$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa File: E474AF108D8811EDB3C13D6CC4F9AE02.roa (raw, json) Hash identifier: hzE638zELYjKoWqOncVd2PWwcT0doUZBbmbjdlD3Egk= Subject key identifier: 4D:9E:BB:1E:90:B9:34:4E:6A:FC:F8:22:D6:1B:FD:1E:67:83:F3:72 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 3437 Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa Signing time: Tue 20 Aug 2024 15:31:21 +0000 ROA not before: Tue 20 Aug 2024 15:31:21 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9885 IP address blocks: 2405:8a00:ffff::/48 maxlen: 48 240a:eabc:d00d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13367 (0x3437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Aug 20 15:31:21 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66c4b6c9-9be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:66:8f:93:85:47:48:07:57:6b:f4:4b:aa: eb:e1:65:66:a9:18:24:8f:92:36:a9:ad:eb:db:44: 56:5b:68:ac:8c:0c:f7:7b:84:a8:58:c1:8c:7a:fd: da:1a:63:37:a6:07:bb:d3:98:dd:38:c5:6a:31:ce: f6:c9:f5:7c:89:1d:d7:9d:73:be:fa:71:a7:98:ab: 00:44:28:30:5e:44:c3:ab:74:ba:1e:48:6a:da:27: e0:ed:8a:6c:38:0c:71:92:f3:b2:1d:f2:76:08:33: da:f7:e2:4e:ea:63:b1:23:87:7f:08:df:ad:10:3f: 56:ed:d4:82:16:5d:90:51:83:05:c2:d2:52:48:9b: 1e:11:8e:9c:ab:d7:b2:74:32:16:57:43:20:e2:28: 42:ed:44:99:93:dd:39:fc:4f:e9:47:7d:bd:3a:69: ae:6f:48:20:85:d4:09:70:2c:02:30:e4:5d:0a:8b: ca:85:2f:9c:a6:4d:09:bc:16:e5:4a:54:6d:7b:2f: 9f:33:a9:ca:d4:4c:46:41:64:15:d4:3a:52:91:91: 64:5d:ec:75:c6:f5:75:d9:cf:88:43:66:93:4f:bb: b2:19:57:5a:4a:56:73:5b:71:94:59:38:1d:b7:a6: 67:4a:de:06:b0:2e:a8:4b:8b:a2:31:68:6b:e3:9e: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9E:BB:1E:90:B9:34:4E:6A:FC:F8:22:D6:1B:FD:1E:67:83:F3:72 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:8a00:ffff::/48 240a:eabc:d00d::/48 Signature Algorithm: sha256WithRSAEncryption 8a:01:f5:09:2d:a0:98:fb:22:47:04:4a:31:5f:c6:76:54:4d: 2e:da:ba:03:a4:64:1b:46:e5:ec:13:de:43:28:e5:b3:36:37: f9:12:7b:af:ec:37:d5:be:45:7d:9d:56:82:4d:e0:8c:8f:a9: 0f:74:77:13:c8:82:66:97:1f:09:c3:b3:e3:9e:c3:53:65:6b: 9b:12:36:66:54:80:19:9a:cb:8e:2e:95:34:83:d7:21:aa:08: 19:a7:de:cf:ed:45:7e:c2:e6:b8:9e:bb:2a:9f:30:71:15:dd: 52:7e:41:65:ee:ad:7b:f8:0f:6a:6b:2f:03:5a:e0:85:b3:21: 47:f2:6a:23:69:db:2b:9f:fd:99:b9:2e:87:6d:54:86:1d:02: 00:18:e4:db:a9:5e:53:62:6d:36:0e:0c:be:4f:6a:a5:a1:e3: 6f:16:6e:98:da:28:57:49:b9:e6:8c:43:83:3c:d2:db:16:53: 09:a5:f0:2b:01:1b:2e:41:27:41:46:3d:83:e7:93:d5:ec:01: e2:52:37:55:6a:a3:59:9f:35:b7:3e:dd:73:84:fa:bc:11:31: f1:05:5b:1b:0c:38:ff:77:ac:5a:f7:49:dc:f8:52:58:b0:59: 54:c9:07:43:4a:61:74:99:83:a9:03:34:d6:9b:2d:19:d5:bf: 8b:86:68:ef -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjQwODIwMTUzMTIxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM0YjZjOS05YmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07Zmj5OFR0gHV2v0S6rr4WVmqRgkj5I2qa3r20RWW2isjAz3e4SoWMGMev3a GmM3pge705jdOMVqMc72yfV8iR3XnXO++nGnmKsARCgwXkTDq3S6Hkhq2ifg7Yps OAxxkvOyHfJ2CDPa9+JO6mOxI4d/CN+tED9W7dSCFl2QUYMFwtJSSJseEY6cq9ey dDIWV0Mg4ihC7USZk905/E/pR329Ommub0gghdQJcCwCMORdCovKhS+cpk0JvBbl SlRtey+fM6nK1ExGQWQV1DpSkZFkXex1xvV12c+IQ2aTT7uyGVdaSlZzW3GUWTgd t6ZnSt4GsC6oS4uiMWhr457oSQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFE2eux6Q uTROavz4ItYb/R5ng/NyMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvRTQ3NEFGMTA4 RDg4MTFFREIzQzEzRDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBYoA//8DBwAkCuq80A0wDQYJKoZIhvcNAQELBQADggEB AIoB9QktoJj7IkcESjFfxnZUTS7augOkZBtG5ewT3kMo5bM2N/kSe6/sN9W+RX2d VoJN4IyPqQ90dxPIgmaXHwnDs+Oew1Nla5sSNmZUgBmay44ulTSD1yGqCBmn3s/t RX7C5rieuyqfMHEV3VJ+QWXurXv4D2prLwNa4IWzIUfyaiNp2yuf/Zm5LodtVIYd AgAY5NupXlNibTYODL5PaqWh428WbpjaKFdJueaMQ4M80tsWUwml8CsBGy5BJ0FG PYPnk9XsAeJSN1Vqo1mfNbc+3XOE+rwRMfEFWxsMOP93rFr3Sdz4UliwWVTJB0NK YXSZg6kDNNabLRnVv4uGaO8= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org