$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/71043990C4D811EA88E6B21FC4F9AE02.roa File: 71043990C4D811EA88E6B21FC4F9AE02.roa (raw, json) Hash identifier: 9vj0wFDRg2m924YSQRU+53hKJgFYHI/k3yYJ69FV68c= Subject key identifier: 4F:AE:87:B8:73:71:02:E0:08:67:F0:8C:B1:D7:6C:B3:3F:B2:0A:5A Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 107D Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/71043990C4D811EA88E6B21FC4F9AE02.roa Signing time: Fri 16 Aug 2024 18:16:34 +0000 ROA not before: Fri 16 Aug 2024 18:16:34 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 22944 IP address blocks: 2404:f4c0:1009::/48 maxlen: 48 2404:f4c0:10b8::/45 maxlen: 48 2404:f4c0:10c0::/42 maxlen: 48 2404:f4c0:10c2::/47 maxlen: 48 2404:f4c0:10c4::/46 maxlen: 48 2404:f4c0:10c8::/45 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4221 (0x107d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 16 18:16:34 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66bf9782-7496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:26:a3:03:5e:9b:1a:1d:6e:7a:66:2a:c1: b9:74:b9:4a:f5:80:30:cd:8f:20:bf:9d:1e:66:d9: 01:44:c6:4a:86:e9:f8:71:db:71:95:8f:c8:d1:fb: 9e:72:65:da:e9:5e:47:79:ba:b8:9f:88:53:23:7c: e4:99:0b:ba:24:c4:4e:58:49:69:16:f2:1f:1e:6c: 8e:76:40:6d:24:62:0d:a8:40:3d:63:52:93:db:c0: 43:cd:64:53:ec:b7:cd:00:5b:9c:4a:59:ea:d4:e1: 88:b3:4f:e1:73:f0:6f:76:ae:fb:4d:36:5d:ed:80: f3:39:eb:fe:d5:57:c3:36:c4:bb:ae:38:d1:53:5e: 76:93:ca:27:32:ed:46:df:d4:ff:4b:10:6d:6a:0a: c4:32:95:8d:68:59:17:1f:70:7e:c4:bf:57:b3:e6: 12:b1:d5:83:47:2c:2a:0e:0a:97:c7:49:af:ae:36: 0f:eb:04:c7:df:da:6e:e7:02:76:6a:c4:2f:ce:d5: 1b:8e:1f:b4:83:a6:43:0b:fd:84:95:ce:b5:5e:c6: 35:3a:4f:c3:c0:bc:72:b3:1d:ab:b4:cd:fa:50:4c: b8:92:ee:cd:7d:f5:fd:d8:93:6a:e3:cb:11:53:85: 1e:02:f5:e3:26:5d:2f:b8:a8:90:e8:bb:09:64:f5: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AE:87:B8:73:71:02:E0:08:67:F0:8C:B1:D7:6C:B3:3F:B2:0A:5A X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/71043990C4D811EA88E6B21FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0:1009::/48 2404:f4c0:10b8::-2404:f4c0:10ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ba:f7:7b:c9:b5:b0:c1:11:bf:1e:49:1a:7e:3c:40:9f:a9:f9: ea:c3:3a:a5:92:eb:f6:f4:2b:2d:dd:4b:bf:aa:6c:bc:6b:3c: 75:60:f6:41:2b:e3:28:9f:38:ce:8d:14:79:ac:5e:53:21:68: ce:04:22:17:10:50:e4:47:d4:c0:86:cc:ea:4b:64:6c:e0:6e: 1a:3f:07:c0:e3:54:2a:a4:46:ad:2d:7c:88:0e:7b:60:a5:85: 30:e2:f0:7d:a1:ba:4a:50:77:40:61:ea:01:7b:84:1c:6b:8d: 48:cf:fa:13:90:ae:d4:e7:09:5a:11:f4:e6:8c:87:ea:79:4d: 34:e5:67:60:23:52:35:a6:d1:bd:3f:62:48:27:7f:cb:7f:52: 6a:bc:1b:de:35:3d:8b:d7:0d:c1:d1:8a:b3:2f:eb:23:cd:f9: 4a:12:77:d7:61:69:68:de:30:69:65:9c:e2:77:63:9b:ce:47: 4c:15:ae:41:69:22:45:09:16:c3:10:fe:fe:70:ca:7b:b7:46: c2:35:f3:66:03:e3:1f:2a:a4:75:15:2d:ec:6b:36:e0:7d:16: b8:bd:09:78:21:8d:0a:68:6c:42:bf:1e:c6:d7:a1:ec:a1:62: 6a:a8:c0:fb:a8:e0:dd:81:69:f4:76:42:79:b0:2f:b6:49:09: ed:e1:f2:88 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICEH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjQwODE2MTgxNjM0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmOTc4Mi03NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4ImowNemxodbnpmKsG5dLlK9YAwzY8gv50eZtkBRMZKhun4cdtxlY/I0fue cmXa6V5Hebq4n4hTI3zkmQu6JMROWElpFvIfHmyOdkBtJGINqEA9Y1KT28BDzWRT 7LfNAFucSlnq1OGIs0/hc/Bvdq77TTZd7YDzOev+1VfDNsS7rjjRU152k8onMu1G 39T/SxBtagrEMpWNaFkXH3B+xL9Xs+YSsdWDRywqDgqXx0mvrjYP6wTH39pu5wJ2 asQvztUbjh+0g6ZDC/2Elc61XsY1Ok/DwLxysx2rtM36UEy4ku7NffX92JNq48sR U4UeAvXjJl0vuKiQ6LsJZPXm0QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFE+uh7hz cQLgCGfwjLHXbLM/sgpaMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvNzEwNDM5OTBD NEQ4MTFFQTg4RTZCMjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgACMBwDBwAkBPTAEAkwEQMHAyQE9MAQuAMGACQE9MAQMA0GCSqGSIb3 DQEBCwUAA4IBAQC693vJtbDBEb8eSRp+PECfqfnqwzqlkuv29Cst3Uu/qmy8azx1 YPZBK+MonzjOjRR5rF5TIWjOBCIXEFDkR9TAhszqS2Rs4G4aPwfA41QqpEatLXyI DntgpYUw4vB9obpKUHdAYeoBe4Qca41Iz/oTkK7U5wlaEfTmjIfqeU005WdgI1I1 ptG9P2JIJ3/Lf1JqvBveNT2L1w3B0YqzL+sjzflKEnfXYWlo3jBpZZzid2ObzkdM Fa5BaSJFCRbDEP7+cMp7t0bCNfNmA+MfKqR1FS3sazbgfRa4vQl4IY0KaGxCvx7G 16HsoWJqqMD7qODdgWn0dkJ5sC+2SQnt4fKI -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org