$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/E0AAD7E6722011EFA2865162C4F9AE02.roa File: E0AAD7E6722011EFA2865162C4F9AE02.roa (raw, json) Hash identifier: Amjc+RqLY6ndf/e9hKYXZF14rD1i4YDMBul90D7Br8w= Subject key identifier: C9:35:88:29:75:62:A4:35:70:FB:66:CD:B2:2D:91:BE:CA:D9:DA:75 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 5C Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/E0AAD7E6722011EFA2865162C4F9AE02.roa Signing time: Fri 13 Sep 2024 22:38:21 +0000 ROA not before: Fri 13 Sep 2024 22:38:21 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 138685 IP address blocks: 2001:3c8:243::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 22:38:21 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4bedc-916b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:10:9c:cd:e2:19:e0:75:64:a8:b6:52:ed: 98:d5:af:d9:6d:50:88:a4:3c:0e:2e:0a:bb:c1:24: ca:21:4e:7a:84:11:74:32:2b:1c:11:9d:ac:17:00: 85:13:80:f4:8c:6e:76:36:74:9f:a7:fb:08:d2:f0: 22:0a:a6:6d:69:f0:72:6e:1a:0c:fc:b7:bd:f5:1d: 81:d7:48:58:3d:2c:da:05:ba:c3:56:5f:63:62:78: 70:fb:05:21:d5:0f:0a:0e:1b:64:b9:0e:10:65:ce: 67:9b:c5:f6:1c:99:76:aa:14:ba:da:74:04:41:dd: ba:8b:d7:a4:0a:93:03:9c:b3:f1:05:d9:47:90:61: c3:c8:62:ec:11:15:31:cf:7d:a0:64:f3:e4:c6:da: 03:ba:0c:ed:b7:b0:96:5c:63:b6:b1:b1:ed:b5:d5: ea:3d:dd:2f:e5:09:99:b0:26:4f:55:94:20:f8:c8: cd:c2:be:5e:34:9e:cd:43:d0:bb:62:00:26:8d:17: a7:7b:e0:f3:f1:7b:da:45:4c:ac:55:dc:91:f6:6b: 8b:5e:4c:c9:06:be:8c:c2:48:4d:fb:38:fa:fe:58: 85:44:e5:6f:bf:15:18:75:1d:00:e8:2b:a6:00:97: bd:0b:6a:87:61:31:88:82:ed:7f:e8:4a:30:75:df: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:35:88:29:75:62:A4:35:70:FB:66:CD:B2:2D:91:BE:CA:D9:DA:75 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/E0AAD7E6722011EFA2865162C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:3c8:243::/48 Signature Algorithm: sha256WithRSAEncryption 9f:be:70:dd:4e:93:22:16:d7:1e:2e:58:2f:b2:1c:2b:f9:3f: e5:f2:a2:91:6e:92:ce:69:16:26:6b:5c:8e:52:0f:6d:ae:ba: ad:24:8d:f6:4c:03:80:e1:b5:b7:9f:56:0e:28:82:50:2d:f4: ca:c2:e4:2e:16:04:ab:e4:d0:3a:2d:dc:59:2f:d5:01:67:83: 67:f4:60:b8:ae:1c:bf:a8:87:34:87:c2:32:dc:3d:69:ab:3d: 5a:43:6e:a8:86:21:6f:01:9f:5a:c9:0b:99:d4:be:70:b7:ae: 99:43:58:83:01:e7:56:bb:74:f9:7d:d3:36:98:35:f3:65:a4: cc:d3:ba:6b:30:07:8b:3a:34:97:49:d4:5b:26:21:33:20:34: e9:51:b6:65:09:bc:18:5d:bc:54:4a:07:74:1d:7a:6d:3a:d6: 77:38:13:53:46:95:f9:15:86:38:a6:44:26:ca:7a:24:aa:42: 7f:1a:c6:33:2f:d8:79:02:f2:2c:66:bc:d5:21:f5:c2:9c:92: 8f:c3:43:6e:05:b9:1f:e9:71:40:ca:33:0e:3e:ac:a5:3f:72: 77:a9:00:28:31:21:43:0a:c6:e8:01:d9:1f:4f:f0:65:d6:57: 68:a3:d9:46:6d:b6:2a:79:26:73:48:05:99:2c:b8:72:03:3a: 84:bf:8b:85 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMjM4MjFaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRiZWRjLTkxNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIUxCczeIZ4HVkqLZS7ZjVr9ltUIikPA4uCrvBJMohTnqEEXQyKxwRnawXAIUT gPSMbnY2dJ+n+wjS8CIKpm1p8HJuGgz8t731HYHXSFg9LNoFusNWX2NieHD7BSHV DwoOG2S5DhBlzmebxfYcmXaqFLradARB3bqL16QKkwOcs/EF2UeQYcPIYuwRFTHP faBk8+TG2gO6DO23sJZcY7axse211eo93S/lCZmwJk9VlCD4yM3Cvl40ns1D0Lti ACaNF6d74PPxe9pFTKxV3JH2a4teTMkGvozCSE37OPr+WIVE5W+/FRh1HQDoK6YA l70LaodhMYiC7X/oSjB1372FAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUyTWIKXVi pDVw+2bNsi2RvsrZ2nUwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9FMEFBRDdFNjcy MjAxMUVGQTI4NjUxNjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABA8gCQzANBgkqhkiG9w0BAQsFAAOCAQEAn75w3U6TIhbX Hi5YL7IcK/k/5fKikW6SzmkWJmtcjlIPba66rSSN9kwDgOG1t59WDiiCUC30ysLk LhYEq+TQOi3cWS/VAWeDZ/RguK4cv6iHNIfCMtw9aas9WkNuqIYhbwGfWskLmdS+ cLeumUNYgwHnVrt0+X3TNpg182WkzNO6azAHizo0l0nUWyYhMyA06VG2ZQm8GF28 VEoHdB16bTrWdzgTU0aV+RWGOKZEJsp6JKpCfxrGMy/YeQLyLGa81SH1wpySj8ND bgW5H+lxQMozDj6spT9yd6kAKDEhQwrG6AHZH0/wZdZXaKPZRm22Knkmc0gFmSy4 cgM6hL+LhQ== -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:48 2024 by rpki-client on console-fra.rpki-client.org