$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/9768CAB2550211EDA744F948C4F9AE02.roa File: 9768CAB2550211EDA744F948C4F9AE02.roa (raw, json) Hash identifier: +c7JrobNieG+ZMgvcidemgeezLPPKCFpg7+084o7JoA= Subject key identifier: 7C:14:16:36:28:E8:EE:F7:32:6B:9E:4E:E9:90:20:DA:F6:E8:16:A8 Certificate issuer: /CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Certificate serial: 081A Authority key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/9768CAB2550211EDA744F948C4F9AE02.roa Signing time: Wed 10 Apr 2024 22:00:41 +0000 ROA not before: Wed 10 Apr 2024 22:00:41 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 203283 IP address blocks: 2405:f3c0:600::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88 Validity Not Before: Apr 10 22:00:41 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66170c09-b0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:4e:1e:73:6c:45:40:db:4e:69:af:aa:47: 57:d0:97:fe:50:6b:c8:c6:13:44:1f:50:64:4e:2c: dd:0c:e9:b2:fe:83:d2:36:5e:ac:60:19:f1:e9:62: 51:94:7b:6c:a3:44:04:68:a4:0d:d1:11:41:d1:b9: 51:c6:c3:d1:ac:ff:0d:08:a2:19:80:8b:07:f1:ee: f2:80:be:35:1b:9e:19:a0:43:e1:5a:f0:f5:ff:c9: 26:48:dc:da:fa:fa:5e:93:5a:b2:75:32:c5:a4:2e: 34:7b:22:c5:c7:ed:b9:29:2d:61:87:94:4a:80:40: 1e:0f:a9:0b:09:d4:a5:54:39:ec:0f:84:d2:70:59: 34:9f:08:9f:39:5f:82:69:10:ef:c3:70:15:d4:5a: 9d:10:2d:6b:1a:87:fa:5d:46:d6:ec:06:46:00:c0: 13:e1:6f:8a:a2:59:23:9c:b8:b6:c4:60:ae:df:b1: 91:f3:b1:39:fd:82:08:36:b7:d6:59:0b:d3:67:17: 5b:34:22:85:65:00:88:59:bc:c8:93:61:98:1d:77: 53:93:e6:4f:10:82:ce:f7:2a:db:15:35:ac:57:4a: 97:ff:0d:1c:d0:84:b4:23:f9:0c:e2:e8:00:d4:f5: 0d:84:4d:37:b4:a5:fe:95:c6:b0:2e:c5:b9:4a:5a: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:14:16:36:28:E8:EE:F7:32:6B:9E:4E:E9:90:20:DA:F6:E8:16:A8 X509v3 Authority Key Identifier: keyid:CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/9768CAB2550211EDA744F948C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:f3c0:600::/47 Signature Algorithm: sha256WithRSAEncryption 88:20:9a:69:18:8f:a4:bf:93:2b:ea:01:84:03:c2:e8:a9:7e: 02:36:4a:ba:96:5c:38:4e:2e:b4:a3:d2:dc:4b:7a:cf:71:23: 13:02:7d:85:e8:fd:ab:dd:6d:52:30:17:73:11:08:d4:0f:fc: 24:f0:07:4c:00:4a:4b:2e:cd:91:a1:9c:8d:61:82:40:20:20: 9a:42:79:5d:94:cc:40:21:af:91:0b:2f:7f:ad:6c:38:8f:79: 19:6c:47:91:5c:45:ac:e7:51:ca:e0:c9:5d:05:dd:0c:fa:22: 40:fa:38:4f:7f:d2:c0:75:73:f8:6d:5c:9d:88:3d:2e:6d:49: c7:47:02:56:96:98:bc:ba:4d:84:b5:5d:8e:af:ce:37:ad:b4: 49:7a:5b:51:6e:ee:10:6f:bc:a1:ec:d4:4a:94:36:ff:1f:d7: db:41:0e:1d:75:92:fa:3a:8a:58:82:fd:7f:f1:5e:27:54:ed: 04:79:6d:db:47:06:ec:55:35:c8:bb:82:20:58:7d:b4:65:d4: 7d:85:db:da:ac:ca:a4:a5:50:bc:56:7c:db:79:61:5d:11:a3: 0b:a3:26:27:89:af:ed:df:ff:e8:bc:aa:02:1d:19:9d:5c:d5: 05:2a:79:59:82:1c:49:fc:6f:46:63:9c:df:7c:05:6b:fc:4e: 1b:d3:22:21 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1MDIxMTAvBgNVBAUTKENCNEM5NUY4MzlFMjFEMURFMEY0NTg1NTNEOUE0Q0Uy OEU0MTREODgwHhcNMjQwNDEwMjIwMDQxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE3MGMwOS1iMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhtOHnNsRUDbTmmvqkdX0Jf+UGvIxhNEH1BkTizdDOmy/oPSNl6sYBnx6WJR lHtso0QEaKQN0RFB0blRxsPRrP8NCKIZgIsH8e7ygL41G54ZoEPhWvD1/8kmSNza +vpek1qydTLFpC40eyLFx+25KS1hh5RKgEAeD6kLCdSlVDnsD4TScFk0nwifOV+C aRDvw3AV1FqdEC1rGof6XUbW7AZGAMAT4W+KolkjnLi2xGCu37GR87E5/YIINrfW WQvTZxdbNCKFZQCIWbzIk2GYHXdTk+ZPEILO9yrbFTWsV0qX/w0c0IS0I/kM4ugA 1PUNhE03tKX+lcawLsW5SlpyxQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHwUFjYo 6O73MmueTumQINr26BaoMB8GA1UdIwQYMBaAFMtMlfg54h0d4PRYVT2aTOKOQU2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDUwMi80MEUyREZDQ0I1 MDIxMUVBQTI5RjI3N0FDNEY5QUUwMi95MHlWLURuaUhSM2c5RmhWUFpwTTRvNUJU WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kweVYtRG5pSFIzZzlGaFZQWnBNNG81QlRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ1MDIvNDBFMkRGQ0NCNTAyMTFFQUEyOUYyNzdBQzRGOUFFMDIvOTc2OENBQjI1 NTAyMTFFREE3NDRGOTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkBfPABgAwDQYJKoZIhvcNAQELBQADggEBAIggmmkYj6S/ kyvqAYQDwuipfgI2SrqWXDhOLrSj0txLes9xIxMCfYXo/avdbVIwF3MRCNQP/CTw B0wASksuzZGhnI1hgkAgIJpCeV2UzEAhr5ELL3+tbDiPeRlsR5FcRaznUcrgyV0F 3Qz6IkD6OE9/0sB1c/htXJ2IPS5tScdHAlaWmLy6TYS1XY6vzjettEl6W1Fu7hBv vKHs1EqUNv8f19tBDh11kvo6iliC/X/xXidU7QR5bdtHBuxVNci7giBYfbRl1H2F 29qsyqSlULxWfNt5YV0RowujJieJr+3f/+i8qgIdGZ1c1QUqeVmCHEn8b0ZjnN98 BWv8ThvTIiE= -----END CERTIFICATE-----Generated at Fri May 10 23:55:05 2024 by rpki-client on console-fra.rpki-client.org