$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa File: 139300E4BA6911EFA78E2F66C4F9AE02.roa (raw, json) Hash identifier: gO2QyXSszqcgfjCvo4Y7xCmlJ4qvKPfKX0bIWcDfzO8= Subject key identifier: 5A:59:4B:9B:27:6B:F6:11:B8:7F:4C:95:C2:91:D7:E1:26:89:F0:FB Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 017B Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa Signing time: Sat 14 Dec 2024 22:16:33 +0000 ROA not before: Sat 14 Dec 2024 22:16:33 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 32167 IP address blocks: 2401:b60:1000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 05:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B Validity Not Before: Dec 14 22:16:33 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=675e03c1-e148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:cc:3b:dc:6f:5e:73:ee:d4:14:bd:ba:b1: 8a:8a:9c:71:06:f3:04:c8:5a:0b:f0:7b:39:ee:ef: aa:9b:be:1a:34:34:59:9b:4f:85:18:53:a5:f8:8d: 09:78:91:f0:3c:b3:ab:6b:68:a5:21:df:08:c8:b4: e7:7a:a1:12:95:59:33:ba:0d:2d:3a:18:d7:00:4b: 2d:5e:ad:0f:de:7d:da:46:53:a3:97:62:7f:98:75: b7:32:14:ff:37:90:33:d7:98:1f:d3:fb:7d:fd:b4: e7:b3:e2:9a:28:cd:c5:c0:4a:9d:4f:29:f8:7c:47: 6a:a6:c5:61:56:5d:2d:e0:20:b4:46:a4:ec:c2:81: 7e:b0:4c:4b:fa:b5:ea:38:fa:bc:f9:cd:16:4c:d4: 6a:44:08:83:a1:84:de:04:c5:91:6e:5d:85:45:59: d0:18:3b:87:2a:a5:8f:e4:8c:3d:dc:99:73:e5:17: 69:69:7f:3c:59:ab:6e:b9:8d:a8:a9:74:77:62:6a: a8:96:93:45:44:80:2f:35:99:f2:2e:5e:0b:40:98: a5:20:41:2e:23:71:5a:03:4a:3b:60:c7:b4:32:48: 6d:25:90:9c:6f:22:ff:4c:c1:57:5e:44:d2:66:d1: 6b:88:47:f8:88:be:6a:71:d9:1a:2f:10:fa:46:00: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:59:4B:9B:27:6B:F6:11:B8:7F:4C:95:C2:91:D7:E1:26:89:F0:FB X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b60:1000::/36 Signature Algorithm: sha256WithRSAEncryption 8b:55:c9:0c:4b:47:f4:51:a4:5e:0a:8a:c9:00:3f:ee:de:0a: 25:0d:09:8f:92:31:e9:ec:62:45:24:05:63:55:2c:e8:c8:ef: 36:7c:60:f0:e6:ec:c7:aa:e8:52:83:dc:49:0b:f5:b1:dc:e4: 6c:fe:b2:49:e5:13:38:9b:49:de:0a:d5:3e:83:d3:8b:6f:0e: 56:ad:5d:28:fe:e1:6b:0e:9f:f6:ac:22:5f:7c:d1:5b:cb:e0: 07:00:3d:7f:8a:6c:1a:ed:1e:3e:26:02:cf:0b:ba:78:07:b0: e8:f7:fc:d9:66:8a:13:e0:c2:6c:63:67:04:51:de:80:6e:b2: f5:ec:9f:5d:b3:13:04:73:d5:ef:d0:7a:ea:25:7f:e0:47:fc: fa:dd:cd:06:04:44:5c:e8:ac:dc:c3:00:4d:c5:93:d9:ee:b8: 40:39:d9:6c:63:8c:f9:01:6a:c6:8d:af:df:e4:71:a4:ef:6d: 48:79:f3:4e:ff:26:ca:72:4a:e4:47:f5:35:37:fd:64:84:47: a9:a5:f4:ba:d4:74:db:7d:d5:47:cd:72:b8:7c:ac:08:4a:d7: 65:c7:89:cc:73:27:6f:77:33:f4:06:13:59:17:86:b9:7d:ec: 82:38:ca:cb:d1:20:33:9d:ca:45:ec:34:30:49:cb:45:d1:33: 9f:2a:19:10 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjQxMjE0MjIxNjMzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVlMDNjMS1lMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUTMO9xvXnPu1BS9urGKipxxBvMEyFoL8Hs57u+qm74aNDRZm0+FGFOl+I0J eJHwPLOra2ilId8IyLTneqESlVkzug0tOhjXAEstXq0P3n3aRlOjl2J/mHW3MhT/ N5Az15gf0/t9/bTns+KaKM3FwEqdTyn4fEdqpsVhVl0t4CC0RqTswoF+sExL+rXq OPq8+c0WTNRqRAiDoYTeBMWRbl2FRVnQGDuHKqWP5Iw93Jlz5RdpaX88WatuuY2o qXR3YmqolpNFRIAvNZnyLl4LQJilIEEuI3FaA0o7YMe0MkhtJZCcbyL/TMFXXkTS ZtFriEf4iL5qcdkaLxD6RgDY/QIDAQABo4IClzCCApMwHQYDVR0OBBYEFFpZS5sn a/YRuH9MlcKR1+EmifD7MB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvMTM5MzAwRTRC QTY5MTFFRkE3OEUyRjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkAQtgEDANBgkqhkiG9w0BAQsFAAOCAQEAi1XJDEtH9FGk XgqKyQA/7t4KJQ0Jj5Ix6exiRSQFY1Us6MjvNnxg8Obsx6roUoPcSQv1sdzkbP6y SeUTOJtJ3grVPoPTi28OVq1dKP7haw6f9qwiX3zRW8vgBwA9f4psGu0ePiYCzwu6 eAew6Pf82WaKE+DCbGNnBFHegG6y9eyfXbMTBHPV79B66iV/4Ef8+t3NBgREXOis 3MMATcWT2e64QDnZbGOM+QFqxo2v3+RxpO9tSHnzTv8mynJK5Ef1NTf9ZIRHqaX0 utR0233VR81yuHysCErXZceJzHMnb3cz9AYTWReGuX3sgjjKy9EgM53KRew0MEnL RdEznyoZEA== -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:26 2025 by rpki-client