$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/1BDAA63E12B211EBA631032CC4F9AE02.roa File: 1BDAA63E12B211EBA631032CC4F9AE02.roa (raw, json) Hash identifier: cX8QUr21/7Yflh3Ngq9ipDGjVl+RdRJBz1vVp6/kfUk= Subject key identifier: 1D:8B:AD:F0:66:79:67:EB:AC:BC:2F:25:65:B0:EE:C5:D4:B7:AB:96 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 06CF Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/1BDAA63E12B211EBA631032CC4F9AE02.roa Signing time: Mon 20 Nov 2023 22:50:27 +0000 ROA not before: Mon 20 Nov 2023 22:50:27 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 213262 IP address blocks: 2406:9dc0:30::/44 maxlen: 44 2406:9dc0:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Nov 20 22:50:27 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=655be2b3-6c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:a5:d4:a8:2f:01:8b:c0:19:97:a1:81:f4: 43:a1:17:9d:f9:ed:f8:f5:89:4d:48:b4:84:8a:90: 09:33:2c:ab:98:38:7e:57:b2:ea:c1:29:58:e9:bb: 62:f7:72:80:f3:92:53:35:c4:e7:21:79:a9:ad:45: e6:e7:0b:ff:21:d1:bb:e8:b3:e4:c0:7f:c4:2b:a0: c4:7b:d3:e2:f1:a1:b1:7c:40:88:af:ba:ba:96:f9: 0f:e8:74:c9:90:e9:92:d3:a1:bf:37:f2:6c:ed:b6: 63:8a:dc:e8:a8:9e:94:ef:fc:fb:2d:63:11:48:12: d9:66:7a:3f:34:9c:2b:f4:b0:3e:45:e4:35:50:ca: a3:3f:08:75:76:ab:b3:48:9b:aa:5c:4b:a0:40:21: f4:06:19:02:60:c1:7d:05:f0:d2:89:95:a9:ca:71: f1:c6:eb:2a:f0:11:11:60:36:a6:ac:c9:aa:df:a6: 2b:1d:ab:1c:2d:41:5c:40:b6:4f:7a:42:0a:56:2c: ca:a9:08:1c:de:63:f1:65:cf:25:d9:d8:2e:82:df: d3:66:d5:77:3b:f3:3f:b3:c5:4a:f3:ae:d2:f8:de: b4:f0:be:22:2e:37:58:7e:7a:53:d7:12:f6:5d:7d: 1d:92:9d:ec:ad:12:27:c0:fa:03:c2:3a:11:57:35: f8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8B:AD:F0:66:79:67:EB:AC:BC:2F:25:65:B0:EE:C5:D4:B7:AB:96 X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/1BDAA63E12B211EBA631032CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:9dc0:30::/44 Signature Algorithm: sha256WithRSAEncryption 56:12:23:bd:a8:ba:57:5c:e3:1f:be:06:01:08:26:9b:71:73: cd:98:80:df:f1:79:ce:0a:ae:c7:c4:39:8b:cf:d0:bd:8c:7a: 1c:c5:98:c4:9a:90:93:99:6b:ea:d6:d8:e0:fb:6c:22:20:75: cb:98:69:17:47:15:68:60:49:82:d3:e9:a6:37:48:2c:ad:b3: c4:3e:c5:36:8d:3b:34:42:65:9c:2d:02:12:29:1b:99:46:b4: ef:05:fa:fc:0f:0c:26:e6:e1:a8:ec:8f:25:f2:f3:d2:7e:65: d7:ab:7d:53:5a:ed:fb:4c:71:72:c0:58:25:68:a0:77:08:c2: 5b:e9:ea:8f:b5:a6:7d:5d:15:f5:65:92:82:ec:05:14:6b:02: f0:1d:8b:66:3d:54:b5:59:a1:22:09:04:eb:2b:5e:53:71:f9: 3f:43:51:71:eb:76:2a:d5:fc:ee:c5:00:53:b7:80:53:6e:cc: df:b5:27:fd:ac:08:0e:41:bc:a4:a9:99:60:ad:0b:0e:b8:84: d9:cd:e4:1c:eb:50:93:61:6d:f1:85:6b:2f:3c:99:51:1b:62: 44:52:6a:37:b0:53:6a:30:23:16:a9:06:45:15:33:af:97:76: de:0b:c9:8e:a8:56:8d:76:3a:ec:d7:fd:5b:2f:26:1f:05:f2: bb:bc:3f:5d -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjMxMTIwMjI1MDI3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTViZTJiMy02YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd+l1KgvAYvAGZehgfRDoRed+e349YlNSLSEipAJMyyrmDh+V7LqwSlY6bti 93KA85JTNcTnIXmprUXm5wv/IdG76LPkwH/EK6DEe9Pi8aGxfECIr7q6lvkP6HTJ kOmS06G/N/Js7bZjitzoqJ6U7/z7LWMRSBLZZno/NJwr9LA+ReQ1UMqjPwh1dquz SJuqXEugQCH0BhkCYMF9BfDSiZWpynHxxusq8BERYDamrMmq36YrHascLUFcQLZP ekIKVizKqQgc3mPxZc8l2dgugt/TZtV3O/M/s8VK867S+N608L4iLjdYfnpT1xL2 XX0dkp3srRInwPoDwjoRVzX4owIDAQABo4ICmDCCApQwHQYDVR0OBBYEFB2LrfBm eWfrrLwvJWWw7sXUt6uWMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyNUYvMjJEOTFGNzIxMUNFMTFFQjhBRDA1QTJCQzRGOUFFMDIvMUJEQUE2M0Ux MkIyMTFFQkE2MzEwMzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBp3AADAwDQYJKoZIhvcNAQELBQADggEBAFYSI72ouldc 4x++BgEIJptxc82YgN/xec4KrsfEOYvP0L2MehzFmMSakJOZa+rW2OD7bCIgdcuY aRdHFWhgSYLT6aY3SCyts8Q+xTaNOzRCZZwtAhIpG5lGtO8F+vwPDCbm4ajsjyXy 89J+ZderfVNa7ftMcXLAWCVooHcIwlvp6o+1pn1dFfVlkoLsBRRrAvAdi2Y9VLVZ oSIJBOsrXlNx+T9DUXHrdirV/O7FAFO3gFNuzN+1J/2sCA5BvKSpmWCtCw64hNnN 5BzrUJNhbfGFay88mVEbYkRSajewU2owIxapBkUVM6+Xdt4LyY6oVo12OuzX/Vsv Jh8F8ru8P10= -----END CERTIFICATE-----Generated at Tue May 7 00:53:23 2024 by rpki-client on console-ams.rpki-client.org