$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/A2745BFEC18411ECBE051C5CC4F9AE02.roa File: A2745BFEC18411ECBE051C5CC4F9AE02.roa (raw, json) Hash identifier: iYyS+bybg1N4q92AG6vYGGKuHIDF5qKD+4XmbjQ4HYs= Subject key identifier: 53:81:69:43:18:A1:03:20:E4:D1:6B:77:60:0E:5A:9B:9D:2B:A8:24 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 0F5A Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/A2745BFEC18411ECBE051C5CC4F9AE02.roa Signing time: Wed 16 Aug 2023 18:16:21 +0000 ROA not before: Wed 16 Aug 2023 18:16:21 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 149795 IP address blocks: 2404:f4c0:f720::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 18:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3930 (0xf5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 16 18:16:21 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64dd1275-8c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:6c:19:31:b7:18:e6:42:a0:08:39:04:70: a9:19:1b:3d:d7:df:5d:52:08:cd:e8:6d:a3:51:88: 3f:67:86:d7:1c:bd:91:a2:88:66:1a:05:22:f5:3e: f0:9a:6c:83:47:36:a6:af:07:29:c2:64:7d:fc:12: 17:9a:24:d5:76:74:f3:cf:13:29:e6:dd:59:ff:a9: 98:2b:2d:a9:1e:34:c8:a1:29:70:02:e5:d4:2a:20: 88:47:43:de:d6:94:40:d9:de:18:19:65:59:b7:ee: 38:f1:36:fe:85:ec:34:a1:d9:19:cb:9a:93:9f:c7: a4:9d:2f:e8:1a:ad:a1:7f:8b:ef:85:89:63:5f:47: ef:8b:72:19:94:ba:cb:28:80:7d:aa:ea:fc:bb:24: 9b:cf:71:36:19:79:26:ca:1c:50:0d:73:7c:09:52: cb:cb:66:b4:96:a6:2c:71:20:ee:01:e9:82:1e:94: 7d:9d:c6:f2:96:56:06:e8:e6:76:07:21:1f:e1:1e: 99:04:3e:49:df:b2:d5:90:d4:48:9f:7c:ce:d4:bc: c6:7b:40:7c:c8:8a:d8:24:46:6f:a1:70:e2:d6:9f: 6b:0c:31:55:4c:5a:63:f8:47:59:f8:f7:3b:ea:ef: 20:83:bb:02:16:44:24:d4:9b:3f:4b:5d:af:9d:ed: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:81:69:43:18:A1:03:20:E4:D1:6B:77:60:0E:5A:9B:9D:2B:A8:24 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/A2745BFEC18411ECBE051C5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0:f720::/44 Signature Algorithm: sha256WithRSAEncryption 5e:07:ce:05:fe:b6:c8:4f:0a:2b:dd:a7:37:cb:e2:22:67:c7: a0:9b:b0:d9:45:59:40:7d:04:84:72:b0:59:8f:e4:29:f1:dd: c2:b8:1f:ab:95:3d:4b:c6:5b:df:07:c5:b0:f1:03:86:45:97: 1d:d0:e6:a6:92:5b:67:3a:25:e9:bc:3e:b8:b4:be:07:fd:b3: 3b:fe:92:a4:fa:2b:17:4a:4d:19:77:52:3e:5a:10:6a:a2:81: 3b:cf:59:19:6c:75:2a:8b:88:93:07:41:25:b0:fd:66:d0:17: 68:5c:5a:20:c5:41:35:44:60:4d:48:0d:b5:da:65:a9:f4:a8: 99:4c:42:35:40:b7:69:d4:62:04:0c:11:ef:74:30:34:35:35: e5:94:42:1e:4c:b2:a4:33:bf:cc:9e:58:64:00:d4:33:1a:92: 33:d8:ed:5f:b8:a5:c8:7b:5e:72:ea:4f:ce:48:55:38:9e:93: 3e:14:cf:65:73:e6:4c:4b:ad:44:81:07:00:08:41:9a:36:4d: 74:cd:ff:f0:93:34:98:ec:88:55:c9:60:41:dd:ed:fd:98:23: b9:39:41:04:6c:99:8b:f1:24:a8:db:bc:f3:36:bc:67:da:1d: 2c:58:40:33:d2:5a:5a:ff:5f:ae:e4:84:ed:20:94:a5:ef:0b: 4c:f4:c4:92 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICD1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjMwODE2MTgxNjIxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkMTI3NS04YzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1psGTG3GOZCoAg5BHCpGRs9199dUgjN6G2jUYg/Z4bXHL2RoohmGgUi9T7w mmyDRzamrwcpwmR9/BIXmiTVdnTzzxMp5t1Z/6mYKy2pHjTIoSlwAuXUKiCIR0Pe 1pRA2d4YGWVZt+448Tb+hew0odkZy5qTn8eknS/oGq2hf4vvhYljX0fvi3IZlLrL KIB9qur8uySbz3E2GXkmyhxQDXN8CVLLy2a0lqYscSDuAemCHpR9ncbyllYG6OZ2 ByEf4R6ZBD5J37LVkNRIn3zO1LzGe0B8yIrYJEZvoXDi1p9rDDFVTFpj+EdZ+Pc7 6u8gg7sCFkQk1Js/S12vne1c+QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFOBaUMY oQMg5NFrd2AOWpudK6gkMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvQTI3NDVCRkVD MTg0MTFFQ0JFMDUxQzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBPTA9yAwDQYJKoZIhvcNAQELBQADggEBAF4HzgX+tshP CivdpzfL4iJnx6CbsNlFWUB9BIRysFmP5Cnx3cK4H6uVPUvGW98HxbDxA4ZFlx3Q 5qaSW2c6Jem8Pri0vgf9szv+kqT6KxdKTRl3Uj5aEGqigTvPWRlsdSqLiJMHQSWw /WbQF2hcWiDFQTVEYE1IDbXaZan0qJlMQjVAt2nUYgQMEe90MDQ1NeWUQh5MsqQz v8yeWGQA1DMakjPY7V+4pch7XnLqT85IVTiekz4Uz2Vz5kxLrUSBBwAIQZo2TXTN //CTNJjsiFXJYEHd7f2YI7k5QQRsmYvxJKjbvPM2vGfaHSxYQDPSWlr/X67khO0g lKXvC0z0xJI= -----END CERTIFICATE-----Generated at Mon May 20 19:59:44 2024 by rpki-client on console-ams.rpki-client.org