$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/90D4C28CC2BA11EA8A079767C4F9AE02.roa File: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (raw, json) Hash identifier: Xa3a2UX5PsT3KFtGBuA4G1nVJ5fOk986lNl8BkYlh1A= Subject key identifier: 88:3E:99:A3:15:69:3C:B1:B4:18:19:E9:3F:9E:A4:AC:CF:DE:54:35 Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Certificate serial: 0794 Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/90D4C28CC2BA11EA8A079767C4F9AE02.roa Signing time: Tue 06 Feb 2024 22:00:10 +0000 ROA not before: Tue 06 Feb 2024 22:00:10 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 0 IP address blocks: 2001:df0:1d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Validity Not Before: Feb 6 22:00:10 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65c2abea-7597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:7f:57:e4:89:20:2d:10:0b:3d:57:07:6d: 2f:20:13:9c:53:66:d5:77:fc:ca:24:a3:c5:e6:9d: cb:ce:87:77:2c:ed:1e:93:39:38:03:f5:26:12:4e: d7:16:05:5a:01:9f:8b:06:91:9a:98:e2:c6:e5:44: c0:d9:96:73:6b:2e:bc:9b:74:8c:21:29:a1:60:eb: 72:b4:c0:a7:34:1f:1a:86:bd:90:dd:7d:e9:f0:00: e1:84:ac:31:24:86:28:f1:5b:b2:35:ab:e3:08:6f: 9e:97:9a:8b:29:b1:07:52:fa:87:3a:f1:3c:a0:e7: 8d:e4:e9:7b:98:c2:91:a3:83:70:6b:62:30:ed:50: 07:9c:8b:6c:91:32:55:6a:4d:f6:bd:0c:07:18:9c: fa:a3:7c:51:27:11:07:a2:18:24:b7:a2:34:99:62: 49:a3:40:48:65:a0:19:34:98:fa:2f:a5:21:79:ab: 7a:3c:cc:dd:9a:39:8d:18:f0:08:e4:15:ac:66:4d: 9c:5d:e1:b0:eb:08:66:5d:25:4e:2d:f5:88:85:c4: 5f:89:b9:5e:4d:3d:d0:a1:18:27:26:6e:ab:2b:05: d5:06:f9:68:ba:c1:9f:a2:58:9d:60:a6:dd:01:2c: 90:fd:9b:32:a2:d2:11:84:79:5f:fa:f3:35:c6:04: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3E:99:A3:15:69:3C:B1:B4:18:19:E9:3F:9E:A4:AC:CF:DE:54:35 X509v3 Authority Key Identifier: keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/90D4C28CC2BA11EA8A079767C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:1d00::/48 Signature Algorithm: sha256WithRSAEncryption 9c:bd:d8:bf:ee:ca:62:89:a9:1b:13:6b:a4:10:b9:4f:47:43: ae:aa:d6:be:2a:da:15:48:99:92:d7:b7:b6:36:37:6b:20:cf: 55:07:02:0d:13:02:eb:dc:ee:05:d8:0d:9a:03:27:ed:55:ae: 8d:2a:e7:4d:dc:42:da:22:6f:7e:0a:d0:54:32:4f:9e:7a:2a: 9e:24:9e:d7:59:65:d7:e1:d2:49:87:81:a4:6a:b6:d7:09:b1: 2c:09:be:3a:fe:06:d6:c5:5c:d9:3a:56:52:c4:71:4d:57:58: 2f:4b:b0:a0:e0:9a:f0:b4:45:fc:d4:db:34:ec:68:c7:ff:85: b6:37:fa:a4:7b:e7:b1:75:6b:d6:3b:a5:1c:e2:ce:5a:bb:98: 58:99:49:c4:64:62:05:34:a4:c4:f5:d6:e3:71:50:8e:93:3c: 5e:8c:92:16:ca:e2:19:78:35:7e:0d:46:f2:99:d3:d3:58:ff: b7:0f:06:4e:c9:e0:a8:24:61:57:d5:6d:7b:fd:b0:c8:61:cb: 66:d7:b8:c4:63:b9:88:e8:e4:97:59:5e:37:34:52:0e:25:3d: dd:8a:df:df:40:93:f4:73:27:12:39:9d:9c:1a:51:71:b7:af: 77:55:d5:ec:5a:14:1a:af:2c:44:5a:6f:ec:60:ce:ad:81:8c: f5:34:e8:7f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFRDAxMTAvBgNVBAUTKENCRTEzMUEwODNBNDU2M0M3QzQzOURCMDc5QjY0QjZB RDExMDFBN0MwHhcNMjQwMjA2MjIwMDEwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWMyYWJlYS03NTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUF/V+SJIC0QCz1XB20vIBOcU2bVd/zKJKPF5p3Lzod3LO0ekzk4A/UmEk7X FgVaAZ+LBpGamOLG5UTA2ZZzay68m3SMISmhYOtytMCnNB8ahr2Q3X3p8ADhhKwx JIYo8VuyNavjCG+el5qLKbEHUvqHOvE8oOeN5Ol7mMKRo4Nwa2Iw7VAHnItskTJV ak32vQwHGJz6o3xRJxEHohgkt6I0mWJJo0BIZaAZNJj6L6Uheat6PMzdmjmNGPAI 5BWsZk2cXeGw6whmXSVOLfWIhcRfibleTT3QoRgnJm6rKwXVBvlousGfolidYKbd ASyQ/ZsyotIRhHlf+vM1xgRcbwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIg+maMV aTyxtBgZ6T+epKzP3lQ1MB8GA1UdIwQYMBaAFMvhMaCDpFY8fEOdsHm2S2rREBp8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUVEMC82RUVCMTE1MEMy QjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1ZqeDhRNTJ3ZWJaTGF0RVFH bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktRXhvSU9rVmp4OFE1MndlYlpMYXRFUUdudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVFRDAvNkVFQjExNTBDMkIzMTFFQUI0ODMyNzUwQzRGOUFFMDIvOTBENEMyOEND MkJBMTFFQThBMDc5NzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3wHQAwDQYJKoZIhvcNAQELBQADggEBAJy92L/uymKJ qRsTa6QQuU9HQ66q1r4q2hVImZLXt7Y2N2sgz1UHAg0TAuvc7gXYDZoDJ+1Vro0q 503cQtoib34K0FQyT556Kp4kntdZZdfh0kmHgaRqttcJsSwJvjr+BtbFXNk6VlLE cU1XWC9LsKDgmvC0RfzU2zTsaMf/hbY3+qR757F1a9Y7pRzizlq7mFiZScRkYgU0 pMT11uNxUI6TPF6MkhbK4hl4NX4NRvKZ09NY/7cPBk7J4KgkYVfVbXv9sMhhy2bX uMRjuYjo5JdZXjc0Ug4lPd2K399Ak/RzJxI5nZwaUXG3r3dV1exaFBqvLERab+xg zq2BjPU06H8= -----END CERTIFICATE-----Generated at Thu Apr 25 00:31:16 2024 by rpki-client on console-fra.rpki-client.org