$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/A0A9D60C807511EFAD8C4257C4F9AE02.roa File: A0A9D60C807511EFAD8C4257C4F9AE02.roa (raw, json) Hash identifier: QmeMLe3zHSz7gk9gq16CkmBIAgYCod6kVBmzDpdZxiM= Subject key identifier: D9:9E:CD:08:E6:9F:38:3D:9A:1B:B9:B3:38:D7:49:20:67:2D:47:AD Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B Certificate serial: 03 Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/A0A9D60C807511EFAD8C4257C4F9AE02.roa Signing time: Wed 02 Oct 2024 04:20:17 +0000 ROA not before: Wed 02 Oct 2024 04:20:17 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 153055 IP address blocks: 2401:afe0::/32 maxlen: 33 2401:afe0::/34 maxlen: 36 2401:afe0:4000::/35 maxlen: 36 2401:afe0:6000::/35 maxlen: 35 2401:afe0:6000::/36 maxlen: 36 2401:afe0:8000::/33 maxlen: 34 2401:afe0:8000::/36 maxlen: 36 2401:afe0:9000::/36 maxlen: 36 2401:afe0:a000::/35 maxlen: 35 2401:afe0:b000::/36 maxlen: 36 2401:afe0:c000::/34 maxlen: 35 2401:afe0:c000::/36 maxlen: 36 2401:afe0:e000::/35 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B Validity Not Before: Oct 2 04:20:17 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66fcca00-5541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:2f:99:c2:b0:11:9f:a2:05:c7:14:78:c2: 66:58:3f:2d:50:16:8e:81:7e:bc:28:e7:0d:3c:37: 9f:a7:a4:b6:c3:bd:38:29:68:d5:4d:a2:42:a9:bc: 39:e1:31:93:08:94:90:4b:87:77:4d:b6:fa:3d:60: 2f:d3:3f:d2:2d:d3:35:f9:04:11:78:8d:d3:15:7e: f6:1d:46:d7:9d:c5:16:62:b9:aa:c6:ae:b7:c0:e0: 23:fa:53:ff:c5:5c:0e:61:c4:75:cc:89:2a:8f:5b: 1b:a8:04:ce:8e:c5:db:64:30:3a:24:32:31:5e:6b: e3:56:38:31:41:6c:3a:33:4e:24:c2:2b:d4:76:09: ee:fd:58:48:92:83:8c:20:b2:09:da:8f:53:f6:04: 55:f2:3e:35:11:6c:f9:52:62:a0:f3:63:90:68:44: ed:68:d2:33:d2:b4:c6:8e:95:61:e2:88:5c:bb:90: 76:d4:d6:87:7e:68:eb:7e:2d:2c:ef:7a:ad:53:6b: 7d:58:1b:a6:dd:dd:e1:a2:f6:07:8c:98:b8:0f:62: 2c:30:37:b3:88:bd:20:7d:a5:6f:c1:2e:ac:63:67: 01:ec:93:4d:1e:af:6b:13:8c:99:e4:a5:34:d7:db: 24:1c:86:32:45:18:67:87:fb:d6:48:86:5d:89:5b: 6c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9E:CD:08:E6:9F:38:3D:9A:1B:B9:B3:38:D7:49:20:67:2D:47:AD X509v3 Authority Key Identifier: keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/A0A9D60C807511EFAD8C4257C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:afe0::/32 Signature Algorithm: sha256WithRSAEncryption 19:8b:56:0a:be:34:b7:c4:57:a2:87:cd:00:71:02:41:f6:04: 