$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/2152FB1650C511EAB566FE61C4F9AE02.roa File: 2152FB1650C511EAB566FE61C4F9AE02.roa (raw, json) Hash identifier: x4rh6Trwm4/dWF70u3v8rZyob/8My9yAPzZ1VvZJoj8= Subject key identifier: F9:E7:55:FE:CE:C8:00:6C:0F:BB:17:EB:E9:F1:63:3A:33:04:2A:F4 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0CE0 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/2152FB1650C511EAB566FE61C4F9AE02.roa Signing time: Sun 24 Sep 2023 18:36:27 +0000 ROA not before: Sun 24 Sep 2023 18:36:27 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 139618 IP address blocks: 2001:df1:4580::/48 maxlen: 48 2405:84c0:9000::/44 maxlen: 44 2405:84c0:9010::/44 maxlen: 44 2405:84c0:9020::/44 maxlen: 44 2405:84c0:9100::/44 maxlen: 44 2405:84c0:9110::/44 maxlen: 44 2405:84c0:9120::/44 maxlen: 44 2405:84c0:ff80::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 24 18:36:27 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651081ab-d12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f8:a4:25:2a:91:62:21:e3:df:7e:9e:2c:de: ab:cd:ee:97:5b:64:f0:c0:b2:44:36:c4:a9:8e:39: 0d:12:81:eb:1f:95:c5:15:99:42:34:78:17:f2:cd: 00:78:ae:2d:0e:d2:4f:a0:66:03:6a:b7:ca:ab:32: 29:d8:25:f6:59:77:cd:d6:25:ab:87:2c:7d:84:71: 7f:92:71:12:e9:02:97:7b:92:c8:26:c1:d4:7c:5c: 0e:58:5d:89:ea:30:6b:58:6a:9a:3d:02:01:b3:50: 8a:d7:9f:1c:55:fc:20:1a:e2:d8:1b:db:7b:79:eb: ca:84:fb:d6:b0:e0:e2:52:06:a2:93:6c:fa:be:0d: 5c:34:c5:07:67:1e:73:99:fb:ff:2a:c6:62:71:48: 47:f0:82:d4:4b:6c:a8:09:ac:ab:ea:1e:60:51:6e: 67:3e:c9:b4:3f:78:1f:c5:37:1f:7f:d5:10:c9:c6: 48:0c:61:02:22:64:37:c9:4f:90:d8:1f:2d:5e:0f: ec:a1:28:b2:4a:58:36:61:4e:b5:66:52:77:b5:87: 7e:b7:19:60:0f:4d:b9:9f:d3:cd:98:19:3f:7d:ff: 9e:8f:fc:80:0c:e3:21:df:9b:d6:4b:2c:53:9f:94: 83:a2:b2:c0:27:6e:70:e7:be:54:7b:64:c6:b2:01: d0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E7:55:FE:CE:C8:00:6C:0F:BB:17:EB:E9:F1:63:3A:33:04:2A:F4 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/2152FB1650C511EAB566FE61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:4580::/48 2405:84c0:9000::-2405:84c0:902f:ffff:ffff:ffff:ffff:ffff 2405:84c0:9100::-2405:84c0:912f:ffff:ffff:ffff:ffff:ffff 2405:84c0:ff80::/44 Signature Algorithm: sha256WithRSAEncryption 11:3b:9d:c4:9a:6e:5e:d9:b6:36:aa:b4:8c:9f:14:48:7e:f5: 24:e5:35:99:d1:46:11:17:ce:ff:80:30:0d:22:5d:95:4f:a7: fe:f9:c2:62:58:7d:82:fa:33:94:d5:31:aa:51:90:4a:26:d7: d4:a3:50:02:8d:54:3d:10:f5:92:42:d2:c3:88:7c:5e:44:0f: 52:60:46:52:25:35:05:dd:dd:9e:0a:3e:d7:30:12:cf:dc:c7: 5d:57:d4:a3:0e:c6:98:57:57:ab:c1:fe:06:15:e0:16:56:45: 02:57:93:c7:e1:6d:31:86:b3:cc:3a:fc:0c:31:6c:7b:5d:37: c5:d2:3b:e7:49:67:7b:ed:2b:5e:8c:33:7a:b4:73:2d:88:33: 57:8c:27:3b:39:2e:e7:60:6e:0e:62:f7:71:99:53:71:fd:0c: 42:67:13:bd:39:65:cf:f4:38:2c:ef:c8:9a:c4:40:77:53:a7: 9b:ca:2f:a0:ba:e5:61:18:da:63:02:5a:75:67:46:c1:b5:3d: 1c:37:9b:db:e3:a9:4d:4b:b5:25:fd:76:f3:31:56:b1:a1:5a: 1d:c0:78:c5:8e:6d:66:76:fb:73:5c:87:cd:a0:71:fb:af:4b: b9:54:4c:e7:23:a1:f4:d3:77:04:53:00:2d:78:e4:92:be:8c: e1:ea:3a:fc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjMwOTI0MTgzNjI3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEwODFhYi1kMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/ikJSqRYiHj336eLN6rze6XW2TwwLJENsSpjjkNEoHrH5XFFZlCNHgX8s0A eK4tDtJPoGYDarfKqzIp2CX2WXfN1iWrhyx9hHF/knES6QKXe5LIJsHUfFwOWF2J 6jBrWGqaPQIBs1CK158cVfwgGuLYG9t7eevKhPvWsODiUgaik2z6vg1cNMUHZx5z mfv/KsZicUhH8ILUS2yoCayr6h5gUW5nPsm0P3gfxTcff9UQycZIDGECImQ3yU+Q 2B8tXg/soSiySlg2YU61ZlJ3tYd+txlgD025n9PNmBk/ff+ej/yADOMh35vWSyxT n5SDorLAJ25w575Ue2TGsgHQdQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFPnnVf7O yABsD7sX6+nxYzozBCr0MB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvMjE1MkZCMTY1 MEM1MTFFQUI1NjZGRTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgACMDgDBwAgAQ3xRYAwEQMGBCQFhMCQAwcEJAWEwJAgMBEDBgAkBYTA kQMHBCQFhMCRIAMHBCQFhMD/gDANBgkqhkiG9w0BAQsFAAOCAQEAETudxJpuXtm2 Nqq0jJ8USH71JOU1mdFGERfO/4AwDSJdlU+n/vnCYlh9gvozlNUxqlGQSibX1KNQ Ao1UPRD1kkLSw4h8XkQPUmBGUiU1Bd3dngo+1zASz9zHXVfUow7GmFdXq8H+BhXg FlZFAleTx+FtMYazzDr8DDFse103xdI750lne+0rXowzerRzLYgzV4wnOzku52Bu DmL3cZlTcf0MQmcTvTllz/Q4LO/ImsRAd1Onm8ovoLrlYRjaYwJadWdGwbU9HDeb 2+OpTUu1Jf128zFWsaFaHcB4xY5tZnb7c1yHzaBx+69LuVRM5yOh9NN3BFMALXjk kr6M4eo6/A== -----END CERTIFICATE-----Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org