$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8628801A92A111EFBB885B27C4F9AE02.roa File: 8628801A92A111EFBB885B27C4F9AE02.roa (raw, json) Hash identifier: ofFhqkUPLfW4/eDjy6pcePI0P9DR073gsGN7DmLobXw= Subject key identifier: D9:9D:6A:15:BC:35:06:09:76:0A:F2:94:6E:A4:AE:05:7B:4F:23:DC Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 47BC Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8628801A92A111EFBB885B27C4F9AE02.roa Signing time: Fri 25 Oct 2024 07:19:51 +0000 ROA not before: Fri 25 Oct 2024 07:19:51 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153017 IP address blocks: 2001:df4:71c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18364 (0x47bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 25 07:19:51 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=671b4697-3eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:61:9c:32:0f:5f:25:85:c9:a4:00:90:8f: 2e:71:c4:0d:8b:2d:3d:f7:e4:74:75:d6:93:35:c2: ea:ed:6a:2c:e5:2b:ab:a7:4d:6e:08:6d:32:e0:82: 64:07:c0:70:91:69:87:5d:3f:ef:d5:5c:53:a8:ec: bb:2a:cd:7d:1b:49:80:18:c8:87:13:ad:59:b6:a9: 64:cd:b5:7f:b5:ee:18:fc:68:7c:16:c9:ac:9d:57: 9a:fd:9c:ac:b6:6a:f6:10:61:7f:73:73:fc:d8:3f: c0:bd:d9:88:4c:97:be:c6:75:a8:82:30:33:a0:4c: 3c:f2:31:74:3a:04:c0:5c:ac:4c:2f:91:9c:38:cd: b4:8e:df:d6:45:7b:70:98:f4:f2:2d:3b:82:47:ab: 3d:0b:80:22:6c:9e:cf:5f:6a:4a:78:96:cc:af:d3: 6b:92:d6:a6:b0:10:0c:6f:43:6f:f8:60:3f:44:97: 05:31:b4:7d:7a:38:55:69:a0:bc:0d:ad:7e:f5:02: af:f7:44:1b:fb:d1:ed:51:a8:cd:2f:9b:6f:0d:0a: cb:83:90:28:0e:14:05:5c:bf:48:c9:9c:e7:19:db: 2b:9e:25:ba:95:51:48:41:6e:47:6d:32:03:ba:42: e3:5d:ca:6c:a4:33:bb:87:d0:b3:de:3c:f9:69:12: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9D:6A:15:BC:35:06:09:76:0A:F2:94:6E:A4:AE:05:7B:4F:23:DC X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8628801A92A111EFBB885B27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:71c0::/48 Signature Algorithm: sha256WithRSAEncryption a1:98:6b:dd:bc:a7:aa:a8:ae:07:ab:37:07:57:27:cd:19:05: bf:b3:1d:45:f9:39:ba:8a:e0:dc:46:57:a1:6d:61:e1:fa:56: ba:af:81:72:1f:38:38:7a:41:dc:57:f0:e8:8f:e9:b8:1e:1d: 86:40:e7:b4:d2:76:5d:a9:38:c5:9e:04:28:5f:a2:06:ae:87: 4c:a3:41:56:6e:32:e3:b7:a7:bf:82:06:5d:6e:06:df:59:00: 5d:d4:46:34:3e:e7:f5:13:f2:14:f0:4a:bb:81:73:dd:47:f4: ec:da:cf:d5:c6:90:0d:9d:b7:1f:2f:a0:ad:cc:94:ef:64:bd: 1e:1c:61:b5:2f:57:ec:a0:4b:63:d4:17:9b:07:16:ad:ac:73: 1f:e7:bb:5a:b8:65:37:c6:8d:62:50:3b:5b:78:43:37:69:73: f5:95:b0:e9:75:93:e6:1d:75:90:74:7a:60:5d:14:1e:be:b6: 16:c6:24:53:de:f8:84:1e:6c:6a:17:d5:d4:6f:8d:98:08:b7: 01:44:9e:9a:5b:54:f2:33:00:76:d1:9c:e6:65:19:f9:21:8f: c5:89:3e:06:fd:45:1d:bc:7a:39:49:ba:40:66:ab:23:38:8c: e3:cb:3c:86:2d:a4:06:68:57:57:63:16:37:59:24:c1:38:ba: 74:da:60:26 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICR7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMDI1MDcxOTUxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFiNDY5Ny0zZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36RhnDIPXyWFyaQAkI8uccQNiy099+R0ddaTNcLq7Wos5Surp01uCG0y4IJk B8BwkWmHXT/v1VxTqOy7Ks19G0mAGMiHE61ZtqlkzbV/te4Y/Gh8FsmsnVea/Zys tmr2EGF/c3P82D/AvdmITJe+xnWogjAzoEw88jF0OgTAXKxML5GcOM20jt/WRXtw mPTyLTuCR6s9C4AibJ7PX2pKeJbMr9NrktamsBAMb0Nv+GA/RJcFMbR9ejhVaaC8 Da1+9QKv90Qb+9HtUajNL5tvDQrLg5AoDhQFXL9IyZznGdsrniW6lVFIQW5HbTID ukLjXcpspDO7h9Cz3jz5aRITvwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNmdahW8 NQYJdgrylG6krgV7TyPcMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODYyODgwMUE5 MkExMTFFRkJCODg1QjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30ccAwDQYJKoZIhvcNAQELBQADggEBAKGYa928p6qo rgerNwdXJ80ZBb+zHUX5ObqK4NxGV6FtYeH6VrqvgXIfODh6QdxX8OiP6bgeHYZA 57TSdl2pOMWeBChfogauh0yjQVZuMuO3p7+CBl1uBt9ZAF3URjQ+5/UT8hTwSruB c91H9Ozaz9XGkA2dtx8voK3MlO9kvR4cYbUvV+ygS2PUF5sHFq2scx/nu1q4ZTfG jWJQO1t4Qzdpc/WVsOl1k+YddZB0emBdFB6+thbGJFPe+IQebGoX1dRvjZgItwFE nppbVPIzAHbRnOZlGfkhj8WJPgb9RR28ejlJukBmqyM4jOPLPIYtpAZoV1djFjdZ JME4unTaYCY= -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:01 2024 by rpki-client on console-ams.rpki-client.org