$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A069EA0C8EE911EE8698A64FC4F9AE02.roa File: A069EA0C8EE911EE8698A64FC4F9AE02.roa (raw, json) Hash identifier: 1Kpd2YjRlMJbYQzqvODxmlNt6RPiHgoY7Xsf29roK9M= Subject key identifier: 28:E0:C5:16:42:FA:F9:D5:D1:BD:45:92:54:2F:41:AF:BF:41:22:99 Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Certificate serial: 0105 Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A069EA0C8EE911EE8698A64FC4F9AE02.roa Signing time: Sat 03 Aug 2024 05:55:47 +0000 ROA not before: Sat 03 Aug 2024 05:55:47 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 23470 IP address blocks: 2401:b60:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4 Validity Not Before: Aug 3 05:55:47 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66adc663-193a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:64:6e:b9:ef:3c:0e:c7:60:92:23:a9:07: 2f:50:e2:19:4d:d7:c9:60:fe:80:29:cd:5c:1d:d6: 8f:42:cd:6a:39:48:82:a4:c5:a7:1e:b7:45:2d:08: 71:7d:7e:2f:58:de:0b:a9:5f:ee:ff:e4:fd:dd:b1: 31:a9:72:c9:72:48:d3:16:56:49:39:38:92:4f:a1: ae:b7:7a:f5:c1:b0:87:7c:d7:09:2e:ff:97:f2:9b: da:2d:c7:08:f6:be:c7:ca:15:df:eb:5e:1a:72:cc: f8:14:f1:e5:50:58:f9:1b:78:e1:5c:6b:c0:43:9f: 72:26:92:cd:ac:b0:d6:02:be:b8:10:02:ca:90:ed: 31:09:45:58:86:07:62:ef:f1:57:77:0d:d6:bb:4c: 23:ca:e3:d1:e0:a9:a7:d8:12:20:ac:bd:99:02:59: 35:c8:e2:d9:0c:3d:c9:9f:a9:b3:c9:e6:6a:15:7f: ee:a5:35:3f:92:da:49:b0:bf:06:90:ac:9b:d1:66: 5f:6e:f7:d6:3c:0c:ae:b6:70:2d:15:6b:ee:e6:9d: e7:e2:a6:88:71:fd:13:e6:3d:36:73:71:03:39:77: b1:5d:f8:60:87:e6:8e:46:0a:61:d2:bf:8e:4f:86: 72:78:d9:1f:b4:e6:8f:38:f0:9b:ed:f3:39:69:8c: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E0:C5:16:42:FA:F9:D5:D1:BD:45:92:54:2F:41:AF:BF:41:22:99 X509v3 Authority Key Identifier: keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A069EA0C8EE911EE8698A64FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b60:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 22:91:87:73:6d:9c:5f:f1:a9:c6:4f:21:c0:25:25:1a:89:bf: b7:43:46:53:58:fd:e1:f8:92:d1:e5:a5:75:ee:8a:b5:48:f8: 75:8c:ed:e7:37:e7:95:50:62:a9:b7:4f:bd:48:95:b4:3b:2a: dd:53:81:d2:5e:c2:2c:3d:e7:c6:e6:6f:a6:6a:00:d1:37:66: 48:94:ae:59:88:59:9e:d9:11:b3:b5:f2:14:81:7b:40:8d:5c: 86:03:54:54:ba:82:b1:8b:18:15:01:08:64:f7:b9:57:4e:63: ed:b4:60:bf:46:69:82:6d:66:06:df:8c:10:95:a1:53:fb:a2: 86:ff:23:e8:fb:0a:f9:2b:18:2e:db:5c:1a:40:e7:80:1d:52: 41:14:2d:51:16:c0:69:69:10:b1:95:17:65:a2:f2:bc:50:c4: 9e:f1:c2:00:fc:89:50:6f:05:ff:d6:dd:ff:eb:c1:be:09:b1: 87:24:c6:52:e3:fc:39:1e:52:f3:bf:43:35:71:b1:5d:5b:50: da:d8:a5:7a:70:6b:7f:73:33:af:45:34:03:7c:d2:d3:70:84: a7:a4:98:c5:54:98:36:f6:93:61:fc:a8:59:3f:d4:26:89:ab: 60:a0:cd:71:c3:34:79:94:34:65:a8:21:f5:32:66:74:dc:18: 06:fd:56:f2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0 NTIzOUNDRjQwHhcNMjQwODAzMDU1NTQ3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkYzY2My0xOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE9kbrnvPA7HYJIjqQcvUOIZTdfJYP6AKc1cHdaPQs1qOUiCpMWnHrdFLQhx fX4vWN4LqV/u/+T93bExqXLJckjTFlZJOTiST6Gut3r1wbCHfNcJLv+X8pvaLccI 9r7HyhXf614acsz4FPHlUFj5G3jhXGvAQ59yJpLNrLDWAr64EALKkO0xCUVYhgdi 7/FXdw3Wu0wjyuPR4Kmn2BIgrL2ZAlk1yOLZDD3Jn6mzyeZqFX/upTU/ktpJsL8G kKyb0WZfbvfWPAyutnAtFWvu5p3n4qaIcf0T5j02c3EDOXexXfhgh+aORgph0r+O T4ZyeNkftOaPOPCb7fM5aYyvpwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCjgxRZC +vnV0b1FklQvQa+/QSKZMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvQTA2OUVBMEM4 RUU5MTFFRTg2OThBNjRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAQtg//8wDQYJKoZIhvcNAQELBQADggEBACKRh3NtnF/x qcZPIcAlJRqJv7dDRlNY/eH4ktHlpXXuirVI+HWM7ec355VQYqm3T71IlbQ7Kt1T gdJewiw958bmb6ZqANE3ZkiUrlmIWZ7ZEbO18hSBe0CNXIYDVFS6grGLGBUBCGT3 uVdOY+20YL9GaYJtZgbfjBCVoVP7oob/I+j7CvkrGC7bXBpA54AdUkEULVEWwGlp ELGVF2Wi8rxQxJ7xwgD8iVBvBf/W3f/rwb4JsYckxlLj/DkeUvO/QzVxsV1bUNrY pXpwa39zM69FNAN80tNwhKekmMVUmDb2k2H8qFk/1CaJq2CgzXHDNHmUNGWoIfUy ZnTcGAb9VvI= -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:08 2024 by rpki-client on console-fra.rpki-client.org