$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AFF917909DA211EFAAD6D010C4F9AE02.roa File: AFF917909DA211EFAAD6D010C4F9AE02.roa (raw, json) Hash identifier: gFiC3DtRGWlGIx3CJ9LGkYuVyBLoBIb78gnVWul9uiE= Subject key identifier: 4F:CC:C1:8A:CD:96:7D:6D:6A:E5:11:7D:BC:9C:D9:1D:88:40:10:CA Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 47EF Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AFF917909DA211EFAAD6D010C4F9AE02.roa Signing time: Fri 08 Nov 2024 07:25:54 +0000 ROA not before: Fri 08 Nov 2024 07:25:54 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153032 IP address blocks: 2001:df4:8740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18415 (0x47ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Nov 8 07:25:54 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=672dbd01-6679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:44:a9:43:cb:38:b4:f9:98:43:3b:42:94: 23:b9:d0:cb:e7:41:ce:96:69:7d:f3:33:3e:07:bd: bb:e9:67:03:57:98:77:b1:99:0a:f2:6b:4d:84:0c: d5:ab:d9:bc:db:ec:a7:0f:3c:57:84:9c:c0:a9:39: f1:3d:e6:8e:2b:27:fa:37:9b:fa:2a:75:c2:0a:f1: 80:c4:51:36:15:78:01:0d:3a:41:c1:d8:c0:ab:17: bb:85:26:c8:69:5f:6d:11:cd:e0:34:5c:b7:f5:65: 57:96:00:df:dd:9f:4a:87:93:ba:65:54:51:92:18: 94:60:89:92:36:2e:a4:49:ff:f5:d8:27:2e:06:fb: 7c:4c:e4:3c:c4:41:27:7c:36:69:44:24:04:f7:19: 75:75:0f:dc:48:07:a7:76:be:b4:6b:71:23:cd:1c: e5:e2:3e:f5:e6:24:5f:8a:e0:8e:3d:f0:e2:f7:97: 9d:a0:44:a8:8f:4a:2d:e0:a5:04:89:fe:52:db:f7: b4:42:1f:1e:6d:82:ac:5f:76:32:8d:f1:85:e0:8c: 7a:7a:20:aa:e6:3d:d4:c5:03:e4:ea:19:61:13:a0: e8:8b:78:e4:c5:6b:76:32:63:cf:ce:c8:14:d4:ee: 74:67:08:e5:18:6d:63:39:ee:32:e7:45:38:79:f5: b0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CC:C1:8A:CD:96:7D:6D:6A:E5:11:7D:BC:9C:D9:1D:88:40:10:CA X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AFF917909DA211EFAAD6D010C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:8740::/48 Signature Algorithm: sha256WithRSAEncryption 18:54:db:93:23:d3:a2:5d:b5:cb:e3:92:26:56:49:49:8b:62: 5f:79:5f:f9:67:5b:5a:e3:af:f8:e6:a9:ed:38:42:94:2f:18: 79:e4:0a:68:61:7d:98:9d:b3:8a:53:89:10:79:0b:d0:b7:75: 33:a0:08:df:42:47:3e:97:c0:2a:5f:33:37:1d:04:65:14:95: 61:05:d0:b5:f6:b4:fd:01:8b:8e:57:14:f3:ca:68:de:ef:55: a9:c2:d1:12:4b:9c:e5:69:5b:39:dd:11:97:11:91:a0:2e:59: e7:5c:13:f4:b6:e0:be:24:24:bf:33:52:f0:85:27:63:bf:0c: d7:a2:be:fd:d2:78:a1:0d:91:c2:cb:8e:f8:a4:1a:95:31:4c: 83:bb:90:1d:86:23:66:b2:68:80:41:7b:55:58:90:fd:2a:38: e8:db:67:be:cc:0e:57:b4:6d:70:62:7b:61:fb:6e:69:f6:1b: 0a:51:37:c9:11:d8:7d:26:58:b3:b8:14:ba:b8:c9:26:53:34: e9:72:b5:28:63:2d:77:e0:68:dd:32:dd:ae:ea:0f:06:c7:5b: 23:15:5e:2d:ca:f6:58:bc:7f:14:f6:e4:ae:95:7f:9d:b3:a6: 60:9d:e5:e1:7b:fc:66:08:b6:38:ef:c8:8b:7a:61:82:98:e4: 6b:6c:2c:83 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICR+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMTA4MDcyNTU0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJkYmQwMS02Njc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthlEqUPLOLT5mEM7QpQjudDL50HOlml98zM+B7276WcDV5h3sZkK8mtNhAzV q9m82+ynDzxXhJzAqTnxPeaOKyf6N5v6KnXCCvGAxFE2FXgBDTpBwdjAqxe7hSbI aV9tEc3gNFy39WVXlgDf3Z9Kh5O6ZVRRkhiUYImSNi6kSf/12CcuBvt8TOQ8xEEn fDZpRCQE9xl1dQ/cSAendr60a3EjzRzl4j715iRfiuCOPfDi95edoESoj0ot4KUE if5S2/e0Qh8ebYKsX3YyjfGF4Ix6eiCq5j3UxQPk6hlhE6Doi3jkxWt2MmPPzsgU 1O50ZwjlGG1jOe4y50U4efWwTQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFE/MwYrN ln1tauURfbyc2R2IQBDKMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUZGOTE3OTA5 REEyMTFFRkFBRDZEMDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30h0AwDQYJKoZIhvcNAQELBQADggEBABhU25Mj06Jd tcvjkiZWSUmLYl95X/lnW1rjr/jmqe04QpQvGHnkCmhhfZids4pTiRB5C9C3dTOg CN9CRz6XwCpfMzcdBGUUlWEF0LX2tP0Bi45XFPPKaN7vVanC0RJLnOVpWzndEZcR kaAuWedcE/S24L4kJL8zUvCFJ2O/DNeivv3SeKENkcLLjvikGpUxTIO7kB2GI2ay aIBBe1VYkP0qOOjbZ77MDle0bXBie2H7bmn2GwpRN8kR2H0mWLO4FLq4ySZTNOly tShjLXfgaN0y3a7qDwbHWyMVXi3K9li8fxT25K6Vf52zpmCd5eF7/GYItjjvyIt6 YYKY5GtsLIM= -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org