$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa File: EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa (raw, json) Hash identifier: dg5P0bOa9bfh+0q6pRKAhwC/a/FidA3if8bbm6m10Kw= Subject key identifier: 32:0E:85:AE:6E:A9:40:07:D7:57:C7:CB:CC:F0:ED:EB:2C:40:30:5C Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717 Certificate serial: 2995 Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa Signing time: Wed 28 Feb 2024 15:52:21 +0000 ROA not before: Wed 28 Feb 2024 15:52:21 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 133405 IP address blocks: 2401:a280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jul 2024 15:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10645 (0x2995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717 Validity Not Before: Feb 28 15:52:21 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65df56b5-c24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:66:38:05:99:2e:6a:1e:76:2a:a8:d2:d6: d2:b4:c2:8f:fc:ca:28:4e:28:5b:5c:d5:fe:9f:e1: 3e:1e:5f:bf:03:6d:9d:bc:3e:a6:d5:c9:82:01:fe: 0a:f6:ff:9f:c5:6e:f9:58:e5:92:3d:1a:f1:fb:01: dd:69:05:98:e6:6b:df:71:bd:ce:cd:95:6e:34:b1: 68:3a:88:a9:3b:96:c7:bf:a1:a7:b2:06:8a:5a:8f: af:bf:84:06:a5:29:81:a2:cf:d7:ab:b6:43:21:ae: 58:6d:8d:1e:1e:7f:0a:7d:a0:98:7c:e4:78:40:3d: 82:44:9c:cc:5d:b7:46:44:23:77:e8:94:b7:a7:39: ef:7b:bc:ac:89:35:68:31:57:99:0c:70:8b:83:f7: 80:e4:a9:df:52:58:13:ad:5b:25:52:5d:23:e4:12: 8d:2d:fc:7f:df:dd:ac:a3:f0:94:f1:e0:a9:ac:49: 8e:12:5f:2a:f3:68:6d:ed:6a:b4:bb:1f:3e:d2:22: ad:a9:ee:5e:63:6b:ae:0a:3e:88:a4:8d:66:6f:66: cc:75:77:24:1c:b1:67:aa:88:ff:4d:36:5d:93:1f: f3:5c:0b:2d:08:2c:ca:97:e2:7a:1e:e7:39:ff:d9: 92:75:64:1a:b9:3e:ed:63:49:42:a7:d8:de:66:a0: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0E:85:AE:6E:A9:40:07:D7:57:C7:CB:CC:F0:ED:EB:2C:40:30:5C X509v3 Authority Key Identifier: keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:a280::/32 Signature Algorithm: sha256WithRSAEncryption 1e:55:e9:54:0b:41:52:bc:91:78:bf:c0:72:cf:62:0c:34:7e: e1:12:73:11:de:97:ce:8c:9e:a7:aa:89:68:ce:e0:e4:9a:42: 66:01:14:96:02:b8:7c:a4:48:41:30:db:8b:86:99:f8:f1:30: 60:19:6a:20:2d:6d:f5:dc:9c:a0:3c:22:90:70:c9:4f:e8:3f: 4c:2c:14:c7:9b:db:d3:ed:19:8f:66:c4:91:84:2b:51:d6:4b: 20:29:46:0f:11:73:3d:d8:bb:3b:54:df:c3:21:29:ce:18:cb: 30:89:06:f4:cf:34:64:a5:20:8c:ae:61:68:d2:3a:20:7a:8f: ba:81:2f:aa:9b:2d:c0:35:18:ef:1c:cb:3e:7a:74:d7:aa:3d: d1:f5:4b:2a:9f:d7:30:18:bc:9d:f5:ed:08:ff:bf:01:f5:e5: 92:50:cd:9a:53:5f:e3:04:41:50:72:52:74:1e:e2:34:d7:b0: d1:46:b6:37:8b:5d:95:2c:76:71:65:01:84:3f:10:f7:60:e0: 50:ce:57:83:b0:59:f0:95:cc:66:47:41:7b:00:d0:5f:84:3d: 31:ac:cc:12:3c:aa:b4:42:d3:73:b1:db:e9:cd:1f:2d:03:1f: 37:0a:e5:ef:13:7e:91:d4:9d:3d:e0:47:b8:ab:43:7f:50:b2: ad:ac:4d:72 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICKZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E0OTYxMTAvBgNVBAUTKEEwMzk2OUJBRkZENjdBQUI3NUQ0OTM4MzdGQTFDN0M2 OUZGQjI3MTcwHhcNMjQwMjI4MTU1MjIxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRmNTZiNS1jMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PRmOAWZLmoediqo0tbStMKP/MooTihbXNX+n+E+Hl+/A22dvD6m1cmCAf4K 9v+fxW75WOWSPRrx+wHdaQWY5mvfcb3OzZVuNLFoOoipO5bHv6GnsgaKWo+vv4QG pSmBos/Xq7ZDIa5YbY0eHn8KfaCYfOR4QD2CRJzMXbdGRCN36JS3pznve7ysiTVo MVeZDHCLg/eA5KnfUlgTrVslUl0j5BKNLfx/392so/CU8eCprEmOEl8q82ht7Wq0 ux8+0iKtqe5eY2uuCj6IpI1mb2bMdXckHLFnqoj/TTZdkx/zXAstCCzKl+J6Huc5 /9mSdWQauT7tY0lCp9jeZqDwdwIDAQABo4ICljCCApIwHQYDVR0OBBYEFDIOha5u qUAH11fHy8zw7essQDBcMB8GA1UdIwQYMBaAFKA5abr/1nqrddSTg3+hx8af+ycX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTQ5Ni9GQjEyQTI3ODND MEYxMUU0Qjc4OEZGNEFDNEY5QUUwMi9vRGxwdXZfV2VxdDExSk9EZjZISHhwXzdK eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29EbHB1dl9XZXF0MTFKT0RmNkhIeHBfN0p4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0E0OTYvRkIxMkEyNzgzQzBGMTFFNEI3ODhGRjRBQzRGOUFFMDIvRUUzREREMjQw MUFBMTFFREI3REY3QjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAaKAMA0GCSqGSIb3DQEBCwUAA4IBAQAeVelUC0FSvJF4 v8Byz2IMNH7hEnMR3pfOjJ6nqolozuDkmkJmARSWArh8pEhBMNuLhpn48TBgGWog LW313JygPCKQcMlP6D9MLBTHm9vT7RmPZsSRhCtR1ksgKUYPEXM92Ls7VN/DISnO GMswiQb0zzRkpSCMrmFo0jogeo+6gS+qmy3ANRjvHMs+enTXqj3R9Usqn9cwGLyd 9e0I/78B9eWSUM2aU1/jBEFQclJ0HuI017DRRrY3i12VLHZxZQGEPxD3YOBQzleD sFnwlcxmR0F7ANBfhD0xrMwSPKq0QtNzsdvpzR8tAx83CuXvE36R1J094Ee4q0N/ ULKtrE1y -----END CERTIFICATE-----Generated at Fri Jun 28 17:11:37 2024 by rpki-client on console-ams.rpki-client.org