$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/B7D34CC444ED11EE8D931624C4F9AE02.roa File: B7D34CC444ED11EE8D931624C4F9AE02.roa (raw, json) Hash identifier: o91C1jFze1aQemqWDwZsi+b9/Rmy3VyieJUeIkyvzoc= Subject key identifier: EB:7C:D2:AC:97:AE:29:8C:8A:84:27:7A:BC:7C:17:36:7B:73:B8:0C Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: FF Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/B7D34CC444ED11EE8D931624C4F9AE02.roa Signing time: Sat 07 Sep 2024 05:37:37 +0000 ROA not before: Sat 07 Sep 2024 05:37:37 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 151399 IP address blocks: 2401:920::/32 maxlen: 32 2401:920:1::/48 maxlen: 48 2401:920:2::/48 maxlen: 48 2401:920:3::/48 maxlen: 48 2401:920:4::/48 maxlen: 48 2401:920:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Sep 7 05:37:37 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66dbe6a0-1038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:63:01:70:14:43:63:81:31:9c:45:d6:22: e7:b6:be:c7:c8:23:5f:a8:c2:a3:ef:3d:07:fc:89: f3:9b:cb:77:e4:02:0a:43:1b:52:81:f4:d4:08:4e: c2:9f:58:31:8c:72:a1:69:fd:5a:92:c7:76:ea:ee: b9:cb:aa:1c:6e:57:94:b8:81:a5:30:6f:1e:cf:8d: dd:56:fe:1b:37:2c:66:8a:df:d9:29:a8:d7:47:00: db:ac:af:f1:68:6e:66:3e:86:6e:64:1c:45:e6:a2: f4:62:09:4f:0c:48:a4:aa:0a:01:e4:5b:fd:1c:bd: fa:60:4d:3c:b8:59:00:ec:be:37:56:ca:5f:06:bb: 6d:15:51:b2:e2:81:87:7e:d3:23:79:c9:d3:29:54: 8d:df:64:57:cf:fa:a4:39:26:e8:2f:a2:c1:da:60: e0:95:38:52:b3:d0:00:10:1e:cb:e1:de:8d:bd:48: 3f:8a:f5:7c:79:6f:55:1a:2b:44:75:b1:16:c6:73: df:7d:a6:d1:30:00:c1:ce:4f:f5:93:af:9f:81:12: 52:d1:60:83:88:5c:5c:6a:c8:3d:1d:b9:9b:b4:62: b1:14:41:b7:52:8f:c6:f4:0b:72:be:d3:bb:ad:72: 9b:2d:49:6f:48:d8:1e:dc:5f:15:c3:86:9a:bf:71: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7C:D2:AC:97:AE:29:8C:8A:84:27:7A:BC:7C:17:36:7B:73:B8:0C X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/B7D34CC444ED11EE8D931624C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:920::/32 Signature Algorithm: sha256WithRSAEncryption a7:bb:c9:5c:a2:fc:79:a3:35:b2:33:e5:66:c2:25:7b:df:c3: 47:43:40:a9:98:77:db:53:8d:7f:24:0f:4d:ef:eb:3c:ac:cd: a7:ba:c0:53:22:fc:82:f0:1d:0b:5c:86:a8:ab:d0:08:29:24: 39:15:c7:70:69:01:ca:d4:39:3f:5b:4e:cd:dc:cd:9c:42:3c: 3e:77:f1:74:10:1e:81:07:93:7a:96:34:09:38:f9:f1:ef:99: 3d:8d:70:fb:20:0e:fa:48:c2:fe:d5:e9:4b:2b:c6:93:ec:1d: ce:3b:83:47:89:8b:a3:26:40:2f:c0:86:49:f5:c3:a8:d1:fd: cd:bb:9e:07:c2:76:a3:00:08:de:91:2a:99:29:0d:82:08:27: 15:a2:65:6f:2e:11:79:ac:61:c4:a4:de:23:16:91:3d:60:4b: c4:76:4e:61:c8:33:b6:a2:c6:4b:45:4b:4e:ce:d9:06:26:f8: d3:28:17:bc:e9:1f:01:83:69:09:ac:54:ba:c9:9a:3f:cf:db: 62:2c:7d:21:fc:a8:79:a1:af:fe:0a:bc:c2:f0:d5:ec:b3:10: c2:00:82:bf:06:9f:4a:16:6f:c8:2c:7b:60:90:77:8a:56:53: 3d:8e:51:aa:08:6e:b0:62:91:5e:38:47:1a:21:a2:d2:b5:9c: 4b:13:0a:1b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjQwOTA3MDUzNzM3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRiZTZhMC0xMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwtjAXAUQ2OBMZxF1iLntr7HyCNfqMKj7z0H/Inzm8t35AIKQxtSgfTUCE7C n1gxjHKhaf1aksd26u65y6ocbleUuIGlMG8ez43dVv4bNyxmit/ZKajXRwDbrK/x aG5mPoZuZBxF5qL0YglPDEikqgoB5Fv9HL36YE08uFkA7L43VspfBrttFVGy4oGH ftMjecnTKVSN32RXz/qkOSboL6LB2mDglThSs9AAEB7L4d6NvUg/ivV8eW9VGitE dbEWxnPffabRMADBzk/1k6+fgRJS0WCDiFxcasg9HbmbtGKxFEG3Uo/G9AtyvtO7 rXKbLUlvSNge3F8Vw4aav3GI9wIDAQABo4ICljCCApIwHQYDVR0OBBYEFOt80qyX rimMioQnerx8FzZ7c7gMMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJFOTIvMTg4NUE2RDIwNkNGMTFFRTlDOTcxMjdCQzRGOUFFMDIvQjdEMzRDQzQ0 NEVEMTFFRThEOTMxNjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAQkgMA0GCSqGSIb3DQEBCwUAA4IBAQCnu8lcovx5ozWy M+VmwiV738NHQ0CpmHfbU41/JA9N7+s8rM2nusBTIvyC8B0LXIaoq9AIKSQ5Fcdw aQHK1Dk/W07N3M2cQjw+d/F0EB6BB5N6ljQJOPnx75k9jXD7IA76SML+1elLK8aT 7B3OO4NHiYujJkAvwIZJ9cOo0f3Nu54HwnajAAjekSqZKQ2CCCcVomVvLhF5rGHE pN4jFpE9YEvEdk5hyDO2osZLRUtOztkGJvjTKBe86R8Bg2kJrFS6yZo/z9tiLH0h /Kh5oa/+CrzC8NXssxDCAIK/Bp9KFm/ILHtgkHeKVlM9jlGqCG6wYpFeOEcaIaLS tZxLEwob -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org