$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa File: E69ABF78033911EFBE28FC1FC4F9AE02.roa (raw, json) Hash identifier: K3rDHWPEAJEer2ozScBARYUC6OZeQAKfAz9YzKjyZUE= Subject key identifier: B7:F8:A2:63:B1:CE:A5:FF:3E:9A:75:B5:B0:4B:96:A6:23:79:A1:27 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 031A Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa Signing time: Sat 04 May 2024 13:18:09 +0000 ROA not before: Sat 04 May 2024 13:18:09 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 151951 IP address blocks: 2400:5a60:2::/48 maxlen: 48 2400:5a60:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: May 4 13:18:09 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66363591-ff65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:4c:6c:78:84:5e:c5:bb:c5:d0:08:28:a7: a7:ad:b2:3e:37:02:f8:94:b7:85:08:c2:b7:d7:0f: bd:90:6b:00:19:fd:2f:86:48:2f:ee:65:8a:a5:29: af:ed:38:04:dc:2e:9f:9c:28:7e:01:90:9b:c1:66: ac:c7:b7:7b:82:02:f3:0d:83:aa:8b:54:b7:a5:f2: 92:72:c1:13:ae:e6:a1:32:a1:67:d2:6a:c8:f6:b6: d0:93:6c:55:b7:61:94:f4:85:bc:9d:af:e5:45:ad: 3f:31:32:18:b9:4e:04:2e:9a:b1:95:d6:bd:f3:5d: 24:3b:ac:bd:c9:39:d6:4c:8a:06:34:09:73:dd:dd: 4b:95:26:5a:6f:26:7a:06:c5:e5:cd:ee:46:89:fb: 7f:a9:09:ba:df:16:ed:e3:ad:71:65:d5:cb:37:a4: 84:15:e9:fb:2e:af:41:19:46:79:61:1a:cc:5d:bf: 50:f6:b1:7d:50:17:3d:cb:1c:68:a9:64:9a:8f:66: 22:09:7e:81:9f:29:bd:a6:93:0d:37:f8:36:8e:5c: c8:e1:bf:2e:33:c4:7f:fc:28:40:4f:dc:9e:73:af: 88:91:62:d4:6a:75:f3:d7:79:3a:4f:be:f5:d0:bf: 23:c8:4b:4a:a4:4d:1c:d6:70:7a:25:3d:a2:ab:6b: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F8:A2:63:B1:CE:A5:FF:3E:9A:75:B5:B0:4B:96:A6:23:79:A1:27 X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:5a60:2::/48 2400:5a60:100::/48 Signature Algorithm: sha256WithRSAEncryption 14:b5:6b:1f:2e:ea:8a:9b:c3:be:29:29:50:92:d1:be:28:06: 2a:a8:79:0c:95:b7:ea:fc:20:c0:bc:23:48:23:b5:59:00:df: 2c:26:85:4d:65:10:fd:63:85:e6:24:09:01:31:bf:23:b6:83: 31:da:82:23:b0:c5:7e:35:7b:fb:ff:d0:8f:9e:c2:b8:d3:38: 85:18:65:51:ff:6d:a3:09:3b:4d:ff:ef:17:14:6e:df:68:f1: 12:51:cc:74:98:f7:04:1e:ff:8b:fa:64:0e:af:45:74:48:36: 1b:9d:0c:32:e5:32:05:9c:27:12:2a:90:fc:d8:15:49:2d:b6: 98:a6:cd:5b:4f:e1:b6:71:27:1d:a3:7a:b7:8e:6a:2e:fd:33: 36:e0:1e:0b:42:41:80:d6:fb:6a:23:86:4a:ae:28:0f:1f:e2: 82:97:db:41:a9:8c:19:10:84:2b:8e:f7:67:12:6a:e1:7b:5b: 8d:85:1a:30:b2:72:05:1b:57:88:7e:85:a2:ec:45:1e:96:8b: f4:13:30:c5:2a:44:64:5a:1f:4e:fb:a0:aa:0b:34:8a:d3:3d: 2c:61:6f:94:10:33:d7:44:42:3d:1e:7e:22:44:50:de:0b:ea: 3d:58:24:44:5b:a9:67:7a:82:59:de:9f:fe:8c:6b:82:d5:d9: b5:b0:e0:72 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjQwNTA0MTMxODA5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjM2MzU5MS1mZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4VMbHiEXsW7xdAIKKenrbI+NwL4lLeFCMK31w+9kGsAGf0vhkgv7mWKpSmv 7TgE3C6fnCh+AZCbwWasx7d7ggLzDYOqi1S3pfKScsETruahMqFn0mrI9rbQk2xV t2GU9IW8na/lRa0/MTIYuU4ELpqxlda9810kO6y9yTnWTIoGNAlz3d1LlSZabyZ6 BsXlze5Gift/qQm63xbt461xZdXLN6SEFen7Lq9BGUZ5YRrMXb9Q9rF9UBc9yxxo qWSaj2YiCX6Bnym9ppMNN/g2jlzI4b8uM8R//ChAT9yec6+IkWLUanXz13k6T771 0L8jyEtKpE0c1nB6JT2iq2t8awIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLf4omOx zqX/Ppp1tbBLlqYjeaEnMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjEwMTgvODgzNkZBNjA4RDRDMTFFQzk4OEFFODVEQzRGOUFFMDIvRTY5QUJGNzgw MzM5MTFFRkJFMjhGQzFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkAFpgAAIDBwAkAFpgAQAwDQYJKoZIhvcNAQELBQADggEB ABS1ax8u6oqbw74pKVCS0b4oBiqoeQyVt+r8IMC8I0gjtVkA3ywmhU1lEP1jheYk CQExvyO2gzHagiOwxX41e/v/0I+ewrjTOIUYZVH/baMJO03/7xcUbt9o8RJRzHSY 9wQe/4v6ZA6vRXRINhudDDLlMgWcJxIqkPzYFUkttpimzVtP4bZxJx2jereOai79 MzbgHgtCQYDW+2ojhkquKA8f4oKX20GpjBkQhCuO92cSauF7W42FGjCycgUbV4h+ haLsRR6Wi/QTMMUqRGRaH077oKoLNIrTPSxhb5QQM9dEQj0efiJEUN4L6j1YJERb qWd6glnen/6Ma4LV2bWw4HI= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org