$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa File: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (raw, json) Hash identifier: FrFaSaINoC1wJx6E5WKf7naZ5xMoRnwWHyi3iWeF/9Q= Subject key identifier: 1B:CB:D8:8E:5B:A5:BD:F4:4B:6E:99:66:93:27:27:8F:CB:36:3C:07 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 0F62 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa Signing time: Wed 16 Aug 2023 18:16:28 +0000 ROA not before: Wed 16 Aug 2023 18:16:28 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 24144 IP address blocks: 2404:f4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3938 (0xf62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 16 18:16:28 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64dd127c-c54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:94:0a:aa:b3:b4:e8:97:a3:28:2a:2f:71: 5a:b7:0e:33:44:e7:da:71:a9:6a:f7:f3:c9:9f:8d: 35:12:9d:aa:b7:1d:1d:d1:dd:e0:2c:dd:51:03:c6: 2d:8c:17:cf:1c:64:98:ce:4e:59:fe:eb:46:b5:1b: aa:7c:f8:04:23:b0:67:ce:7b:71:1f:71:78:87:f3: 12:22:a5:26:f6:8e:a7:77:2f:6c:58:9f:09:1b:98: 38:17:7f:d8:e7:bc:af:8d:a7:73:3d:78:65:18:72: 85:fc:c1:d1:19:1f:e6:be:e4:12:e4:11:7d:b8:a4: 62:7b:76:66:51:d3:92:cd:1b:14:d9:8c:a9:86:c2: af:03:70:ec:e2:2c:35:ae:03:70:ef:ac:f1:f2:22: 00:1e:ae:1e:b7:63:c8:0a:05:fb:55:c6:09:b4:b8: bb:8b:6a:6c:24:52:b1:76:c5:da:10:67:89:23:b9: 08:58:82:ee:f7:52:58:7e:75:4a:3a:43:f5:18:e1: a6:2d:9c:d2:d9:73:e7:6b:37:3c:67:aa:19:39:a9: ab:f3:74:57:47:e5:b2:a7:15:5e:e4:81:63:30:33: c5:c0:02:fe:f6:c4:63:1d:f9:17:f5:c2:4f:85:33: 2a:33:f3:92:63:78:82:b0:52:df:ad:d7:21:ea:08: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CB:D8:8E:5B:A5:BD:F4:4B:6E:99:66:93:27:27:8F:CB:36:3C:07 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0::/32 Signature Algorithm: sha256WithRSAEncryption b7:fc:c0:2a:e8:2e:e2:85:0a:72:06:bc:6a:8a:5f:74:b0:6b: 5d:32:0e:bc:2e:db:6f:2e:ed:1a:54:ed:84:b0:43:17:a1:bd: f1:c3:26:84:60:32:3d:81:13:62:c5:97:6a:63:02:f1:8f:8a: 25:ea:07:0b:55:84:6a:58:a6:8c:bf:24:b9:7d:bb:86:40:38: bf:ca:f7:a2:4f:20:32:c2:69:7d:e4:a6:86:0e:69:82:dd:40: e5:de:f9:71:3e:77:44:94:30:ae:9e:a5:63:21:22:58:47:df: 48:1e:94:71:d8:eb:b8:21:43:49:6c:eb:64:43:53:21:eb:08: cd:29:ed:68:2a:86:29:84:5d:22:c5:fc:e6:1b:ec:3b:7c:73: 78:e5:88:00:fe:7e:4d:81:06:86:db:81:0e:27:c9:21:50:a8: 6c:5d:e7:0e:99:26:67:55:e4:31:f6:52:8f:31:64:bd:c4:72: 38:d8:9d:a4:64:58:54:09:34:15:82:03:d4:99:5b:bf:14:d2: 4d:b9:33:2b:46:db:27:36:83:4d:69:3d:a5:1a:51:4d:a6:84: 3d:21:58:a0:55:8c:54:b1:b3:5a:86:89:2a:6f:04:a3:d9:a1: 5d:56:a2:7a:14:15:29:58:01:40:fe:76:5a:70:e7:3c:fc:98: fa:14:91:1b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICD2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjMwODE2MTgxNjI4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkMTI3Yy1jNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WGUCqqztOiXoygqL3Fatw4zROfacalq9/PJn401Ep2qtx0d0d3gLN1RA8Yt jBfPHGSYzk5Z/utGtRuqfPgEI7BnzntxH3F4h/MSIqUm9o6ndy9sWJ8JG5g4F3/Y 57yvjadzPXhlGHKF/MHRGR/mvuQS5BF9uKRie3ZmUdOSzRsU2YyphsKvA3Ds4iw1 rgNw76zx8iIAHq4et2PICgX7VcYJtLi7i2psJFKxdsXaEGeJI7kIWILu91JYfnVK OkP1GOGmLZzS2XPnazc8Z6oZOamr83RXR+WypxVe5IFjMDPFwAL+9sRjHfkX9cJP hTMqM/OSY3iCsFLfrdch6ghIKwIDAQABo4ICljCCApIwHQYDVR0OBBYEFBvL2I5b pb30S26ZZpMnJ4/LNjwHMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvNDlGNEZGQkEw QTFDMTFFRUE0MTVCRTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBPTAMA0GCSqGSIb3DQEBCwUAA4IBAQC3/MAq6C7ihQpy Brxqil90sGtdMg68LttvLu0aVO2EsEMXob3xwyaEYDI9gRNixZdqYwLxj4ol6gcL VYRqWKaMvyS5fbuGQDi/yveiTyAywml95KaGDmmC3UDl3vlxPndElDCunqVjISJY R99IHpRx2Ou4IUNJbOtkQ1Mh6wjNKe1oKoYphF0ixfzmG+w7fHN45YgA/n5NgQaG 24EOJ8khUKhsXecOmSZnVeQx9lKPMWS9xHI42J2kZFhUCTQVggPUmVu/FNJNuTMr RtsnNoNNaT2lGlFNpoQ9IVigVYxUsbNahokqbwSj2aFdVqJ6FBUpWAFA/nZacOc8 /Jj6FJEb -----END CERTIFICATE-----Generated at Wed May 22 20:08:10 2024 by rpki-client on console-ams.rpki-client.org