$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/A69DB4ACA70811EFB1511445C4F9AE02.roa File: A69DB4ACA70811EFB1511445C4F9AE02.roa (raw, json) Hash identifier: ve1sSgZ6oct5AOmrySo9DC5xQlX3NPwVMFkq6CjA+1w= Subject key identifier: F8:E7:E6:E4:87:55:08:43:F7:32:06:69:7F:D0:17:F0:C3:EC:28:F3 Certificate issuer: /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF Certificate serial: 02 Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/A69DB4ACA70811EFB1511445C4F9AE02.roa Signing time: Wed 20 Nov 2024 06:28:27 +0000 ROA not before: Wed 20 Nov 2024 06:28:27 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138026 IP address blocks: 2001:df4:a3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF Validity Not Before: Nov 20 06:28:27 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=673d818b-5b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:b9:94:d3:b3:35:c4:2b:eb:86:78:c9:3e: b3:cb:4a:4d:11:b4:86:29:b1:c0:c8:1d:98:2b:cb: 4d:65:18:9f:e1:88:25:d0:82:24:83:bb:0b:aa:81: db:55:fb:53:33:85:db:bc:ca:fd:71:60:77:eb:3a: f4:3d:de:f4:21:3c:ca:95:aa:f8:f9:93:74:6f:d9: 9c:a5:ad:f1:da:ff:aa:8f:ef:82:99:a5:d4:0d:48: 13:27:a4:2f:7c:51:c3:1b:6c:88:2f:ee:e4:25:c0: b3:95:1c:e7:f4:7a:d4:99:54:95:21:4a:f4:71:af: ab:7b:c3:48:65:13:3e:38:2d:35:2f:fe:2e:5a:b4: 22:99:d0:15:8b:dd:b2:f4:61:d8:dc:4c:e0:f5:bd: e5:ef:5d:4e:58:ec:cd:e3:a8:8b:3e:fd:b2:63:7f: e7:71:f6:64:20:d0:ae:d3:63:fe:f9:0f:5f:0d:25: 2a:bb:d6:5f:70:70:b4:d0:cc:9b:71:c7:c4:5c:7b: 45:fa:08:50:48:4c:39:2a:da:2d:ae:92:93:9b:66: a5:7c:66:c6:2e:02:24:3b:12:20:92:fa:97:90:3d: 4e:83:3e:b8:39:3e:c2:db:d7:2a:18:24:d2:2e:ce: 87:1c:b0:61:4a:4a:f8:2f:13:12:97:e0:10:50:e2: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E7:E6:E4:87:55:08:43:F7:32:06:69:7F:D0:17:F0:C3:EC:28:F3 X509v3 Authority Key Identifier: keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/A69DB4ACA70811EFB1511445C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:a3c0::/48 Signature Algorithm: sha256WithRSAEncryption 68:42:c8:81:28:a5:c9:b2:ab:28:30:1b:e8:02:ab:d4:73:40: 81:83:e3:be:cf:42:89:be:68:65:5b:92:b5:f2:b8:d8:33:97: 82:9f:cc:18:09:5a:a1:48:67:f3:11:16:a8:ff:74:6a:62:d2: 85:86:61:94:3d:ea:5a:da:b5:31:ae:d0:62:07:4a:6d:64:dc: b2:02:60:13:2b:d8:f7:a9:2e:08:81:64:43:5f:4d:c6:84:00: 81:5d:e1:93:3a:4d:7f:6e:f9:6e:87:24:31:81:82:0c:cb:d3: ef:d0:10:d2:a5:7a:3b:75:e9:40:ce:4c:5f:6f:56:99:c8:8b: a4:2d:c7:55:62:42:2a:0b:b7:f9:7e:64:5d:62:65:ca:63:0d: 94:0e:e4:9c:dd:e7:23:f0:d3:92:ef:a9:56:d4:71:c5:2f:9c: f1:a0:a7:9d:69:02:a8:5a:e3:c8:cc:2d:b1:7b:76:d4:3e:41: 5d:04:81:ff:8a:6b:d0:37:1b:35:46:9d:0a:60:70:4c:71:46: fd:fc:df:d6:a3:47:af:8b:c1:05:89:87:c2:53:11:48:9a:85: d5:6a:69:c3:62:68:4f:23:cd:97:1f:3c:b7:c5:85:37:61:83: 85:a3:df:52:22:e9:0a:75:5a:65:c1:17:0f:0c:d3:12:9e:1e: b9:a9:38:93 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoMDFGMDVDN0VBNUYyQTJFREZDMTgzODk3RjU4MzU5ODJC MkNGMDNCRjAeFw0yNDExMjAwNjI4MjdaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3M2Q4MThiLTViODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLMbmU07M1xCvrhnjJPrPLSk0RtIYpscDIHZgry01lGJ/hiCXQgiSDuwuqgdtV +1Mzhdu8yv1xYHfrOvQ93vQhPMqVqvj5k3Rv2ZylrfHa/6qP74KZpdQNSBMnpC98 UcMbbIgv7uQlwLOVHOf0etSZVJUhSvRxr6t7w0hlEz44LTUv/i5atCKZ0BWL3bL0 YdjcTOD1veXvXU5Y7M3jqIs+/bJjf+dx9mQg0K7TY/75D18NJSq71l9wcLTQzJtx x8Rce0X6CFBITDkq2i2ukpObZqV8ZsYuAiQ7EiCS+peQPU6DPrg5PsLb1yoYJNIu zoccsGFKSvgvExKX4BBQ4ja3AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQU+Ofm5IdV CEP3MgZpf9AX8MPsKPMwHwYDVR0jBBgwFoAUAfBcfqXyou38GDiX9YNZgrLPA78w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0QzNUIwODJFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyL0FmQmNmcVh5b3UzOEdEaVg5WU5aZ3JMUEE3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWZCY2ZxWHlvdTM4R0RpWDlZTlpnckxQQTc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9EMzVCMDgyRUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi9BNjlEQjRBQ0E3 MDgxMUVGQjE1MTE0NDVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfSjwDANBgkqhkiG9w0BAQsFAAOCAQEAaELIgSilybKr KDAb6AKr1HNAgYPjvs9Cib5oZVuStfK42DOXgp/MGAlaoUhn8xEWqP90amLShYZh lD3qWtq1Ma7QYgdKbWTcsgJgEyvY96kuCIFkQ19NxoQAgV3hkzpNf275bockMYGC DMvT79AQ0qV6O3XpQM5MX29WmciLpC3HVWJCKgu3+X5kXWJlymMNlA7knN3nI/DT ku+pVtRxxS+c8aCnnWkCqFrjyMwtsXt21D5BXQSB/4pr0DcbNUadCmBwTHFG/fzf 1qNHr4vBBYmHwlMRSJqF1Wppw2JoTyPNlx88t8WFN2GDhaPfUiLpCnVaZcEXDwzT Ep4euak4kw== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org