$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/DEDB3932BED411EF835BB47AC4F9AE02.roa File: DEDB3932BED411EF835BB47AC4F9AE02.roa (raw, json) Hash identifier: O2sa7pTiQKdOhkw1Yh9cM+13JLJmRbo0IeSALJBybOk= Subject key identifier: B9:0B:49:1F:DE:69:1A:A4:B9:3B:F3:E2:FC:83:97:A3:02:1E:70:46 Certificate issuer: /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C Certificate serial: 02 Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/DEDB3932BED411EF835BB47AC4F9AE02.roa Signing time: Fri 20 Dec 2024 13:18:15 +0000 ROA not before: Fri 20 Dec 2024 13:18:15 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133496 IP address blocks: 2001:df4:cc40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8307 Validity Not Before: Dec 20 13:18:15 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67656e97-499d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:04:41:d5:08:11:bc:d5:ab:03:ba:52:86:f9: a4:14:e7:4e:63:7c:2e:50:23:28:52:e7:d1:44:81: 6c:6b:e9:a4:d5:c5:ae:bf:98:3d:5e:10:45:e4:31: 9a:d9:44:0d:f9:20:85:3a:3c:0c:d9:44:f8:d1:92: 9a:e5:42:73:52:35:bd:1c:25:a3:c9:87:b1:b4:d5: ff:b8:c0:ee:b7:9c:6b:27:f6:db:60:77:23:df:4c: a6:26:cd:9d:d7:02:ec:75:80:c6:a4:07:6b:b8:f5: c4:a5:9e:b3:95:b9:98:34:d5:78:b3:db:48:92:ad: 09:27:8a:67:9b:2a:34:a1:13:2e:16:9b:00:82:e7: b4:6c:ea:14:f4:c0:42:d9:b3:00:2b:19:cd:a3:6b: 73:06:0e:04:0d:db:fa:b0:22:df:5e:09:a1:4f:6f: 4e:c4:26:e5:03:6c:b2:8c:e7:4c:0e:53:01:4d:79: 82:80:27:dc:7d:7c:22:cf:2b:c0:19:a9:b7:74:b7: f2:86:42:dd:a7:0d:1d:ba:dc:fe:b2:af:46:6f:5a: 81:88:2c:ea:f5:b7:26:c5:4c:97:87:85:04:a3:4a: 86:35:3b:e2:16:6f:5c:0c:1c:ea:8a:d0:b9:fe:d7: 85:9c:ca:2f:60:83:2c:83:15:9a:73:27:c9:86:7d: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0B:49:1F:DE:69:1A:A4:B9:3B:F3:E2:FC:83:97:A3:02:1E:70:46 X509v3 Authority Key Identifier: keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/DEDB3932BED411EF835BB47AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:cc40::/48 Signature Algorithm: sha256WithRSAEncryption 29:ef:74:8c:36:21:3f:7e:9c:d5:66:05:bc:6d:e3:31:89:1c: d2:d1:30:3a:3f:1b:08:26:90:4d:73:6f:bb:9c:e0:4e:37:86: 21:2a:a5:06:5b:59:d8:19:a1:10:05:27:c8:b6:03:ff:5a:84: a5:ca:00:d2:34:aa:57:98:a8:6a:34:37:d0:5b:56:e8:2c:61: 1d:8e:63:3a:eb:e2:d0:c7:25:1d:1b:ca:03:14:a0:c3:2c:8f: c9:d1:f5:17:42:3f:1f:e6:ca:83:d0:4e:08:9b:60:a7:5a:06: 74:ed:1d:75:9d:28:e6:16:46:30:84:72:c9:6b:44:f9:e1:5e: f9:81:5e:22:29:a2:73:35:95:81:77:ea:4a:d2:b2:fb:63:ae: 6d:47:4c:89:cd:0c:40:9d:01:80:55:fc:43:e5:65:fc:76:65: e6:fa:03:98:7b:a7:ff:b9:52:a7:c8:9d:f5:ee:49:7a:a9:24: 7e:0e:69:70:50:f2:16:67:2c:98:c9:98:78:db:c8:c4:ff:b6: 41:3d:fd:59:1c:e3:7b:30:17:96:97:e5:1b:1f:a1:60:53:c1: 18:26:9c:db:b1:27:49:22:7c:4e:bf:2e:cd:2c:34:bf:c5:ff: 0a:b6:93:15:12:c6:8b:ef:62:7c:68:34:75:18:5d:95:a1:ba: fa:c3:78:1a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODMwNzExMC8GA1UEBRMoM0REMDk1QkU3QTNCRDFERDgyOUUyQTI2NDlGQzdFODFB N0VGRTM0QzAeFw0yNDEyMjAxMzE4MTVaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NjU2ZTk3LTQ5OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiBEHVCBG81asDulKG+aQU505jfC5QIyhS59FEgWxr6aTVxa6/mD1eEEXkMZrZ RA35IIU6PAzZRPjRkprlQnNSNb0cJaPJh7G01f+4wO63nGsn9ttgdyPfTKYmzZ3X Aux1gMakB2u49cSlnrOVuZg01Xiz20iSrQknimebKjShEy4WmwCC57Rs6hT0wELZ swArGc2ja3MGDgQN2/qwIt9eCaFPb07EJuUDbLKM50wOUwFNeYKAJ9x9fCLPK8AZ qbd0t/KGQt2nDR263P6yr0ZvWoGILOr1tybFTJeHhQSjSoY1O+IWb1wMHOqK0Ln+ 14Wcyi9ggyyDFZpzJ8mGfdFpAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUuQtJH95p GqS5O/Pi/IOXowIecEYwHwYDVR0jBBgwFoAUPdCVvno70d2CniomSfx+gafv40ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MzA3LzM0MzJGNjBDQkVD RDExRUY5OEM3NDEzMkM0RjlBRTAyL1BkQ1Z2bm83MGQyQ25pb21TZngtZ2FmdjQw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGRDVnZubzcwZDJDbmlvbVNmeC1nYWZ2NDB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODMwNy8zNDMyRjYwQ0JFQ0QxMUVGOThDNzQxMzJDNEY5QUUwMi9ERURCMzkzMkJF RDQxMUVGODM1QkI0N0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfTMQDANBgkqhkiG9w0BAQsFAAOCAQEAKe90jDYhP36c 1WYFvG3jMYkc0tEwOj8bCCaQTXNvu5zgTjeGISqlBltZ2BmhEAUnyLYD/1qEpcoA 0jSqV5ioajQ30FtW6CxhHY5jOuvi0MclHRvKAxSgwyyPydH1F0I/H+bKg9BOCJtg p1oGdO0ddZ0o5hZGMIRyyWtE+eFe+YFeIimiczWVgXfqStKy+2OubUdMic0MQJ0B gFX8Q+Vl/HZl5voDmHun/7lSp8id9e5Jeqkkfg5pcFDyFmcsmMmYeNvIxP+2QT39 WRzjezAXlpflGx+hYFPBGCac27EnSSJ8Tr8uzSw0v8X/CraTFRLGi+9ifGg0dRhd laG6+sN4Gg== -----END CERTIFICATE-----Generated at Thu Feb 6 05:04:24 2025 by rpki-client