$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/01D6C542776C11EF9A0CEA56C4F9AE02.roa File: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (raw, json) Hash identifier: KMNvvX+seGU0kX0Y9POTEvFI+e3rPIB5wqdW880u6II= Subject key identifier: 0D:9C:D7:28:42:95:4A:F0:25:0B:A2:B7:BE:78:29:C3:54:2C:EC:D4 Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 09F7 Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/01D6C542776C11EF9A0CEA56C4F9AE02.roa Signing time: Fri 20 Sep 2024 16:18:44 +0000 ROA not before: Fri 20 Sep 2024 16:18:44 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 131274 IP address blocks: 2001:218:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Validity Not Before: Sep 20 16:18:44 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66eda064-7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:c2:9e:fa:c2:d0:0b:4d:17:e7:11:57:1b: e4:a8:d5:d8:5b:24:59:95:08:59:12:24:a0:3c:cf: e1:28:6a:4a:04:e4:8a:c1:1c:85:0c:8a:59:c4:3e: ff:7f:80:f7:96:8f:cf:e5:a2:cb:9f:59:ab:fe:82: 64:37:27:c0:78:96:9f:26:d1:3a:1f:56:e0:1f:75: 03:a6:8d:e9:c7:f0:95:e7:fc:63:16:8c:22:89:2e: 6f:4d:72:eb:ed:9b:23:e1:a0:85:af:fd:81:bb:be: e5:d1:20:4b:8d:b7:90:39:ee:48:e0:84:7a:2e:5e: ac:e0:72:e7:c1:b2:d7:21:95:40:80:b3:b3:23:92: 77:dc:a4:5f:24:5f:65:94:c7:fc:bb:57:e2:b8:db: 35:ab:8c:93:17:57:2e:14:14:9b:5a:c6:aa:d4:93: 6a:c9:e7:44:bf:c4:d1:e4:04:88:de:c7:b7:98:ce: 4e:77:ee:cd:83:fd:85:ff:bc:a6:43:7a:a9:23:08: 7a:e2:f8:47:15:a1:87:63:10:e7:12:a2:ff:82:ab: f0:4e:14:b2:53:e2:d2:30:d3:a2:8d:6f:4d:83:9f: a1:1a:be:0c:66:ae:e5:07:1b:99:9e:55:c6:fb:95: 5b:b9:9b:06:3e:ac:57:2e:f9:52:a3:a7:40:a6:5e: d3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9C:D7:28:42:95:4A:F0:25:0B:A2:B7:BE:78:29:C3:54:2C:EC:D4 X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/01D6C542776C11EF9A0CEA56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:218:2003::/48 Signature Algorithm: sha256WithRSAEncryption 14:64:c0:02:47:4b:d5:1f:b2:80:37:0d:2c:d5:b8:2e:e5:e5: 89:a4:0f:79:ce:81:9f:00:34:4f:37:9b:63:02:a7:d7:ec:bb: b8:22:77:5c:25:f8:d3:42:41:8e:2b:98:15:20:4d:bb:3c:3f: 7f:df:0f:08:6f:ea:a1:f0:c3:2d:91:93:7f:17:e4:5e:8a:5b: 7e:9a:b3:b8:ac:00:0b:4d:bc:f5:c7:93:50:cc:69:fb:6c:ec: cd:75:33:4c:d7:0c:30:7a:7d:96:cb:cb:90:18:9d:ed:ce:76: 9e:18:f2:87:5e:95:2e:7e:cd:be:38:b1:52:b0:a9:8d:f9:05: 9a:31:bb:02:de:9f:6c:f1:bb:e0:00:c9:72:ae:4d:d3:3c:ce: 07:fc:d3:cc:41:ff:74:84:99:46:a7:42:fb:a6:a9:f4:aa:48: ce:f7:1c:0f:f7:86:91:3d:69:7e:5c:2d:2a:6d:48:a1:85:a8: 4f:bf:be:c0:be:93:a7:2d:be:b3:b0:4d:54:ff:ca:31:ff:31: 62:ff:75:db:02:8b:92:79:30:fc:9e:f9:e2:e9:91:d3:04:b1: e0:f9:27:0e:df:25:75:3e:e1:06:26:f0:b6:45:cf:b4:ad:f3: a9:d8:9f:f3:d1:c9:e8:4b:9a:69:eb:69:ae:4b:51:ed:72:77: 1f:62:ab:fe -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjQwOTIwMTYxODQ0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmVkYTA2NC03ZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5TCnvrC0AtNF+cRVxvkqNXYWyRZlQhZEiSgPM/hKGpKBOSKwRyFDIpZxD7/ f4D3lo/P5aLLn1mr/oJkNyfAeJafJtE6H1bgH3UDpo3px/CV5/xjFowiiS5vTXLr 7Zsj4aCFr/2Bu77l0SBLjbeQOe5I4IR6Ll6s4HLnwbLXIZVAgLOzI5J33KRfJF9l lMf8u1fiuNs1q4yTF1cuFBSbWsaq1JNqyedEv8TR5ASI3se3mM5Od+7Ng/2F/7ym Q3qpIwh64vhHFaGHYxDnEqL/gqvwThSyU+LSMNOijW9Ng5+hGr4MZq7lBxuZnlXG +5VbuZsGPqxXLvlSo6dApl7TcQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFA2c1yhC lUrwJQuit754KcNULOzUMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvMDFENkM1NDI3 NzZDMTFFRjlBMENFQTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQIYIAMwDQYJKoZIhvcNAQELBQADggEBABRkwAJHS9Uf soA3DSzVuC7l5YmkD3nOgZ8ANE83m2MCp9fsu7gid1wl+NNCQY4rmBUgTbs8P3/f Dwhv6qHwwy2Rk38X5F6KW36as7isAAtNvPXHk1DMafts7M11M0zXDDB6fZbLy5AY ne3Odp4Y8odelS5+zb44sVKwqY35BZoxuwLen2zxu+AAyXKuTdM8zgf808xB/3SE mUanQvumqfSqSM73HA/3hpE9aX5cLSptSKGFqE+/vsC+k6ctvrOwTVT/yjH/MWL/ ddsCi5J5MPye+eLpkdMEseD5Jw7fJXU+4QYm8LZFz7St86nYn/PRyehLmmnraa5L Ue1ydx9iq/4= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:45 2024 by rpki-client on console-fra.rpki-client.org