$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa File: 92F925C231F511EFA1744F0EC4F9AE02.roa (raw, json) Hash identifier: ys7Tf3/LcQFVZYWL3i7WWzdqMmvmM++iU4ympKZhLhE= Subject key identifier: 1D:B1:30:27:CF:CB:64:DD:95:28:E0:13:DD:9D:6D:E3:BC:0C:5A:3D Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: 02 Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa Signing time: Mon 24 Jun 2024 06:47:08 +0000 ROA not before: Mon 24 Jun 2024 06:47:08 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 152925 IP address blocks: 2001:df3:f6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: Jun 24 06:47:08 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6679166b-6695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:8f:d6:95:b6:a4:38:c7:c7:5b:94:95:c4: df:51:05:18:5a:a5:12:98:4a:3d:85:66:f8:ab:34: c6:cb:a8:17:96:0f:db:03:e2:8b:ed:3d:01:50:74: cd:e7:d3:02:d4:6b:87:f1:20:b8:6d:92:e5:23:e5: 43:67:06:9f:78:b2:b8:74:89:01:81:ea:2a:00:29: 9b:30:61:cd:e6:f9:92:ad:72:46:00:9a:93:10:7d: 41:a7:2d:c4:6c:67:78:ce:13:58:2a:64:91:fa:80: 2f:32:34:e9:58:0e:e9:af:68:5a:f4:e9:9b:db:8c: 37:f9:58:99:1e:19:01:a5:2b:d2:d1:4d:9f:7a:b0: 65:42:7f:f6:a4:d5:2d:ce:9c:9e:18:c3:3d:ab:01: 73:1b:3e:46:76:fe:8c:65:24:6d:70:a3:b2:92:68: 0f:7e:6a:69:9d:77:b9:64:aa:2d:66:29:b3:91:25: 43:3f:16:1e:a9:8e:09:00:15:07:2a:76:b5:ee:9b: 5a:3f:1b:62:22:6a:85:c8:a3:99:07:21:a4:7c:20: 9d:29:ac:99:ff:c4:83:6a:88:da:4d:e1:77:40:3f: 49:4f:ba:ba:df:f4:00:9c:86:96:33:92:5a:88:ed: 20:ba:4a:1a:24:41:cb:cd:aa:ec:87:ed:01:8f:3b: c6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B1:30:27:CF:CB:64:DD:95:28:E0:13:DD:9D:6D:E3:BC:0C:5A:3D X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:f6c0::/48 Signature Algorithm: sha256WithRSAEncryption 99:8e:0a:43:20:02:26:26:eb:34:64:10:13:c8:c1:da:6e:fc: b5:7d:25:b3:9c:40:52:23:81:87:59:06:d2:1f:cb:51:01:7e: 6a:1b:31:f3:e7:71:9e:6e:1d:23:6a:cf:7d:29:c7:0b:ec:48: 8b:0b:ef:63:d1:0d:dd:99:26:9c:12:e9:0c:76:24:44:17:3e: 99:89:27:f8:3a:a3:72:f9:fb:c4:fd:27:bb:8d:f4:2e:7e:26: 2d:0b:45:d1:ce:58:5a:fb:36:8e:4c:cc:16:06:f2:88:fc:da: d4:be:10:35:0d:1f:b4:29:e8:60:ce:43:6f:59:ef:0e:b2:62: 0f:af:91:76:b8:6c:07:81:51:52:d5:1e:bc:07:e4:aa:2b:dc: c0:a7:43:0c:43:33:3f:2c:17:79:f9:0a:d8:4a:b3:9b:83:e0: e8:48:1c:9a:0a:95:3b:91:9a:99:0b:16:a5:c9:ff:3c:68:ce: 30:e7:49:47:f8:af:8c:4e:34:48:63:61:7c:03:3b:66:ff:7d: fa:ec:3f:fc:cf:b3:25:c8:93:16:05:b4:52:39:61:99:72:7b: 07:5d:ba:55:bb:0e:3d:cf:64:8a:c0:b2:64:1d:54:18:a7:15: e9:23:63:e0:00:eb:98:d6:54:c6:c5:67:f9:fe:2a:1a:d7:df: 60:9e:56:e9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REI3MjExMC8GA1UEBRMoMzM5M0Y5RDA3MEIyRTcwOTQ5QUNBMkFBQ0M4RTY1RTg5 MEU3NDA5OTAeFw0yNDA2MjQwNjQ3MDhaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NzkxNjZiLTY2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu9o/WlbakOMfHW5SVxN9RBRhapRKYSj2FZvirNMbLqBeWD9sD4ovtPQFQdM3n 0wLUa4fxILhtkuUj5UNnBp94srh0iQGB6ioAKZswYc3m+ZKtckYAmpMQfUGnLcRs Z3jOE1gqZJH6gC8yNOlYDumvaFr06ZvbjDf5WJkeGQGlK9LRTZ96sGVCf/ak1S3O nJ4Ywz2rAXMbPkZ2/oxlJG1wo7KSaA9+ammdd7lkqi1mKbORJUM/Fh6pjgkAFQcq drXum1o/G2IiaoXIo5kHIaR8IJ0prJn/xINqiNpN4XdAP0lPurrf9ACchpYzklqI 7SC6ShokQcvNquyH7QGPO8bFAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUHbEwJ8/L ZN2VKOAT3Z1t47wMWj0wHwYDVR0jBBgwFoAUM5P50HCy5wlJrKKqzI5l6JDnQJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEQjcyLzg2MTFFNjJFMzFG NDExRUZBRTkxQTAwQ0M0RjlBRTAyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTVQNTBIQ3k1d2xKcktLcXpJNWw2SkRuUUprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi84NjExRTYyRTMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi85MkY5MjVDMjMx RjUxMUVGQTE3NDRGMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfP2wDANBgkqhkiG9w0BAQsFAAOCAQEAmY4KQyACJibr NGQQE8jB2m78tX0ls5xAUiOBh1kG0h/LUQF+ahsx8+dxnm4dI2rPfSnHC+xIiwvv Y9EN3ZkmnBLpDHYkRBc+mYkn+Dqjcvn7xP0nu430Ln4mLQtF0c5YWvs2jkzMFgby iPza1L4QNQ0ftCnoYM5Db1nvDrJiD6+RdrhsB4FRUtUevAfkqivcwKdDDEMzPywX efkK2Eqzm4Pg6EgcmgqVO5GamQsWpcn/PGjOMOdJR/ivjE40SGNhfAM7Zv99+uw/ /M+zJciTFgW0UjlhmXJ7B126VbsOPc9kisCyZB1UGKcV6SNj4ADrmNZUxsVn+f4q GtffYJ5W6Q== -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:28 2024 by rpki-client on console-fra.rpki-client.org