$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/DF4076188EA911EFB2C2DF39C4F9AE02.roa File: DF4076188EA911EFB2C2DF39C4F9AE02.roa (raw, json) Hash identifier: RTMt48ljBvlnkHTTZ+J9lmK5rFGFXdWz+XaAResKx4U= Subject key identifier: 10:3C:28:C0:BE:7E:65:D9:D6:35:62:EC:87:95:BA:C6:BD:AF:99:C0 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0BFF Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/DF4076188EA911EFB2C2DF39C4F9AE02.roa Signing time: Sun 20 Oct 2024 06:09:32 +0000 ROA not before: Sun 20 Oct 2024 06:09:32 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 135615 IP address blocks: 2401:c140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3071 (0xbff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Oct 20 06:09:32 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=67149e9c-3045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:62:5f:2b:8b:9e:af:63:6e:fd:f1:17:4c: 95:01:d0:ba:55:97:e1:20:d0:7f:00:4f:12:75:b4: cb:ce:8d:52:4d:90:29:0b:ed:0b:a4:2b:70:56:49: ce:00:bb:ff:4e:b7:91:d7:69:61:19:68:f0:bc:2b: 55:ab:d9:7e:2e:de:9a:74:2c:44:d9:93:c3:ca:b6: c6:5b:19:88:cb:92:5d:88:7d:82:0b:ca:14:7a:0c: 56:21:6a:9c:86:9b:d4:75:b7:97:b1:e4:fa:a8:64: 5a:c9:8c:45:57:15:02:84:0b:e6:25:56:91:e1:03: 23:08:c2:90:ab:74:8d:7e:6a:6f:60:72:bc:40:16: 66:1b:60:2b:e2:ac:4a:4e:db:f0:06:74:cc:a5:0e: c8:fd:5c:0c:9c:c1:63:59:d4:80:5a:d2:e2:ab:89: 82:91:06:11:94:89:af:b7:a7:e6:3e:1f:0c:82:9e: 9f:35:41:70:2c:8e:c8:2c:59:7b:62:7d:3c:18:68: c0:6f:36:4a:82:23:04:f5:99:d7:61:83:2b:5b:58: 13:2c:29:ca:e5:62:dd:b5:46:6f:bf:b5:c4:2a:1f: 41:56:b6:6c:c4:15:fc:84:1c:15:44:17:ae:c6:e3: ac:fd:54:4a:3c:08:50:d6:8b:ec:db:99:cf:90:06: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:28:C0:BE:7E:65:D9:D6:35:62:EC:87:95:BA:C6:BD:AF:99:C0 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/DF4076188EA911EFB2C2DF39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:c140::/32 Signature Algorithm: sha256WithRSAEncryption b3:bf:83:00:2a:7d:d7:9b:3d:02:72:39:04:3c:3b:4c:97:f0: 05:9d:31:93:90:1d:4e:b0:26:6c:bc:cf:f8:11:89:ab:08:cd: 19:28:1c:89:ed:81:13:14:9f:6b:50:23:35:72:57:11:5c:99: ca:a4:1c:e5:32:46:24:39:61:e1:01:0d:4b:d2:ba:01:5f:bd: 10:20:e0:50:86:56:e3:f3:04:f2:1a:f9:9d:d5:06:0f:50:e4: c3:1a:5a:9f:20:44:4d:82:bb:3d:51:89:9b:59:1f:e7:d4:5d: f3:1d:ee:20:47:b3:c1:61:84:fa:f6:09:aa:8c:4e:66:67:3d: 83:c1:95:99:78:f1:9c:a1:ff:cb:b3:40:2a:fc:37:2b:d7:a2: 6b:c5:79:f3:e6:02:ec:e0:49:f2:d3:a5:6a:49:cb:a0:59:41: d4:42:28:33:12:1b:95:9d:11:24:2a:60:18:55:bd:60:69:d4: 0f:0b:1e:a9:b8:98:bd:44:d6:fc:75:11:1c:29:db:b2:80:92: a4:00:c5:21:ac:47:23:95:12:15:75:11:2a:1f:9f:0f:78:e3: 9a:81:2f:7c:b9:f5:85:b1:d2:e5:f3:3e:9c:68:51:56:03:bb: 89:2e:b4:7a:c7:a6:ad:d1:26:60:da:fd:7c:83:62:8a:21:ca: fd:cd:98:4e -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjQxMDIwMDYwOTMyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE0OWU5Yy0zMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT9iXyuLnq9jbv3xF0yVAdC6VZfhINB/AE8SdbTLzo1STZApC+0LpCtwVknO ALv/TreR12lhGWjwvCtVq9l+Lt6adCxE2ZPDyrbGWxmIy5JdiH2CC8oUegxWIWqc hpvUdbeXseT6qGRayYxFVxUChAvmJVaR4QMjCMKQq3SNfmpvYHK8QBZmG2Ar4qxK TtvwBnTMpQ7I/VwMnMFjWdSAWtLiq4mCkQYRlImvt6fmPh8Mgp6fNUFwLI7ILFl7 Yn08GGjAbzZKgiME9ZnXYYMrW1gTLCnK5WLdtUZvv7XEKh9BVrZsxBX8hBwVRBeu xuOs/VRKPAhQ1ovs25nPkAZgBwIDAQABo4ICljCCApIwHQYDVR0OBBYEFBA8KMC+ fmXZ1jVi7IeVusa9r5nAMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2MzUvQkE2NzM5OTBGRjI5MTFFOTk0RjRGNDE5QzRGOUFFMDIvREY0MDc2MTg4 RUE5MTFFRkIyQzJERjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAcFAMA0GCSqGSIb3DQEBCwUAA4IBAQCzv4MAKn3Xmz0C cjkEPDtMl/AFnTGTkB1OsCZsvM/4EYmrCM0ZKByJ7YETFJ9rUCM1clcRXJnKpBzl MkYkOWHhAQ1L0roBX70QIOBQhlbj8wTyGvmd1QYPUOTDGlqfIERNgrs9UYmbWR/n 1F3zHe4gR7PBYYT69gmqjE5mZz2DwZWZePGcof/Ls0Aq/Dcr16JrxXnz5gLs4Eny 06VqScugWUHUQigzEhuVnREkKmAYVb1gadQPCx6puJi9RNb8dREcKduygJKkAMUh rEcjlRIVdREqH58PeOOagS98ufWFsdLl8z6caFFWA7uJLrR6x6at0SZg2v18g2KK Icr9zZhO -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org