$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/76963436A9FF11ECB6C3AB15C4F9AE02.roa File: 76963436A9FF11ECB6C3AB15C4F9AE02.roa (raw, json) Hash identifier: F+XL/mMzvTwAug3HF+nnP5g2vX74Cc2UdTQaef14S+I= Subject key identifier: BE:A1:47:E3:21:42:8D:9E:78:98:E1:58:68:2C:C9:17:C9:3C:7E:2E Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 0F45 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/76963436A9FF11ECB6C3AB15C4F9AE02.roa Signing time: Wed 16 Aug 2023 18:16:03 +0000 ROA not before: Wed 16 Aug 2023 18:16:03 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 131171 IP address blocks: 2404:f4c0:fd00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3909 (0xf45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 16 18:16:03 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64dd1262-5991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:77:86:73:ac:6b:db:78:93:4a:73:2e:60: 37:e5:4a:c9:7b:0a:4c:b8:6e:13:f2:3d:b7:6b:42: 8b:9e:20:02:bb:b6:2f:64:ff:6d:5f:96:af:6c:47: 40:35:98:37:d2:26:34:f7:fd:9c:27:88:da:33:2a: a3:74:be:42:c8:13:f7:1d:13:87:14:d7:7b:ac:d5: 19:c9:ab:aa:f6:76:b1:d2:bf:b2:0b:7d:32:90:18: fe:c0:56:26:c9:0f:67:07:9a:7d:42:39:e5:05:64: c6:e4:a2:c5:f3:98:45:10:a4:95:ab:ed:9b:e7:6e: a1:41:69:ac:aa:d1:b8:09:76:ef:0c:71:fb:e3:69: 39:e4:85:64:c2:d5:20:26:81:23:db:65:72:8d:42: 59:d8:39:d3:31:cd:c3:d0:38:d2:f3:49:da:76:74: 88:52:97:ca:d1:1f:7c:2f:a4:0e:c5:f7:ff:10:6a: ae:c5:e2:f1:02:da:ba:92:12:71:31:17:88:a7:82: be:40:8d:f0:a7:6e:ff:b8:bb:bf:81:47:8a:5a:5e: aa:4f:be:51:08:3d:db:43:83:8c:73:08:7f:5e:bb: 83:07:fe:22:fb:82:05:86:0a:c2:5b:bc:87:49:79: e8:3d:5d:82:1c:9d:e7:9e:ca:42:ac:e7:1c:56:51: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A1:47:E3:21:42:8D:9E:78:98:E1:58:68:2C:C9:17:C9:3C:7E:2E X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/76963436A9FF11ECB6C3AB15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0:fd00::/44 Signature Algorithm: sha256WithRSAEncryption 4c:fb:cb:3f:e5:9a:52:cc:5e:0e:68:3a:d7:95:e9:29:6d:e1: 08:83:95:58:d7:3c:84:1f:88:99:3f:98:b3:89:fa:01:93:60: 01:50:f8:4a:03:c1:8c:b1:2d:e2:86:58:e4:94:99:cd:86:db: 2c:34:46:0b:74:c9:08:08:98:d5:60:95:05:ad:d0:30:ec:be: 61:05:fc:ea:3d:70:ba:1d:49:2d:3b:8d:00:7e:42:a3:aa:4e: 51:38:25:0e:0f:d2:c3:f3:ac:30:d9:d6:f4:d2:09:2c:8e:a5: f5:74:2f:f1:4d:03:4b:02:a7:7d:4c:ce:13:3a:5a:8b:ab:23: 21:9f:2d:f5:a8:97:b4:20:04:54:f0:3b:1d:48:6c:90:15:e6: d7:ec:1d:d1:c4:60:01:22:de:22:c4:54:85:85:36:ec:93:8b: 73:dc:4b:41:c8:f0:61:dd:7d:27:d5:5e:27:9f:98:03:38:04: a3:bc:29:e3:bf:2c:9e:0d:96:d8:56:01:fe:8a:d0:37:87:11: c5:94:8e:30:dd:f8:46:90:c8:26:01:ae:ab:83:82:6c:39:90: cb:53:e4:61:36:56:94:08:dd:61:ff:5e:49:10:d9:54:4b:5a: 20:d0:eb:9c:28:2c:2c:c0:f5:7d:92:73:42:96:09:ce:68:c0: c8:77:9a:79 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICD0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjMwODE2MTgxNjAzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkMTI2Mi01OTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLt3hnOsa9t4k0pzLmA35UrJewpMuG4T8j23a0KLniACu7YvZP9tX5avbEdA NZg30iY09/2cJ4jaMyqjdL5CyBP3HROHFNd7rNUZyauq9nax0r+yC30ykBj+wFYm yQ9nB5p9QjnlBWTG5KLF85hFEKSVq+2b526hQWmsqtG4CXbvDHH742k55IVkwtUg JoEj22VyjUJZ2DnTMc3D0DjS80nadnSIUpfK0R98L6QOxff/EGquxeLxAtq6khJx MReIp4K+QI3wp27/uLu/gUeKWl6qT75RCD3bQ4OMcwh/XruDB/4i+4IFhgrCW7yH SXnoPV2CHJ3nnspCrOccVlFCIwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFL6hR+Mh Qo2eeJjhWGgsyRfJPH4uMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvNzY5NjM0MzZB OUZGMTFFQ0I2QzNBQjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBPTA/QAwDQYJKoZIhvcNAQELBQADggEBAEz7yz/lmlLM Xg5oOteV6Slt4QiDlVjXPIQfiJk/mLOJ+gGTYAFQ+EoDwYyxLeKGWOSUmc2G2yw0 Rgt0yQgImNVglQWt0DDsvmEF/Oo9cLodSS07jQB+QqOqTlE4JQ4P0sPzrDDZ1vTS CSyOpfV0L/FNA0sCp31MzhM6WourIyGfLfWol7QgBFTwOx1IbJAV5tfsHdHEYAEi 3iLEVIWFNuyTi3PcS0HI8GHdfSfVXiefmAM4BKO8KeO/LJ4NlthWAf6K0DeHEcWU jjDd+EaQyCYBrquDgmw5kMtT5GE2VpQI3WH/XkkQ2VRLWiDQ65woLCzA9X2Sc0KW Cc5owMh3mnk= -----END CERTIFICATE-----Generated at Thu May 16 20:25:47 2024 by rpki-client on console-ams.rpki-client.org