$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/98EDBD8C91AF11EC8D647F26C4F9AE02.roa File: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (raw, json) Hash identifier: Ssx1sBJz2yj59RWQYFRE18Kf4YyuE5tT419o5qFKpio= Subject key identifier: 6B:FE:B7:55:FA:A5:E0:C6:13:02:26:17:67:33:ED:20:8B:CF:93:3C Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 03AF Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/98EDBD8C91AF11EC8D647F26C4F9AE02.roa Signing time: Wed 31 Jan 2024 03:05:24 +0000 ROA not before: Wed 31 Jan 2024 03:05:24 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 38254 IP address blocks: 2407:9240:2600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 943 (0x3af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Validity Not Before: Jan 31 03:05:24 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b9b8f4-2be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:e6:c2:b7:8d:3d:14:df:94:95:2d:36:46: a9:4f:71:05:e2:b9:3e:91:ff:ed:89:b6:56:5d:4e: 96:cb:9e:58:6e:a2:19:f6:8e:11:dc:ed:2f:8e:aa: c5:f8:6c:11:89:99:f3:36:9e:f9:75:08:10:87:ac: ba:32:bc:39:b5:0d:0b:7c:46:99:29:f3:2a:0f:ab: 50:91:b2:aa:20:6b:33:fd:12:27:a9:01:44:9e:f5: 17:61:60:89:39:a7:a9:d3:12:73:25:38:bb:21:d4: a2:5e:ad:b6:6d:4a:cf:7e:9b:53:5d:9d:b8:ac:bd: 19:26:18:23:36:69:8b:89:e5:7a:17:c8:a3:52:ed: 90:a9:49:bf:ba:ff:ec:11:4a:53:6e:1f:30:85:c1: 62:a0:3f:a8:48:26:51:6f:f4:a7:5d:0b:a8:40:c8: 0e:2e:3e:a2:08:8b:1c:2b:aa:85:85:2e:3b:8b:b9: 06:92:56:49:f6:4b:15:a3:46:c9:9b:64:cb:33:f2: 0e:d5:ee:34:07:83:96:61:55:f7:fd:0c:cb:70:c9: 53:15:84:b3:d7:d1:2b:b3:99:11:ab:c4:61:c9:37: d5:7e:99:f9:19:b0:12:fe:d5:12:03:fc:88:de:ef: d9:0f:5d:de:a7:1b:9a:9d:d2:a9:50:06:25:28:3d: 6d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FE:B7:55:FA:A5:E0:C6:13:02:26:17:67:33:ED:20:8B:CF:93:3C X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/98EDBD8C91AF11EC8D647F26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:9240:2600::/40 Signature Algorithm: sha256WithRSAEncryption 1b:6c:58:3e:0f:2f:d6:ff:7c:19:9a:61:fa:42:d9:a5:8d:7b: b7:6c:49:28:33:0e:8d:6f:1f:20:48:8a:e3:3f:ac:1c:cc:d8: 4c:65:93:31:05:b6:da:fc:e1:c3:71:7b:99:c6:1e:7b:dd:8f: e6:6e:f5:5f:78:5a:13:d7:a7:d0:a4:9e:f1:92:f1:9f:f4:4c: a6:5b:b8:00:1f:e8:7d:88:de:6f:28:d0:88:ff:4f:3a:e2:de: 37:63:1b:09:2a:00:35:cf:c2:0c:12:2c:00:90:ba:85:f0:a4: 5f:75:9d:19:9a:b5:85:b7:e8:1e:3d:29:2d:08:e7:03:01:f4: da:d2:cc:48:dc:61:cb:55:75:82:46:31:26:68:91:07:d6:7f: bc:2f:3d:4d:f7:8f:0c:d5:95:e8:58:0f:bc:26:f1:4f:7a:96: 9e:04:ea:80:ef:67:ab:d4:4c:a6:03:2a:65:e0:a2:02:30:06: a6:95:43:49:32:12:6a:80:9b:27:20:d6:20:f5:f9:62:94:82: e7:d3:dd:a9:54:ad:3e:e5:a2:29:b5:00:17:8e:06:1d:78:18: fb:da:b4:67:ca:67:84:59:c9:ed:46:a5:60:9a:84:fa:09:c8: 68:a0:e9:5f:7c:c2:a0:37:a3:73:1b:76:af:37:72:be:a6:a7: 28:fb:02:b4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICA68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjQwMTMxMDMwNTI0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5YjhmNC0yYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hvmwreNPRTflJUtNkapT3EF4rk+kf/tibZWXU6Wy55YbqIZ9o4R3O0vjqrF +GwRiZnzNp75dQgQh6y6Mrw5tQ0LfEaZKfMqD6tQkbKqIGsz/RInqQFEnvUXYWCJ Oaep0xJzJTi7IdSiXq22bUrPfptTXZ24rL0ZJhgjNmmLieV6F8ijUu2QqUm/uv/s EUpTbh8whcFioD+oSCZRb/SnXQuoQMgOLj6iCIscK6qFhS47i7kGklZJ9ksVo0bJ m2TLM/IO1e40B4OWYVX3/QzLcMlTFYSz19Ers5kRq8RhyTfVfpn5GbAS/tUSA/yI 3u/ZD13epxuandKpUAYlKD1ttQIDAQABo4IClzCCApMwHQYDVR0OBBYEFGv+t1X6 peDGEwImF2cz7SCLz5M8MB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvOThFREJEOEM5 MUFGMTFFQzhENjQ3RjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkB5JAJjANBgkqhkiG9w0BAQsFAAOCAQEAG2xYPg8v1v98 GZph+kLZpY17t2xJKDMOjW8fIEiK4z+sHMzYTGWTMQW22vzhw3F7mcYee92P5m71 X3haE9en0KSe8ZLxn/RMplu4AB/ofYjebyjQiP9POuLeN2MbCSoANc/CDBIsAJC6 hfCkX3WdGZq1hbfoHj0pLQjnAwH02tLMSNxhy1V1gkYxJmiRB9Z/vC89TfePDNWV 6FgPvCbxT3qWngTqgO9nq9RMpgMqZeCiAjAGppVDSTISaoCbJyDWIPX5YpSC59Pd qVStPuWiKbUAF44GHXgY+9q0Z8pnhFnJ7UalYJqE+gnIaKDpX3zCoDejcxt2rzdy vqanKPsCtA== -----END CERTIFICATE-----Generated at Fri May 17 03:16:59 2024 by rpki-client on console-fra.rpki-client.org