$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/06D77958D49411EFA8DF5E69C4F9AE02.roa File: 06D77958D49411EFA8DF5E69C4F9AE02.roa (raw, json) Hash identifier: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w= Subject key identifier: 40:8E:3D:66:BD:45:2D:21:BE:5F:0F:00:FF:93:F1:9F:ED:99:9F:ED Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Certificate serial: 02 Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/06D77958D49411EFA8DF5E69C4F9AE02.roa Signing time: Fri 17 Jan 2025 05:29:31 +0000 ROA not before: Fri 17 Jan 2025 05:29:31 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135028 IP address blocks: 2401:e960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35 Validity Not Before: Jan 17 05:29:31 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6789eaba-a885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:94:54:4e:b0:96:99:1c:cf:1a:d6:09:8d: 89:84:d8:9a:fc:67:34:c6:cd:7f:26:bb:51:e9:07: 59:df:2f:65:d2:e8:33:28:4e:9a:7e:e0:96:f8:c2: e2:6e:ee:bf:b7:17:81:2b:c0:66:8f:95:13:03:de: 94:af:66:89:af:94:b1:2f:03:c9:ba:b4:68:cd:ea: 25:23:d7:df:0e:59:87:6f:85:47:be:65:5c:c4:0a: 87:b4:2e:11:07:bb:b1:a9:52:46:81:64:25:2f:0b: 7e:25:97:c9:51:34:e3:0f:95:f0:af:ad:cd:9b:38: 0e:e3:d0:b5:5d:c1:66:0d:3e:7f:31:aa:a6:98:5e: 75:0b:44:e9:9e:14:af:6e:13:c6:b7:d0:6d:98:73: d4:2a:fc:02:38:e4:03:5b:e2:00:af:b2:da:03:a3: bb:4a:3d:0b:04:e6:98:a9:b0:97:d7:76:37:00:ce: e2:80:c0:a9:95:d7:24:1b:8e:98:dc:aa:cc:fa:49: 44:73:10:95:a9:e4:3b:1d:5e:77:d1:10:3c:54:ba: 53:a9:6a:7e:dd:d8:82:fb:d1:25:b7:ca:1c:9a:09: 87:61:d0:ad:93:3c:d1:0c:a1:24:e7:56:c7:0e:bf: 2e:26:c7:ad:9f:ef:61:2f:6a:a2:0e:16:83:c5:0b: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8E:3D:66:BD:45:2D:21:BE:5F:0F:00:FF:93:F1:9F:ED:99:9F:ED X509v3 Authority Key Identifier: keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/06D77958D49411EFA8DF5E69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:e960::/32 Signature Algorithm: sha256WithRSAEncryption 1f:b4:95:1b:f0:fa:35:f2:39:3d:89:b3:ac:7f:20:15:ea:a4: 9d:f2:8a:83:8f:b8:1d:ee:e9:40:22:69:0b:a0:df:8c:68:62: c1:ce:aa:b1:67:77:f9:43:fc:dd:57:e9:b6:e6:7c:22:c5:76: 56:a3:ab:fc:02:d7:b2:c8:b6:5a:de:0f:be:0b:16:fb:7d:1e: 5e:a8:6d:58:14:8f:a0:db:b2:b1:ba:7b:1d:16:92:55:e3:04: 6f:f4:a2:e6:6b:48:53:ce:a3:b1:25:88:21:d6:d2:c5:92:37: db:72:bf:36:d7:e0:25:90:87:80:de:ba:ed:b3:c7:cb:8f:9c: fd:67:eb:91:6e:a5:17:6d:8f:24:33:44:45:75:93:25:7d:1b: 11:e8:1d:fe:85:76:34:d4:35:27:89:48:29:d9:33:f7:88:f8: e8:01:3b:51:dd:13:92:17:b9:ab:61:a7:e2:8d:33:7b:7d:01: 58:4a:96:ad:27:a6:91:0f:41:06:f8:77:8a:5e:5e:a8:ea:ad: 32:a3:d1:f7:af:06:e7:85:68:a7:87:0f:a6:62:e9:d6:7c:52: 5b:5e:61:c6:16:9e:28:c3:ef:bd:3c:24:2e:5e:7d:8a:9a:cc: f7:da:0d:3b:37:b7:e7:69:de:8a:96:5e:9a:87:fe:50:d4:cc: bb:8c:e1:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoRkI2Qjk0NjM2MUYwQzVDODJFMkIwNjc0MEQ0QkE4QjBC OTkzNTNGODAeFw0yNTAxMTcwNTI5MzFaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODllYWJhLWE4ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmpJRUTrCWmRzPGtYJjYmE2Jr8ZzTGzX8mu1HpB1nfL2XS6DMoTpp+4Jb4wuJu 7r+3F4ErwGaPlRMD3pSvZomvlLEvA8m6tGjN6iUj198OWYdvhUe+ZVzECoe0LhEH u7GpUkaBZCUvC34ll8lRNOMPlfCvrc2bOA7j0LVdwWYNPn8xqqaYXnULROmeFK9u E8a30G2Yc9Qq/AI45ANb4gCvstoDo7tKPQsE5pipsJfXdjcAzuKAwKmV1yQbjpjc qsz6SURzEJWp5DsdXnfREDxUulOpan7d2IL70SW3yhyaCYdh0K2TPNEMoSTnVscO vy4mx62f72EvaqIOFoPFC7WhAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUQI49Zr1F LSG+Xw8A/5Pxn+2Zn+0wHwYDVR0jBBgwFoAU+2uUY2HwxcguKwZ0DUuosLmTU/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1L0ExNTlGNzgyRDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTJ1VVkySHd4Y2d1S3daMERVdW9zTG1UVV9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkEzNS9BMTU5Rjc4MkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi8wNkQ3Nzk1OEQ0 OTQxMUVGQThERjVFNjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQB6WAwDQYJKoZIhvcNAQELBQADggEBAB+0lRvw+jXyOT2J s6x/IBXqpJ3yioOPuB3u6UAiaQug34xoYsHOqrFnd/lD/N1X6bbmfCLFdlajq/wC 17LItlreD74LFvt9Hl6obVgUj6DbsrG6ex0WklXjBG/0ouZrSFPOo7EliCHW0sWS N9tyvzbX4CWQh4Deuu2zx8uPnP1n65FupRdtjyQzREV1kyV9GxHoHf6FdjTUNSeJ SCnZM/eI+OgBO1HdE5IXuathp+KNM3t9AVhKlq0nppEPQQb4d4peXqjqrTKj0fev BueFaKeHD6Zi6dZ8UlteYcYWnijD7708JC5efYqazPfaDTs3t+dp3oqWXpqH/lDU zLuM4bc= -----END CERTIFICATE-----Generated at Thu Feb 6 04:40:06 2025 by rpki-client