$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/3F9C6E6619B811EF8628ED1FC4F9AE02.roa File: 3F9C6E6619B811EF8628ED1FC4F9AE02.roa (raw, json) Hash identifier: 4/E6bIAWccbduiKBNMiuytAWBn9Dzd2Sjrg/gYO20a0= Subject key identifier: D3:83:D5:32:DF:C5:A4:BC:7A:B4:48:27:D9:2E:58:5A:40:3F:7D:39 Certificate issuer: /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Certificate serial: 0B Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/3F9C6E6619B811EF8628ED1FC4F9AE02.roa Signing time: Fri 24 May 2024 10:27:40 +0000 ROA not before: Fri 24 May 2024 10:27:40 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152647 IP address blocks: 202.61.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Validity Not Before: May 24 10:27:40 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66506b9c-7fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:5b:49:05:e3:1f:68:a5:50:ba:81:54:b2: 3b:fb:80:3e:72:f8:d9:7b:15:58:b8:d7:4c:4a:93: 3a:e8:6d:dc:ba:e2:2a:a7:45:1c:0b:1f:8e:d0:2c: 6c:c4:05:ad:d5:4b:3b:11:60:e7:bc:c5:49:ff:c3: 7f:a9:d6:fc:77:44:0e:0a:32:76:8f:aa:95:50:b2: 6b:84:e3:01:04:f2:9b:bf:14:02:25:77:ad:32:f4: 63:d5:57:ec:0a:5a:46:df:45:4f:b7:1c:b0:9c:b3: 11:54:65:6a:b8:16:8b:06:3d:3f:24:78:5a:ce:91: ca:e6:3d:53:fc:dc:e7:81:b1:42:5b:b3:2d:41:55: f3:c9:46:82:2e:78:03:07:ee:df:0c:14:af:dd:26: c9:5c:25:64:55:da:14:b2:d1:d0:9c:ac:44:d5:ad: 39:f4:84:cf:f8:c7:1d:49:34:5d:d9:49:71:c2:5f: 67:7d:8b:d8:b9:d0:b5:7d:5e:88:a7:e6:24:94:53: 91:4a:f8:82:20:0e:76:ad:ab:95:7f:8c:c6:15:18: 04:ee:3c:75:ed:68:10:e6:30:9f:28:5f:23:42:4a: f8:59:7f:09:ba:81:da:b7:09:da:a9:38:d6:6b:d0: c9:59:96:c8:f2:40:01:52:b0:be:82:de:8d:93:dd: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:83:D5:32:DF:C5:A4:BC:7A:B4:48:27:D9:2E:58:5A:40:3F:7D:39 X509v3 Authority Key Identifier: keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/3F9C6E6619B811EF8628ED1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.61.112.0/23 Signature Algorithm: sha256WithRSAEncryption 56:4b:6a:d4:f9:5d:a4:74:58:a1:8c:ae:cf:bc:d7:ac:ef:53: e3:08:57:43:71:49:24:0a:08:97:94:cc:be:7b:33:b7:0f:ea: a1:9b:e8:5d:af:87:48:d9:1b:76:05:6e:9a:15:b4:b4:68:12: 52:a0:4b:1a:ef:ae:c8:51:db:ec:7e:90:ee:78:ba:5a:1e:a2: a1:b3:b0:63:18:cb:db:a7:0e:78:4c:12:f1:98:a8:20:58:36: e7:c4:8d:f3:43:80:f9:04:7b:2b:0f:cd:a0:ab:61:0c:2e:ec: e4:91:db:b3:24:0a:9e:ef:62:58:38:34:14:40:63:51:8f:58: b8:7f:dc:3c:6f:24:68:de:6e:25:db:e4:05:84:df:12:f6:8d: 4d:ea:bc:3c:65:fd:d3:22:19:98:6d:b1:3a:17:c0:33:9b:c5: a6:a5:0c:9e:6a:d2:e2:18:0b:bc:e1:7a:ee:22:29:09:6f:1e: 6d:21:cf:26:88:30:61:11:f3:9a:0a:46:20:0f:aa:93:0d:24: 02:db:34:03:e7:ac:01:53:fa:d8:45:83:00:94:38:af:0e:d9: 4e:fa:6f:45:50:af:37:79:37:92:89:ff:3b:f5:95:0d:2f:83: 98:a9:83:53:50:40:37:e1:8c:e6:54:40:4c:98:2a:aa:c5:bc: e6:21:91:b3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDQ3NTExMC8GA1UEBRMoNDEwNDNEQUMxODlFMjJGRjdGNUFFRDgxMDdBMzIzMkY0 MTkwQUYzRTAeFw0yNDA1MjQxMDI3NDBaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NTA2YjljLTdmYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZM1tJBeMfaKVQuoFUsjv7gD5y+Nl7FVi410xKkzrobdy64iqnRRwLH47QLGzE Ba3VSzsRYOe8xUn/w3+p1vx3RA4KMnaPqpVQsmuE4wEE8pu/FAIld60y9GPVV+wK WkbfRU+3HLCcsxFUZWq4FosGPT8keFrOkcrmPVP83OeBsUJbsy1BVfPJRoIueAMH 7t8MFK/dJslcJWRV2hSy0dCcrETVrTn0hM/4xx1JNF3ZSXHCX2d9i9i50LV9Xoin 5iSUU5FK+IIgDnatq5V/jMYVGATuPHXtaBDmMJ8oXyNCSvhZfwm6gdq3CdqpONZr 0MlZlsjyQAFSsL6C3o2T3UdVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU04PVMt/F pLx6tEgn2S5YWkA/fTkwHwYDVR0jBBgwFoAUQQQ9rBieIv9/Wu2BB6MjL0GQrz4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NDc1LzgzMjQ3MERDMThD RjExRUY4RTNGMjQ1N0M0RjlBRTAyL1FRUTlyQmllSXY5X1d1MkJCNk1qTDBHUXJ6 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVFROXJCaWVJdjlfV3UyQkI2TWpMMEdRcno0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ3NS84MzI0NzBEQzE4Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi8zRjlDNkU2NjE5 QjgxMUVGODYyOEVEMUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAco9cDANBgkqhkiG9w0BAQsFAAOCAQEAVktq1PldpHRYoYyu z7zXrO9T4whXQ3FJJAoIl5TMvnsztw/qoZvoXa+HSNkbdgVumhW0tGgSUqBLGu+u yFHb7H6Q7ni6Wh6iobOwYxjL26cOeEwS8ZioIFg258SN80OA+QR7Kw/NoKthDC7s 5JHbsyQKnu9iWDg0FEBjUY9YuH/cPG8kaN5uJdvkBYTfEvaNTeq8PGX90yIZmG2x OhfAM5vFpqUMnmrS4hgLvOF67iIpCW8ebSHPJogwYRHzmgpGIA+qkw0kAts0A+es AVP62EWDAJQ4rw7ZTvpvRVCvN3k3kon/O/WVDS+DmKmDU1BAN+GM5lRATJgqqsW8 5iGRsw== -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:31 2024 by rpki-client on console-fra.rpki-client.org