$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/AC5C9A2E73A911ECB0D2F575C4F9AE02.roa File: AC5C9A2E73A911ECB0D2F575C4F9AE02.roa (raw, json) Hash identifier: GZ94utyG0+cR5BvdAQg5qH2TXKRYPQEQHyo67CJZGVM= Subject key identifier: C4:2B:27:07:80:A9:7C:8B:D4:EF:2B:1E:88:88:C1:F6:30:3D:07:56 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 0F69 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/AC5C9A2E73A911ECB0D2F575C4F9AE02.roa Signing time: Wed 16 Aug 2023 18:16:35 +0000 ROA not before: Wed 16 Aug 2023 18:16:34 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 7721 IP address blocks: 2404:f4c0:6660::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3945 (0xf69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 16 18:16:34 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64dd1282-99ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3e:bd:44:c4:0a:12:4c:33:16:72:3f:f2:97: 1c:56:7b:a9:03:17:4e:13:58:9e:27:18:c8:c9:7d: 9c:04:d1:2d:d1:d8:e7:0d:72:c5:30:33:a1:4d:07: c4:da:34:d0:dc:3b:01:de:c8:d9:c1:b9:0c:67:68: f1:d5:5c:37:01:6d:c8:0c:59:1a:cf:89:bf:cd:87: 26:e6:aa:53:b4:31:a1:9a:3f:db:89:47:f0:dc:a0: 04:be:fe:9b:89:b3:45:92:98:2f:41:5d:2b:e8:1b: a6:17:ae:26:56:c9:03:ce:a5:4a:b3:0c:33:d7:68: 9b:f5:df:a9:b5:bf:f2:68:2c:51:e4:3a:15:27:5b: 2f:c8:09:27:72:80:c5:bf:4e:85:f9:70:4e:2e:2e: 9a:31:b0:ff:46:07:9f:7c:23:bf:25:97:04:44:18: 93:3d:0a:0c:41:b1:8f:b3:e7:95:01:a7:b4:b4:52: ee:4d:be:36:f7:bd:64:b9:03:42:7b:54:11:29:78: 87:e7:98:47:73:78:d6:2d:89:3b:0d:4c:41:35:39: da:50:92:a9:cc:4a:b0:dc:eb:f7:ea:c6:05:ac:97: 40:ae:5f:21:43:b6:c9:8e:91:24:ae:bb:9d:91:71: c4:1f:ee:51:93:a6:e9:33:99:f8:b3:b2:f2:b2:cf: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2B:27:07:80:A9:7C:8B:D4:EF:2B:1E:88:88:C1:F6:30:3D:07:56 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/AC5C9A2E73A911ECB0D2F575C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f4c0:6660::/44 Signature Algorithm: sha256WithRSAEncryption 8f:40:0a:96:b6:05:93:b3:13:22:0a:a4:fc:40:3a:cc:94:6e: 5b:84:e1:b8:ab:96:4b:38:e0:e0:76:55:c9:b3:2c:71:1d:cf: 7c:8d:9e:43:68:67:ac:e2:98:c8:34:df:29:43:cc:4c:e2:6f: 51:65:40:ab:9c:dc:bf:2f:b3:4d:ab:6d:01:67:52:1d:bb:f6: 25:dc:72:db:89:d1:31:b0:44:67:8d:8c:27:dc:93:95:70:04: 32:dd:89:2e:24:37:95:f1:fb:6f:1c:fb:c2:03:bc:3b:ed:30: bc:d9:50:91:9d:32:88:ae:49:66:55:24:d5:6a:ab:ec:56:bb: 22:80:79:3e:23:e9:ee:38:e5:33:6b:34:27:fd:fa:3a:14:ba: af:5f:ef:db:e5:bd:fa:76:17:7c:6c:e3:dc:2b:76:4c:c8:92: 86:9a:fe:d5:3b:e3:55:1c:d5:70:72:be:a4:7b:c4:84:c6:d3: d4:c3:2d:39:8b:44:13:b7:b0:43:62:8f:03:9d:8b:b9:4f:f1: 64:3b:d6:ec:b5:e8:ab:ea:48:20:94:6a:e4:3a:08:b3:4b:aa: fd:a8:1f:69:08:83:4a:6d:b3:4d:13:4c:34:48:76:88:7d:a3: e0:f7:a4:c7:db:49:7c:fc:75:a6:aa:45:40:94:07:b5:fb:68: 2d:20:1a:2c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICD2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjMwODE2MTgxNjM0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkMTI4Mi05OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmT69RMQKEkwzFnI/8pccVnupAxdOE1ieJxjIyX2cBNEt0djnDXLFMDOhTQfE 2jTQ3DsB3sjZwbkMZ2jx1Vw3AW3IDFkaz4m/zYcm5qpTtDGhmj/biUfw3KAEvv6b ibNFkpgvQV0r6BumF64mVskDzqVKswwz12ib9d+ptb/yaCxR5DoVJ1svyAkncoDF v06F+XBOLi6aMbD/RgeffCO/JZcERBiTPQoMQbGPs+eVAae0tFLuTb42971kuQNC e1QRKXiH55hHc3jWLYk7DUxBNTnaUJKpzEqw3Ov36sYFrJdArl8hQ7bJjpEkrrud kXHEH+5Rk6bpM5n4s7Lyss/VLQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMQrJweA qXyL1O8rHoiIwfYwPQdWMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvQUM1QzlBMkU3 M0E5MTFFQ0IwRDJGNTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBPTAZmAwDQYJKoZIhvcNAQELBQADggEBAI9ACpa2BZOz EyIKpPxAOsyUbluE4birlks44OB2VcmzLHEdz3yNnkNoZ6zimMg03ylDzEzib1Fl QKuc3L8vs02rbQFnUh279iXcctuJ0TGwRGeNjCfck5VwBDLdiS4kN5Xx+28c+8ID vDvtMLzZUJGdMoiuSWZVJNVqq+xWuyKAeT4j6e445TNrNCf9+joUuq9f79vlvfp2 F3xs49wrdkzIkoaa/tU741Uc1XByvqR7xITG09TDLTmLRBO3sENijwOdi7lP8WQ7 1uy16KvqSCCUauQ6CLNLqv2oH2kIg0pts00TTDRIdoh9o+D3pMfbSXz8daaqRUCU B7X7aC0gGiw= -----END CERTIFICATE-----Generated at Wed May 22 20:42:48 2024 by rpki-client on console-fra.rpki-client.org