$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5136F1F8F36311EEB061347AC4F9AE02.roa File: 5136F1F8F36311EEB061347AC4F9AE02.roa (raw, json) Hash identifier: pDQ+F/NXUDow6Daq3H3OCxfJSSwFOIe+NI/iGg5Bfr8= Subject key identifier: A9:E2:36:80:3F:A6:F4:84:DC:25:06:09:71:94:2F:8A:26:D7:AF:FC Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4624 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5136F1F8F36311EEB061347AC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:35:18 +0000 ROA not before: Thu 05 Sep 2024 03:35:18 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151872 IP address blocks: 2001:df3:e4c0::/48 maxlen: 48 2001:df3:e8c0::/48 maxlen: 48 2001:df4:19c0::/48 maxlen: 48 2001:df4:1cc0::/48 maxlen: 48 2401:8ce0::/48 maxlen: 48 2401:9320::/48 maxlen: 48 2401:9760::/48 maxlen: 48 2401:9920::/48 maxlen: 48 2401:9a60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17956 (0x4624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:35:18 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d926f5-7ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8b:93:03:61:12:7a:8d:09:45:68:82:27:fc: 2c:88:ef:95:28:27:f1:4e:6f:c8:83:5d:a9:85:97: 7b:cd:69:60:df:80:e7:e2:31:a7:98:77:d2:f1:5b: 51:d8:d5:1b:c8:85:0d:d8:5a:70:d0:33:ab:e4:9f: 5e:b9:ca:25:f2:30:01:e3:b7:69:a8:09:c8:c1:20: 12:ee:74:b9:53:82:4d:54:81:80:cb:fe:37:1b:86: 56:c4:31:17:3d:5c:43:ba:b1:22:54:6c:92:c3:d7: 59:da:d5:7b:9d:36:56:46:f0:a2:7a:22:55:8c:dc: 53:9b:a2:78:81:0a:03:1e:fd:b4:32:44:7c:aa:37: 55:6c:25:52:42:86:55:b9:80:8a:bd:fc:78:ef:48: 9b:d9:63:3f:61:83:b3:9f:38:d6:8f:39:24:93:87: d0:8e:cb:95:62:8a:b9:30:b5:20:18:77:74:45:6d: 45:4f:a4:35:81:a8:34:48:35:ba:8e:1d:f4:59:f3: d1:94:85:75:31:75:42:bd:0f:49:cf:96:89:6d:21: 52:7d:f7:3d:4e:00:22:91:06:f4:ed:d7:a6:6a:c5: 0c:f9:4a:f6:42:11:91:f0:e2:84:b0:6f:aa:c3:56: 10:7e:b7:4d:20:20:28:f7:c3:34:54:96:44:40:05: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:36:80:3F:A6:F4:84:DC:25:06:09:71:94:2F:8A:26:D7:AF:FC X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5136F1F8F36311EEB061347AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:e4c0::/48 2001:df3:e8c0::/48 2001:df4:19c0::/48 2001:df4:1cc0::/48 2401:8ce0::/48 2401:9320::/48 2401:9760::/48 2401:9920::/48 2401:9a60::/48 Signature Algorithm: sha256WithRSAEncryption 3b:69:4a:63:6a:de:8e:8b:d0:8b:f8:76:9d:a6:7d:4b:58:b9: 22:a9:47:75:83:19:33:13:6f:68:6b:28:32:c7:ba:f7:c2:c8: 77:1b:5b:bb:55:6b:5b:df:23:e9:e5:d2:d3:60:57:4e:0e:3e: 12:8b:71:92:6a:a3:4d:db:b9:0b:2b:76:75:aa:da:7e:f0:c6: 2d:35:99:6b:9f:42:d0:73:aa:f4:9d:fa:36:19:5c:8e:3a:a9: 39:0f:f1:3e:5d:47:cc:52:75:6e:2e:57:00:93:4b:04:84:c0: d0:63:f4:2a:f8:19:1c:7f:3f:4d:5a:97:1e:7e:9c:5a:70:6a: 1c:bc:a8:bb:31:5d:79:4c:c3:04:80:1b:ff:50:33:07:f1:fb: b2:5e:ce:f9:d5:f4:a4:5b:8b:c8:99:8e:cc:72:ba:a5:4d:5a: 8d:6a:53:65:e3:8b:e9:fb:c2:df:ff:73:3d:a5:3c:79:f3:4f: ce:2b:34:d7:77:6d:6a:64:b0:d6:63:32:a0:c3:88:98:c5:3a: 5e:f4:43:92:62:86:9e:58:17:f2:d9:a2:bf:75:57:f0:75:d4: 8b:73:81:1a:04:06:37:ab:2c:d0:b3:f4:5c:a9:ed:27:1a:96: e3:f7:f1:db:b8:aa:f6:da:35:12:42:ae:3d:24:d3:fc:49:7b: e9:d7:79:70 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICRiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTE4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjZmNS03ZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YuTA2ESeo0JRWiCJ/wsiO+VKCfxTm/Ig12phZd7zWlg34Dn4jGnmHfS8VtR 2NUbyIUN2Fpw0DOr5J9eucol8jAB47dpqAnIwSAS7nS5U4JNVIGAy/43G4ZWxDEX PVxDurEiVGySw9dZ2tV7nTZWRvCieiJVjNxTm6J4gQoDHv20MkR8qjdVbCVSQoZV uYCKvfx470ib2WM/YYOznzjWjzkkk4fQjsuVYoq5MLUgGHd0RW1FT6Q1gag0SDW6 jh30WfPRlIV1MXVCvQ9Jz5aJbSFSffc9TgAikQb07demasUM+Ur2QhGR8OKEsG+q w1YQfrdNICAo98M0VJZEQAVd0QIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFKniNoA/ pvSE3CUGCXGUL4om16/8MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNTEzNkYxRjhG MzYzMTFFRUIwNjEzNDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMFcEAgACMFEDBwAgAQ3z5MADBwAgAQ3z6MADBwAgAQ30GcADBwAgAQ30HMAD BwAkAYzgAAADBwAkAZMgAAADBwAkAZdgAAADBwAkAZkgAAADBwAkAZpgAAAwDQYJ KoZIhvcNAQELBQADggEBADtpSmNq3o6L0Iv4dp2mfUtYuSKpR3WDGTMTb2hrKDLH uvfCyHcbW7tVa1vfI+nl0tNgV04OPhKLcZJqo03buQsrdnWq2n7wxi01mWufQtBz qvSd+jYZXI46qTkP8T5dR8xSdW4uVwCTSwSEwNBj9Cr4GRx/P01alx5+nFpwahy8 qLsxXXlMwwSAG/9QMwfx+7JezvnV9KRbi8iZjsxyuqVNWo1qU2Xji+n7wt//cz2l PHnzT84rNNd3bWpksNZjMqDDiJjFOl70Q5Jihp5YF/LZor91V/B11ItzgRoEBjer LNCz9Fyp7ScaluP38du4qvbaNRJCrj0k0/xJe+nXeXA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:05:38 2024 by rpki-client on console-ams.rpki-client.org