$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/B66F0C58817111EFB121970CC4F9AE02.roa File: B66F0C58817111EFB121970CC4F9AE02.roa (raw, json) Hash identifier: lkpsOB7nfXsffwnZ1aU9Jr6eTZNpX/TpTJZNQqUrOs8= Subject key identifier: C2:51:A8:B0:3C:06:34:83:2A:43:BA:75:66:70:F0:EC:BC:B3:D8:F4 Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0AAA Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/B66F0C58817111EFB121970CC4F9AE02.roa Signing time: Thu 03 Oct 2024 10:24:46 +0000 ROA not before: Thu 03 Oct 2024 10:24:46 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137840 IP address blocks: 2404:4f02::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Oct 3 10:24:46 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66fe70ee-1bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ea:2e:a4:a3:1b:46:e8:b1:a8:ba:27:9f:53: d4:62:81:aa:93:90:b3:26:4d:3f:51:b9:44:18:69: 15:d6:bd:d0:a7:78:b3:a8:8d:f7:ce:b0:b3:65:3f: 00:07:65:d4:53:6c:16:f2:f1:43:2b:b3:76:4c:10: 5f:ca:d5:1d:30:38:3d:7b:9a:df:a5:bb:79:a2:53: ae:41:7c:1e:62:13:a6:b1:32:a9:dd:e9:09:69:23: e1:7d:33:92:90:ff:9a:f0:65:7f:1b:6e:cd:27:9b: 6f:01:08:b4:26:a2:78:44:5e:32:f6:ff:bf:ae:11: aa:a4:45:44:46:40:0c:83:d3:e8:32:27:05:d5:c6: f6:af:6f:b0:8e:a8:aa:98:44:49:42:05:56:4b:ae: 3a:4a:e9:79:1e:d5:c2:e1:c6:03:d8:84:fc:a1:6a: 43:78:e5:c9:d6:b3:b5:d4:b5:f3:4b:c5:61:15:ff: 36:45:0c:81:cd:ad:71:bd:81:f2:8c:46:4f:f2:bd: b5:76:f8:3c:ec:5b:bf:a9:51:ca:17:14:b1:ca:7f: 8f:13:c6:0b:6e:bf:1e:9f:30:e2:b3:dc:ab:17:05: 9f:3c:f0:05:66:05:17:2d:40:dc:6d:6e:0a:36:3c: 98:b3:28:b8:4c:af:9f:ed:e6:cc:83:08:e1:ad:8b: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:51:A8:B0:3C:06:34:83:2A:43:BA:75:66:70:F0:EC:BC:B3:D8:F4 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/B66F0C58817111EFB121970CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:4f02::/40 Signature Algorithm: sha256WithRSAEncryption ad:0d:44:16:eb:d2:13:3e:fe:15:45:c3:8e:ef:5f:ab:7f:38: 12:1e:23:f4:e6:17:92:de:a6:6b:23:a1:86:58:da:7c:8c:f2: f8:ee:01:24:f9:37:60:bd:38:09:47:59:e7:3e:d4:07:1a:df: 7c:1e:dc:fe:28:ea:ca:46:44:98:00:4d:45:78:92:1a:01:be: a3:4e:33:c8:d7:b1:32:0e:e4:7f:c0:6c:4d:7d:88:a1:66:70: 54:fb:89:09:da:50:56:c6:67:34:6e:8d:99:90:53:36:62:84: c7:01:ae:ad:bf:ee:2b:1a:3c:da:0a:da:ca:16:f6:f4:da:7b: ac:94:ec:c5:62:b7:f0:94:17:c8:67:a2:20:62:63:d9:18:f0: 3e:7e:38:2f:0b:c6:e8:5b:88:21:a4:27:d4:67:ba:be:50:85: 4b:f0:b2:55:b9:56:40:04:f7:b1:04:2b:13:78:5b:84:64:c0: 83:7b:02:35:6a:be:11:67:61:79:17:c4:e0:11:61:19:9b:47: 80:8a:d3:06:9f:e4:0e:4b:82:ba:57:3f:e1:12:3e:39:09:a9: 93:a0:b7:e3:14:ed:8a:33:1d:29:1d:03:ea:45:ef:81:f7:25: bb:c5:17:63:d4:50:4b:72:ba:8d:88:ad:c3:d4:04:f4:e0:c4: a2:ee:28:c2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjQxMDAzMTAyNDQ2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZlNzBlZS0xYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA++oupKMbRuixqLonn1PUYoGqk5CzJk0/UblEGGkV1r3Qp3izqI33zrCzZT8A B2XUU2wW8vFDK7N2TBBfytUdMDg9e5rfpbt5olOuQXweYhOmsTKp3ekJaSPhfTOS kP+a8GV/G27NJ5tvAQi0JqJ4RF4y9v+/rhGqpEVERkAMg9PoMicF1cb2r2+wjqiq mERJQgVWS646Sul5HtXC4cYD2IT8oWpDeOXJ1rO11LXzS8VhFf82RQyBza1xvYHy jEZP8r21dvg87Fu/qVHKFxSxyn+PE8YLbr8enzDis9yrFwWfPPAFZgUXLUDcbW4K NjyYsyi4TK+f7ebMgwjhrYtEKQIDAQABo4IClzCCApMwHQYDVR0OBBYEFMJRqLA8 BjSDKkO6dWZw8Oy8s9j0MB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U1NTgvM0RGMTRGMDg1Mzk0MTFFQUJGNkI0RjVGQzRGOUFFMDIvQjY2RjBDNTg4 MTcxMTFFRkIxMjE5NzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkBE8CADANBgkqhkiG9w0BAQsFAAOCAQEArQ1EFuvSEz7+ FUXDju9fq384Eh4j9OYXkt6mayOhhljafIzy+O4BJPk3YL04CUdZ5z7UBxrffB7c /ijqykZEmABNRXiSGgG+o04zyNexMg7kf8BsTX2IoWZwVPuJCdpQVsZnNG6NmZBT NmKExwGurb/uKxo82grayhb29Np7rJTsxWK38JQXyGeiIGJj2RjwPn44LwvG6FuI IaQn1Ge6vlCFS/CyVblWQAT3sQQrE3hbhGTAg3sCNWq+EWdheRfE4BFhGZtHgIrT Bp/kDkuCulc/4RI+OQmpk6C34xTtijMdKR0D6kXvgfclu8UXY9RQS3K6jYitw9QE 9ODEou4owg== -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:46 2024 by rpki-client on console-fra.rpki-client.org