$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/6762893A976211EFA4D0606CC4F9AE02.roa File: 6762893A976211EFA4D0606CC4F9AE02.roa (raw, json) Hash identifier: tUckVsYuaY0+GFLU0YPkMJp8XbKjc2937fm5+PiDTTQ= Subject key identifier: F3:4E:8F:8D:DC:78:0F:04:26:FC:89:AE:88:13:48:BE:44:22:82:1A Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 0467 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/6762893A976211EFA4D0606CC4F9AE02.roa Signing time: Thu 31 Oct 2024 08:30:37 +0000 ROA not before: Thu 31 Oct 2024 08:30:37 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139660 IP address blocks: 2001:df7:c380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Oct 31 08:30:37 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6723402d-b57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:e3:71:47:a9:d6:4f:6d:31:62:b7:b5:6d: 87:d5:6a:a1:ad:4e:12:4d:85:45:5d:13:af:76:4d: 35:a5:dd:02:54:f0:3f:4f:a0:6a:b4:c1:47:48:53: 54:ad:f2:72:fc:d8:c8:3d:4d:51:06:c6:35:52:d5: 77:00:6d:3d:f2:20:d0:89:41:b1:b2:60:47:3b:03: e8:28:4c:6a:59:d1:90:04:e5:07:3e:79:6a:f6:01: 52:0a:90:25:52:c9:b6:aa:f6:bf:ec:b9:1a:73:b7: f4:a3:e5:84:f7:0c:5e:2c:5c:69:38:65:93:75:f0: e8:30:59:d9:2b:4c:14:5c:30:98:c4:57:a7:7a:7b: a1:b3:96:6b:c3:91:7d:5d:26:0f:a9:56:01:bf:bb: 1f:20:ab:ca:6c:fe:58:f8:01:12:c9:50:10:cc:46: 41:cd:bd:4b:71:6c:51:ac:41:62:f8:8f:75:e3:4e: 7e:37:4c:82:37:48:d3:84:d6:8f:de:dd:24:a2:6c: a1:2e:41:ee:9c:24:9e:ac:17:31:30:13:c0:97:3f: b6:f9:ce:14:12:f6:79:5e:7a:b1:0c:af:c6:80:19: a4:6f:1d:29:be:a7:6f:af:80:59:a3:0d:a9:fe:d2: af:26:ad:0c:4a:d4:e2:02:43:da:7b:ca:12:63:58: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4E:8F:8D:DC:78:0F:04:26:FC:89:AE:88:13:48:BE:44:22:82:1A X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/6762893A976211EFA4D0606CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df7:c380::/48 Signature Algorithm: sha256WithRSAEncryption 39:8a:b2:0c:51:ff:de:77:77:01:c2:97:50:8c:ea:76:4d:61: d8:2f:c7:a8:38:5f:0c:33:4b:ae:3f:f4:0b:50:6b:73:ae:c7: e4:4e:72:d2:ac:0d:83:c4:4d:61:4b:41:48:12:8e:12:f1:ed: fb:18:e6:91:f8:cb:13:7a:31:91:11:2e:91:ee:b9:0a:15:61: ca:b7:ae:a0:0f:82:12:dc:18:4b:71:45:ad:45:ed:bb:51:11: 66:99:6e:dc:76:75:42:6d:47:ad:a8:b4:9b:cd:4c:ad:cc:0a: 9f:67:d5:4b:8f:73:fb:72:e9:4c:6a:8a:c0:6e:d5:32:41:76: 43:f0:f5:b8:8a:8b:4d:ba:ac:d6:98:ef:7f:f9:74:16:2f:e5: fc:70:03:6d:e9:f4:37:29:06:2f:a6:86:4b:24:9e:2e:7e:3d: 48:0b:48:16:ab:3d:36:46:98:f1:fe:9d:94:79:9f:e1:20:ca: aa:6f:93:25:2b:66:85:f7:40:65:d9:a9:9a:c4:4b:5b:6d:e9: d5:de:9b:46:02:d1:84:fe:70:13:1a:6f:3f:6d:4a:b0:b6:24: 41:dc:11:58:ec:34:1f:3c:84:de:ec:66:44:ae:50:1d:1b:c1: 82:f5:a1:d0:8b:ff:e9:de:8b:7d:71:aa:9c:98:9f:f0:2c:71: 77:f3:ea:64 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjQxMDMxMDgzMDM3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIzNDAyZC1iNTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzHjcUep1k9tMWK3tW2H1WqhrU4STYVFXROvdk01pd0CVPA/T6BqtMFHSFNU rfJy/NjIPU1RBsY1UtV3AG098iDQiUGxsmBHOwPoKExqWdGQBOUHPnlq9gFSCpAl Usm2qva/7Lkac7f0o+WE9wxeLFxpOGWTdfDoMFnZK0wUXDCYxFenenuhs5Zrw5F9 XSYPqVYBv7sfIKvKbP5Y+AESyVAQzEZBzb1LcWxRrEFi+I91405+N0yCN0jThNaP 3t0komyhLkHunCSerBcxMBPAlz+2+c4UEvZ5XnqxDK/GgBmkbx0pvqdvr4BZow2p /tKvJq0MStTiAkPae8oSY1hyCQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPNOj43c eA8EJvyJrogTSL5EIoIaMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjIzQjkvNzhDRUFDQkMyQjM2MTFFQ0FENTk1QjdDQzRGOUFFMDIvNjc2Mjg5M0E5 NzYyMTFFRkE0RDA2MDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ33w4AwDQYJKoZIhvcNAQELBQADggEBADmKsgxR/953 dwHCl1CM6nZNYdgvx6g4XwwzS64/9AtQa3Oux+ROctKsDYPETWFLQUgSjhLx7fsY 5pH4yxN6MZERLpHuuQoVYcq3rqAPghLcGEtxRa1F7btREWaZbtx2dUJtR62otJvN TK3MCp9n1UuPc/ty6UxqisBu1TJBdkPw9biKi026rNaY73/5dBYv5fxwA23p9Dcp Bi+mhkskni5+PUgLSBarPTZGmPH+nZR5n+EgyqpvkyUrZoX3QGXZqZrES1tt6dXe m0YC0YT+cBMabz9tSrC2JEHcEVjsNB88hN7sZkSuUB0bwYL1odCL/+nei31xqpyY n/AscXfz6mQ= -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:59 2024 by rpki-client on console-ams.rpki-client.org