$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/669FD05EA53911EFBE261371C4F9AE02.roa File: 669FD05EA53911EFBE261371C4F9AE02.roa (raw, json) Hash identifier: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A= Subject key identifier: B9:D7:DB:64:FB:B3:ED:4F:0D:A8:32:80:A9:63:F5:88:A5:A7:19:28 Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 03 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/669FD05EA53911EFBE261371C4F9AE02.roa Signing time: Sun 17 Nov 2024 23:12:23 +0000 ROA not before: Sun 17 Nov 2024 23:12:23 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132238 IP address blocks: 2401:d7a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Nov 17 23:12:23 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=673a7856-087e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:99:dd:61:54:f8:55:8b:15:4d:75:cf:8b:da: c1:9d:16:b6:68:48:38:92:4f:6f:76:2e:3b:52:3d: e8:dd:98:51:48:37:b8:04:57:f0:03:fb:0c:bd:60: df:30:d9:bb:b0:f2:17:ec:53:ee:d0:2b:97:5c:07: 90:14:7c:ba:d1:3d:a5:a1:45:6b:ec:33:b3:82:bc: 2e:c7:dd:80:1c:80:42:d9:cf:57:e1:fe:0d:fb:4e: 89:00:90:c3:b2:a1:ad:34:e3:72:a6:9e:99:a0:88: 84:3d:ac:fc:f0:4d:38:63:8b:01:76:74:3c:f0:6f: 19:31:82:a4:e2:c4:ac:71:bf:8c:95:55:12:b9:31: 79:d8:7d:e3:03:e8:97:14:2c:30:86:62:7d:db:37: 30:6e:1a:32:10:fa:b2:b4:62:31:f0:3a:46:e0:e3: ae:9e:2f:a3:74:88:6c:d5:aa:52:ca:06:bd:48:ce: ca:c2:63:aa:25:35:01:b1:9f:1c:ed:15:24:48:9f: d0:3b:23:a3:9c:ed:7f:04:48:7e:09:e0:90:5f:bc: 1b:c0:c7:ae:e5:ac:f5:a5:c7:8f:75:01:19:73:9f: a7:c8:d7:bc:e5:23:1e:61:56:48:03:b5:db:e8:70: 69:e6:2c:a2:d4:64:d5:0f:59:c0:e1:e4:7e:3b:ff: 05:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D7:DB:64:FB:B3:ED:4F:0D:A8:32:80:A9:63:F5:88:A5:A7:19:28 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/669FD05EA53911EFBE261371C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d7a0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:5c:04:88:ea:48:64:f9:51:2d:bc:83:be:60:2f:c4:ec:8c: e6:e7:e3:51:71:c7:b5:ef:74:8e:fb:d6:be:29:fd:c7:5f:4b: c1:ae:bf:70:48:cb:7f:4f:c0:38:39:a9:21:eb:b5:e1:0c:46: 98:5a:dd:94:37:b7:22:c0:b2:a1:ce:d5:08:f6:aa:1c:b0:98: d7:c1:f1:80:b7:02:09:92:b8:ef:b3:9b:1d:59:c0:d5:a5:5c: 5c:99:7a:b9:e4:89:bc:37:df:8a:c2:fe:cd:16:79:e6:fa:40: ad:25:b0:98:c4:ea:c1:6d:bb:e6:db:49:3a:45:9b:c3:03:81: 4e:7d:1f:c3:75:1c:10:01:e3:8d:5d:bf:29:2e:5f:71:d0:c4: 1c:c0:3d:fd:30:de:1c:d3:4b:25:e4:6d:fe:56:35:94:f0:c4: c8:e0:ca:90:b5:64:f7:ac:0a:4f:e0:70:5a:58:85:13:3b:dd: 88:6f:b9:5c:da:72:e6:79:2a:08:f5:7e:7f:32:1d:c3:e1:4e: 93:6e:a3:1e:02:70:fe:ab:9f:2d:23:dc:91:5d:41:a6:0b:70: 71:a2:a6:2d:af:f6:07:cb:03:c5:52:93:7b:4e:92:76:9c:d0: e3:d8:dc:9f:c3:f3:c9:f1:7b:49:b9:88:90:0a:2c:3a:b6:57: 80:18:b4:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoNEZFMUIzNUY5QUQ4MjgxQjY2RjQ3MDMxRjUwN0UwRUU3 RDU0MjExQTAeFw0yNDExMTcyMzEyMjNaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3M2E3ODU2LTA4N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpmd1hVPhVixVNdc+L2sGdFrZoSDiST292LjtSPejdmFFIN7gEV/AD+wy9YN8w 2buw8hfsU+7QK5dcB5AUfLrRPaWhRWvsM7OCvC7H3YAcgELZz1fh/g37TokAkMOy oa0043KmnpmgiIQ9rPzwTThjiwF2dDzwbxkxgqTixKxxv4yVVRK5MXnYfeMD6JcU LDCGYn3bNzBuGjIQ+rK0YjHwOkbg466eL6N0iGzVqlLKBr1IzsrCY6olNQGxnxzt FSRIn9A7I6Oc7X8ESH4J4JBfvBvAx67lrPWlx491ARlzn6fI17zlIx5hVkgDtdvo cGnmLKLUZNUPWcDh5H47/wUZAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUudfbZPuz 7U8NqDKAqWP1iKWnGSgwHwYDVR0jBBgwFoAUT+GzX5rYKBtm9HAx9Qfg7n1UIRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzE5NEI3OTIwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVC1Helg1cllLQnRtOUhBeDlRZmc3bjFVSVJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi82NjlGRDA1RUE1 MzkxMUVGQkUyNjEzNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQB16AwDQYJKoZIhvcNAQELBQADggEBAI9cBIjqSGT5US28 g75gL8TsjObn41Fxx7XvdI771r4p/cdfS8Guv3BIy39PwDg5qSHrteEMRpha3ZQ3 tyLAsqHO1Qj2qhywmNfB8YC3AgmSuO+zmx1ZwNWlXFyZernkibw334rC/s0Weeb6 QK0lsJjE6sFtu+bbSTpFm8MDgU59H8N1HBAB441dvykuX3HQxBzAPf0w3hzTSyXk bf5WNZTwxMjgypC1ZPesCk/gcFpYhRM73YhvuVzacuZ5Kgj1fn8yHcPhTpNuox4C cP6rny0j3JFdQaYLcHGipi2v9gfLA8VSk3tOknac0OPY3J/D88nxe0m5iJAKLDq2 V4AYtJc= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org