$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/55291FA016B511EFA244974BC4F9AE02.roa File: 55291FA016B511EFA244974BC4F9AE02.roa (raw, json) Hash identifier: 4G05qDBih2f7QXu4EvcFu/Hi3cjZoiJAPBz1/2wvj2Y= Subject key identifier: 5E:24:01:25:72:DC:65:D3:0D:4C:22:59:39:9E:77:96:BC:8B:0D:E7 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: 1D Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/55291FA016B511EFA244974BC4F9AE02.roa Signing time: Wed 03 Jul 2024 08:08:46 +0000 ROA not before: Wed 03 Jul 2024 08:08:46 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 141172 IP address blocks: 2001:df3:d0c0::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: Jul 3 08:08:46 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6685070e-318f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:48:eb:01:28:2e:0b:2f:74:6d:c1:c6:43: cf:99:2a:62:8d:9f:32:61:cd:f0:16:4f:7c:13:14: e3:27:c3:fb:22:3c:fe:ca:54:5f:d3:44:45:5e:8a: 90:ba:64:10:85:4f:64:3c:4b:7d:46:22:61:cf:fa: 68:0d:6e:73:f0:a4:2d:c1:55:bb:59:a0:15:ac:cb: b9:5d:dd:66:d0:7c:e4:3d:ab:5b:f9:0d:10:2e:a3: 85:20:9f:dc:94:23:f7:c3:52:eb:49:cd:56:67:da: 1b:68:7e:e6:a9:22:98:3f:ce:38:8d:3d:92:f9:fa: 64:4b:0c:d6:90:2e:d8:74:2b:ee:b2:86:bb:47:e7: 9c:f5:db:b7:b6:10:69:53:d4:19:91:c4:68:5a:d6: 10:c9:3c:bd:a6:22:f2:bb:ca:e3:b8:47:ac:8b:76: a5:79:1e:28:d2:01:2d:53:bd:03:5a:8a:2b:af:57: fa:8d:71:26:a1:49:e1:6e:09:dd:d3:29:bb:13:fc: 78:b2:7c:0d:a4:34:45:0f:1c:3c:c7:36:7e:ba:c5: 27:4b:4a:68:2f:5c:eb:e6:e2:fd:fd:b1:91:71:e8: be:87:57:27:d0:64:db:3f:21:63:bb:bd:a0:0e:ed: 97:08:5a:4a:1b:6a:ec:47:87:d7:48:83:e5:17:43: 19:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:24:01:25:72:DC:65:D3:0D:4C:22:59:39:9E:77:96:BC:8B:0D:E7 X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/55291FA016B511EFA244974BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:d0c0::/48 Signature Algorithm: sha256WithRSAEncryption bb:fd:00:f9:12:0d:e5:f1:0a:fd:1a:b8:62:25:45:72:ff:be: e4:49:db:d3:39:f9:5e:17:71:58:1c:9f:32:3d:12:b9:3c:eb: ea:99:b3:71:f1:f8:d9:1b:62:b6:f4:dc:bf:9b:1b:b7:f7:8e: 84:63:00:3c:74:62:c1:c0:03:61:48:b3:1f:74:aa:65:d8:fb: 6d:a9:4d:83:62:08:8e:da:67:c1:9b:3a:86:71:f0:57:92:f0: 08:5f:95:d1:6b:07:f1:a6:c2:be:70:1a:24:19:a3:c8:97:c0: af:bd:85:9a:b4:1c:de:31:ea:11:8f:16:f6:1b:01:78:65:fd: 8d:2a:b5:3f:42:15:c8:55:7b:63:d7:b2:9a:59:c2:cd:54:93: 02:87:f3:0f:d1:bb:83:97:42:62:60:16:7c:a3:e7:f0:18:a7: f3:56:61:cf:2c:b0:b7:4f:7f:62:7a:0b:47:bf:5a:10:c8:ff: e8:79:c4:a4:d1:87:c5:34:72:01:a9:19:f5:ea:ce:b4:4e:98: 2a:d9:f7:d3:12:50:6c:ad:97:b3:38:a2:58:f0:72:8b:16:db: f9:6f:cb:80:a3:1f:bd:34:6a:35:2f:ed:13:97:1a:06:79:44: 29:e5:61:ea:b9:0c:0c:85:05:a2:e1:a0:45:5e:f4:92:50:86: 31:bc:d0:e2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTdDNzExMC8GA1UEBRMoQjJBRDUwRjM1NzFCREExRUVDMDdDQzQ4REEwMUQzRjM3 NTQ1OEQyNDAeFw0yNDA3MDMwODA4NDZaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODUwNzBlLTMxOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClU0jrASguCy90bcHGQ8+ZKmKNnzJhzfAWT3wTFOMnw/siPP7KVF/TREVeipC6 ZBCFT2Q8S31GImHP+mgNbnPwpC3BVbtZoBWsy7ld3WbQfOQ9q1v5DRAuo4Ugn9yU I/fDUutJzVZn2htofuapIpg/zjiNPZL5+mRLDNaQLth0K+6yhrtH55z127e2EGlT 1BmRxGha1hDJPL2mIvK7yuO4R6yLdqV5HijSAS1TvQNaiiuvV/qNcSahSeFuCd3T KbsT/HiyfA2kNEUPHDzHNn66xSdLSmgvXOvm4v39sZFx6L6HVyfQZNs/IWO7vaAO 7ZcIWkobauxHh9dIg+UXQxk5AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUXiQBJXLc ZdMNTCJZOZ53lryLDecwHwYDVR0jBBgwFoAUsq1Q81cb2h7sB8xI2gHT83VFjSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFN0M3LzFBNTlGNzhFMTZC MzExRUY4OUNGRTMwRUM0RjlBRTAyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3ExUTgxY2IyaDdzQjh4STJnSFQ4M1ZGalNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi81NTI5MUZBMDE2 QjUxMUVGQTI0NDk3NEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfPQwDANBgkqhkiG9w0BAQsFAAOCAQEAu/0A+RIN5fEK /Rq4YiVFcv++5Enb0zn5XhdxWByfMj0SuTzr6pmzcfH42RtitvTcv5sbt/eOhGMA PHRiwcADYUizH3SqZdj7balNg2IIjtpnwZs6hnHwV5LwCF+V0WsH8abCvnAaJBmj yJfAr72FmrQc3jHqEY8W9hsBeGX9jSq1P0IVyFV7Y9eymlnCzVSTAofzD9G7g5dC YmAWfKPn8Bin81Zhzyywt09/YnoLR79aEMj/6HnEpNGHxTRyAakZ9erOtE6YKtn3 0xJQbK2XsziiWPByixbb+W/LgKMfvTRqNS/tE5caBnlEKeVh6rkMDIUFouGgRV70 klCGMbzQ4g== -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org