$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B07EF7408DDD11EA8B5F824BC4F9AE02.roa File: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (raw, json) Hash identifier: YRo3hjxCYnd1BVTPrF9Ue5zvcbRa1PupLscfISvCyEk= Subject key identifier: 41:1D:28:24:45:B6:7D:0F:6E:E5:82:F5:69:4E:30:A4:47:D6:30:BE Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0CDE Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B07EF7408DDD11EA8B5F824BC4F9AE02.roa Signing time: Sun 24 Sep 2023 18:36:26 +0000 ROA not before: Sun 24 Sep 2023 18:36:26 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 138405 IP address blocks: 2405:84c0:ff70::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3294 (0xcde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Sep 24 18:36:26 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651081a9-8315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:9e:08:82:1f:94:96:9d:d3:1a:94:a8:91: 76:ce:34:e0:f4:d6:4c:a1:05:3f:31:39:9e:97:de: f2:70:d2:0d:53:f9:0b:4b:24:90:63:6d:d1:ab:3c: 6f:07:4c:af:65:a8:56:27:bf:71:76:6e:28:45:f1: 24:11:6f:f2:94:db:67:0a:17:8b:ec:52:ce:a9:c8: 24:b7:a6:76:0a:7c:a9:5f:5e:25:0d:e3:9c:27:26: a3:d6:56:1d:d4:c8:96:8f:84:12:00:c2:e9:b2:d3: ab:76:60:3f:c8:6c:39:41:41:ce:01:51:35:d2:3f: 0a:17:99:c8:b3:c0:f0:2e:4a:35:4e:b4:55:a7:5a: 7e:c6:cc:b1:61:f5:8c:34:56:2e:a8:1e:18:f4:71: 04:a4:53:24:2c:aa:69:af:9b:d9:b3:88:27:40:f2: 7b:28:44:40:f3:0a:de:73:92:31:98:c6:68:6b:d3: 86:2c:54:11:5e:ec:e6:12:76:b4:39:75:5d:a9:58: df:ef:94:fc:94:c3:ae:38:19:f9:59:ce:5b:81:12: e5:af:92:6d:68:b4:fe:92:b1:ce:71:44:ab:3f:1e: e2:14:fe:7e:07:4b:0b:1f:8f:c5:ff:2c:63:04:be: 9b:1d:50:f9:db:31:ea:24:47:0e:10:f7:9b:16:9d: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1D:28:24:45:B6:7D:0F:6E:E5:82:F5:69:4E:30:A4:47:D6:30:BE X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B07EF7408DDD11EA8B5F824BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:84c0:ff70::/44 Signature Algorithm: sha256WithRSAEncryption 00:1d:14:3a:9b:de:e1:d6:62:db:db:1f:eb:40:71:6d:fd:d9: 52:96:a6:48:0b:b9:06:6e:39:d7:86:1e:98:ef:82:85:58:1e: de:26:af:af:ae:ce:6c:6a:2f:93:ae:13:e7:f0:f8:e2:1b:b9: 27:d7:69:57:8e:17:da:81:b3:7c:1a:84:bc:95:f7:28:32:fb: cf:cd:6e:7b:70:07:c3:a7:61:3a:25:49:19:92:a0:3d:eb:b6: a7:04:06:3f:10:36:13:bb:fd:12:0d:b3:e3:73:85:6c:cd:d9: 32:5d:82:21:2b:f9:90:e5:38:f5:31:82:25:2e:d0:02:62:a7: ef:b4:c9:02:50:c8:ee:5c:34:02:f3:1c:83:b8:38:0b:ed:f6: 3e:cf:5d:ae:a9:35:50:ba:3f:41:53:a3:5a:e1:89:71:d9:6e: 5a:49:cf:20:5b:32:01:35:51:81:cb:7f:e4:3b:0d:21:0d:6b: 8b:80:5f:ff:63:5c:0c:12:9c:3d:a0:19:22:55:05:72:3a:f7: 1c:a9:fe:0a:39:19:2b:7d:28:c8:99:6b:72:5b:66:f3:37:f0: da:a2:35:eb:22:21:04:21:95:d5:19:0a:72:4d:e7:47:a1:f9: 25:4c:50:20:3a:6c:e3:95:b4:82:52:1b:75:4b:3d:51:fd:66: 90:18:4e:6e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjMwOTI0MTgzNjI2WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEwODFhOS04MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2WeCIIflJad0xqUqJF2zjTg9NZMoQU/MTmel97ycNINU/kLSySQY23Rqzxv B0yvZahWJ79xdm4oRfEkEW/ylNtnCheL7FLOqcgkt6Z2CnypX14lDeOcJyaj1lYd 1MiWj4QSAMLpstOrdmA/yGw5QUHOAVE10j8KF5nIs8DwLko1TrRVp1p+xsyxYfWM NFYuqB4Y9HEEpFMkLKppr5vZs4gnQPJ7KERA8wrec5IxmMZoa9OGLFQRXuzmEna0 OXVdqVjf75T8lMOuOBn5Wc5bgRLlr5JtaLT+krHOcUSrPx7iFP5+B0sLH4/F/yxj BL6bHVD52zHqJEcOEPebFp3GfQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEEdKCRF tn0PbuWC9WlOMKRH1jC+MB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvQjA3RUY3NDA4 REREMTFFQThCNUY4MjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBYTA/3AwDQYJKoZIhvcNAQELBQADggEBAAAdFDqb3uHW YtvbH+tAcW392VKWpkgLuQZuOdeGHpjvgoVYHt4mr6+uzmxqL5OuE+fw+OIbuSfX aVeOF9qBs3wahLyV9ygy+8/NbntwB8OnYTolSRmSoD3rtqcEBj8QNhO7/RINs+Nz hWzN2TJdgiEr+ZDlOPUxgiUu0AJip++0yQJQyO5cNALzHIO4OAvt9j7PXa6pNVC6 P0FTo1rhiXHZblpJzyBbMgE1UYHLf+Q7DSENa4uAX/9jXAwSnD2gGSJVBXI69xyp /go5GSt9KMiZa3JbZvM38NqiNesiIQQhldUZCnJN50eh+SVMUCA6bOOVtIJSG3VL PVH9ZpAYTm4= -----END CERTIFICATE-----Generated at Thu May 16 20:25:49 2024 by rpki-client on console-ams.rpki-client.org