$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa File: 800D4798721B11EF81654E68C4F9AE02.roa (raw, json) Hash identifier: SWNmuJ2jo5FR18Vxt9pYnxlkKPiCeQISRO5rsbrTr1g= Subject key identifier: DA:A2:6E:8C:3C:66:88:30:2C:78:50:82:47:2D:65:11:73:54:36:86 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 4F Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa Signing time: Fri 13 Sep 2024 21:59:51 +0000 ROA not before: Fri 13 Sep 2024 21:59:51 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 45575 IP address blocks: 2001:3c8:900c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:59:51 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4b5d7-c51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:40:98:54:75:6c:d5:71:9f:8e:f0:5f:0c:fe: e1:cf:4b:d1:ba:86:c2:c3:ee:8c:b7:d0:72:bf:ab: 88:4b:00:e7:dc:8e:f4:aa:03:c7:fb:71:b8:7f:f7: 42:16:c6:6d:03:61:da:dd:ee:ac:41:15:27:c5:fb: 72:65:7f:2a:38:53:40:30:13:69:0b:0c:68:00:9e: 9b:ae:11:f7:36:c9:08:fb:68:1f:54:10:a0:65:a0: fe:c1:27:1f:55:44:d0:19:3f:4c:dd:35:bd:21:c5: 8c:dd:d9:e2:75:b8:3b:a7:3a:4b:84:90:fc:d7:b4: 35:28:6b:72:46:cb:52:b6:aa:1c:b7:18:e8:ad:c3: 98:18:7b:89:ac:9a:bd:25:78:1c:85:9b:09:90:4b: 38:47:88:d2:e2:11:96:f1:b8:f0:16:38:cd:82:f9: 65:6f:aa:21:ce:34:57:14:f5:19:24:a2:7b:e3:09: 07:51:54:dc:3b:fc:ee:ab:02:ff:4a:6f:52:97:fb: d3:03:6b:3b:81:ee:34:3f:47:a4:a2:04:ea:c1:42: af:03:e0:24:ff:43:c8:84:a5:66:5b:86:af:f3:9e: a3:b7:91:7c:ce:2a:89:fc:c1:27:1c:28:8d:9b:12: 21:ad:e4:4c:ee:c5:d5:38:f0:91:9f:8f:f5:be:eb: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A2:6E:8C:3C:66:88:30:2C:78:50:82:47:2D:65:11:73:54:36:86 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:3c8:900c::/48 Signature Algorithm: sha256WithRSAEncryption 97:f5:48:8d:28:83:d5:11:44:ff:0b:43:57:b7:71:a3:11:9c: 41:c9:96:06:a7:2d:99:3e:d9:a4:80:94:85:17:0d:e0:96:b2: a1:cf:38:67:8f:3f:5f:9d:17:2b:9e:30:06:c4:a1:ce:0b:ce: c8:4e:5b:3d:6c:3a:8a:99:08:57:82:c0:19:30:b1:cc:91:54: fd:30:f3:0e:cb:bf:b4:b9:b2:7e:73:c7:33:79:58:b2:6d:72: 49:25:33:81:db:65:79:81:b8:7b:3d:cc:fe:b5:47:86:6c:d2: d7:07:46:b7:16:51:38:dd:03:b9:26:cf:49:07:af:81:26:a8: 1e:01:c3:eb:21:91:68:32:41:46:1c:21:46:10:38:48:07:e7: cc:4e:2b:07:a7:d0:c2:7c:3b:36:c6:b0:43:56:b2:b0:e8:86: b2:8b:cb:c5:4b:a7:dd:c3:a6:d2:dd:13:f9:d4:1a:6a:bf:11: 89:f3:c2:d8:66:c3:fe:3e:9a:69:c6:b5:b2:01:c0:49:e5:e5: 4b:46:92:81:c1:bb:e6:27:f0:63:93:38:ab:33:e2:ac:79:d8: 30:42:7c:fb:01:69:83:f1:c8:09:6a:eb:e7:6e:19:ce:5f:2e: 2a:01:17:be:e2:71:c0:37:e3:b2:ed:b9:fd:8a:1b:d3:af:cf: 5b:2e:db:3d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTU5NTFaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRiNWQ3LWM1MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqQJhUdWzVcZ+O8F8M/uHPS9G6hsLD7oy30HK/q4hLAOfcjvSqA8f7cbh/90IW xm0DYdrd7qxBFSfF+3Jlfyo4U0AwE2kLDGgAnpuuEfc2yQj7aB9UEKBloP7BJx9V RNAZP0zdNb0hxYzd2eJ1uDunOkuEkPzXtDUoa3JGy1K2qhy3GOitw5gYe4msmr0l eByFmwmQSzhHiNLiEZbxuPAWOM2C+WVvqiHONFcU9RkkonvjCQdRVNw7/O6rAv9K b1KX+9MDazuB7jQ/R6SiBOrBQq8D4CT/Q8iEpWZbhq/znqO3kXzOKon8wSccKI2b EiGt5EzuxdU48JGfj/W+63ytAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQU2qJujDxm iDAseFCCRy1lEXNUNoYwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi84MDBENDc5ODcy MUIxMUVGODE2NTRFNjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABA8iQDDANBgkqhkiG9w0BAQsFAAOCAQEAl/VIjSiD1RFE /wtDV7dxoxGcQcmWBqctmT7ZpICUhRcN4Jayoc84Z48/X50XK54wBsShzgvOyE5b PWw6ipkIV4LAGTCxzJFU/TDzDsu/tLmyfnPHM3lYsm1ySSUzgdtleYG4ez3M/rVH hmzS1wdGtxZRON0DuSbPSQevgSaoHgHD6yGRaDJBRhwhRhA4SAfnzE4rB6fQwnw7 NsawQ1aysOiGsovLxUun3cOm0t0T+dQaar8RifPC2GbD/j6aaca1sgHASeXlS0aS gcG75ifwY5M4qzPirHnYMEJ8+wFpg/HICWrr524Zzl8uKgEXvuJxwDfjsu25/Yob 06/PWy7bPQ== -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org