$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/07870504F7DA11EE95AA666EC4F9AE02.roa File: 07870504F7DA11EE95AA666EC4F9AE02.roa (raw, json) Hash identifier: znbQOgkoJp9KGrpKm+tl2yMi7AYzFk4bdF6FhcZT5KE= Subject key identifier: D8:43:11:DC:C8:45:B7:D2:93:09:12:7D:C6:64:1A:5F:10:2F:26:7A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 462D Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/07870504F7DA11EE95AA666EC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:35:25 +0000 ROA not before: Thu 05 Sep 2024 03:35:25 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151913 IP address blocks: 2001:df3:9dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17965 (0x462d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:35:25 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d926fd-e6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:e7:b8:95:b3:50:a2:e5:54:4c:0a:98:fb: 8b:e8:5a:e1:9f:6b:fe:a2:7a:bc:3d:ee:84:84:b2: b1:a0:54:5f:c5:fc:19:78:34:3a:6f:d0:0b:db:c5: 29:84:5c:58:e8:01:8a:34:cc:7d:90:87:b6:49:cb: 3c:c9:b1:84:57:71:c3:af:ed:a8:05:eb:20:65:94: 8f:dc:80:b1:ed:48:4b:0d:2d:51:76:f9:c4:c6:91: f0:52:9f:d9:79:ab:a1:b2:70:0f:b8:51:6a:b2:f7: 5b:81:3e:ac:d6:31:b4:0a:11:2b:12:a5:76:c7:1c: b4:be:91:47:40:41:c0:27:5a:22:d7:c9:c5:49:fa: 8b:e0:5c:f8:b8:3d:68:d2:d5:c0:76:73:9d:6f:bd: f1:13:06:51:db:50:ae:ea:8e:70:96:4c:23:10:10: 98:14:73:8b:9b:2c:0b:5c:af:d8:78:a3:cd:3a:75: 74:a7:2f:f7:a6:f2:a3:00:47:4c:fc:e4:d0:cc:cb: b6:44:c2:8c:4e:6f:ce:33:53:ca:29:c3:f0:3d:b9: 84:25:47:63:49:05:82:e6:f7:0f:b3:1a:3d:df:3e: b1:13:32:f7:f6:14:94:c0:5a:f1:91:15:a0:37:f8: 5f:d2:54:2f:7c:c5:24:96:08:c4:ea:0a:1a:f6:c2: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:43:11:DC:C8:45:B7:D2:93:09:12:7D:C6:64:1A:5F:10:2F:26:7A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/07870504F7DA11EE95AA666EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:9dc0::/48 Signature Algorithm: sha256WithRSAEncryption 29:91:c6:56:d3:51:77:4c:ee:75:43:a9:59:3c:8e:26:70:67: 46:7d:33:a8:53:25:25:b1:83:18:e9:32:86:46:90:4f:41:fd: 1b:76:5d:b9:e5:da:e5:a9:fb:a8:d1:7e:ab:06:e4:07:8e:4b: ea:38:4d:de:46:79:d6:13:78:cc:e3:1b:e3:e3:5d:6b:f3:65: d2:c2:30:87:e7:66:41:9b:9b:2d:21:b6:77:f0:1b:07:96:3a: b8:12:5f:a3:37:19:75:98:8a:0a:0c:77:78:d7:cf:89:ff:5e: 77:4b:48:31:72:ed:e1:fe:6c:45:71:db:66:73:91:db:0d:ae: 3f:83:b4:28:05:7e:c6:08:70:f5:f0:49:e6:47:97:1b:87:7f: 44:01:a3:05:02:7c:73:ef:d9:bd:67:2c:89:c5:5a:2f:5b:9e: 87:01:87:df:d6:c5:cd:c6:b4:ab:1e:49:3d:b9:98:6d:20:e7: cf:47:b7:b0:90:66:4d:f1:7b:4b:4a:e4:c4:d2:82:27:98:97: 08:11:97:68:64:8b:1c:2f:4b:a8:48:7a:2f:d6:d0:35:29:9c: 24:cc:28:9d:f6:3d:df:25:a0:eb:31:c2:3b:df:82:b0:0a:25: 25:f9:34:1f:10:fa:7f:b4:8f:4b:3b:cc:65:42:32:53:3c:13: 25:c2:c6:20 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICRi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTI1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjZmZC1lNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYznuJWzUKLlVEwKmPuL6Frhn2v+onq8Pe6EhLKxoFRfxfwZeDQ6b9AL28Up hFxY6AGKNMx9kIe2Scs8ybGEV3HDr+2oBesgZZSP3ICx7UhLDS1RdvnExpHwUp/Z eauhsnAPuFFqsvdbgT6s1jG0ChErEqV2xxy0vpFHQEHAJ1oi18nFSfqL4Fz4uD1o 0tXAdnOdb73xEwZR21Cu6o5wlkwjEBCYFHOLmywLXK/YeKPNOnV0py/3pvKjAEdM /OTQzMu2RMKMTm/OM1PKKcPwPbmEJUdjSQWC5vcPsxo93z6xEzL39hSUwFrxkRWg N/hf0lQvfMUklgjE6goa9sIyywIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNhDEdzI RbfSkwkSfcZkGl8QLyZ6MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMDc4NzA1MDRG N0RBMTFFRTk1QUE2NjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zncAwDQYJKoZIhvcNAQELBQADggEBACmRxlbTUXdM 7nVDqVk8jiZwZ0Z9M6hTJSWxgxjpMoZGkE9B/Rt2Xbnl2uWp+6jRfqsG5AeOS+o4 Td5GedYTeMzjG+PjXWvzZdLCMIfnZkGbmy0htnfwGweWOrgSX6M3GXWYigoMd3jX z4n/XndLSDFy7eH+bEVx22ZzkdsNrj+DtCgFfsYIcPXwSeZHlxuHf0QBowUCfHPv 2b1nLInFWi9bnocBh9/Wxc3GtKseST25mG0g589Ht7CQZk3xe0tK5MTSgieYlwgR l2hkixwvS6hIei/W0DUpnCTMKJ32Pd8loOsxwjvfgrAKJSX5NB8Q+n+0j0s7zGVC MlM8EyXCxiA= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:31 2024 by rpki-client on console-ams.rpki-client.org