$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B47A0CDA660F11EB8A1DB351C4F9AE02.roa File: B47A0CDA660F11EB8A1DB351C4F9AE02.roa (raw, json) Hash identifier: /vLF5bu+bErPdQsRXhTd1sOmNGoCoopNt5vlE7c1y1E= Subject key identifier: 64:45:D8:A9:A8:04:4B:41:D7:8B:0D:91:61:72:D0:7D:29:3C:4F:9A Certificate issuer: /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Certificate serial: 090C Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B47A0CDA660F11EB8A1DB351C4F9AE02.roa Signing time: Fri 02 Jun 2023 22:03:14 +0000 ROA not before: Fri 02 Jun 2023 22:03:14 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136992 IP address blocks: 2001:df3:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2316 (0x90c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Validity Not Before: Jun 2 22:03:14 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=647a6722-bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:d6:83:d2:4a:09:bf:f6:a4:f1:e0:59:53: f6:a7:9e:f7:ae:43:ec:06:13:ea:f7:87:af:33:fd: 40:95:95:e5:20:7d:2b:c1:4a:f0:41:2d:a6:47:26: 41:6a:12:43:1f:0e:cf:06:de:78:c1:d3:6a:73:43: 2f:4a:3f:32:03:20:76:05:9e:4b:04:c7:bf:08:c8: 09:24:9c:4b:20:00:70:3b:a6:14:64:18:a0:69:a4: d7:cb:53:32:a9:cd:eb:fe:da:a7:b2:b3:7e:0a:40: d2:2c:7f:0c:d6:28:11:21:5d:d9:79:6e:5b:b3:88: c2:99:e5:d0:ab:75:de:c2:fc:08:b0:e8:42:25:45: 70:f0:f3:a9:a5:22:2e:b3:9b:4c:7e:a7:fb:7e:90: d2:75:04:5b:0b:dd:3e:aa:23:4c:69:6f:0a:2e:68: 04:e2:54:f9:5e:a0:26:e3:48:29:3f:1a:47:c0:1c: 6c:71:db:45:4d:af:82:a2:6c:ac:55:2e:77:75:ba: ca:85:eb:28:ee:53:d1:d0:fd:53:61:07:00:db:2e: 31:82:e8:ac:0b:6f:32:21:51:c3:61:de:1c:db:fb: 21:ca:21:b2:86:1e:e8:bb:36:99:f1:10:bb:46:52: 11:5e:0c:06:9a:cd:19:47:c6:09:5a:24:7b:be:d3: 0e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:45:D8:A9:A8:04:4B:41:D7:8B:0D:91:61:72:D0:7D:29:3C:4F:9A X509v3 Authority Key Identifier: keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B47A0CDA660F11EB8A1DB351C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:1080::/48 Signature Algorithm: sha256WithRSAEncryption 08:ba:55:aa:84:7e:2e:d8:1a:b8:63:ab:7c:a7:e7:b1:c5:6e: a2:f7:98:45:ad:79:2e:25:d6:c4:55:83:74:47:61:00:d6:68: c5:e2:37:0c:0d:ee:73:2b:d0:43:71:c3:c0:20:b8:ee:3b:d0: 71:7b:7f:c0:bd:0c:ae:8c:63:c2:fb:f8:bf:27:47:c0:d5:d5: d8:99:e5:59:0c:5d:f7:86:05:ad:d3:bb:e4:f5:53:c2:64:77: 56:c8:c8:36:b5:d8:6d:8f:2b:dc:cb:97:20:e0:2c:b1:66:68: 47:0f:28:e8:bb:fc:0a:81:e4:2e:f1:55:44:37:89:3e:76:5e: 94:be:f6:32:fd:a3:56:35:62:e6:fb:e6:61:61:ca:4b:6e:40: 84:14:83:d5:9e:2f:ab:c3:02:90:41:db:3d:87:68:45:a0:85: 55:bc:0e:c4:31:a8:74:b4:3a:f2:2f:94:79:86:24:54:81:03: 39:1c:7e:9b:4f:1f:bb:75:c2:dc:a5:86:6b:12:64:d2:82:6f: be:49:32:6d:f7:13:df:f7:72:ec:8b:76:25:6c:57:59:3c:98: 17:5f:e3:25:52:81:ff:5d:6a:14:57:ee:2c:ba:1f:fc:c6:ec: 35:93:57:ed:18:c5:95:3a:ae:a0:83:61:34:7f:ce:b1:2e:0c: f7:05:5e:52 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RjYxMTAvBgNVBAUTKEY2OEI4NjI2OEIzN0RFODEwQjk2OERCOEYzNTdGNzcz RTk4M0JGNkQwHhcNMjMwNjAyMjIwMzE0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNjcyMi1iZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjDWg9JKCb/2pPHgWVP2p573rkPsBhPq94evM/1AlZXlIH0rwUrwQS2mRyZB ahJDHw7PBt54wdNqc0MvSj8yAyB2BZ5LBMe/CMgJJJxLIABwO6YUZBigaaTXy1My qc3r/tqnsrN+CkDSLH8M1igRIV3ZeW5bs4jCmeXQq3XewvwIsOhCJUVw8POppSIu s5tMfqf7fpDSdQRbC90+qiNMaW8KLmgE4lT5XqAm40gpPxpHwBxscdtFTa+Comys VS53dbrKheso7lPR0P1TYQcA2y4xguisC28yIVHDYd4c2/shyiGyhh7ouzaZ8RC7 RlIRXgwGms0ZR8YJWiR7vtMOJQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGRF2Kmo BEtB14sNkWFy0H0pPE+aMB8GA1UdIwQYMBaAFPaLhiaLN96BC5aNuPNX93Ppg79t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVGNi9ENjlFQUFCMjVG NjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNvRUxsbzI0ODFmM2MtbUR2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvdUdKb3MzM29FTGxvMjQ4MWYzYy1tRHYyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU1RjYvRDY5RUFBQjI1RjY0MTFFQTlDQUEzQTY0QzRGOUFFMDIvQjQ3QTBDREE2 NjBGMTFFQjhBMURCMzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zEIAwDQYJKoZIhvcNAQELBQADggEBAAi6VaqEfi7Y Grhjq3yn57HFbqL3mEWteS4l1sRVg3RHYQDWaMXiNwwN7nMr0ENxw8AguO470HF7 f8C9DK6MY8L7+L8nR8DV1diZ5VkMXfeGBa3Tu+T1U8Jkd1bIyDa12G2PK9zLlyDg LLFmaEcPKOi7/AqB5C7xVUQ3iT52XpS+9jL9o1Y1Yub75mFhyktuQIQUg9WeL6vD ApBB2z2HaEWghVW8DsQxqHS0OvIvlHmGJFSBAzkcfptPH7t1wtylhmsSZNKCb75J Mm33E9/3cuyLdiVsV1k8mBdf4yVSgf9dahRX7iy6H/zG7DWTV+0YxZU6rqCDYTR/ zrEuDPcFXlI= -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org