$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa File: 37F88500B23311EF8B03B736C4F9AE02.roa (raw, json) Hash identifier: R2Y44LYhCVndx2EiYdjpPkSriZtzFSnbF0BeTHA4RTo= Subject key identifier: F9:38:87:B2:9F:47:46:66:1E:CF:A1:C5:3E:1D:29:2C:A0:5C:1D:7B Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 48EC Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa Signing time: Mon 23 Dec 2024 08:04:43 +0000 ROA not before: Mon 23 Dec 2024 08:04:43 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150859 IP address blocks: 2001:df3:e8c0::/48 maxlen: 48 2001:df4:1cc0::/48 maxlen: 48 2401:9320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18668 (0x48ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Dec 23 08:04:43 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6769199b-19f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:e4:19:5d:b2:c1:03:0e:ab:27:3b:89:2d: cc:a5:11:78:7d:c6:45:b6:32:78:b8:c0:7b:41:6d: 50:5c:2d:61:5d:3c:78:17:a2:fa:14:39:bc:79:c6: e9:1b:4a:b5:86:15:ef:7c:64:26:92:d7:1a:35:15: a2:c7:cd:7d:d2:89:58:70:80:58:81:bf:2e:8a:53: 65:0c:5f:c3:b0:95:44:0b:ee:aa:4e:7c:7f:09:52: bf:87:e5:a2:6f:3f:03:8f:fc:12:2c:11:c4:c6:1b: 32:4f:c6:a1:8d:e5:22:5c:7f:ef:27:5d:ef:82:bd: 8d:ab:07:da:63:1c:ee:76:d2:94:ab:99:b0:3d:1a: 86:8a:0e:f8:98:5f:60:82:1a:40:ab:f0:55:6d:d8: 53:2b:d9:7e:06:83:67:bb:bd:51:35:fe:8a:fd:d7: d9:38:f6:26:a1:f5:b5:14:32:8b:86:dd:6d:04:2d: ff:78:6f:e0:bd:6c:5a:67:a3:11:02:65:07:fb:34: ba:0f:21:cd:3c:4e:88:76:d8:d1:40:3c:e5:cc:53: 12:76:9e:fb:41:a8:06:1b:72:3a:6f:1a:21:e2:4d: e3:de:76:44:66:47:2f:55:da:04:f1:b1:24:87:47: 6c:11:a4:a6:df:2b:ef:eb:a1:6e:d6:5e:b1:e5:24: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:38:87:B2:9F:47:46:66:1E:CF:A1:C5:3E:1D:29:2C:A0:5C:1D:7B X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:e8c0::/48 2001:df4:1cc0::/48 2401:9320::/48 Signature Algorithm: sha256WithRSAEncryption 5b:d1:b0:5c:96:fb:7d:db:dc:53:f9:d6:26:dd:fa:46:1d:38: 28:7a:2e:36:c0:b4:5d:eb:a2:d0:59:0f:51:37:19:da:bf:91: 81:66:3c:81:9f:ac:76:48:0e:55:38:69:11:25:6b:6e:3b:c4: 7e:2a:78:3b:a0:b8:57:a6:d4:44:3e:fb:bc:40:10:d7:ee:06: 21:a7:df:1a:ea:59:2e:03:96:a0:3e:e2:ee:78:8f:e6:16:d3: 94:db:98:fd:0c:b6:0a:34:ba:20:f1:4b:6e:b6:8d:24:6c:9a: 48:dd:58:c1:f8:2e:8e:f9:98:01:ff:66:61:a5:d5:4a:26:42: c0:51:47:bb:8d:d4:ea:80:f6:6b:3d:20:9e:c0:cf:cd:df:43: 04:dd:c5:e3:54:92:ef:fb:86:39:3e:e8:bb:db:8b:36:5f:44: 42:a8:f1:03:a8:4c:7d:f1:6a:e2:31:c0:b3:a3:7c:7d:e7:24: e6:ac:7b:7b:14:44:1e:55:1a:27:74:af:4f:6c:7e:b2:87:32: 0f:d2:21:02:1e:b9:15:86:96:a4:d7:28:26:49:7c:22:6d:8d: 3d:06:9b:25:f9:69:fa:16:d3:a0:a6:6a:c9:b2:3f:f6:58:88: db:aa:0e:5f:3f:c9:3b:6e:4d:80:34:3f:b2:ce:5c:6b:4a:43: 69:f5:70:34 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICSOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMjIzMDgwNDQzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY5MTk5Yi0xOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluDkGV2ywQMOqyc7iS3MpRF4fcZFtjJ4uMB7QW1QXC1hXTx4F6L6FDm8ecbp G0q1hhXvfGQmktcaNRWix8190olYcIBYgb8uilNlDF/DsJVEC+6qTnx/CVK/h+Wi bz8Dj/wSLBHExhsyT8ahjeUiXH/vJ13vgr2NqwfaYxzudtKUq5mwPRqGig74mF9g ghpAq/BVbdhTK9l+BoNnu71RNf6K/dfZOPYmofW1FDKLht1tBC3/eG/gvWxaZ6MR AmUH+zS6DyHNPE6IdtjRQDzlzFMSdp77QagGG3I6bxoh4k3j3nZEZkcvVdoE8bEk h0dsEaSm3yvv66Fu1l6x5SQoDwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPk4h7Kf R0ZmHs+hxT4dKSygXB17MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzdGODg1MDBC MjMzMTFFRjhCMDNCNzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBsDBwAgAQ3z6MADBwAgAQ30HMADBwAkAZMgAAAwDQYJKoZIhvcN AQELBQADggEBAFvRsFyW+33b3FP51ibd+kYdOCh6LjbAtF3rotBZD1E3Gdq/kYFm PIGfrHZIDlU4aREla247xH4qeDuguFem1EQ++7xAENfuBiGn3xrqWS4DlqA+4u54 j+YW05TbmP0Mtgo0uiDxS262jSRsmkjdWMH4Lo75mAH/ZmGl1UomQsBRR7uN1OqA 9ms9IJ7Az83fQwTdxeNUku/7hjk+6LvbizZfREKo8QOoTH3xauIxwLOjfH3nJOas e3sURB5VGid0r09sfrKHMg/SIQIeuRWGlqTXKCZJfCJtjT0GmyX5afoW06Cmasmy P/ZYiNuqDl8/yTtuTYA0P7LOXGtKQ2n1cDQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:20 2025 by rpki-client