$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/FAF3CBD8D14B11EEB5E10E87C4F9AE02.roa File: FAF3CBD8D14B11EEB5E10E87C4F9AE02.roa (raw, json) Hash identifier: HRBdyA46Zp6dmWGqG8DFeOY5VyJI8Xlf00QazAl9dpc= Subject key identifier: E2:10:2C:7E:B8:32:49:75:29:D7:F1:1E:FE:17:5C:28:9E:EE:1E:F6 Certificate issuer: /CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4 Certificate serial: 095F Authority key identifier: 71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/FAF3CBD8D14B11EEB5E10E87C4F9AE02.roa Signing time: Thu 22 Feb 2024 06:31:16 +0000 ROA not before: Thu 22 Feb 2024 06:31:16 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 135386 IP address blocks: 2400:4740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Jun 2024 20:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2399 (0x95f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4 Validity Not Before: Feb 22 06:31:16 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65d6ea34-d6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a2:46:8d:a7:36:72:da:ea:4a:4a:65:a0:a6: 6e:69:b9:31:5e:f9:3b:a5:1e:e7:ba:d4:38:9e:39: 75:c6:69:86:f5:cf:25:6a:08:a0:a4:f3:59:45:5f: ef:bb:41:dd:40:70:ef:67:65:68:d2:9c:1e:ec:2d: b1:31:f0:59:dc:77:98:a4:ac:07:dd:a3:91:65:d3: 68:e3:97:7a:c5:6e:39:35:b2:48:cf:dd:15:ff:0c: ee:35:9d:7e:55:b0:f4:04:d1:97:53:be:f0:dc:bf: 46:c9:4b:ee:84:8d:b5:47:e0:0c:ca:41:07:f0:63: 74:4a:93:ff:d5:0f:59:d2:d5:06:f1:3a:d2:35:88: 04:af:54:f3:0b:0d:1f:17:9e:cc:4d:77:b2:6b:af: c9:fa:a7:88:a0:86:d2:ce:d5:94:ae:08:a9:20:b9: 01:f3:e5:53:f3:5b:30:54:25:12:e2:1e:fb:60:38: ec:13:67:e6:5b:0c:6a:9c:02:91:78:17:cd:2c:31: bb:0f:4f:dd:e2:c7:31:84:d2:67:c7:64:4a:a8:5c: d7:c8:0e:a5:8b:d4:7b:cf:c6:e9:23:50:84:eb:ac: 40:c9:99:a2:50:b9:1d:e4:2a:96:42:54:85:ed:97: 51:35:7e:eb:f2:0b:6d:4d:c3:e9:4d:54:1e:6b:62: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:2C:7E:B8:32:49:75:29:D7:F1:1E:FE:17:5C:28:9E:EE:1E:F6 X509v3 Authority Key Identifier: keyid:71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/FAF3CBD8D14B11EEB5E10E87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:4740::/32 Signature Algorithm: sha256WithRSAEncryption bf:1e:5b:67:66:48:fb:4d:55:29:cb:9f:50:da:4b:91:66:2e: 42:1a:df:d8:85:ea:cc:b5:08:64:4b:74:41:3a:42:04:22:1c: 0c:af:88:67:3f:aa:70:0c:26:92:0d:57:82:00:3e:aa:29:d5: f3:6e:86:dc:63:8b:5b:fb:e8:78:0a:90:1c:30:29:f3:61:9d: bb:b8:e6:40:23:e5:88:2c:f8:62:eb:b2:4d:6d:2c:7f:7b:d0: 00:57:ef:5c:b8:ea:a4:e9:28:5a:ff:15:69:a1:06:2f:47:d8: cf:a0:6c:8c:d9:c6:1d:51:0f:92:fa:fb:68:98:c4:f4:24:31: 82:2d:b2:cb:fb:ed:9b:92:a4:8c:16:74:78:1e:56:eb:eb:90: 47:5d:b0:2e:95:cf:53:a5:a3:c8:c2:9b:a6:89:57:12:13:86: 0d:bf:a4:2c:1b:05:ed:83:d5:9f:d4:3c:68:ab:8e:a4:09:66: c0:7e:e6:0b:b0:73:6c:d9:c6:d4:3d:a0:ec:e8:d6:43:63:48: 4b:0d:5d:6f:f9:a0:a6:4b:ed:70:02:a0:53:85:9a:42:50:98: 39:c8:fd:46:63:82:e3:b8:ed:fe:74:9c:7d:8c:5c:de:f0:83: fe:17:e8:e2:57:23:cd:0d:0b:f1:7c:d6:bf:09:c0:c0:e6:b4: da:3b:2d:a5 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0EwREQxMTAvBgNVBAUTKDcxRDMzMjYwNENENTM4RUE3MjY5ODdBRjdFNkZFOEI4 NzBGNDJGRTQwHhcNMjQwMjIyMDYzMTE2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ2ZWEzNC1kNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36JGjac2ctrqSkploKZuabkxXvk7pR7nutQ4njl1xmmG9c8lagigpPNZRV/v u0HdQHDvZ2Vo0pwe7C2xMfBZ3HeYpKwH3aORZdNo45d6xW45NbJIz90V/wzuNZ1+ VbD0BNGXU77w3L9GyUvuhI21R+AMykEH8GN0SpP/1Q9Z0tUG8TrSNYgEr1TzCw0f F57MTXeya6/J+qeIoIbSztWUrgipILkB8+VT81swVCUS4h77YDjsE2fmWwxqnAKR eBfNLDG7D0/d4scxhNJnx2RKqFzXyA6li9R7z8bpI1CE66xAyZmiULkd5CqWQlSF 7ZdRNX7r8gttTcPpTVQea2LrBwIDAQABo4ICljCCApIwHQYDVR0OBBYEFOIQLH64 Mkl1KdfxHv4XXCie7h72MB8GA1UdIwQYMBaAFHHTMmBM1TjqcmmHr35v6Lhw9C/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTBERC8yMTQzM0NEMjY4 MzMxMUVBQThBNzMyNzhDNEY5QUUwMi9jZE15WUV6Vk9PcHlhWWV2Zm1fb3VIRDBM LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NkTXlZRXpWT09weWFZZXZmbV9vdUhEMEwtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0EwREQvMjE0MzNDRDI2ODMzMTFFQUE4QTczMjc4QzRGOUFFMDIvRkFGM0NCRDhE MTRCMTFFRUI1RTEwRTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAEdAMA0GCSqGSIb3DQEBCwUAA4IBAQC/HltnZkj7TVUp y59Q2kuRZi5CGt/YherMtQhkS3RBOkIEIhwMr4hnP6pwDCaSDVeCAD6qKdXzbobc Y4tb++h4CpAcMCnzYZ27uOZAI+WILPhi67JNbSx/e9AAV+9cuOqk6Sha/xVpoQYv R9jPoGyM2cYdUQ+S+vtomMT0JDGCLbLL++2bkqSMFnR4Hlbr65BHXbAulc9TpaPI wpumiVcSE4YNv6QsGwXtg9Wf1Dxoq46kCWbAfuYLsHNs2cbUPaDs6NZDY0hLDV1v +aCmS+1wAqBThZpCUJg5yP1GY4LjuO3+dJx9jFze8IP+F+jiVyPNDQvxfNa/CcDA 5rTaOy2l -----END CERTIFICATE-----Generated at Thu Jun 20 21:22:04 2024 by rpki-client on console-fra.rpki-client.org