$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/59A2E9D8A01411EF8E674221C4F9AE02.roa File: 59A2E9D8A01411EF8E674221C4F9AE02.roa (raw, json) Hash identifier: Awesdi3w1tMsyunxz0+auFNmXjcMcElIgsBpVsZJdUI= Subject key identifier: 19:02:43:77:FC:BE:5C:71:EA:2E:17:44:CE:03:AD:78:C4:C9:BC:AD Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Certificate serial: 01B4 Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/59A2E9D8A01411EF8E674221C4F9AE02.roa Signing time: Mon 11 Nov 2024 10:04:33 +0000 ROA not before: Mon 11 Nov 2024 10:04:33 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150177 IP address blocks: 2001:df1:2ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Validity Not Before: Nov 11 10:04:33 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6731d6b1-b747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:e2:8c:0f:e1:cc:8b:95:8b:c0:00:13:91: 44:6a:47:0f:55:fa:9d:b1:6b:4b:e2:58:8d:b4:12: 0a:dc:65:45:f9:56:07:cc:fd:5f:57:a7:45:ce:cb: 50:4d:a7:22:65:8d:cf:b2:8d:a8:ea:88:a6:b2:d9: 2d:08:58:e9:ec:35:57:23:36:ba:56:b3:c8:d6:f0: 5a:8f:83:29:d4:4c:c5:b4:91:d1:a8:8a:6a:05:91: 9e:73:4a:47:d5:66:2a:ce:13:60:d9:b7:22:d9:44: 0d:a7:79:76:a8:90:94:d3:c8:d8:11:c6:5b:a5:47: 33:6b:42:a7:df:12:bc:79:9e:dd:e4:c6:db:ab:68: bc:e9:24:e4:54:51:a0:b2:83:95:87:d0:2f:de:14: 48:75:49:dc:5b:61:ad:48:ab:e8:af:e4:7b:bd:ec: a5:74:d9:b5:9f:3f:17:28:53:76:1e:cc:eb:ff:be: f9:6e:e6:47:a6:11:60:7b:4f:2b:0e:b0:11:cc:e3: 3d:ed:ee:b2:f8:75:20:57:ef:ad:07:90:45:41:58: 75:01:05:0a:35:42:76:5b:40:95:84:65:75:d0:f6: 0a:ff:e6:ff:44:83:a0:9b:d6:74:d1:52:3a:f5:c9: 2e:d7:97:e4:5d:e7:43:4d:20:40:40:b6:3c:b6:dc: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:02:43:77:FC:BE:5C:71:EA:2E:17:44:CE:03:AD:78:C4:C9:BC:AD X509v3 Authority Key Identifier: keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/59A2E9D8A01411EF8E674221C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:2ec0::/48 Signature Algorithm: sha256WithRSAEncryption 78:48:db:4a:8b:6b:af:34:1b:1f:12:57:5a:aa:a5:cb:c3:f9: 6a:72:6f:c4:2d:99:2f:fb:ea:5d:da:d3:53:ba:03:b7:91:e6: 24:6b:af:f5:8a:97:64:4d:96:55:12:45:f4:d8:76:9a:f0:d1: 0f:2c:f6:79:2c:6b:27:40:6b:bb:e8:d0:b8:c6:ba:63:ef:03: 98:d8:2b:f8:df:b2:c9:9e:a9:75:5e:dc:fd:2c:d2:65:d5:7e: fd:ab:29:8b:dc:31:60:9d:be:5d:6f:f9:1e:60:b2:c5:8c:57: 5e:c8:02:d1:44:eb:b1:f1:8a:19:d6:51:7e:fb:27:94:2f:c1: 3b:c9:44:0c:99:12:dc:42:22:e1:64:bf:9a:54:7c:cb:ab:0c: e6:0b:a8:1e:3c:3a:63:c6:a5:d2:e0:a6:1b:e6:44:db:b5:ce: ff:ef:2a:fa:a3:fa:a4:e2:16:91:e4:55:57:dc:73:d4:bc:40: e3:16:e3:af:42:55:d2:60:00:8e:f1:8f:45:90:bf:39:de:69: 62:03:34:38:17:fb:53:01:ab:86:9f:b2:30:5f:27:36:e8:eb: c4:13:a9:f8:09:d1:8f:e1:7c:25:5b:b1:02:12:8f:a3:ef:3e: e2:bf:d2:43:5e:44:7c:9e:22:75:18:2b:7c:e8:24:31:fd:87: 9f:8f:59:ea -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4RUUxMTAvBgNVBAUTKDE1OEI5NjY2NEZCMUM5QUVFRUIzRDI4NzA3Rjg3N0ZF MjM3QjAyREMwHhcNMjQxMTExMTAwNDMzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMxZDZiMS1iNzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqTijA/hzIuVi8AAE5FEakcPVfqdsWtL4liNtBIK3GVF+VYHzP1fV6dFzstQ TaciZY3Pso2o6oimstktCFjp7DVXIza6VrPI1vBaj4Mp1EzFtJHRqIpqBZGec0pH 1WYqzhNg2bci2UQNp3l2qJCU08jYEcZbpUcza0Kn3xK8eZ7d5Mbbq2i86STkVFGg soOVh9Av3hRIdUncW2GtSKvor+R7veyldNm1nz8XKFN2Hszr/775buZHphFge08r DrARzOM97e6y+HUgV++tB5BFQVh1AQUKNUJ2W0CVhGV10PYK/+b/RIOgm9Z00VI6 9cku15fkXedDTSBAQLY8ttwunQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBkCQ3f8 vlxx6i4XRM4DrXjEybytMB8GA1UdIwQYMBaAFBWLlmZPscmu7rPShwf4d/4jewLc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhFRS81M0M2NzhENjQz MDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlhN3VzOUtIQl9oM19pTjdB dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZdVdaay14eWE3dXM5S0hCX2gzX2lON0F0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzA4RUUvNTNDNjc4RDY0MzAwMTFFRDg0MEIzMzU3QzRGOUFFMDIvNTlBMkU5RDhB MDE0MTFFRjhFNjc0MjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xLsAwDQYJKoZIhvcNAQELBQADggEBAHhI20qLa680 Gx8SV1qqpcvD+Wpyb8QtmS/76l3a01O6A7eR5iRrr/WKl2RNllUSRfTYdprw0Q8s 9nksaydAa7vo0LjGumPvA5jYK/jfssmeqXVe3P0s0mXVfv2rKYvcMWCdvl1v+R5g ssWMV17IAtFE67HxihnWUX77J5QvwTvJRAyZEtxCIuFkv5pUfMurDOYLqB48OmPG pdLgphvmRNu1zv/vKvqj+qTiFpHkVVfcc9S8QOMW469CVdJgAI7xj0WQvzneaWID NDgX+1MBq4afsjBfJzbo68QTqfgJ0Y/hfCVbsQISj6PvPuK/0kNeRHyeInUYK3zo JDH9h5+PWeo= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:50 2024 by rpki-client on console-ams.rpki-client.org