$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/71043990C4D811EA88E6B21FC4F9AE02.roa File: 71043990C4D811EA88E6B21FC4F9AE02.roa (raw, json) Hash identifier: xxYyEpZag1NZ1YVYndXKJaVHjqWbXvMpUjSaCG/4lTI= Subject key identifier: 4F:BA:18:3C:BD:E7:9A:44:79:1F:53:C2:91:A6:EE:00:4C:BF:C4:57 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 0F61 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/71043990C4D811EA88E6B21FC4F9AE02.roa Signing time: Wed 16 Aug 2023 18:16:28 +0000 ROA not before: Wed 16 Aug 2023 18:16:28 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 22944 IP address blocks: 2404:f4c0:1009::/48 maxlen: 48 2404:f4c0:10b8::/45 maxlen: 48 2404:f4c0:10c0::/42 maxlen: 48 2404:f4c0:10c2::/47 maxlen: 48 2404:f4c0:10c4::/46 maxlen: 48 2404:f4c0:10c8::/45 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3937 (0xf61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 16 18:16:28 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64dd127b-5240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:85:84:1b:55:dd:6a:3f:a2:5f:59:5d:78: d2:0a:51:7f:f6:0d:f5:48:ea:33:e5:ed:57:31:e7: c2:97:56:d5:ef:b4:50:bb:17:b3:0c:c7:b2:a9:14: fb:fb:42:f6:b9:91:47:bd:51:17:4b:5b:c5:35:71: 5c:14:e6:a7:9c:cb:44:de:46:2a:cf:8b:ec:4f:40: b5:02:cb:4f:36:4a:0d:6a:c7:53:f2:c3:c5:5c:cf: 02:07:72:37:b5:53:ce:fd:f6:49:95:19:df:43:d8: 4b:58:ad:0a:31:7e:0d:47:47:34:53:44:ca:d5:6d: 44:50:9c:65:01:44:74:24:d0:2e:8e:dd:29:03:2e: 77:7a:70:e6:5b:46:a1:67:e7:c8:96:8c:38:c5:c2: 21:15:e1:d6:50:64:95:ad:fd:6d:28:eb:af:48:95: 68:2d:11:3d:75:18:c4:1d:9e:91:08:31:87:5d:01: af:27:11:8a:2d:fc:56:6e:ab:8d:2e:43:80:60:c6: 66:bc:8c:c8:ae:32:1f:34:b5:1a:4e:63:49:31:b9: 29:e3:59:ff:bd:b4:be:51:a2:14:2f:dd:b0:48:0c: 9f:89:fb:1c:33:fd:36:8c:6a:37:b9:43:ec:03:b1: a4:ff:da:a7:4b:a6:3c:31:a2:0d:ff:68:ee:ac:83: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BA:18:3C:BD:E7:9A:44:79:1F:53:C2:91:A6:EE:00:4C:BF:C4:57 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/71043990C4D811EA88E6B21FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0:1009::/48 2404:f4c0:10b8::-2404:f4c0:10ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 28:0b:46:f9:5e:dd:b8:dc:0c:58:91:bf:85:1d:b7:85:be:37: 39:f9:65:06:a5:93:fd:11:a7:72:bf:77:a8:fc:e2:f7:4c:ce: f7:2f:38:30:1c:dc:e9:b3:88:3f:0a:07:60:76:b0:4c:1d:a3: 96:5c:f7:26:10:c1:15:22:c1:f2:bf:78:d7:7f:9d:ba:1d:62: 3c:88:eb:fa:ff:b3:4d:bf:f9:95:3d:88:1d:0e:e8:8f:4c:6b: e1:7f:2c:da:f4:03:ee:ee:5c:03:13:56:d5:9e:41:7c:fc:8c: 6e:12:47:f8:5c:ea:13:8e:bc:ed:06:dc:2b:1f:95:35:2c:24: fa:84:a0:7d:de:08:f6:49:19:d4:3e:4a:7f:2b:d4:00:56:2a: 18:8b:d9:b2:1b:a7:64:61:70:b5:b8:15:a5:0b:4f:42:b2:b8: 71:bf:21:ea:77:bc:f0:2d:82:ff:dd:07:19:bd:c7:6f:f9:bc: d1:35:49:df:e8:dc:da:17:f4:ed:72:ae:06:10:51:4e:59:9d: 67:bd:1a:9c:b6:6f:36:f5:d4:49:1a:09:91:00:4c:a5:5f:d1: 87:73:d1:07:7f:77:e7:a8:1e:ed:ad:b0:fd:7e:ad:e9:f9:f5: 5e:2b:d9:c2:84:fc:ba:4e:3b:dd:aa:dc:0a:3d:7a:94:5d:27: 2b:5e:02:df -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICD2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjMwODE2MTgxNjI4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkMTI3Yi01MjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EaFhBtV3Wo/ol9ZXXjSClF/9g31SOoz5e1XMefCl1bV77RQuxezDMeyqRT7 +0L2uZFHvVEXS1vFNXFcFOannMtE3kYqz4vsT0C1AstPNkoNasdT8sPFXM8CB3I3 tVPO/fZJlRnfQ9hLWK0KMX4NR0c0U0TK1W1EUJxlAUR0JNAujt0pAy53enDmW0ah Z+fIlow4xcIhFeHWUGSVrf1tKOuvSJVoLRE9dRjEHZ6RCDGHXQGvJxGKLfxWbquN LkOAYMZmvIzIrjIfNLUaTmNJMbkp41n/vbS+UaIUL92wSAyfifscM/02jGo3uUPs A7Gk/9qnS6Y8MaIN/2jurINQ1wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFE+6GDy9 55pEeR9TwpGm7gBMv8RXMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvNzEwNDM5OTBD NEQ4MTFFQTg4RTZCMjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgACMBwDBwAkBPTAEAkwEQMHAyQE9MAQuAMGACQE9MAQMA0GCSqGSIb3 DQEBCwUAA4IBAQAoC0b5Xt243AxYkb+FHbeFvjc5+WUGpZP9Eadyv3eo/OL3TM73 LzgwHNzps4g/CgdgdrBMHaOWXPcmEMEVIsHyv3jXf526HWI8iOv6/7NNv/mVPYgd DuiPTGvhfyza9APu7lwDE1bVnkF8/IxuEkf4XOoTjrztBtwrH5U1LCT6hKB93gj2 SRnUPkp/K9QAVioYi9myG6dkYXC1uBWlC09CsrhxvyHqd7zwLYL/3QcZvcdv+bzR NUnf6NzaF/Ttcq4GEFFOWZ1nvRqctm829dRJGgmRAEylX9GHc9EHf3fnqB7trbD9 fq3p+fVeK9nChPy6TjvdqtwKPXqUXScrXgLf -----END CERTIFICATE-----Generated at Thu May 16 19:10:55 2024 by rpki-client on console-fra.rpki-client.org