$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa File: B8201598BED111EC93B74C4FC4F9AE02.roa (raw, json) Hash identifier: bZ78zYHCnstuVWjSxrFde4CQb6MOUeIvruPUliQa2hQ= Subject key identifier: 91:8D:DC:1C:01:EC:DF:FD:B1:6D:76:7E:F1:AE:31:53:28:30:91:F8 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 33F7 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa Signing time: Mon 12 Aug 2024 15:20:59 +0000 ROA not before: Mon 12 Aug 2024 15:20:59 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45172 IP address blocks: 2405:9400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13303 (0x33f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Aug 12 15:20:59 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ba285a-3a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:02:dc:9d:17:03:62:1f:f1:5f:03:b2:97: 7b:95:61:bd:68:8c:fd:48:69:1c:52:e3:78:52:44: 50:19:80:ee:a5:9e:f7:5c:3e:f3:3b:34:bf:b2:d4: 99:3a:b3:bf:2c:fb:7f:e0:e4:f5:be:0c:f8:5c:68: 85:0f:8b:70:2d:ca:e3:3e:ce:8f:b3:cf:64:37:6c: 0f:1d:ac:15:7c:b0:a4:06:3e:8c:29:72:13:9f:39: 39:8f:e6:56:a7:0a:39:b7:96:a5:62:7a:bf:6c:bb: 45:92:8d:4b:73:4b:a8:66:c3:ba:da:a0:7e:a0:eb: b5:dd:0b:d4:c9:45:5a:38:72:d6:ee:82:98:5e:23: b2:6a:ef:53:4a:fd:d8:fa:93:d3:c4:26:9a:a6:32: bf:a6:32:43:c8:c0:62:2c:9f:04:87:31:5a:80:a4: e5:e7:5d:c6:68:37:f6:1e:39:df:03:1a:1b:12:59: 2e:66:67:0e:26:b7:77:f1:cc:78:15:05:da:80:87: 3d:9d:84:c8:82:17:0e:4c:86:3f:6b:db:b9:e1:e7: 7e:15:a2:0f:0c:b4:0d:c8:92:8d:e4:8c:d7:67:89: 12:60:73:42:5b:a9:66:91:16:1c:1d:b4:ba:37:62: ba:2d:98:a9:5e:28:50:a5:d2:ed:1e:42:29:14:c9: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8D:DC:1C:01:EC:DF:FD:B1:6D:76:7E:F1:AE:31:53:28:30:91:F8 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/B8201598BED111EC93B74C4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:9400::/32 Signature Algorithm: sha256WithRSAEncryption 96:ad:32:0d:f2:a8:87:27:c6:ba:e7:b1:69:d4:9a:e1:43:77: 35:a3:2f:3d:73:97:d0:3f:df:cb:3b:a1:da:d3:b7:9d:7e:76: 80:e8:e4:84:e0:92:8e:de:4a:7e:1c:55:29:de:f3:fb:84:69: 24:9f:23:bb:ad:eb:7f:70:e4:b3:0e:ac:a8:b8:2a:fa:37:8a: 2a:d2:98:e2:e0:58:20:7f:75:e8:a9:32:5c:85:2a:e6:9c:70: 8d:90:9f:88:2f:7a:93:09:67:16:6b:ed:b2:86:bd:eb:86:b3: ce:f3:96:8e:d2:eb:97:2f:b2:7d:63:6a:31:d5:68:29:0b:8b: 45:d5:f7:84:2e:bc:2d:a5:0c:ea:02:2d:80:49:16:cb:54:0a: 79:2e:cd:1c:94:ed:66:14:dc:57:d4:d4:f9:31:f4:24:5b:44: cc:b1:8f:fb:2f:db:af:0a:ce:e1:31:ed:34:2b:cd:68:d5:65: 97:e9:0d:6a:c7:94:dd:80:74:50:fd:f1:5a:da:9e:ad:e1:b7: bd:89:71:d9:7a:3b:73:6e:82:fe:f8:0e:6d:6f:35:e0:99:a6: b9:9f:53:63:3d:56:b2:da:16:66:dd:0e:25:a3:dd:38:54:5b: 6c:bd:d7:2d:30:07:34:64:ee:9f:32:f2:e7:79:5a:0c:59:45: c6:fa:86:e7 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICM/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjQwODEyMTUyMDU5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJhMjg1YS0zYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQwC3J0XA2If8V8Dspd7lWG9aIz9SGkcUuN4UkRQGYDupZ73XD7zOzS/stSZ OrO/LPt/4OT1vgz4XGiFD4twLcrjPs6Ps89kN2wPHawVfLCkBj6MKXITnzk5j+ZW pwo5t5alYnq/bLtFko1Lc0uoZsO62qB+oOu13QvUyUVaOHLW7oKYXiOyau9TSv3Y +pPTxCaapjK/pjJDyMBiLJ8EhzFagKTl513GaDf2HjnfAxobElkuZmcOJrd38cx4 FQXagIc9nYTIghcOTIY/a9u54ed+FaIPDLQNyJKN5IzXZ4kSYHNCW6lmkRYcHbS6 N2K6LZipXihQpdLtHkIpFMn4JwIDAQABo4ICljCCApIwHQYDVR0OBBYEFJGN3BwB 7N/9sW12fvGuMVMoMJH4MB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyOEMvNTJGQ0M2NDgxREEwMTFFMkI2RDg3MDkxMDhCMDJDRDIvQjgyMDE1OThC RUQxMTFFQzkzQjc0QzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBZQAMA0GCSqGSIb3DQEBCwUAA4IBAQCWrTIN8qiHJ8a6 57Fp1JrhQ3c1oy89c5fQP9/LO6Ha07edfnaA6OSE4JKO3kp+HFUp3vP7hGkknyO7 ret/cOSzDqyouCr6N4oq0pji4Fggf3XoqTJchSrmnHCNkJ+IL3qTCWcWa+2yhr3r hrPO85aO0uuXL7J9Y2ox1WgpC4tF1feELrwtpQzqAi2ASRbLVAp5Ls0clO1mFNxX 1NT5MfQkW0TMsY/7L9uvCs7hMe00K81o1WWX6Q1qx5TdgHRQ/fFa2p6t4be9iXHZ ejtzboL++A5tbzXgmaa5n1NjPVay2hZm3Q4lo904VFtsvdctMAc0ZO6fMvLneVoM WUXG+obn -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:06 2024 by rpki-client on console-ams.rpki-client.org