$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/378C18A43D3D11EAA59A8012C4F9AE02.roa File: 378C18A43D3D11EAA59A8012C4F9AE02.roa (raw, json) Hash identifier: jhJ+DLaX383r/Mr99fWlhZUHzn0oV9vE3Vkat9uP+iw= Subject key identifier: 64:3B:AC:41:75:5F:B6:AB:08:60:15:45:F6:C1:06:A0:6F:AB:26:D1 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0CDF Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/378C18A43D3D11EAA59A8012C4F9AE02.roa Signing time: Sun 24 Sep 2023 18:36:26 +0000 ROA not before: Sun 24 Sep 2023 18:36:26 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 138990 IP address blocks: 2405:84c0:faaa::/48 maxlen: 48 2405:84c0:faab::/48 maxlen: 48 2405:84c0:fade::/48 maxlen: 48 2405:84c0:fbbb::/48 maxlen: 48 2405:84c0:ff90::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 24 18:36:26 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651081aa-6d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:4f:49:32:0d:d2:56:22:ea:e8:4c:6d:f6: 09:c4:23:63:b8:75:ce:f3:25:2f:32:08:84:d6:80: 35:79:03:7c:f3:5e:8a:2c:f7:6d:c9:19:e8:13:eb: 34:de:f9:ca:57:1a:a8:fe:6a:55:d8:c7:1f:9a:50: b4:3c:4a:d4:c9:15:42:99:e5:9a:3a:6a:18:05:fb: 35:34:e0:a4:aa:96:11:7b:8f:e0:12:e8:16:c1:f3: bb:23:f8:73:e4:4e:96:ca:62:57:dc:95:aa:09:aa: c3:90:6b:41:a1:b2:2c:8d:b7:ca:4b:ca:e5:af:2d: 07:84:3a:ce:15:5d:70:ae:c9:89:82:6e:dd:8c:b8: 83:79:25:78:c4:40:0c:4d:e6:c5:2f:d1:4a:a3:9a: b8:bb:c5:28:f6:2f:77:46:a0:d0:65:16:f6:66:22: e1:69:db:fd:6d:2c:d0:1a:0a:5b:cd:49:88:98:36: 4b:15:3a:0a:93:fc:e4:51:9c:ed:74:27:39:20:15: 75:44:f2:f3:b8:5f:84:2d:4b:2a:49:9b:8b:d8:80: 79:15:a7:32:c7:fe:1c:2e:89:68:c7:1d:32:9b:99: a8:21:50:07:a4:66:98:ce:db:57:e1:f1:f9:2d:43: ad:37:54:49:4d:6c:20:be:9a:ee:6c:15:f2:ca:dc: cb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3B:AC:41:75:5F:B6:AB:08:60:15:45:F6:C1:06:A0:6F:AB:26:D1 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/378C18A43D3D11EAA59A8012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:84c0:faaa::/47 2405:84c0:fade::/48 2405:84c0:fbbb::/48 2405:84c0:ff90::/44 Signature Algorithm: sha256WithRSAEncryption 66:cd:ce:ae:4b:25:3a:5f:bf:b8:b3:39:5c:34:dc:c1:3a:4f: 66:1b:9a:cf:ca:0e:1f:ea:5f:59:be:f5:d7:2b:aa:98:40:48: 07:d2:d1:2a:92:d9:83:8e:2b:99:2b:af:90:24:43:b6:a6:79: aa:83:57:2b:58:e6:32:62:f1:a0:5d:f6:bd:7a:d1:a0:f1:b8: 54:f4:d0:ea:f7:67:3a:c2:7a:9f:ba:94:ca:67:da:0a:4b:7c: b7:27:4d:88:80:1a:ab:55:b1:ca:e5:73:c6:6a:ab:14:8e:9d: c1:97:53:74:fc:45:db:d8:ab:1a:41:3c:e9:d3:df:88:3b:8e: ee:43:7c:8c:99:f3:ab:ad:2d:0f:2b:19:4c:80:33:f5:78:55: a5:d6:ef:51:88:49:e5:0c:48:b3:ea:11:47:3c:c6:4e:03:93: 65:f1:56:76:09:e5:bc:d1:2b:40:e8:96:6e:1a:6b:0e:59:d0: 5b:ce:42:1d:74:11:57:ed:7d:a5:b8:ef:25:f1:8e:b9:20:61: 1f:1b:43:4e:c5:92:02:da:af:f9:81:f8:8a:48:b5:46:e8:b8: 29:32:e5:16:88:9b:49:90:1a:60:55:71:09:44:c4:be:f9:27: c5:dd:7d:90:e2:10:c8:73:29:20:d9:a4:fb:6f:1e:42:64:05: 1f:68:ad:20 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjMwOTI0MTgzNjI2WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEwODFhYS02ZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvpPSTIN0lYi6uhMbfYJxCNjuHXO8yUvMgiE1oA1eQN8816KLPdtyRnoE+s0 3vnKVxqo/mpV2McfmlC0PErUyRVCmeWaOmoYBfs1NOCkqpYRe4/gEugWwfO7I/hz 5E6WymJX3JWqCarDkGtBobIsjbfKS8rlry0HhDrOFV1wrsmJgm7djLiDeSV4xEAM TebFL9FKo5q4u8Uo9i93RqDQZRb2ZiLhadv9bSzQGgpbzUmImDZLFToKk/zkUZzt dCc5IBV1RPLzuF+ELUsqSZuL2IB5Facyx/4cLoloxx0ym5moIVAHpGaYzttX4fH5 LUOtN1RJTWwgvprubBXyytzL6QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFGQ7rEF1 X7arCGAVRfbBBqBvqybRMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvMzc4QzE4QTQz RDNEMTFFQUE1OUE4MDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgACMCQDBwEkBYTA+qoDBwAkBYTA+t4DBwAkBYTA+7sDBwQkBYTA/5Aw DQYJKoZIhvcNAQELBQADggEBAGbNzq5LJTpfv7izOVw03ME6T2Ybms/KDh/qX1m+ 9dcrqphASAfS0SqS2YOOK5krr5AkQ7ameaqDVytY5jJi8aBd9r160aDxuFT00Or3 ZzrCep+6lMpn2gpLfLcnTYiAGqtVscrlc8ZqqxSOncGXU3T8RdvYqxpBPOnT34g7 ju5DfIyZ86utLQ8rGUyAM/V4VaXW71GISeUMSLPqEUc8xk4Dk2XxVnYJ5bzRK0Do lm4aaw5Z0FvOQh10EVftfaW47yXxjrkgYR8bQ07FkgLar/mB+IpItUbouCky5RaI m0mQGmBVcQlExL75J8XdfZDiEMhzKSDZpPtvHkJkBR9orSA= -----END CERTIFICATE-----Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org