8c:43:ec:da:c9:20:d8:9c:1c:c9:a3:a9:4c:cd:8b:f1:bf:12: 70:34:bf:dc:52:bd:b1:21:87:98:50:c9:11:74:58:7e:8f:bd: 69:74:83:61:35:ea:20:33:0e:a0:9a:d2:59:61:a6:ee:c0:f7: 20:cf:7d:3c:88:39:f4:9e:5a:1f:79:92:c0:43:8e:5d:c9:df: a7:26:24:e5:87:9c:c5:54:ee:b1:1e:d3:75:97:e6:16:5c:7b: 9c:4c:2d:8e:99:f8:85:78:3e:b4:10:95:7a:0d:d6:09:1d:a1: 00:34:3e:83:fa:d3:a8:7c:81:d0:44:47:b4:0e:16:81:a0:b9: c9:71:e7:38:f0:69:6e:5d:5f:68:bb:bb:27:c1:82:bd:44:6b: ee:86:4f:6b:24:e0:8a:09:f2:b4:a6:9c:da:02:c9:55:09:4c: 47:24:af:b7:55:fc:fd:79:c6:71:0d:e9:e8:89:4e:14:75:f6: 61:f2:b7:48:6d:02:cf:fb:7c:c5:56:01:38:72:6a:4a:cf:9f: c8:c0:ae:33:27:a5:7a:50:2b:4e:b4:f1:ce:26:d6:a6:71:37: ab:e3:a4:8d:58:a5:30:a9:b2:5f:60:bc:11:b2:41:14:5a:9a: db:1d:52:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEIwRTExMC8GA1UEBRMoOTU3RTUwQTc1RkJFNTAyRjM4RTNFREJGM0Y0QUFBRTY2 NUFFMTQ4QjAeFw0yNDEwMDIwNDIwMTdaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZmNjYTAwLTU1NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDEy+ZwrARn6IFxxR4wmZYPy1QFo6Bfrwo5w08N5+npLbDvTgpaNVNokKpvDnh MZMIlJBLh3dNtvo9YC/TP9It0zX5BBF4jdMVfvYdRtedxRZiuarGrrfA4CP6U//F XA5hxHXMiSqPWxuoBM6OxdtkMDokMjFea+NWODFBbDozTiTCK9R2Ce79WEiSg4wg sgnaj1P2BFXyPjURbPlSYqDzY5BoRO1o0jPStMaOlWHiiFy7kHbU1od+aOt+LSzv eq1Ta31YG6bd3eGi9geMmLgPYiwwN7OIvSB9pW/BLqxjZwHsk00er2sTjJnkpTTX 2yQchjJFGGeH+9ZIhl2JW2xrAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQU2Z7NCOaf OD2aG7mzONdJIGctR60wHwYDVR0jBBgwFoAUlX5Qp1++UC844+2/P0qq5mWuFIsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjBFLzRFNkNCNEY2ODA2 OTExRUY4ODdCNzAzQ0M0RjlBRTAyL2xYNVFwMS0tVUM4NDQtMl9QMHFxNW1XdUZJ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFg1UXAxLS1VQzg0NC0yX1AwcXE1bVd1RklzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIwRS80RTZDQjRGNjgwNjkxMUVGODg3QjcwM0NDNEY5QUUwMi9BMEE5RDYwQzgw NzUxMUVGQUQ4QzQyNTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBr+AwDQYJKoZIhvcNAQELBQADggEBABmLVgq+NLfEV6KH zQBxAkH2BIxD7NrJINicHMmjqUzNi/G/EnA0v9xSvbEhh5hQyRF0WH6PvWl0g2E1 6iAzDqCa0llhpu7A9yDPfTyIOfSeWh95ksBDjl3J36cmJOWHnMVU7rEe03WX5hZc e5xMLY6Z+IV4PrQQlXoN1gkdoQA0PoP606h8gdBER7QOFoGguclx5zjwaW5dX2i7 uyfBgr1Ea+6GT2sk4IoJ8rSmnNoCyVUJTEckr7dV/P15xnEN6eiJThR19mHyt0ht As/7fMVWAThyakrPn8jArjMnpXpQK0608c4m1qZxN6vjpI1YpTCpsl9gvBGyQRRa mtsdUps= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:25 2024 by rpki-client on console-fra.rpki-client.org