$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/72EB65AAC96511EDB2A13779C4F9AE02.roa File: 72EB65AAC96511EDB2A13779C4F9AE02.roa (raw, json) Hash identifier: E02nCWkAo+PVSJURGVs3NZJjYNxtyUzpXf/ghACgkUM= Subject key identifier: 92:E0:AF:16:90:47:52:2A:3C:A9:FC:E4:47:75:A4:44:0C:D9:CB:3B Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0CE3 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/72EB65AAC96511EDB2A13779C4F9AE02.roa Signing time: Sun 24 Sep 2023 18:36:30 +0000 ROA not before: Sun 24 Sep 2023 18:36:30 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 20473 IP address blocks: 2405:84c0:f110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 24 18:36:30 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651081ae-5b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:b5:42:5f:64:6f:19:49:ee:31:ce:d5:77: 4d:35:5f:8c:18:30:1e:7b:12:5d:ea:63:2d:cf:1b: eb:ea:a0:5d:e4:ff:5a:dc:03:36:16:fe:2f:e7:05: e8:ef:70:0a:a3:7d:34:c2:8f:77:d7:f4:e1:9d:c2: 54:8b:b1:08:4a:d3:de:13:75:c4:b7:90:a5:62:17: 75:8b:49:91:44:d2:c4:9e:34:8f:63:45:84:36:e0: cd:38:00:74:ed:24:29:c2:22:17:94:de:b6:bb:12: 74:58:28:41:a6:3e:3a:2d:a6:a9:91:aa:24:dd:8d: 25:c4:9d:bd:39:41:49:dc:f6:99:c2:6d:ba:16:39: 43:eb:ea:0e:d3:ff:b9:96:de:ac:5b:b0:4b:fe:0a: 4f:e2:f3:4f:5e:99:fb:ca:e1:9d:01:c2:a2:64:6b: 21:aa:33:80:68:43:a4:f1:c3:f5:a0:0b:ab:47:8b: 91:2f:19:14:9b:51:79:f2:73:76:63:64:c7:4f:9b: a0:8d:20:3d:85:61:76:17:ad:50:6a:d8:75:94:66: 59:eb:38:99:ab:da:10:bf:0b:f6:98:be:00:f7:c3: bf:d8:53:f0:a6:b4:c0:cf:4b:ff:0b:3d:25:c6:c1: a5:99:b2:77:ea:ba:37:e4:a8:4b:67:15:e1:8e:e2: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E0:AF:16:90:47:52:2A:3C:A9:FC:E4:47:75:A4:44:0C:D9:CB:3B X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/72EB65AAC96511EDB2A13779C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:84c0:f110::/48 Signature Algorithm: sha256WithRSAEncryption 92:34:83:42:ba:f1:86:d0:0a:a7:8d:90:79:9b:91:1d:4a:90: f1:32:3b:f7:a4:9e:9f:18:de:5b:89:f2:96:84:d0:1c:85:f2: 98:32:da:bb:0b:a1:82:cc:f2:22:0b:1c:3c:2d:a9:55:84:62: 9e:e8:00:94:3e:22:a4:c4:fe:3b:19:43:45:5c:9e:95:ca:71: 35:69:10:7c:46:18:3a:32:b3:8f:f9:8b:1b:61:46:04:eb:b2: f7:4b:0d:03:8a:f2:7a:2b:f5:f8:81:81:11:9c:f5:33:d5:69: 49:30:9a:19:ac:57:29:3f:56:44:4a:73:2c:3d:41:6d:98:7f: 4d:c2:7f:43:59:91:f9:f5:18:d8:fd:e3:5a:7d:53:4e:5e:04: 7e:65:43:90:5d:2a:52:6e:92:69:88:98:60:89:05:df:40:51: 4c:e3:3e:2e:ec:a9:f1:a9:de:54:1e:58:5c:ea:d6:3b:cd:bd: 7f:c9:8d:00:d1:7e:6f:9f:80:73:08:bd:7b:eb:b6:fd:be:63: 59:4a:bd:6c:eb:b5:2f:0e:a5:14:5a:d6:0e:2a:d4:5b:78:ee: 1c:3c:9d:e8:21:18:58:bc:df:39:29:a3:6b:4e:34:a5:34:a2: 0a:fc:7e:a2:51:6b:ae:65:3e:03:d5:f5:8e:d3:b1:34:fa:bb: ba:ae:4e:21 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjMwOTI0MTgzNjMwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEwODFhZS01YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoia1Ql9kbxlJ7jHO1XdNNV+MGDAeexJd6mMtzxvr6qBd5P9a3AM2Fv4v5wXo 73AKo300wo931/ThncJUi7EIStPeE3XEt5ClYhd1i0mRRNLEnjSPY0WENuDNOAB0 7SQpwiIXlN62uxJ0WChBpj46Laapkaok3Y0lxJ29OUFJ3PaZwm26FjlD6+oO0/+5 lt6sW7BL/gpP4vNPXpn7yuGdAcKiZGshqjOAaEOk8cP1oAurR4uRLxkUm1F58nN2 Y2THT5ugjSA9hWF2F61Qath1lGZZ6ziZq9oQvwv2mL4A98O/2FPwprTAz0v/Cz0l xsGlmbJ36ro35KhLZxXhjuJZ3QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJLgrxaQ R1IqPKn85Ed1pEQM2cs7MB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvNzJFQjY1QUFD OTY1MTFFREIyQTEzNzc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBYTA8RAwDQYJKoZIhvcNAQELBQADggEBAJI0g0K68YbQ CqeNkHmbkR1KkPEyO/eknp8Y3luJ8paE0ByF8pgy2rsLoYLM8iILHDwtqVWEYp7o AJQ+IqTE/jsZQ0VcnpXKcTVpEHxGGDoys4/5ixthRgTrsvdLDQOK8nor9fiBgRGc 9TPVaUkwmhmsVyk/VkRKcyw9QW2Yf03Cf0NZkfn1GNj941p9U05eBH5lQ5BdKlJu kmmImGCJBd9AUUzjPi7sqfGp3lQeWFzq1jvNvX/JjQDRfm+fgHMIvXvrtv2+Y1lK vWzrtS8OpRRa1g4q1Ft47hw8neghGFi83zkpo2tONKU0ogr8fqJRa65lPgPV9Y7T sTT6u7quTiE= -----END CERTIFICATE-----Generated at Wed Apr 24 21:18:18 2024 by rpki-client on console-ams.rpki-client.org