$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa File: BA0AE43CF6D811EE99425F2EC4F9AE02.roa (raw, json) Hash identifier: qKjzd7rj2I84f856bz/dUjA25/rLqI/adfDLhcU2J/A= Subject key identifier: 3C:B3:E7:F6:CE:2F:49:49:F2:AD:D3:C4:EF:F9:46:22:0C:76:28:2A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 462A Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:35:22 +0000 ROA not before: Thu 05 Sep 2024 03:35:22 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151903 IP address blocks: 2001:df3:63c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17962 (0x462a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:35:22 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d926fa-e67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:11:ec:08:9b:c2:3c:27:7d:07:1f:ee:79:a5: 33:53:a7:eb:14:4b:fd:b7:fa:15:8f:ba:cd:a9:cd: e3:df:15:1c:10:d1:fa:cf:53:33:7a:ed:85:55:0c: a7:ca:4e:c0:09:41:f2:07:c2:35:18:f8:2a:a9:53: 42:a6:1b:3a:81:03:ef:0a:5b:5c:2a:b2:56:cd:2a: f0:bb:33:a1:3a:db:ec:1c:ca:25:6f:be:96:c9:bf: 81:8b:fa:82:f5:26:d9:e7:91:74:b8:2b:ff:59:c6: 4a:88:7f:7c:b2:f8:97:d8:f1:51:d1:d3:56:5d:7a: 28:b3:91:e4:05:57:70:a6:65:da:21:d4:82:82:30: 4d:c0:21:dc:d6:7d:b4:f3:74:1c:7e:26:4b:10:75: b4:23:3b:63:7e:6a:c3:ef:1e:ea:88:06:bb:d3:78: a9:a3:05:45:b3:e4:de:9c:a9:5c:e0:03:ab:49:06: b2:f2:9e:88:6b:33:4a:5d:db:c8:78:e1:8a:98:1b: 84:f4:25:7d:0b:e0:97:c0:20:7d:96:d8:db:8c:a5: ba:a8:1c:0f:99:b0:51:d4:ac:a9:05:93:06:12:44: 26:0a:2d:b3:67:10:0f:c1:3d:1d:26:07:9a:d4:3a: b0:bd:83:9d:cf:31:8b:a3:21:fc:c4:7d:6f:f4:9e: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B3:E7:F6:CE:2F:49:49:F2:AD:D3:C4:EF:F9:46:22:0C:76:28:2A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:63c0::/48 Signature Algorithm: sha256WithRSAEncryption 39:01:0b:ce:a3:19:56:8b:a8:fb:31:44:f3:09:8d:f2:4e:46: a9:fb:a7:fd:3d:40:11:e4:71:ff:a9:02:2e:11:4b:c1:1d:13: 22:03:28:52:0f:be:be:ff:0e:89:db:90:2b:f7:57:c5:86:ed: cd:90:c9:b6:03:fd:dd:4a:d5:ce:1b:ac:29:18:0e:ce:60:83: ee:49:30:88:57:d8:41:89:01:06:c6:ff:c4:4c:65:ce:fc:f8: 52:7c:3e:f3:a3:51:e3:63:05:cd:2f:15:d3:66:3c:70:a5:9e: f7:4d:95:7c:ce:3a:5f:6c:6b:76:9b:19:21:f0:ca:0f:e1:ae: 04:b4:6a:5c:40:af:28:fd:86:c2:2a:47:e2:28:22:0f:32:90: 03:94:61:f1:9f:f4:0e:93:80:92:c9:41:77:ff:9a:08:ec:42: 7c:b1:ca:de:bc:5d:3e:ab:f7:08:41:70:68:b2:5b:a6:ee:97: a3:3f:f5:47:05:f0:3d:44:ae:41:59:ba:1b:86:24:11:d9:5a: f0:99:f1:bc:63:04:ae:8a:de:bb:90:a3:f3:d3:22:30:e5:2e: 5d:64:c6:b9:54:4e:c0:9d:2f:37:55:44:61:bc:02:37:65:49: 8b:49:14:ea:8d:08:3e:c2:b1:8b:86:b2:22:bc:6a:e7:cc:ce: 22:18:2b:8a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICRiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTIyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjZmYS1lNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8BHsCJvCPCd9Bx/ueaUzU6frFEv9t/oVj7rNqc3j3xUcENH6z1Mzeu2FVQyn yk7ACUHyB8I1GPgqqVNCphs6gQPvCltcKrJWzSrwuzOhOtvsHMolb76Wyb+Bi/qC 9SbZ55F0uCv/WcZKiH98sviX2PFR0dNWXXoos5HkBVdwpmXaIdSCgjBNwCHc1n20 83QcfiZLEHW0IztjfmrD7x7qiAa703ipowVFs+TenKlc4AOrSQay8p6IazNKXdvI eOGKmBuE9CV9C+CXwCB9ltjbjKW6qBwPmbBR1KypBZMGEkQmCi2zZxAPwT0dJgea 1DqwvYOdzzGLoyH8xH1v9J7PZQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDyz5/bO L0lJ8q3TxO/5RiIMdigqMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkEwQUU0M0NG NkQ4MTFFRTk5NDI1RjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zY8AwDQYJKoZIhvcNAQELBQADggEBADkBC86jGVaL qPsxRPMJjfJORqn7p/09QBHkcf+pAi4RS8EdEyIDKFIPvr7/DonbkCv3V8WG7c2Q ybYD/d1K1c4brCkYDs5gg+5JMIhX2EGJAQbG/8RMZc78+FJ8PvOjUeNjBc0vFdNm PHClnvdNlXzOOl9sa3abGSHwyg/hrgS0alxAryj9hsIqR+IoIg8ykAOUYfGf9A6T gJLJQXf/mgjsQnyxyt68XT6r9whBcGiyW6bul6M/9UcF8D1ErkFZuhuGJBHZWvCZ 8bxjBK6K3ruQo/PTIjDlLl1kxrlUTsCdLzdVRGG8AjdlSYtJFOqNCD7CsYuGsiK8 aufMziIYK4o= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org