$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/1DF22790A4B611EF9CDA1A2CC4F9AE02.roa File: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (raw, json) Hash identifier: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg= Subject key identifier: AA:46:BB:DC:D1:A6:E8:F9:AD:8E:33:4B:15:D2:FD:05:C3:08:90:BD Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: 02 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/1DF22790A4B611EF9CDA1A2CC4F9AE02.roa Signing time: Sun 17 Nov 2024 07:32:36 +0000 ROA not before: Sun 17 Nov 2024 07:32:36 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 140219 IP address blocks: 2001:df4:59c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Nov 17 07:32:36 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67399c14-c936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:7b:13:12:ec:02:ba:a7:72:48:a1:c4:a1: 2f:df:f2:a8:a5:47:58:10:22:b3:47:2b:ea:eb:52: 28:59:a3:ca:70:71:ed:68:90:87:6b:59:3f:3d:17: 8f:16:ee:20:ab:6c:c3:64:99:36:2e:f9:fd:07:be: b1:36:2a:47:08:84:5f:4d:3e:c9:24:de:b5:c9:aa: 55:05:28:e6:cf:e7:b5:6a:58:ef:bb:df:32:b3:1e: fd:07:cb:5a:3a:a6:98:95:d8:dc:29:09:dd:b0:76: fe:e1:7b:a2:67:a1:72:7b:0d:65:b4:bf:63:e4:74: 71:da:13:33:99:23:7f:90:4e:12:bd:39:37:a2:d7: a8:56:84:06:01:65:da:d7:16:18:7b:7e:92:dc:95: ce:d6:a0:58:fa:53:88:9b:83:bd:5a:42:6f:1d:b2: 96:2d:6c:83:60:bc:a3:79:89:72:1b:74:8a:6e:bd: ac:8a:26:8b:99:b8:2a:63:4f:d7:c8:85:2c:52:0e: 76:be:94:3b:04:b5:38:eb:c8:fc:5e:0d:02:ae:f8: ae:95:5c:07:98:6e:43:f8:f4:09:a4:b1:80:d1:2a: 42:24:c1:a8:37:c8:9c:99:84:82:e7:22:72:0a:67: e3:84:b4:46:c0:e3:41:ff:4c:6b:2a:13:2e:cc:75: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:46:BB:DC:D1:A6:E8:F9:AD:8E:33:4B:15:D2:FD:05:C3:08:90:BD X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/1DF22790A4B611EF9CDA1A2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:59c0::/48 Signature Algorithm: sha256WithRSAEncryption b0:78:77:df:fb:93:de:4f:7b:cb:06:3c:f6:19:25:ce:87:29: 8c:3d:65:c9:ca:fa:c6:44:cf:d1:2c:0e:a9:19:55:c2:19:34: 18:c9:cc:29:dc:de:b6:eb:50:65:a1:ac:33:9a:4b:5a:78:6b: 36:25:c8:62:fb:6b:85:d4:61:c6:57:c3:b8:fb:fa:02:6f:70: e6:51:8e:53:5c:71:83:6b:03:87:b0:df:10:65:95:c9:6c:fd: 88:04:43:ae:d2:d5:51:3b:b8:a5:11:d2:19:b3:ca:ec:80:f3: d2:00:a8:76:eb:24:ae:31:47:00:4b:e2:1d:0d:dc:70:34:a3: 3f:5e:91:16:ed:d3:fc:6a:7e:7e:c9:b1:90:ac:d0:87:09:7c: 20:72:9a:ef:91:c4:d0:5d:e3:cb:a8:fc:7e:9b:95:39:74:06: a5:ee:b3:1d:f5:aa:4d:ec:88:4f:10:24:6b:9e:aa:42:0e:8e: dd:04:d3:86:06:47:b4:55:62:4a:69:b9:50:4c:75:27:28:1e: 96:81:8e:04:4d:6c:a0:93:dd:f5:9e:bd:88:8c:1b:80:fb:0c: f0:93:09:ef:96:75:60:22:b3:d3:9b:23:d6:95:c4:47:f8:e4: 33:a5:9b:59:91:e1:0f:cc:57:85:89:4d:7c:cd:00:bb:df:8b: d2:44:81:0b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoRjA0OTI5RUY3NDNDNTRDMDhCNDVFMTlDRkM1MUJGMkFB NTU5REFBMTAeFw0yNDExMTcwNzMyMzZaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Mzk5YzE0LWM5MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCp3sTEuwCuqdySKHEoS/f8qilR1gQIrNHK+rrUihZo8pwce1okIdrWT89F48W 7iCrbMNkmTYu+f0HvrE2KkcIhF9NPskk3rXJqlUFKObP57VqWO+73zKzHv0Hy1o6 ppiV2NwpCd2wdv7he6JnoXJ7DWW0v2PkdHHaEzOZI3+QThK9OTei16hWhAYBZdrX Fhh7fpLclc7WoFj6U4ibg71aQm8dspYtbINgvKN5iXIbdIpuvayKJouZuCpjT9fI hSxSDna+lDsEtTjryPxeDQKu+K6VXAeYbkP49AmksYDRKkIkwag3yJyZhILnInIK Z+OEtEbA40H/TGsqEy7MdQ1PAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUqka73NGm 6PmtjjNLFdL9BcMIkL0wHwYDVR0jBBgwFoAU8Ekp73Q8VMCLReGc/FG/KqVZ2qEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzhDMjE0OTc0QTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVrcDczUThWTUNMUmVHY19GR19LcVZaMnFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84QzIxNDk3NEE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi8xREYyMjc5MEE0 QjYxMUVGOUNEQTFBMkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfRZwDANBgkqhkiG9w0BAQsFAAOCAQEAsHh33/uT3k97 ywY89hklzocpjD1lycr6xkTP0SwOqRlVwhk0GMnMKdzetutQZaGsM5pLWnhrNiXI YvtrhdRhxlfDuPv6Am9w5lGOU1xxg2sDh7DfEGWVyWz9iARDrtLVUTu4pRHSGbPK 7IDz0gCoduskrjFHAEviHQ3ccDSjP16RFu3T/Gp+fsmxkKzQhwl8IHKa75HE0F3j y6j8fpuVOXQGpe6zHfWqTeyITxAka56qQg6O3QTThgZHtFViSmm5UEx1JygeloGO BE1soJPd9Z69iIwbgPsM8JMJ75Z1YCKz05sj1pXER/jkM6WbWZHhD8xXhYlNfM0A u9+L0kSBCw== -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:54 2024 by rpki-client on console-fra.rpki-client.org