$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3E0E4C3A636F11EFB3362B4DC4F9AE02.roa File: 3E0E4C3A636F11EFB3362B4DC4F9AE02.roa (raw, json) Hash identifier: Ur+24j4wPQdw2dJQTbZo2OQyePV5PAm9eA1l/sZZoz4= Subject key identifier: BE:8C:76:9C:05:57:7E:4A:3D:A9:0E:F6:52:C1:84:0C:24:4D:53:7C Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3579 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3E0E4C3A636F11EFB3362B4DC4F9AE02.roa Signing time: Mon 26 Aug 2024 05:51:30 +0000 ROA not before: Mon 26 Aug 2024 05:51:30 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 203 IP address blocks: 2406:6400:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 14:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13689 (0x3579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Aug 26 05:51:30 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66cc17e2-fb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:f0:02:76:0f:c6:20:a1:f3:d7:35:cc:43:c0: fd:13:d5:1c:16:92:13:8a:b3:4b:37:49:6c:c2:82: 87:f7:ea:88:aa:15:a8:22:61:0b:99:a0:5d:d0:7e: b1:71:92:d5:be:ac:fd:ef:dc:39:8c:f3:dd:2f:e3: 36:a9:4a:b5:35:c8:74:56:83:0b:ba:5b:28:2a:d7: 0b:df:47:53:df:ba:9f:58:9a:e1:50:8c:ea:93:ce: 2c:0e:e8:c8:5e:06:02:64:fc:fb:29:c2:a1:4a:6d: 8e:cc:2e:44:64:b0:aa:d6:e3:a0:b0:93:29:03:9d: ca:2a:34:32:9b:51:44:42:e3:a5:f6:b7:23:38:63: 56:14:70:0f:46:b6:48:99:87:44:da:36:cc:e2:46: 82:2a:0d:df:95:c8:36:ae:6b:14:aa:1a:8f:e7:b6: 0e:bd:b8:47:9b:4a:d3:39:72:fb:a3:60:68:6d:a5: bd:07:b7:ba:02:4f:16:03:15:4f:f0:c4:c4:84:16: 43:da:f3:b4:23:7e:b4:e6:27:19:37:39:96:42:61: 5c:40:74:4d:97:6b:58:04:cd:23:7c:cf:05:e3:25: 05:7b:65:13:83:b8:1c:ec:7d:bf:b6:2b:f9:a4:f2: 90:5f:5f:5e:b5:88:ad:bc:e2:f5:42:c9:95:87:fa: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8C:76:9C:05:57:7E:4A:3D:A9:0E:F6:52:C1:84:0C:24:4D:53:7C X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3E0E4C3A636F11EFB3362B4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:6400:1000::/48 Signature Algorithm: sha256WithRSAEncryption 33:d6:27:97:a4:23:6a:50:83:2a:7f:5b:a5:d9:d3:40:29:17: c1:e5:a0:7a:2d:12:77:e1:cc:84:5b:82:89:78:6e:72:1d:7f: 11:f4:ba:86:33:c4:97:65:ae:d6:47:9b:36:c2:6d:2a:0f:e1: ba:2a:ff:c5:35:d6:e4:14:38:c0:97:90:c1:8a:49:de:36:43: 92:e4:e2:36:e9:ce:cd:9f:6f:51:85:22:8a:98:99:ca:b6:63: e8:11:b6:68:8d:90:50:a4:bd:fb:6b:23:17:23:f4:43:c7:31: 71:42:87:94:b2:50:62:b9:7e:39:ae:ed:dc:f7:b4:0d:7c:3f: f0:f5:f3:7f:e9:d9:04:b6:b1:bf:bf:2a:6f:1c:79:47:06:41: 56:d3:e1:13:66:f6:03:b9:85:de:df:ec:df:a5:73:cc:30:c1: 61:52:de:2c:20:76:59:c4:5c:0d:65:7e:2e:d2:14:8f:38:fb: 7c:69:c1:de:e6:a8:3d:4e:2b:c3:c2:3b:91:29:e0:28:ab:14: a3:62:fa:12:bf:76:e5:fa:ed:9e:c2:e2:b2:6f:b8:84:f9:85: 20:50:8b:3f:75:8e:4c:8e:e1:dc:a7:50:b9:18:15:d2:2a:c1: 32:76:e7:cf:e9:31:c7:34:38:04:55:1a:7f:73:7d:c8:dc:18: 49:10:f4:f0 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICNXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjQwODI2MDU1MTMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNjMTdlMi1mYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+/ACdg/GIKHz1zXMQ8D9E9UcFpITirNLN0lswoKH9+qIqhWoImELmaBd0H6x cZLVvqz979w5jPPdL+M2qUq1Nch0VoMLulsoKtcL30dT37qfWJrhUIzqk84sDujI XgYCZPz7KcKhSm2OzC5EZLCq1uOgsJMpA53KKjQym1FEQuOl9rcjOGNWFHAPRrZI mYdE2jbM4kaCKg3flcg2rmsUqhqP57YOvbhHm0rTOXL7o2BobaW9B7e6Ak8WAxVP 8MTEhBZD2vO0I3605icZNzmWQmFcQHRNl2tYBM0jfM8F4yUFe2UTg7gc7H2/tiv5 pPKQX19etYitvOL1QsmVh/qw9wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFL6MdpwF V35KPakO9lLBhAwkTVN8MB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvM0UwRTRDM0E2 MzZGMTFFRkIzMzYyQjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBmQAEAAwDQYJKoZIhvcNAQELBQADggEBADPWJ5ekI2pQ gyp/W6XZ00ApF8HloHotEnfhzIRbgol4bnIdfxH0uoYzxJdlrtZHmzbCbSoP4boq /8U11uQUOMCXkMGKSd42Q5Lk4jbpzs2fb1GFIoqYmcq2Y+gRtmiNkFCkvftrIxcj 9EPHMXFCh5SyUGK5fjmu7dz3tA18P/D183/p2QS2sb+/Km8ceUcGQVbT4RNm9gO5 hd7f7N+lc8wwwWFS3iwgdlnEXA1lfi7SFI84+3xpwd7mqD1OK8PCO5Ep4CirFKNi +hK/duX67Z7C4rJvuIT5hSBQiz91jkyO4dynULkYFdIqwTJ258/pMcc0OARVGn9z fcjcGEkQ9PA= -----END CERTIFICATE-----Generated at Fri Sep 20 16:42:19 2024 by rpki-client on console-ams.rpki-client.org