$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/8EE044DC1AE511EB808D0174C4F9AE02.roa File: 8EE044DC1AE511EB808D0174C4F9AE02.roa (raw, json) Hash identifier: ENl2yiJNo4HybE8JTa1dxyxuRkYZ2eHoC1iJYvvJy04= Subject key identifier: 17:12:1A:8A:4C:95:25:53:D1:2B:A5:2D:31:D8:DC:A3:EB:25:83:A2 Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 08D5 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/8EE044DC1AE511EB808D0174C4F9AE02.roa Signing time: Sun 02 Jun 2024 22:28:32 +0000 ROA not before: Sun 02 Jun 2024 22:28:32 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 140626 IP address blocks: 2001:df3:ab80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2261 (0x8d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Jun 2 22:28:32 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665cf210-92da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:15:15:98:ad:f8:3b:9e:0a:ea:93:77:d8:0b: de:8c:ad:b8:cf:ce:ed:e1:35:50:cf:3e:3a:6c:60: 20:ec:6c:8f:63:83:90:12:62:d3:24:0c:e9:f3:7b: c6:67:03:e6:cf:50:79:56:22:6a:bf:47:62:dc:f7: d1:f7:1c:2c:8d:db:96:21:22:0c:a5:43:c3:da:df: 32:22:82:40:58:2f:4e:f3:c4:54:8f:0c:f1:a4:b7: c8:7a:44:c3:b4:ae:42:45:89:e4:44:0b:c5:ca:58: 8c:7e:fc:75:f2:0b:31:d4:62:b1:a3:88:a1:88:53: c5:57:a7:a8:d5:1a:90:b7:23:29:c4:9c:5f:4c:e1: 4f:f8:cf:91:7f:0a:36:3a:26:d7:0e:c1:f1:6a:68: b4:07:7e:e5:cd:68:29:d2:bc:8b:4a:fc:a6:06:ab: db:c8:f8:ba:d9:8d:3e:e9:4f:05:f1:8e:22:a5:f2: ac:79:c2:e6:fd:a4:e3:98:a7:f4:3e:35:42:a7:9c: 84:c6:17:1f:01:7e:18:d3:26:b6:40:f2:c9:b6:a6: 45:87:e6:87:31:7c:89:90:b0:3e:75:90:a1:66:99: 07:a7:a3:ba:a9:89:44:be:18:49:37:e1:e2:68:21: 31:15:8a:bc:13:cd:01:f9:e9:28:d7:23:de:21:7d: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:1A:8A:4C:95:25:53:D1:2B:A5:2D:31:D8:DC:A3:EB:25:83:A2 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/8EE044DC1AE511EB808D0174C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:ab80::/48 Signature Algorithm: sha256WithRSAEncryption 3f:18:64:8b:0f:43:2f:c6:d7:ce:fe:c6:eb:1f:86:32:92:ca: 5d:45:77:b0:3e:99:7e:66:15:14:bb:f5:f1:43:72:3f:17:21: da:a5:f5:6e:f6:9f:32:04:99:cf:e7:f3:0a:28:c9:23:f8:d0: 3d:59:e6:28:71:ab:98:f0:d3:f1:39:6a:f4:fd:10:80:ff:72: c4:1f:7b:6d:a1:c3:ce:ff:61:8d:21:23:ea:6f:d2:c4:d5:4a: cf:69:92:43:fa:64:bc:73:80:0c:d5:7e:0a:78:a9:2e:dc:26: 00:29:f1:d1:02:8a:a4:88:47:77:d5:03:12:5a:2b:9e:ce:81: 44:70:01:69:a8:90:2b:5c:a4:64:b4:a7:6b:80:1f:63:e7:85: 9c:ab:bc:4d:31:b5:67:f0:90:08:84:60:c9:dd:b1:e3:0f:58: b5:bc:91:ba:c4:d1:f8:e2:b6:f5:2c:78:2b:58:e8:37:d1:c5: d2:d5:fd:35:43:c4:3a:14:a3:06:c8:da:39:ea:64:61:a6:19: 3b:79:94:2e:07:96:b8:2f:44:24:82:77:6e:67:d0:bd:54:df: c5:b9:76:a9:59:9d:a9:d9:7f:e1:c8:60:e3:86:e9:01:01:93: 5f:9f:9b:02:82:3f:a2:1f:2a:3a:c1:f2:ac:9d:7b:5f:04:2b: 94:8b:64:33 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjQwNjAyMjIyODMyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVjZjIxMC05MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+xUVmK34O54K6pN32AvejK24z87t4TVQzz46bGAg7GyPY4OQEmLTJAzp83vG ZwPmz1B5ViJqv0di3PfR9xwsjduWISIMpUPD2t8yIoJAWC9O88RUjwzxpLfIekTD tK5CRYnkRAvFyliMfvx18gsx1GKxo4ihiFPFV6eo1RqQtyMpxJxfTOFP+M+Rfwo2 OibXDsHxami0B37lzWgp0ryLSvymBqvbyPi62Y0+6U8F8Y4ipfKsecLm/aTjmKf0 PjVCp5yExhcfAX4Y0ya2QPLJtqZFh+aHMXyJkLA+dZChZpkHp6O6qYlEvhhJN+Hi aCExFYq8E80B+eko1yPeIX3sTwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBcSGopM lSVT0SulLTHY3KPrJYOiMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVDNzAvMjNBMEFDMDY5MTA3MTFFQUEzRTkzQTVCQzRGOUFFMDIvOEVFMDQ0REMx QUU1MTFFQjgwOEQwMTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zq4AwDQYJKoZIhvcNAQELBQADggEBAD8YZIsPQy/G 187+xusfhjKSyl1Fd7A+mX5mFRS79fFDcj8XIdql9W72nzIEmc/n8wooySP40D1Z 5ihxq5jw0/E5avT9EID/csQfe22hw87/YY0hI+pv0sTVSs9pkkP6ZLxzgAzVfgp4 qS7cJgAp8dECiqSIR3fVAxJaK57OgURwAWmokCtcpGS0p2uAH2PnhZyrvE0xtWfw kAiEYMndseMPWLW8kbrE0fjitvUseCtY6DfRxdLV/TVDxDoUowbI2jnqZGGmGTt5 lC4HlrgvRCSCd25n0L1U38W5dqlZnanZf+HIYOOG6QEBk1+fmwKCP6IfKjrB8qyd e18EK5SLZDM= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org