$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/22E2E3C24E2911EF8BEE8E10C4F9AE02.roa File: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (raw, json) Hash identifier: zrNmqSOn3x3Hv5ti8t9FO4ICa53YlMTKqR+0zV+p/zs= Subject key identifier: B8:5C:40:B9:DE:D0:DA:B1:51:C0:DD:B7:A0:6C:E5:30:AA:5C:63:F6 Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 2FA1 Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/22E2E3C24E2911EF8BEE8E10C4F9AE02.roa Signing time: Tue 30 Jul 2024 04:06:46 +0000 ROA not before: Tue 30 Jul 2024 04:06:46 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 4851 IP address blocks: 2402:e400::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12193 (0x2fa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: Jul 30 04:06:46 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66a866d6-6a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:5f:da:e3:5d:1e:91:75:89:9a:1b:a9:9e: 26:36:8c:76:f0:1f:60:94:e9:82:f9:93:98:4f:fb: 33:59:c3:48:26:79:97:91:7d:77:a8:69:5d:45:52: e1:be:82:f0:f3:fc:a1:60:9d:f6:a2:ce:ee:da:fa: 50:46:00:0c:fb:f7:21:66:70:a7:fb:31:16:1e:40: db:00:92:1c:01:e5:3b:cb:32:1a:5d:f3:b2:36:93: f4:8a:2a:63:e4:70:27:4e:5b:52:b6:b0:47:7e:56: 2a:dd:7a:1d:cf:a5:e0:be:ed:5e:25:2a:cb:8a:9d: 8b:43:b5:d4:d2:35:3d:2c:d4:ff:b8:cc:b0:49:e5: e6:d6:b1:40:b0:54:36:fa:2e:2a:55:e7:fe:84:92: c1:f0:43:d4:21:9b:fd:a8:a5:77:0b:0b:bc:eb:ea: 08:0b:35:cb:40:23:20:63:9a:b1:fb:40:0c:2d:77: 23:76:f2:5e:75:44:9f:47:25:34:4e:41:3f:cf:e3: 6f:70:ef:26:88:1e:8c:3e:c8:69:3c:48:40:97:b0: 72:a8:9b:8a:38:6b:68:83:05:8e:b7:12:4b:f6:c9: 0b:e3:56:f9:fe:b9:0d:15:83:99:39:b6:8c:16:d5: 7f:60:27:78:7f:39:75:3f:c8:f9:bc:c3:0a:30:56: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5C:40:B9:DE:D0:DA:B1:51:C0:DD:B7:A0:6C:E5:30:AA:5C:63:F6 X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/22E2E3C24E2911EF8BEE8E10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:e400::/32 Signature Algorithm: sha256WithRSAEncryption d2:8d:78:ea:04:97:e5:aa:df:3f:b7:c9:39:6a:d3:32:c2:4d: 40:a2:8d:c7:dd:6c:36:32:80:8a:88:6c:17:0c:2d:f0:d0:d4: 5a:36:21:05:c6:40:5c:ca:46:ac:ec:ec:e5:e9:cd:77:52:46: fe:cd:78:8a:a5:a6:43:f9:1b:19:03:08:5e:b0:44:fc:67:28: 58:ee:2d:d4:e9:8a:53:58:ba:35:52:dc:60:55:d3:5b:ad:ad: e0:07:10:0e:fd:ae:ca:62:d2:0b:61:f1:86:0c:68:98:fe:66: 98:98:ef:3a:c3:73:06:f4:fd:a1:22:01:7f:55:72:fc:eb:42: ac:69:b2:5e:af:8a:04:76:aa:aa:57:19:16:3c:a0:1e:f0:47: 32:71:e3:7b:04:8d:87:e5:44:43:b0:01:44:f3:7a:67:f1:6f: 7a:12:ae:cf:4e:3f:2c:c2:80:59:fc:c8:24:46:40:09:ec:23: ca:c0:33:ad:98:3a:1e:49:b1:f2:d3:d2:f1:df:15:f5:f9:53: ee:83:30:b1:80:81:ea:9a:5f:ad:2c:69:28:07:0a:05:03:72: e5:b1:fb:77:41:14:4c:42:84:e0:73:8b:1c:82:fe:e5:24:bf: 06:8c:86:96:fa:c2:90:57:e9:93:aa:86:c6:93:48:e6:31:b2: 59:0c:b7:c6 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICL6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjQwNzMwMDQwNjQ2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE4NjZkNi02YTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxFf2uNdHpF1iZobqZ4mNox28B9glOmC+ZOYT/szWcNIJnmXkX13qGldRVLh voLw8/yhYJ32os7u2vpQRgAM+/chZnCn+zEWHkDbAJIcAeU7yzIaXfOyNpP0iipj 5HAnTltStrBHflYq3Xodz6Xgvu1eJSrLip2LQ7XU0jU9LNT/uMywSeXm1rFAsFQ2 +i4qVef+hJLB8EPUIZv9qKV3Cwu86+oICzXLQCMgY5qx+0AMLXcjdvJedUSfRyU0 TkE/z+NvcO8miB6MPshpPEhAl7ByqJuKOGtogwWOtxJL9skL41b5/rkNFYOZObaM FtV/YCd4fzl1P8j5vMMKMFbivQIDAQABo4ICljCCApIwHQYDVR0OBBYEFLhcQLne 0NqxUcDdt6Bs5TCqXGP2MB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUyRjQvODAxNjRGNEVGOEJDMTFFMkFEOTE4MTNCNTkxMUVBMzIvMjJFMkUzQzI0 RTI5MTFFRjhCRUU4RTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAuQAMA0GCSqGSIb3DQEBCwUAA4IBAQDSjXjqBJflqt8/ t8k5atMywk1Aoo3H3Ww2MoCKiGwXDC3w0NRaNiEFxkBcykas7Ozl6c13Ukb+zXiK paZD+RsZAwhesET8ZyhY7i3U6YpTWLo1UtxgVdNbra3gBxAO/a7KYtILYfGGDGiY /maYmO86w3MG9P2hIgF/VXL860KsabJer4oEdqqqVxkWPKAe8EcyceN7BI2H5URD sAFE83pn8W96Eq7PTj8swoBZ/MgkRkAJ7CPKwDOtmDoeSbHy09Lx3xX1+VPugzCx gIHqml+tLGkoBwoFA3Llsft3QRRMQoTgc4scgv7lJL8GjIaW+sKQV+mTqobGk0jm MbJZDLfG -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org