$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/86D0A2C4A1D111EFAF9D5F7CC4F9AE02.roa File: 86D0A2C4A1D111EFAF9D5F7CC4F9AE02.roa (raw, json) Hash identifier: XMip5SJGTadiOXmnq8Z0RljYN/+pYdk5oYt/xNDel4s= Subject key identifier: 7E:FC:7F:22:49:67:7B:2B:67:9A:CA:B2:36:99:14:3A:26:14:37:A2 Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 02 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/86D0A2C4A1D111EFAF9D5F7CC4F9AE02.roa Signing time: Wed 13 Nov 2024 15:11:15 +0000 ROA not before: Wed 13 Nov 2024 15:11:15 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139921 IP address blocks: 2001:df4:8440::/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Nov 13 15:11:15 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6734c193-1dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:48:7c:30:d7:85:97:c7:e1:62:ef:84:7c: 30:9f:47:20:76:40:d5:93:80:77:0c:15:da:da:4b: 38:79:8c:d7:2a:84:b1:51:63:c5:7d:3d:1d:aa:4d: a5:b5:8e:c6:0f:96:2d:90:98:ec:ae:ea:aa:5f:e7: 25:eb:b1:dd:76:5f:77:a6:ba:c6:4f:24:e5:fd:a0: be:4e:78:76:85:e4:05:81:35:e8:6d:c4:b7:14:16: 46:f0:99:70:4b:b8:5f:e0:87:78:43:3b:8d:f0:cd: 9d:f3:a3:ab:ab:dc:67:b2:2a:5d:65:76:87:e0:a1: 2d:e8:19:ef:4c:cb:8a:8d:42:45:ee:2c:49:26:69: 53:ff:98:9c:b1:57:d5:d7:fc:e3:fe:13:2a:98:7d: 63:81:3c:88:51:23:8a:57:3b:97:96:0e:58:c4:a7: 5d:3a:2d:35:b9:90:51:c8:cc:26:9e:fb:7b:a6:ad: d8:13:a4:10:30:23:94:54:5c:d4:cc:38:3e:8b:84: 49:23:c1:48:d7:41:4b:50:91:2d:87:36:b9:eb:b2: 54:8d:ec:48:72:5c:26:19:c4:77:fb:a6:be:13:ab: f0:5e:f3:24:37:7a:71:b0:72:8d:99:3a:85:a5:76: f3:10:9c:0c:f1:24:f5:5e:a0:b2:db:dc:27:4e:21: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FC:7F:22:49:67:7B:2B:67:9A:CA:B2:36:99:14:3A:26:14:37:A2 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/86D0A2C4A1D111EFAF9D5F7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:8440::/128 Signature Algorithm: sha256WithRSAEncryption 1c:11:37:82:c0:7b:d9:c7:e5:3a:07:e2:1e:ee:88:ea:e2:c5: 92:4f:5a:c9:ed:a3:85:9a:de:4d:42:1f:ce:ba:2c:e8:2f:9e: cd:08:cc:67:5e:18:be:a5:46:aa:d1:68:b9:ed:a3:4b:8b:87: 5a:6b:a4:99:92:e8:d3:51:73:b1:51:08:21:bf:98:77:35:dc: 32:a3:23:68:62:02:25:23:63:04:65:2b:b7:70:3f:05:de:0d: 36:69:0b:db:2c:e8:e6:dc:f9:b8:b0:c2:36:d6:8c:38:8d:0c: 3a:b9:f6:12:71:56:bc:a8:ca:89:11:36:4a:c1:b1:01:36:6c: 47:79:b3:f1:0e:38:4e:f1:1c:c4:52:5b:b0:67:6e:19:d6:e8: 0b:12:b7:7c:48:06:f4:59:f0:46:c6:32:5e:15:4b:e5:33:ed: a2:4b:75:6d:ae:f3:e3:39:db:60:62:1c:bf:41:ea:29:4b:97: 83:00:a8:98:88:d3:a6:5b:e9:cd:f8:3a:9f:be:0f:28:35:39: 64:7d:03:b2:a8:51:8b:f3:9e:ff:34:b0:90:60:a9:3e:80:3a: 09:da:8d:20:d7:c3:4b:af:d6:b1:4b:b7:7c:ee:53:3c:d7:b4: 79:c7:40:bd:bc:90:75:cc:aa:19:91:9e:0c:f9:e5:2a:b9:97: f1:cb:3e:0f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTg3RTExMC8GA1UEBRMoQ0Y3OUM2NUY0QjU1MDEwRkIyNUNFNkM0NUI4QzkxOURC MDkzQTMyRDAeFw0yNDExMTMxNTExMTVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MzRjMTkzLTFkY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqQUh8MNeFl8fhYu+EfDCfRyB2QNWTgHcMFdraSzh5jNcqhLFRY8V9PR2qTaW1 jsYPli2QmOyu6qpf5yXrsd12X3emusZPJOX9oL5OeHaF5AWBNehtxLcUFkbwmXBL uF/gh3hDO43wzZ3zo6ur3GeyKl1ldofgoS3oGe9My4qNQkXuLEkmaVP/mJyxV9XX /OP+EyqYfWOBPIhRI4pXO5eWDljEp106LTW5kFHIzCae+3umrdgTpBAwI5RUXNTM OD6LhEkjwUjXQUtQkS2HNrnrslSN7EhyXCYZxHf7pr4Tq/Be8yQ3enGwco2ZOoWl dvMQnAzxJPVeoLLb3CdOIfoVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfvx/Ikln eytnmsqyNpkUOiYUN6IwHwYDVR0jBBgwFoAUz3nGX0tVAQ+yXObEW4yRnbCToy0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFODdFLzg0MjhCOUU2QTFD RjExRUY4NzhFNjA2MUM0RjlBRTAyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejNuR1gwdFZBUS15WE9iRVc0eVJuYkNUb3kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi84NkQwQTJDNEEx RDExMUVGQUY5RDVGN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAsBggrBgEFBQcBBwEB/wQd MBswGQQCAAIwEwMRACABDfSEQAAAAAAAAAAAAAAwDQYJKoZIhvcNAQELBQADggEB ABwRN4LAe9nH5ToH4h7uiOrixZJPWsnto4Wa3k1CH866LOgvns0IzGdeGL6lRqrR aLnto0uLh1prpJmS6NNRc7FRCCG/mHc13DKjI2hiAiUjYwRlK7dwPwXeDTZpC9ss 6Obc+biwwjbWjDiNDDq59hJxVryoyokRNkrBsQE2bEd5s/EOOE7xHMRSW7BnbhnW 6AsSt3xIBvRZ8EbGMl4VS+Uz7aJLdW2u8+M522BiHL9B6ilLl4MAqJiI06Zb6c34 Op++Dyg1OWR9A7KoUYvznv80sJBgqT6AOgnajSDXw0uv1rFLt3zuUzzXtHnHQL28 kHXMqhmRngz55Sq5l/HLPg8= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org