$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/B9E0D3EA716711EFBF91272AC4F9AE02.roa File: B9E0D3EA716711EFBF91272AC4F9AE02.roa (raw, json) Hash identifier: 53Kre2BjfokqYZatLvHeac7RUyzpHwRQ0+cubvzXvb4= Subject key identifier: 4B:9D:1B:97:72:1D:58:66:B0:C1:DB:17:02:60:8E:38:F6:06:08:4C Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Certificate serial: 0FE8 Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/B9E0D3EA716711EFBF91272AC4F9AE02.roa Signing time: Fri 13 Sep 2024 01:24:48 +0000 ROA not before: Fri 13 Sep 2024 01:24:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 16509 IP address blocks: 2402:2a80:100::/40 maxlen: 48 2402:2a80:200::/40 maxlen: 48 2402:2a80:300::/40 maxlen: 48 2402:2a80:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4072 (0xfe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3558 Validity Not Before: Sep 13 01:24:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66e3945f-793c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:08:dc:76:bd:58:d2:b9:f4:4c:77:de:db: 5b:fb:94:c1:26:d9:c9:ab:a1:d4:c6:e9:2c:84:6b: 5b:69:cf:e6:89:2f:cf:35:98:ce:84:f1:da:f5:35: dd:ca:01:d1:5f:02:71:90:3c:ab:19:6f:ad:df:77: 3c:41:e7:af:5e:9b:be:57:8d:01:52:9d:8f:97:36: 53:3f:0a:62:c9:5b:98:1c:2f:e4:27:c7:1f:3b:ce: 32:66:7b:60:1b:73:e5:79:79:5e:c1:dd:6d:3a:41: 3e:2d:f3:f9:19:23:4f:95:52:61:33:12:1e:e1:fc: d0:c4:b6:a9:f2:76:0b:06:e6:fb:9a:38:1d:57:73: 81:16:bd:23:fd:f9:d3:f7:0b:06:10:fa:50:86:86: 8e:63:72:f8:5f:69:d0:e5:e8:d3:ae:7b:48:85:a6: 6b:b8:fb:dd:c4:7f:e7:b1:54:06:1b:45:8c:a5:c8: 03:b5:bf:8e:1a:2b:18:88:9d:89:81:87:6f:c4:c0: ce:70:07:69:b7:ea:df:82:27:e0:29:50:35:93:a9: d3:05:68:8c:73:20:f7:07:6f:bc:5f:49:c1:88:0a: 61:bc:48:32:53:b3:75:5e:3e:0e:ec:0f:bc:34:28: 8a:9c:99:54:95:e8:1d:b7:9b:3d:f0:d9:33:8c:ce: 30:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9D:1B:97:72:1D:58:66:B0:C1:DB:17:02:60:8E:38:F6:06:08:4C X509v3 Authority Key Identifier: keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/B9E0D3EA716711EFBF91272AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2a80:100::-2402:2a80:4ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 68:d3:73:f2:55:c7:92:cf:d3:c9:5b:57:a1:8d:fa:b5:da:bf: c4:5e:12:52:ad:08:9f:35:51:fa:22:d8:50:c4:41:e8:1c:42: ca:b6:0c:36:ae:1c:72:70:c8:65:d1:02:4a:e2:11:48:a1:8d: 86:42:93:4b:82:17:5e:01:bf:03:c2:9b:6a:1d:7e:71:d5:81: c6:c6:ff:81:93:47:7c:68:0e:ac:9b:1c:05:ea:b5:fb:49:6f: 26:91:49:f9:f4:66:7b:55:40:cd:08:c4:32:58:f6:a3:33:a4: 4c:70:66:ac:ec:19:30:02:fe:ba:0e:2a:11:6a:50:41:ba:41: 23:1e:10:36:4a:8a:11:c8:95:e1:49:46:84:c4:b8:ed:c1:15: b1:f0:51:fe:df:6c:84:d8:32:34:0e:09:9b:4d:63:4e:6c:19: 38:8b:b5:41:0f:f5:8d:c9:c6:2e:19:47:6c:86:1b:00:84:bd: 23:b0:9d:37:ee:7f:1f:17:5c:9b:44:4c:ac:25:69:9f:8f:b8: 62:7a:ce:6d:4e:3e:7d:03:11:a5:f8:22:71:f0:eb:00:b1:9d: 3d:8f:c6:40:f1:ce:09:09:73:01:f0:3b:6e:02:08:ff:d7:5a: 87:4d:f6:45:fe:c4:c7:3c:b1:9c:0e:8f:2e:de:45:9f:2e:00: 7a:52:76:c0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICD+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx RkI5QTVGMkEwHhcNMjQwOTEzMDEyNDQ4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUzOTQ1Zi03OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SgI3Ha9WNK59Ex33ttb+5TBJtnJq6HUxukshGtbac/miS/PNZjOhPHa9TXd ygHRXwJxkDyrGW+t33c8QeevXpu+V40BUp2PlzZTPwpiyVuYHC/kJ8cfO84yZntg G3PleXlewd1tOkE+LfP5GSNPlVJhMxIe4fzQxLap8nYLBub7mjgdV3OBFr0j/fnT 9wsGEPpQhoaOY3L4X2nQ5ejTrntIhaZruPvdxH/nsVQGG0WMpcgDtb+OGisYiJ2J gYdvxMDOcAdpt+rfgifgKVA1k6nTBWiMcyD3B2+8X0nBiAphvEgyU7N1Xj4O7A+8 NCiKnJlUlegdt5s98NkzjM4wGQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFEudG5dy HVhmsMHbFwJgjjj2BghMMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5 MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM1NTgvMEYyMTIxNEUzOTA1MTFFOTlBMzMwMjMzQzRGOUFFMDIvQjlFMEQzRUE3 MTY3MTFFRkJGOTEyNzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIwEAMGACQCKoABAwYAJAIqgAQwDQYJKoZIhvcNAQELBQADggEB AGjTc/JVx5LP08lbV6GN+rXav8ReElKtCJ81Ufoi2FDEQegcQsq2DDauHHJwyGXR AkriEUihjYZCk0uCF14BvwPCm2odfnHVgcbG/4GTR3xoDqybHAXqtftJbyaRSfn0 ZntVQM0IxDJY9qMzpExwZqzsGTAC/roOKhFqUEG6QSMeEDZKihHIleFJRoTEuO3B FbHwUf7fbITYMjQOCZtNY05sGTiLtUEP9Y3Jxi4ZR2yGGwCEvSOwnTfufx8XXJtE TKwlaZ+PuGJ6zm1OPn0DEaX4InHw6wCxnT2PxkDxzgkJcwHwO24CCP/XWodN9kX+ xMc8sZwOjy7eRZ8uAHpSdsA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:48 2025 by rpki-client