$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa File: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (raw, json) Hash identifier: ETA9fsTMXTvs7R5wnnSoRNAPiUdGbww+8O48Wqcn1fE= Subject key identifier: D7:0E:18:8A:0B:00:E6:A8:8E:FD:E4:41:CE:B1:76:CC:10:92:04:E7 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 06C7 Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa Signing time: Mon 20 Nov 2023 22:50:20 +0000 ROA not before: Mon 20 Nov 2023 22:50:20 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 10153 IP address blocks: 2406:9dc0:50::/44 maxlen: 48 2406:9dc0:1010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Nov 20 22:50:20 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=655be2ac-33f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:54:cf:97:0b:16:68:3f:56:03:ec:55:bd: f8:5c:d2:15:40:e4:68:1e:10:b7:cc:d2:4f:93:04: a5:c4:15:e5:f8:86:c5:11:97:af:87:2b:5c:99:55: 74:0d:fd:75:3b:85:51:d7:b4:8a:b3:c9:0a:38:9e: 8a:4f:be:e3:dc:5d:43:3f:b4:cc:a5:31:00:f2:9c: 09:80:8c:40:fc:33:ec:1b:e8:d5:3c:fe:bb:a8:ce: 76:06:63:f6:aa:fd:33:3e:8d:7b:73:7c:01:78:05: eb:99:cd:7c:c7:d1:6c:8d:9f:03:28:1c:95:0e:88: 74:b7:c6:7b:52:f3:c7:cc:de:19:54:9e:e3:5d:ef: 0f:bb:eb:68:c0:ab:a9:d1:6e:18:90:dd:5b:3c:68: be:5d:b0:fd:6b:0d:67:03:3f:a3:48:e2:3b:02:b5: 50:16:85:4b:dd:36:77:e7:96:3c:9e:f0:91:67:29: 9e:79:ed:a9:bd:b8:3d:0a:9e:42:11:cd:c8:85:e0: fd:26:46:23:00:c3:2c:2e:ba:d6:38:d6:1a:b3:b4: 98:5e:0c:87:e4:bd:58:95:a5:50:e4:0a:94:78:3d: af:11:29:79:6e:d6:b8:61:c7:e6:37:c8:ef:54:39: 84:2e:f7:f2:9f:d4:80:bb:f2:7b:ab:0d:5b:c3:7f: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:18:8A:0B:00:E6:A8:8E:FD:E4:41:CE:B1:76:CC:10:92:04:E7 X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:9dc0:50::/44 2406:9dc0:1010::/44 Signature Algorithm: sha256WithRSAEncryption 62:67:f0:ec:b3:24:2c:d9:6e:fb:d3:c0:c3:18:2c:f2:00:f4: 8b:35:26:e7:95:e6:f5:28:14:29:ed:28:ad:2a:5c:f5:a7:e9: 0e:5b:c0:0a:c1:2a:14:e4:fb:f1:51:1b:ab:7b:00:1b:4c:76: f9:b7:59:76:04:b8:0f:26:50:29:fd:be:fa:11:72:e4:db:6e: ac:e4:24:55:ed:e7:66:0c:89:81:93:df:c1:33:5f:7d:e8:a6: 27:f7:0a:d3:46:9a:f1:7e:5b:87:d9:b1:17:43:06:78:6b:5a: 10:26:ce:6b:2e:bf:50:98:92:be:10:29:d0:08:8c:ba:a9:99: 13:93:fa:c1:04:4b:46:ef:1b:ab:88:a4:48:4e:ff:4d:5f:80: 5a:63:e4:56:43:17:3b:7d:cb:cd:d6:07:c0:8e:60:c8:24:67: 0e:2e:73:7f:ab:bc:f4:e8:82:95:b5:b5:e5:ee:41:b0:65:2a: 09:e1:5f:16:ce:79:1b:fe:ab:b6:54:1b:d2:a7:f4:b0:6d:bd: a4:3b:86:2a:89:04:b8:e1:1d:27:73:8c:12:f9:1f:04:3a:33: 34:2d:cc:45:c8:59:b7:71:91:a3:0c:8e:33:c2:6e:35:6e:9d: 36:f5:a3:c1:d1:58:a9:92:c2:21:7c:8d:79:c2:4d:2f:ea:0e: b0:53:db:7a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjMxMTIwMjI1MDIwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTViZTJhYy0zM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKZUz5cLFmg/VgPsVb34XNIVQORoHhC3zNJPkwSlxBXl+IbFEZevhytcmVV0 Df11O4VR17SKs8kKOJ6KT77j3F1DP7TMpTEA8pwJgIxA/DPsG+jVPP67qM52BmP2 qv0zPo17c3wBeAXrmc18x9FsjZ8DKByVDoh0t8Z7UvPHzN4ZVJ7jXe8Pu+towKup 0W4YkN1bPGi+XbD9aw1nAz+jSOI7ArVQFoVL3TZ355Y8nvCRZymeee2pvbg9Cp5C Ec3IheD9JkYjAMMsLrrWONYas7SYXgyH5L1YlaVQ5AqUeD2vESl5bta4YcfmN8jv VDmELvfyn9SAu/J7qw1bw3+fawIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNcOGIoL AOaojv3kQc6xdswQkgTnMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyNUYvMjJEOTFGNzIxMUNFMTFFQjhBRDA1QTJCQzRGOUFFMDIvQUQwRUZCMDA1 REZEMTFFQkFEMjZBQTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBp3AAFADBwQkBp3AEBAwDQYJKoZIhvcNAQELBQADggEB AGJn8OyzJCzZbvvTwMMYLPIA9Is1JueV5vUoFCntKK0qXPWn6Q5bwArBKhTk+/FR G6t7ABtMdvm3WXYEuA8mUCn9vvoRcuTbbqzkJFXt52YMiYGT38EzX33opif3CtNG mvF+W4fZsRdDBnhrWhAmzmsuv1CYkr4QKdAIjLqpmROT+sEES0bvG6uIpEhO/01f gFpj5FZDFzt9y83WB8COYMgkZw4uc3+rvPTogpW1teXuQbBlKgnhXxbOeRv+q7ZU G9Kn9LBtvaQ7hiqJBLjhHSdzjBL5HwQ6MzQtzEXIWbdxkaMMjjPCbjVunTb1o8HR WKmSwiF8jXnCTS/qDrBT23o= -----END CERTIFICATE-----Generated at Tue May 7 01:58:27 2024 by rpki-client on console-fra.rpki-client.org