$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/59DDEEAE700111EAB050DC3AC4F9AE02.roa File: 59DDEEAE700111EAB050DC3AC4F9AE02.roa (raw, json) Hash identifier: k9sGNlFCzP63h1aS8flZHgyf/5JP24HJyv51VFBQCn0= Subject key identifier: B7:F9:4A:CA:F2:73:E6:C7:B3:CD:CB:CD:20:27:CE:27:97:8B:35:11 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 0F4F Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/59DDEEAE700111EAB050DC3AC4F9AE02.roa Signing time: Wed 16 Aug 2023 18:16:11 +0000 ROA not before: Wed 16 Aug 2023 18:16:11 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 140498 IP address blocks: 2404:f4c0:f540::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3919 (0xf4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 16 18:16:11 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64dd126b-f93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:06:9f:fa:7a:2a:64:b0:d6:26:f8:e6:65: 68:b3:93:40:2e:d6:1c:c9:9c:0e:3e:8e:2b:c8:09: 57:4c:aa:91:6c:b2:ce:89:34:91:84:78:9b:8d:c9: fd:a0:15:03:77:79:7b:35:25:6e:74:32:62:51:a2: c6:18:21:2f:4f:ca:b3:5e:8e:45:84:fa:a8:82:af: cc:f6:12:e9:e1:74:da:e0:7d:4a:b5:db:c8:93:4c: c7:56:4b:13:db:35:3d:1a:82:bc:c3:56:82:fb:c4: d7:09:4b:15:cf:d2:82:23:30:55:df:fe:6e:8f:4d: 08:b9:f3:0a:44:0e:f4:30:b6:a7:8f:61:8d:db:29: 1e:58:d5:d4:b3:bd:1b:36:e3:36:ed:e2:79:a7:08: 40:74:b6:5b:1c:b7:3e:94:f4:fb:5d:69:f8:79:ae: 36:d0:b5:bd:82:14:d6:3b:f3:2f:93:96:1f:75:71: f7:63:04:e6:cb:db:76:74:66:11:43:db:f8:2d:f0: 9b:0d:55:4b:f4:9f:43:e3:29:82:6a:86:2d:3b:84: 6e:ca:2a:59:84:b7:cb:82:b8:2c:7a:59:10:13:46: 1e:00:32:2e:4b:60:7d:9b:39:8d:48:b1:17:aa:c0: 85:6f:17:78:7c:07:3f:40:b8:a0:59:97:6b:fa:90: f2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F9:4A:CA:F2:73:E6:C7:B3:CD:CB:CD:20:27:CE:27:97:8B:35:11 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/59DDEEAE700111EAB050DC3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0:f540::/44 Signature Algorithm: sha256WithRSAEncryption 83:19:d7:26:66:be:e6:80:e5:5d:e8:7e:63:fa:fe:a7:76:df: c0:1c:6a:f1:e1:80:73:73:1e:68:71:af:19:96:c5:dc:20:1e: b6:d0:7e:e9:83:c5:5d:8e:9d:8e:0f:82:d5:31:20:58:91:26: e8:53:72:d4:ec:02:86:c4:84:81:70:25:34:4b:aa:dd:9c:c3: aa:d9:49:82:c5:4b:6d:00:44:d5:62:87:38:a0:52:6a:03:bd: b9:05:85:93:be:6d:b1:2b:a9:2a:5e:1b:aa:2f:a2:f5:46:28: c5:6a:dc:e8:79:53:36:b3:f8:47:78:fa:12:d4:c0:c7:60:62: 5f:a9:28:b4:c2:fb:dd:cb:35:3a:cb:0f:34:14:99:d4:a7:7b: af:9e:fe:c4:d3:3a:aa:af:88:3b:00:1d:a8:d4:0b:8f:ae:4f: 0c:b0:b0:94:f0:6a:af:37:c2:4a:ea:56:e0:89:9e:9a:13:d3: b7:54:49:6b:25:d0:66:b9:0e:5f:04:82:8c:e1:51:b3:de:d9: b2:7d:91:67:c3:d0:94:0f:7a:0a:8a:b1:9f:6d:f3:fa:42:75: df:4d:fe:2d:ff:95:e6:dd:2d:08:7a:85:b1:a7:c2:d7:f6:00: 45:92:8d:4c:d6:d1:97:eb:4d:e2:98:35:f4:41:ab:10:33:ef: e6:2f:94:56 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICD08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjMwODE2MTgxNjExWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkMTI2Yi1mOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryYGn/p6KmSw1ib45mVos5NALtYcyZwOPo4ryAlXTKqRbLLOiTSRhHibjcn9 oBUDd3l7NSVudDJiUaLGGCEvT8qzXo5FhPqogq/M9hLp4XTa4H1KtdvIk0zHVksT 2zU9GoK8w1aC+8TXCUsVz9KCIzBV3/5uj00IufMKRA70MLanj2GN2ykeWNXUs70b NuM27eJ5pwhAdLZbHLc+lPT7XWn4ea420LW9ghTWO/Mvk5YfdXH3YwTmy9t2dGYR Q9v4LfCbDVVL9J9D4ymCaoYtO4RuyipZhLfLgrgselkQE0YeADIuS2B9mzmNSLEX qsCFbxd4fAc/QLigWZdr+pDyAwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLf5Ssry c+bHs83LzSAnzieXizURMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvNTlEREVFQUU3 MDAxMTFFQUIwNTBEQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBPTA9UAwDQYJKoZIhvcNAQELBQADggEBAIMZ1yZmvuaA 5V3ofmP6/qd238AcavHhgHNzHmhxrxmWxdwgHrbQfumDxV2OnY4PgtUxIFiRJuhT ctTsAobEhIFwJTRLqt2cw6rZSYLFS20ARNVihzigUmoDvbkFhZO+bbErqSpeG6ov ovVGKMVq3Oh5Uzaz+Ed4+hLUwMdgYl+pKLTC+93LNTrLDzQUmdSne6+e/sTTOqqv iDsAHajUC4+uTwywsJTwaq83wkrqVuCJnpoT07dUSWsl0Ga5Dl8EgozhUbPe2bJ9 kWfD0JQPegqKsZ9t8/pCdd9N/i3/lebdLQh6hbGnwtf2AEWSjUzW0ZfrTeKYNfRB qxAz7+YvlFY= -----END CERTIFICATE-----Generated at Wed May 22 20:08:10 2024 by rpki-client on console-ams.rpki-client.org