$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/F548379631A011EE9F9D0D4DC4F9AE02.roa File: F548379631A011EE9F9D0D4DC4F9AE02.roa (raw, json) Hash identifier: /kDb/mIfiTzZaD+1LObZyFKqMvX6yIvzrc7zLgYmrVo= Subject key identifier: 09:CB:35:80:36:C2:73:AB:0A:25:50:12:57:3E:ED:1D:E3:47:3C:9B Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: B7 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/F548379631A011EE9F9D0D4DC4F9AE02.roa Signing time: Wed 03 Jan 2024 05:46:36 +0000 ROA not before: Wed 03 Jan 2024 05:46:36 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150430 IP address blocks: 2001:df1:efc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Jan 3 05:46:36 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6594f4bb-21f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:20:1d:ed:a0:8f:cb:dc:10:b5:52:40:a7: 5c:a5:2a:1e:14:86:0b:d0:56:c8:a2:49:8f:5a:ff: 28:85:ae:aa:f1:2c:cd:6d:c7:96:69:2d:28:3d:da: a1:14:60:6a:d2:b9:8c:25:05:d7:0f:d7:84:7a:32: f3:bd:2d:6e:71:d8:92:45:fd:28:56:f6:11:f4:8f: 6e:f2:c4:5b:44:ee:af:65:de:8c:29:c9:60:7b:8b: 34:02:a0:82:3d:c8:c7:e8:0a:b6:ce:0e:be:fe:3e: 7e:d9:53:12:6e:f7:28:e4:2c:c3:f7:74:a9:68:51: 34:28:09:56:69:1e:7c:cb:b2:e9:dc:2b:11:3e:55: 0e:e0:85:d3:da:fd:00:3a:a9:95:6f:4c:0c:7b:49: 64:0c:67:45:96:26:e8:5f:b3:46:d7:95:a1:2d:fb: 44:4c:70:a5:a1:87:63:69:c8:ea:d9:40:a9:68:ab: fe:6f:be:77:07:a9:a5:54:fb:75:0e:b1:74:77:76: d1:81:51:ef:d3:41:0a:94:72:6d:07:04:68:1b:b8: c0:bd:d9:6a:cd:c3:14:a2:43:7e:5e:60:30:df:57: 08:5c:97:b4:ff:23:cf:1d:2d:72:1f:7b:ef:3b:67: d9:2c:fe:56:de:55:7c:76:5d:9f:60:8a:86:88:71: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CB:35:80:36:C2:73:AB:0A:25:50:12:57:3E:ED:1D:E3:47:3C:9B X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/F548379631A011EE9F9D0D4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:efc0::/48 Signature Algorithm: sha256WithRSAEncryption 15:df:66:1b:4f:cb:c0:8b:0d:8f:fe:d8:ca:f3:ec:b7:32:4b: de:a8:87:27:13:34:52:c5:60:38:82:31:fb:ea:bb:29:fa:17: 9a:7d:2f:03:83:18:72:d6:e5:b3:c8:a5:2c:2f:c1:cb:55:10: 31:0c:ea:f6:6a:3c:67:cc:5f:e6:23:4c:f7:7c:7d:e3:0f:39: b2:fe:cb:8f:af:61:bf:f0:a4:1d:26:2a:a7:f2:28:ee:8f:56: 66:9d:28:9d:95:b7:63:f6:24:1f:19:ef:5f:ec:ad:fd:e2:79: a8:b1:d9:da:e7:25:08:b3:4f:48:cf:8e:83:b1:6e:74:f9:da: 75:aa:18:48:68:a6:43:32:1f:da:0c:9b:e0:cb:0c:34:8f:78: 05:44:ea:e6:5a:a4:43:41:cb:2d:cd:3f:d5:b8:11:f2:c1:c7: 2f:91:5c:35:0e:99:9f:0a:bf:94:29:4f:a7:e1:95:fd:6f:9e: 3b:21:62:b4:fc:9c:ac:5f:d7:ae:3e:c5:a7:64:5f:1d:6e:23: db:67:74:c4:43:31:44:0f:99:d7:84:6b:60:0d:bd:2f:ed:f7: 53:8b:70:49:0b:a6:2d:8f:7a:98:51:31:1e:19:4e:fc:2a:b3: 61:ff:fb:0d:08:94:4a:19:b4:dc:15:d6:cb:4f:86:02:4c:d8: 41:66:59:0b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjQwMTAzMDU0NjM2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0ZjRiYi0yMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonsgHe2gj8vcELVSQKdcpSoeFIYL0FbIokmPWv8oha6q8SzNbceWaS0oPdqh FGBq0rmMJQXXD9eEejLzvS1ucdiSRf0oVvYR9I9u8sRbRO6vZd6MKclge4s0AqCC PcjH6Aq2zg6+/j5+2VMSbvco5CzD93SpaFE0KAlWaR58y7Lp3CsRPlUO4IXT2v0A OqmVb0wMe0lkDGdFliboX7NG15WhLftETHCloYdjacjq2UCpaKv+b753B6mlVPt1 DrF0d3bRgVHv00EKlHJtBwRoG7jAvdlqzcMUokN+XmAw31cIXJe0/yPPHS1yH3vv O2fZLP5W3lV8dl2fYIqGiHETIQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAnLNYA2 wnOrCiVQElc+7R3jRzybMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBGQzYvMUQ5RjNFMDhBNzYxMTFFRDk4MjQyMjUyQzRGOUFFMDIvRjU0ODM3OTYz MUEwMTFFRTlGOUQwRDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3x78AwDQYJKoZIhvcNAQELBQADggEBABXfZhtPy8CL DY/+2Mrz7LcyS96ohycTNFLFYDiCMfvquyn6F5p9LwODGHLW5bPIpSwvwctVEDEM 6vZqPGfMX+YjTPd8feMPObL+y4+vYb/wpB0mKqfyKO6PVmadKJ2Vt2P2JB8Z71/s rf3ieaix2drnJQizT0jPjoOxbnT52nWqGEhopkMyH9oMm+DLDDSPeAVE6uZapENB yy3NP9W4EfLBxy+RXDUOmZ8Kv5QpT6fhlf1vnjshYrT8nKxf164+xadkXx1uI9tn dMRDMUQPmdeEa2ANvS/t91OLcEkLpi2PephRMR4ZTvwqs2H/+w0IlEoZtNwV1stP hgJM2EFmWQs= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:58 2024 by rpki-client on console-ams.rpki-client.org