$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa File: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (raw, json) Hash identifier: Pqc1nBcb+JFkJlWub2Tew10ajFK81balankJIjxH0u0= Subject key identifier: CD:BD:C7:68:4D:68:C8:17:72:DB:60:98:7D:88:4F:B8:22:F3:6F:71 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 107E Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa Signing time: Fri 16 Aug 2024 18:16:35 +0000 ROA not before: Fri 16 Aug 2024 18:16:35 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 24144 IP address blocks: 2404:f4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4222 (0x107e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 16 18:16:35 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66bf9783-2a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:b8:c2:27:c9:ce:ba:45:43:07:e6:0d:2f: 9e:78:46:bf:b2:d5:98:ce:47:f0:17:f5:12:ac:f8: 89:ed:1e:ed:93:d2:44:19:6a:c0:70:e1:1e:46:5b: ca:80:2a:55:f9:f1:00:10:7d:61:c4:e5:dd:a2:55: 67:95:0a:88:cb:b1:07:9d:3a:38:39:b8:3b:a8:1b: 60:3d:66:34:b7:a8:4c:b4:9c:75:51:8b:03:72:4f: 82:34:6b:19:c0:03:27:44:9e:35:f6:c3:8b:0a:b8: ae:1f:26:02:8e:2e:0d:83:c5:fd:4e:03:ec:11:85: 88:6f:d6:8c:c9:93:e4:5e:a8:18:02:81:d1:f3:a0: 82:8b:31:24:58:9d:8f:dc:29:3d:d1:06:ec:9a:06: e8:54:22:0b:f3:36:71:db:17:d7:61:58:c7:fd:63: fd:5b:2e:4f:25:04:f2:77:f7:d8:db:fa:06:ba:28: 17:64:88:c7:ab:eb:33:e1:b0:44:e5:61:16:ae:d4: a9:fd:6f:dd:6b:6d:32:d4:a6:38:67:65:c8:7c:dd: 5c:ad:a7:16:9e:e1:b2:6c:16:a5:94:00:02:01:bb: cc:72:4c:02:6a:f1:40:a5:36:51:d3:6f:47:12:37: 92:d5:39:a1:10:63:e8:c8:eb:a8:87:58:87:44:55: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BD:C7:68:4D:68:C8:17:72:DB:60:98:7D:88:4F:B8:22:F3:6F:71 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0::/32 Signature Algorithm: sha256WithRSAEncryption cc:6b:33:89:2b:85:7e:ec:a2:47:bb:d0:1b:3e:9a:c4:5d:73: 21:0a:68:d6:04:91:c8:9d:89:64:93:9e:d0:99:79:c6:71:43: da:05:d1:a5:4c:2b:87:c5:f8:92:da:2a:bf:2d:f7:48:f7:2e: 3c:c8:d1:90:c0:22:29:2c:f8:09:14:92:f0:82:99:1f:f2:11: 19:97:41:cd:e6:b6:9b:e5:52:8a:97:f7:8b:a1:30:d7:f1:17: 51:11:4e:92:96:8c:99:84:49:0f:f3:05:c7:41:77:bb:e3:f1: 63:4b:7c:35:8b:10:cd:40:d9:0e:1a:85:99:51:44:64:16:75: ab:68:11:f2:ad:5c:6c:84:bb:44:12:41:36:93:44:26:97:71: 11:dc:2e:42:a0:5b:81:e9:ee:e6:b2:81:50:8e:88:c3:ca:57: 1c:a0:73:0a:75:de:9d:16:fa:fa:0d:5c:75:37:c0:f1:5f:1b: 2e:7f:e4:4b:a4:f6:7b:ce:ae:2a:cd:f2:2a:34:d7:20:7a:16: 58:d0:c8:58:3c:ee:17:ab:1d:3d:f0:7e:8d:36:de:9d:9f:a5: 00:8a:ad:51:a1:51:78:22:d4:b7:be:01:bd:f8:ce:5a:dc:37: 5f:4b:a6:c6:16:70:1d:27:00:da:21:57:06:40:89:18:5c:7a: ff:1a:7f:f3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICEH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjQwODE2MTgxNjM1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmOTc4My0yYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6y4wifJzrpFQwfmDS+eeEa/stWYzkfwF/USrPiJ7R7tk9JEGWrAcOEeRlvK gCpV+fEAEH1hxOXdolVnlQqIy7EHnTo4Obg7qBtgPWY0t6hMtJx1UYsDck+CNGsZ wAMnRJ419sOLCriuHyYCji4Ng8X9TgPsEYWIb9aMyZPkXqgYAoHR86CCizEkWJ2P 3Ck90QbsmgboVCIL8zZx2xfXYVjH/WP9Wy5PJQTyd/fY2/oGuigXZIjHq+sz4bBE 5WEWrtSp/W/da20y1KY4Z2XIfN1cracWnuGybBallAACAbvMckwCavFApTZR029H EjeS1TmhEGPoyOuoh1iHRFUrbQIDAQABo4ICljCCApIwHQYDVR0OBBYEFM29x2hN aMgXcttgmH2IT7gi829xMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvNDlGNEZGQkEw QTFDMTFFRUE0MTVCRTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBPTAMA0GCSqGSIb3DQEBCwUAA4IBAQDMazOJK4V+7KJH u9AbPprEXXMhCmjWBJHInYlkk57QmXnGcUPaBdGlTCuHxfiS2iq/LfdI9y48yNGQ wCIpLPgJFJLwgpkf8hEZl0HN5rab5VKKl/eLoTDX8RdREU6SloyZhEkP8wXHQXe7 4/FjS3w1ixDNQNkOGoWZUURkFnWraBHyrVxshLtEEkE2k0Qml3ER3C5CoFuB6e7m soFQjojDylccoHMKdd6dFvr6DVx1N8DxXxsuf+RLpPZ7zq4qzfIqNNcgehZY0MhY PO4Xqx098H6NNt6dn6UAiq1RoVF4ItS3vgG9+M5a3DdfS6bGFnAdJwDaIVcGQIkY XHr/Gn/z -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:22 2024 by rpki-client on console-ams.rpki-client.org