$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/212B8B4078BF11EFADED2A6EC4F9AE02.roa File: 212B8B4078BF11EFADED2A6EC4F9AE02.roa (raw, json) Hash identifier: 9Jt4B2TozQUmN1NJk3XTlC6l1td+NTCiCQof+C1FfmQ= Subject key identifier: 08:54:10:68:0B:01:A5:34:6E:37:EC:4E:A1:F1:22:1A:70:02:C6:6F Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Certificate serial: 028B Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/212B8B4078BF11EFADED2A6EC4F9AE02.roa Signing time: Sun 22 Sep 2024 08:46:16 +0000 ROA not before: Sun 22 Sep 2024 08:46:16 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 152317 IP address blocks: 2400:4e60::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Validity Not Before: Sep 22 08:46:16 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66efd958-3d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:35:e9:12:fc:0a:6f:03:19:2f:e5:ac:97:8c: ef:8d:5f:4c:20:60:f8:7f:ae:fb:54:d7:0b:ad:b2: 52:ee:39:2b:d1:8a:e0:f3:4e:fc:80:60:85:43:f7: 0d:a7:8b:0d:c8:ee:3d:55:26:ed:a2:f5:01:fd:23: 34:21:8e:f2:db:e1:15:c8:32:97:a7:bf:4f:9f:34: 63:20:92:52:39:69:b1:5f:34:6f:da:c8:f4:0b:1c: 7d:81:8d:57:d0:4e:4a:a1:c0:98:65:d0:e6:2d:64: a5:4a:74:ca:a3:92:99:5e:94:5c:32:3a:56:d7:cd: 18:b0:df:3e:17:77:4f:0a:03:52:66:5a:9c:a5:1e: 1a:ad:b0:b6:eb:87:cc:72:bf:56:e6:e1:15:35:60: e1:1b:c3:ef:5c:9f:38:b4:59:12:1c:54:e0:09:af: cd:92:77:63:6e:bc:90:20:8c:08:e5:23:ff:58:f9: e0:46:0a:67:df:e6:76:53:c2:f3:32:90:4d:4a:a8: 83:b6:01:58:3f:79:5d:eb:a0:e6:dc:b0:35:da:b2: 03:9f:71:10:34:f4:4f:e3:3d:9a:b6:eb:8c:81:e4: 96:ae:84:c4:c7:9d:1d:29:d7:a4:83:0a:70:71:b2: 8f:a7:89:0e:7f:71:a7:e7:4a:b9:7c:34:31:e9:6d: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:54:10:68:0B:01:A5:34:6E:37:EC:4E:A1:F1:22:1A:70:02:C6:6F X509v3 Authority Key Identifier: keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/212B8B4078BF11EFADED2A6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:4e60::/32 Signature Algorithm: sha256WithRSAEncryption 23:bb:27:c5:14:2d:28:de:bc:6a:e2:04:97:fa:19:42:9f:ca: c0:cd:fc:10:03:55:e3:fa:7c:e3:68:72:52:48:9e:ee:72:cd: e2:7b:3c:64:5a:2d:45:83:52:e0:e3:dd:59:7a:8a:93:db:75: ed:a7:c8:81:6a:37:89:f8:fc:30:46:25:9d:93:59:74:69:37: f9:88:40:0b:d9:1a:13:66:95:f8:bc:f6:db:e2:e7:4f:ce:07: 0a:e8:1a:89:b0:a2:fd:59:d1:91:ad:37:95:05:a6:4a:02:86: 30:cd:3c:81:19:98:22:ad:f5:96:8c:34:92:e0:ce:c5:96:f3: c8:37:dd:85:b4:9b:cd:e5:fb:29:73:69:9a:ea:44:fd:f9:fe: b9:c2:41:5a:83:83:d9:2b:5c:7b:23:49:2a:03:7f:da:37:3a: 47:d0:42:9c:e9:6e:34:59:9b:6f:82:19:3d:0f:d0:77:37:de: 7e:e0:74:ea:59:7e:3c:3b:62:24:ed:35:e2:b4:12:d1:b3:c4: 23:21:b6:0d:25:0e:87:0c:d4:93:7f:b6:98:01:01:5f:65:92: 14:90:e7:ed:51:7b:1b:a0:b4:55:d2:b1:7d:61:e9:9f:88:cf: ac:eb:ba:d8:7c:04:bd:c7:28:e2:4c:01:dd:de:ef:5b:ea:a3: 32:7c:f0:17 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG RjFEQjY2NzUwHhcNMjQwOTIyMDg0NjE2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVmZDk1OC0zZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjXpEvwKbwMZL+Wsl4zvjV9MIGD4f677VNcLrbJS7jkr0Yrg8078gGCFQ/cN p4sNyO49VSbtovUB/SM0IY7y2+EVyDKXp79PnzRjIJJSOWmxXzRv2sj0Cxx9gY1X 0E5KocCYZdDmLWSlSnTKo5KZXpRcMjpW180YsN8+F3dPCgNSZlqcpR4arbC264fM cr9W5uEVNWDhG8PvXJ84tFkSHFTgCa/NkndjbryQIIwI5SP/WPngRgpn3+Z2U8Lz MpBNSqiDtgFYP3ld66Dm3LA12rIDn3EQNPRP4z2atuuMgeSWroTEx50dKdekgwpw cbKPp4kOf3Gn50q5fDQx6W0OgQIDAQABo4ICljCCApIwHQYDVR0OBBYEFAhUEGgL AaU0bjfsTqHxIhpwAsZvMB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0 RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNTQvNzI3Mzc1QjRENEY1MTFFQzhFMTNGRTRFQzRGOUFFMDIvMjEyQjhCNDA3 OEJGMTFFRkFERUQyQTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAE5gMA0GCSqGSIb3DQEBCwUAA4IBAQAjuyfFFC0o3rxq 4gSX+hlCn8rAzfwQA1Xj+nzjaHJSSJ7ucs3iezxkWi1Fg1Lg491ZeoqT23Xtp8iB ajeJ+PwwRiWdk1l0aTf5iEAL2RoTZpX4vPbb4udPzgcK6BqJsKL9WdGRrTeVBaZK AoYwzTyBGZgirfWWjDSS4M7FlvPIN92FtJvN5fspc2ma6kT9+f65wkFag4PZK1x7 I0kqA3/aNzpH0EKc6W40WZtvghk9D9B3N95+4HTqWX48O2Ik7TXitBLRs8QjIbYN JQ6HDNSTf7aYAQFfZZIUkOftUXsboLRV0rF9YemfiM+s67rYfAS9xyjiTAHd3u9b 6qMyfPAX -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:08 2024 by rpki-client on console-fra.rpki-client.org