generated at Tue May 14 20:52:12 2024 by rpki-client on console-fra.rpki-client.org