$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/4450DA2C9D0311EF877CD229C4F9AE02.roa File: 4450DA2C9D0311EF877CD229C4F9AE02.roa (raw, json) Hash identifier: buSMZTKEc3PdwiMwBtG/n0gmpQCMqdjfMf4AjKQfjyg= Subject key identifier: 12:ED:92:95:35:8A:43:13:73:16:4D:53:34:8C:07:8C:A6:BE:BC:53 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: 02 Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/4450DA2C9D0311EF877CD229C4F9AE02.roa Signing time: Thu 07 Nov 2024 12:24:43 +0000 ROA not before: Thu 07 Nov 2024 12:24:43 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 0 IP address blocks: 2405:4900::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Nov 7 12:24:43 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672cb18b-b100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:4f:84:70:14:87:ed:55:6c:87:2e:f8:16: 0b:6b:00:49:8f:2a:96:75:a1:70:ae:17:6e:4a:6f: 2b:8a:30:81:8b:8e:f6:8e:f1:d9:0b:95:da:a2:be: 2e:08:76:29:d4:2a:f4:80:05:88:ac:ee:4f:2e:8f: 21:a1:f1:dc:b8:41:b4:07:d2:3b:a4:3a:7a:72:1e: cd:b5:4d:08:e4:ce:bc:a9:e0:10:d7:d6:0f:88:c7: 06:3a:e9:90:78:fe:2e:dd:36:54:24:4b:df:25:27: 5b:ac:2e:34:fb:89:f6:27:17:90:dd:06:d0:a5:e7: c7:de:fd:f0:b7:4c:da:ff:29:1a:24:51:ce:de:fa: 87:84:3c:45:20:48:bd:0c:a7:fb:4a:a2:ba:f2:a2: 3d:3c:2e:dd:b5:80:99:27:15:1f:e4:41:7e:2a:b7: 21:e3:39:3b:1c:81:56:e0:9b:7a:ef:76:30:52:92: fa:14:dc:8b:0c:d9:22:59:e6:11:48:f7:05:c5:cc: 18:ff:8b:c2:a9:b3:5e:74:b5:23:6a:a6:1a:6b:63: 7c:a6:6a:8e:a7:44:03:d4:77:ee:93:21:df:e6:02: e5:49:55:5c:66:c8:f5:09:47:d2:94:e8:f5:51:cd: b6:c1:13:92:ea:82:fe:f4:ff:97:0d:a1:20:e9:ad: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:ED:92:95:35:8A:43:13:73:16:4D:53:34:8C:07:8C:A6:BE:BC:53 X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/4450DA2C9D0311EF877CD229C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:4900::/32 Signature Algorithm: sha256WithRSAEncryption 91:08:35:55:9a:2e:5b:a2:46:07:be:8d:fd:92:e7:e1:f9:1b: 15:80:87:31:f8:5e:55:94:20:f7:a3:e1:2d:2d:45:4c:42:ce: f1:b8:e8:8a:83:24:c0:c9:95:a4:e9:9a:81:94:90:52:7f:37: 90:18:45:ae:a0:6a:ea:be:70:89:0e:37:61:ab:b2:df:b3:65: e8:82:aa:cc:b7:5b:1c:36:83:4f:12:7a:0f:94:31:05:95:16: 2d:91:1f:45:a8:15:c1:c8:7c:84:c0:f0:da:e9:1f:4b:67:24: 10:01:1c:8c:b3:35:3a:fb:69:fc:3f:a4:a6:80:b9:22:b0:b3: 41:d5:d8:94:47:17:6d:e2:5c:06:24:ca:98:4b:09:3d:c2:f3: a9:43:c0:f0:f9:75:a0:87:cb:19:12:fb:87:6f:37:52:7a:5d: d3:62:5a:73:3f:9e:89:5c:2f:bc:81:88:75:3f:e4:cf:f3:48: 41:4f:b7:51:1c:bb:37:f9:7a:a6:25:a3:69:f9:34:c3:01:7c: 70:19:51:57:7c:bd:6f:93:51:4d:9a:a5:42:97:a6:84:ad:c2: bf:3d:ef:7f:88:f3:cd:fd:fb:f1:b3:08:a6:3a:44:23:19:31: 63:1e:ff:ab:6a:dc:ee:7f:0e:e9:8e:b1:28:63:72:81:ca:02: 4f:9e:a0:2b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkZCRTExMC8GA1UEBRMoN0Y5NkFFMEEyMkNBOTM4QkQ1RjlEOUE3MzI4QUY1ODM2 MkVCMjJDMTAeFw0yNDExMDcxMjI0NDNaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmNiMThiLWIxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2RE+EcBSH7VVshy74FgtrAEmPKpZ1oXCuF25KbyuKMIGLjvaO8dkLldqivi4I dinUKvSABYis7k8ujyGh8dy4QbQH0jukOnpyHs21TQjkzryp4BDX1g+IxwY66ZB4 /i7dNlQkS98lJ1usLjT7ifYnF5DdBtCl58fe/fC3TNr/KRokUc7e+oeEPEUgSL0M p/tKorryoj08Lt21gJknFR/kQX4qtyHjOTscgVbgm3rvdjBSkvoU3IsM2SJZ5hFI 9wXFzBj/i8Kps150tSNqphprY3ymao6nRAPUd+6TId/mAuVJVVxmyPUJR9KU6PVR zbbBE5Lqgv70/5cNoSDprVVPAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUEu2SlTWK QxNzFk1TNIwHjKa+vFMwHwYDVR0jBBgwFoAUf5auCiLKk4vV+dmnMor1g2LrIsEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRkJFLzQyMTU5RjVBOUQw MjExRUY5OUNDODYwOUM0RjlBRTAyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZjVhdUNpTEtrNHZWLWRtbk1vcjFnMkxySXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkZCRS80MjE1OUY1QTlEMDIxMUVGOTlDQzg2MDlDNEY5QUUwMi80NDUwREEyQzlE MDMxMUVGODc3Q0QyMjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQFSQAwDQYJKoZIhvcNAQELBQADggEBAJEINVWaLluiRge+ jf2S5+H5GxWAhzH4XlWUIPej4S0tRUxCzvG46IqDJMDJlaTpmoGUkFJ/N5AYRa6g auq+cIkON2Grst+zZeiCqsy3Wxw2g08Seg+UMQWVFi2RH0WoFcHIfITA8NrpH0tn JBABHIyzNTr7afw/pKaAuSKws0HV2JRHF23iXAYkyphLCT3C86lDwPD5daCHyxkS +4dvN1J6XdNiWnM/nolcL7yBiHU/5M/zSEFPt1Ecuzf5eqYlo2n5NMMBfHAZUVd8 vW+TUU2apUKXpoStwr8973+I8839+/GzCKY6RCMZMWMe/6tq3O5/DumOsShjcoHK Ak+eoCs= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:49 2024 by rpki-client on console-fra.rpki-client.org