$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6C4F76EE588C11EE9B3D7F2EC4F9AE02.roa File: 6C4F76EE588C11EE9B3D7F2EC4F9AE02.roa (raw, json) Hash identifier: rSoZmv4tvO8ib70lMotME7NPRdZicvtigpecpIj1DkE= Subject key identifier: 95:50:5E:FE:2C:7C:B0:1A:3C:A5:27:B2:D8:42:25:8E:2D:3A:8C:8C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 45FF Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6C4F76EE588C11EE9B3D7F2EC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:34:45 +0000 ROA not before: Thu 05 Sep 2024 03:34:45 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150868 IP address blocks: 2401:1ea0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17919 (0x45ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:34:45 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d926d4-90b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:9a:cc:79:c0:b3:bf:e8:b3:e1:f5:0b:90: 50:6e:74:9a:9b:b8:3d:f2:4b:25:20:94:55:07:35: 93:ad:6e:54:39:67:31:fd:3a:0c:70:bc:28:62:47: 6b:8c:f4:67:9d:5f:7a:e1:5a:02:18:74:69:4e:8a: d2:04:34:6d:0f:bd:ab:06:f1:90:37:f8:63:6a:79: 7f:d2:49:a2:02:8c:47:98:1a:35:91:f5:60:e7:31: 7a:de:2a:ed:18:0c:24:b4:a2:c6:47:d8:6f:65:49: c2:4c:31:21:06:b1:7e:c5:8a:fa:3c:c2:50:50:45: 63:1b:61:9e:95:85:da:61:03:ef:59:b5:54:6e:99: 36:e0:31:e8:d9:9c:14:6f:f2:38:49:03:86:74:4e: 1b:0d:9a:0e:da:ca:54:d6:24:cf:1b:f1:d7:b4:f7: 7a:5c:a1:20:3b:0e:03:51:a8:d5:f4:e9:24:2e:ca: 35:ad:96:d3:01:10:69:48:f9:1d:4f:93:40:b9:32: 6d:4f:5b:bc:7a:c3:d8:fd:76:4e:f1:2f:d9:76:71: 1a:78:85:9d:05:fd:da:f8:2a:ce:25:07:55:02:e4: 15:f2:48:f0:2e:90:3c:05:1e:3f:f0:c6:78:da:9f: dd:e9:86:10:4b:df:b6:49:7e:c8:e0:e0:36:20:38: a2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:50:5E:FE:2C:7C:B0:1A:3C:A5:27:B2:D8:42:25:8E:2D:3A:8C:8C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6C4F76EE588C11EE9B3D7F2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:1ea0::/48 Signature Algorithm: sha256WithRSAEncryption 0a:fa:5a:9e:e9:6a:ad:74:6e:c2:18:b5:e9:4c:a2:ea:8a:6b: 50:a7:21:0d:72:41:32:80:cd:5b:14:18:e0:41:bd:4f:fd:47: 8d:60:7f:85:71:f3:c4:a1:ea:62:a2:4a:57:08:88:63:47:2f: 72:ad:dc:6d:48:21:c8:32:e5:a2:b2:62:ec:61:0b:24:46:1c: 82:42:25:3c:4a:fe:d3:6c:1d:93:b9:3e:fb:5b:4c:5b:7c:c2: aa:b4:81:52:21:2b:8b:15:91:52:b6:b7:5f:41:e9:ba:b2:4f: 3b:7f:3b:98:73:74:5f:50:d7:b4:fe:86:27:55:a8:4a:98:23: a4:3c:be:66:80:4d:47:0c:c8:11:78:ae:f9:83:43:e3:e9:c6: 05:f2:92:07:6b:1e:a3:15:ea:d0:22:71:e7:07:70:03:f8:27: 90:4d:e4:de:8c:29:96:98:e7:3a:1e:c9:b7:16:e9:be:67:ae: 93:2f:25:a3:24:8f:d8:3f:92:28:36:ab:f7:81:2f:6b:87:2a: 92:29:0c:c0:eb:29:43:7d:3e:22:95:c7:c1:46:76:e1:d8:82: c2:c4:07:82:21:4e:f5:fc:b3:29:03:9e:18:d0:b2:c6:9e:74: 65:f9:66:7e:2d:d4:66:5b:06:62:00:4a:dc:f0:01:6a:16:bb: aa:f3:7b:55 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICRf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNDQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjZkNC05MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucWazHnAs7/os+H1C5BQbnSam7g98kslIJRVBzWTrW5UOWcx/ToMcLwoYkdr jPRnnV964VoCGHRpTorSBDRtD72rBvGQN/hjanl/0kmiAoxHmBo1kfVg5zF63irt GAwktKLGR9hvZUnCTDEhBrF+xYr6PMJQUEVjG2GelYXaYQPvWbVUbpk24DHo2ZwU b/I4SQOGdE4bDZoO2spU1iTPG/HXtPd6XKEgOw4DUajV9OkkLso1rZbTARBpSPkd T5NAuTJtT1u8esPY/XZO8S/ZdnEaeIWdBf3a+CrOJQdVAuQV8kjwLpA8BR4/8MZ4 2p/d6YYQS9+2SX7I4OA2IDiiUwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJVQXv4s fLAaPKUnsthCJY4tOoyMMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNkM0Rjc2RUU1 ODhDMTFFRTlCM0Q3RjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAR6gAAAwDQYJKoZIhvcNAQELBQADggEBAAr6Wp7paq10 bsIYtelMouqKa1CnIQ1yQTKAzVsUGOBBvU/9R41gf4Vx88Sh6mKiSlcIiGNHL3Kt 3G1IIcgy5aKyYuxhCyRGHIJCJTxK/tNsHZO5PvtbTFt8wqq0gVIhK4sVkVK2t19B 6bqyTzt/O5hzdF9Q17T+hidVqEqYI6Q8vmaATUcMyBF4rvmDQ+PpxgXykgdrHqMV 6tAicecHcAP4J5BN5N6MKZaY5zoeybcW6b5nrpMvJaMkj9g/kig2q/eBL2uHKpIp DMDrKUN9PiKVx8FGduHYgsLEB4IhTvX8sykDnhjQssaedGX5Zn4t1GZbBmIAStzw AWoWu6rze1U= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org