$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa File: D734CCEA1E0A11EF87335F33C4F9AE02.roa (raw, json) Hash identifier: eXiNprSP3Xqa5jUVIP50uCJTJWbuKph0+8u++H0ltD8= Subject key identifier: D2:D6:A1:3A:65:23:7A:C9:27:9E:FD:D8:83:DC:78:95:07:FC:7A:DD Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Certificate serial: 01E4 Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa Signing time: Wed 29 May 2024 22:28:58 +0000 ROA not before: Wed 29 May 2024 22:28:58 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142000 IP address blocks: 2001:df6:3580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jul 2024 00:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Validity Not Before: May 29 22:28:58 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6657ac2a-7606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:ef:eb:2b:5a:f8:0c:c5:47:3d:ec:2b:e4: ba:b8:59:e9:1f:74:0f:67:d6:cf:6e:ae:10:74:db: 4d:51:8b:f3:35:9d:91:91:2f:83:8f:3b:b0:c5:89: 84:12:a9:90:ea:ab:18:17:8f:fc:6a:c0:3b:61:27: 44:f2:9d:59:99:21:7a:09:9e:9d:8b:bd:c0:bd:41: 8f:e2:99:38:79:4c:df:b6:0f:7b:91:0f:b2:db:5c: 9e:ad:e1:e6:ce:94:df:91:b4:56:00:57:2f:72:0e: 7f:7b:9b:02:ca:21:72:70:90:bf:2c:53:b9:e7:6e: 30:14:7f:ba:b4:a8:73:07:58:db:3d:bb:49:3b:3b: 68:98:fb:5b:5b:d9:ef:00:90:95:cf:6f:19:7a:9f: 6a:a8:5b:5a:ea:5f:32:52:e2:b1:fe:07:96:00:7c: be:c7:0d:d8:23:20:cb:65:0a:be:e1:7a:6d:7e:17: 60:62:48:41:b8:4b:86:37:0e:0c:09:56:21:28:4f: 54:8f:de:56:81:e3:83:a9:48:f3:1d:46:67:90:99: 60:c4:d7:e4:b6:95:fb:40:91:49:f4:17:37:3f:e3: 1e:5b:d4:d8:70:9b:e8:80:ea:f3:50:23:97:05:81: 44:d2:1b:d1:85:09:03:42:5e:e1:25:42:b8:43:2e: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D6:A1:3A:65:23:7A:C9:27:9E:FD:D8:83:DC:78:95:07:FC:7A:DD X509v3 Authority Key Identifier: keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:3580::/48 Signature Algorithm: sha256WithRSAEncryption 4c:f4:ea:88:34:09:3e:71:90:59:fa:5b:be:73:e9:ea:e0:9e: 41:25:3c:8c:83:3a:a4:8c:62:b2:1b:50:bf:cc:c6:0e:fe:2d: 37:70:a0:09:56:7c:cb:dd:2a:f8:cc:e4:61:6d:7d:c0:41:62: c7:e5:05:b8:20:90:4b:2b:7b:3a:61:bc:45:c0:d5:68:18:5e: 8d:3c:d3:e1:d5:02:a7:76:93:6b:40:49:d6:ec:5e:7e:e9:85: 4b:26:04:ff:94:f9:17:1a:37:3f:03:5d:51:6d:b3:82:4d:7e: ee:ce:fb:79:d2:4d:b4:bf:8f:5e:47:6e:a2:26:f2:9d:f0:11: 16:a0:43:48:f2:59:5a:3f:11:30:49:e4:6b:61:10:84:c0:8b: 63:36:52:7f:b7:8a:0d:da:8f:e2:a6:94:e9:7a:9a:a0:d0:1a: 9c:0a:77:38:3b:41:7a:9c:a6:c1:18:b0:1e:13:75:c6:79:13: 2b:ff:96:e9:2a:59:37:e9:b5:94:a8:19:dd:df:1b:79:82:56: 17:14:fc:2c:7c:32:80:ab:d4:37:cd:45:26:02:b6:ed:44:b8: f4:e7:98:73:97:62:51:e5:4a:13:e4:20:f9:c3:0b:84:e4:ea: 16:ec:3c:7b:80:ec:f8:21:f1:10:9b:37:85:42:65:18:1c:9e: 45:8d:c2:7b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDREMTRFMUFGMjJGNTNCMjJGNTZERUYwMkVCNzJFQTVE RDZCRTc3RTIwHhcNMjQwNTI5MjIyODU4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU3YWMyYS03NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy43v6yta+AzFRz3sK+S6uFnpH3QPZ9bPbq4QdNtNUYvzNZ2RkS+DjzuwxYmE EqmQ6qsYF4/8asA7YSdE8p1ZmSF6CZ6di73AvUGP4pk4eUzftg97kQ+y21yereHm zpTfkbRWAFcvcg5/e5sCyiFycJC/LFO5524wFH+6tKhzB1jbPbtJOztomPtbW9nv AJCVz28Zep9qqFta6l8yUuKx/geWAHy+xw3YIyDLZQq+4XptfhdgYkhBuEuGNw4M CVYhKE9Uj95WgeODqUjzHUZnkJlgxNfktpX7QJFJ9Bc3P+MeW9TYcJvogOrzUCOX BYFE0hvRhQkDQl7hJUK4Qy4TRQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNLWoTpl I3rJJ5792IPceJUH/HrdMB8GA1UdIwQYMBaAFE0U4a8i9Tsi9W3vAuty6l3Wvnfi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95TDFiZThDNjNMcVhkYS1k LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSVGhyeUwxT3lMMWJlOEM2M0xxWGRhLWQtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkU3NUYvQUI5RUI4Q0FBOUY1MTFFQjhBNDkyMjU0QzRGOUFFMDIvRDczNENDRUEx RTBBMTFFRjg3MzM1RjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ32NYAwDQYJKoZIhvcNAQELBQADggEBAEz06og0CT5x kFn6W75z6ergnkElPIyDOqSMYrIbUL/Mxg7+LTdwoAlWfMvdKvjM5GFtfcBBYsfl BbggkEsrezphvEXA1WgYXo080+HVAqd2k2tASdbsXn7phUsmBP+U+RcaNz8DXVFt s4JNfu7O+3nSTbS/j15HbqIm8p3wERagQ0jyWVo/ETBJ5GthEITAi2M2Un+3ig3a j+KmlOl6mqDQGpwKdzg7QXqcpsEYsB4TdcZ5Eyv/lukqWTfptZSoGd3fG3mCVhcU /Cx8MoCr1DfNRSYCtu1EuPTnmHOXYlHlShPkIPnDC4Tk6hbsPHuA7Pgh8RCbN4VC ZRgcnkWNwns= -----END CERTIFICATE-----Generated at Tue Jun 25 00:55:43 2024 by rpki-client on console-ams.rpki-client.org