$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa File: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (raw, json) Hash identifier: 5EMVY+mr8MeziaFmHYoIUZ8HY+OW0Ux+vJdDqNYyM+A= Subject key identifier: 76:42:D0:4B:DF:B9:5E:C4:77:BF:40:E9:AF:45:B1:70:45:29:CD:B2 Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 0536 Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa Signing time: Sat 31 Aug 2024 01:04:00 +0000 ROA not before: Sat 31 Aug 2024 01:04:00 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 29473 IP address blocks: 2001:df6:cd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Aug 31 01:04:00 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66d26c00-66a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:f3:22:78:bc:8f:23:1c:16:17:4a:2f:8f: 35:0d:f7:ed:c8:b0:76:fc:b7:49:2e:78:07:c7:e6: 4f:a2:e2:8c:68:cc:b7:17:54:98:d4:0f:2c:5e:61: bb:b7:d2:0f:08:7a:f2:20:bf:04:ab:bd:45:34:2e: a0:00:9f:8b:8b:d7:c8:9e:76:98:85:66:2c:d8:10: 8a:26:38:25:e7:f2:76:0a:7a:89:2e:ff:97:03:7a: 0f:8a:8e:b0:ef:8d:42:fe:51:17:d7:7b:49:d4:95: ce:22:61:41:8a:22:cf:89:b3:c7:11:ca:55:73:d2: 68:de:70:b2:09:54:ce:5b:63:9c:d5:fe:f7:2d:d8: 71:c1:69:c7:64:33:21:1f:f0:01:71:d7:f2:e8:0c: be:84:b0:fd:29:a3:87:c7:25:82:5e:37:fa:38:d9: fc:cc:fc:3b:fb:1a:4b:89:d0:8b:d5:44:99:5e:b1: a7:9c:c7:4f:79:10:2d:9d:e8:b8:47:37:d7:3e:2f: f6:f7:0b:46:ae:b2:67:ff:be:61:b2:11:60:c5:53: 78:50:e5:e4:ef:49:15:d6:76:be:dc:73:d1:ee:81: d6:ec:b7:04:1c:78:9e:63:ed:13:3f:57:73:0e:5c: 3e:6f:37:f1:5a:8b:41:60:81:5d:fa:ab:09:49:d0: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:42:D0:4B:DF:B9:5E:C4:77:BF:40:E9:AF:45:B1:70:45:29:CD:B2 X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:cd80::/48 Signature Algorithm: sha256WithRSAEncryption 39:d2:8c:76:bb:ac:f0:c4:7b:e1:3d:2d:7f:42:43:70:82:db: 7b:f9:5f:3a:6d:40:29:d8:66:d7:d2:14:2e:2f:e6:4f:3d:22: 67:f8:0a:79:d5:6d:e7:60:a8:1a:77:48:1b:ce:3c:56:48:c3: 28:b3:b2:a4:a9:bb:e0:49:52:2d:2f:c6:3c:32:30:f4:df:52: 2c:c2:e1:43:ed:2d:be:65:2a:a9:c8:ba:81:70:76:4f:03:5a: 93:02:56:5e:83:df:69:38:18:fb:05:28:63:1c:c0:b8:77:96: 09:a8:58:07:84:32:4c:f5:b7:e3:0c:76:f9:b7:88:40:7a:82: 3b:32:57:c8:9a:de:cd:e6:72:c6:9a:51:7d:20:6a:5a:d8:ec: e8:14:21:39:da:98:e2:b4:bf:55:be:ec:74:11:37:04:e3:8a: 63:37:69:6a:37:97:8e:f5:2e:aa:7d:7d:3c:e6:f0:e0:fe:b2: 77:b9:ff:f2:b2:31:b7:41:38:53:a8:c6:4f:19:2a:32:23:fa: d8:19:cf:34:d0:5f:17:b9:40:94:82:18:db:7c:d8:f6:3a:c3: 47:c6:57:7f:9f:f3:24:7c:42:d6:73:e7:1d:a8:01:0c:58:d8: 87:6b:8a:25:f0:1b:47:26:2f:32:02:3e:c3:29:ca:ef:fc:6d: 6e:0a:ab:55 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjQwODMxMDEwNDAwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyNmMwMC02NmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApInzIni8jyMcFhdKL481DfftyLB2/LdJLngHx+ZPouKMaMy3F1SY1A8sXmG7 t9IPCHryIL8Eq71FNC6gAJ+Li9fInnaYhWYs2BCKJjgl5/J2CnqJLv+XA3oPio6w 741C/lEX13tJ1JXOImFBiiLPibPHEcpVc9Jo3nCyCVTOW2Oc1f73LdhxwWnHZDMh H/ABcdfy6Ay+hLD9KaOHxyWCXjf6ONn8zPw7+xpLidCL1USZXrGnnMdPeRAtnei4 RzfXPi/29wtGrrJn/75hshFgxVN4UOXk70kV1na+3HPR7oHW7LcEHHieY+0TP1dz Dlw+bzfxWotBYIFd+qsJSdBfRwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHZC0Evf uV7Ed79A6a9FsXBFKc2yMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBFRjgvQzkzOEQxMDZDQjU0MTFFQkEzRDM2QzVCQzRGOUFFMDIvMTc2N0NFNEE5 M0M3MTFFREIzRDhBODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ32zYAwDQYJKoZIhvcNAQELBQADggEBADnSjHa7rPDE e+E9LX9CQ3CC23v5XzptQCnYZtfSFC4v5k89Imf4CnnVbedgqBp3SBvOPFZIwyiz sqSpu+BJUi0vxjwyMPTfUizC4UPtLb5lKqnIuoFwdk8DWpMCVl6D32k4GPsFKGMc wLh3lgmoWAeEMkz1t+MMdvm3iEB6gjsyV8ia3s3mcsaaUX0galrY7OgUITnamOK0 v1W+7HQRNwTjimM3aWo3l471Lqp9fTzm8OD+sne5//KyMbdBOFOoxk8ZKjIj+tgZ zzTQXxe5QJSCGNt82PY6w0fGV3+f8yR8QtZz5x2oAQxY2IdriiXwG0cmLzICPsMp yu/8bW4Kq1U= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org