$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/08D1870EF0B411EE962EE784C4F9AE02.roa File: 08D1870EF0B411EE962EE784C4F9AE02.roa (raw, json) Hash identifier: kd+ZyEIa8OKJXxOJS7tnyqy5H5nqc0a2LvwnZGx0i2s= Subject key identifier: 8B:FE:78:61:4A:88:A8:6A:BC:46:E1:D3:61:18:FF:30:39:B9:E9:AD Certificate issuer: /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Certificate serial: 02 Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/08D1870EF0B411EE962EE784C4F9AE02.roa Signing time: Tue 02 Apr 2024 05:44:13 +0000 ROA not before: Tue 02 Apr 2024 05:44:13 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152604 IP address blocks: 2401:84a0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Validity Not Before: Apr 2 05:44:13 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660b9b2d-43a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:5d:24:f9:89:56:ca:78:a1:61:1e:a9:b5: f5:3e:2b:6e:bc:96:78:5b:fd:58:4a:0d:67:65:40: 7f:b4:6a:05:a3:a5:a3:0a:a1:f8:db:9d:23:21:87: 32:d6:26:9f:af:0f:8b:fb:d2:19:27:af:e3:f9:66: d4:ef:e0:21:91:2d:ef:b3:c6:f9:9b:19:01:c6:75: c8:ce:6e:45:ca:52:8b:78:0f:fa:c3:4d:dc:2d:e3: 17:af:30:db:a0:47:67:9b:8b:67:4c:e5:b8:e1:64: 92:60:79:45:76:f5:94:0a:18:b5:0e:ce:f1:76:0c: 82:ad:5b:42:2c:d9:cd:03:2c:b4:27:13:65:77:7f: 94:31:6b:0a:72:0f:71:12:fe:4a:53:b1:ba:09:68: fe:77:6e:79:ef:4f:a4:0a:61:9f:d2:aa:72:2c:d7: de:b4:3c:e7:76:a1:54:00:2f:fe:8c:af:2a:c8:ad: 6c:55:62:a8:cf:e7:ac:bf:d0:64:a1:08:70:11:9b: 98:0e:66:4f:b8:82:d5:52:2c:20:6a:31:dd:7d:c0: 1c:2d:74:76:52:82:07:86:56:89:48:83:51:69:e5: 87:65:16:9d:64:a7:65:e8:03:fa:77:42:c9:86:44: db:48:d6:6f:4a:68:ed:80:7b:e4:b2:40:5c:ba:18: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FE:78:61:4A:88:A8:6A:BC:46:E1:D3:61:18:FF:30:39:B9:E9:AD X509v3 Authority Key Identifier: keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/08D1870EF0B411EE962EE784C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:84a0::/32 Signature Algorithm: sha256WithRSAEncryption 74:2f:bb:5e:01:c5:c5:12:bd:b7:1b:01:18:2e:55:17:32:2e: 3f:06:4b:59:37:ac:61:d0:a0:1d:db:1f:74:f8:21:01:20:1d: a5:e6:5c:a1:22:03:4e:f3:65:f9:d7:2e:80:2b:5e:22:69:f3: 67:54:dc:58:d7:f6:33:01:40:53:a0:41:99:ba:0b:16:e8:43: 38:c7:8a:be:54:f5:51:ae:4a:c2:94:e8:da:aa:2f:f9:66:5a: 5b:70:8f:b3:ac:bc:d6:c7:29:c5:94:b4:68:57:cd:85:d7:3d: 9f:c6:db:e6:14:57:d6:99:2a:c0:58:6a:bc:5f:fa:50:f4:17: 47:48:b2:af:2e:f6:e8:98:41:4b:b9:8d:a1:fa:5e:88:ff:98: 8d:10:5e:75:c1:bf:4b:5b:94:c9:8c:1a:c8:f1:1c:a4:16:a0: 5a:1c:5b:9b:31:a1:f4:c3:ff:f5:d8:7d:0a:61:61:48:bf:86: a2:ec:54:56:62:75:1c:93:24:e1:74:a1:81:87:ac:da:88:5e: 65:42:c0:55:ab:a4:b9:b2:aa:f9:5b:af:8a:4c:3c:d1:20:b5: 07:c5:47:5d:7a:eb:9b:c7:a7:b3:d0:65:3a:1a:c9:4b:f7:c8: 9e:2c:e5:0a:24:1f:5e:6b:0a:8f:1f:f1:8c:32:0f:46:ae:a0: a1:8a:01:1c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTg4MjExMC8GA1UEBRMoMDRGMEQ4QTkzMDJCMjJCNjBFMzBGNDY1MUI4MkFFOTk5 RkY3NEM5QjAeFw0yNDA0MDIwNTQ0MTNaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGI5YjJkLTQzYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfyl0k+YlWynihYR6ptfU+K268lnhb/VhKDWdlQH+0agWjpaMKofjbnSMhhzLW Jp+vD4v70hknr+P5ZtTv4CGRLe+zxvmbGQHGdcjObkXKUot4D/rDTdwt4xevMNug R2ebi2dM5bjhZJJgeUV29ZQKGLUOzvF2DIKtW0Is2c0DLLQnE2V3f5QxawpyD3ES /kpTsboJaP53bnnvT6QKYZ/SqnIs1960POd2oVQAL/6MryrIrWxVYqjP56y/0GSh CHARm5gOZk+4gtVSLCBqMd19wBwtdHZSggeGVolIg1Fp5YdlFp1kp2XoA/p3QsmG RNtI1m9KaO2Ae+SyQFy6GJyXAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUi/54YUqI qGq8RuHTYRj/MDm56a0wHwYDVR0jBBgwFoAUBPDYqTArIrYOMPRlG4KumZ/3TJsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxODgyL0IyMzhBMTg0RjBC MzExRUVBNEM3MkY4NEM0RjlBRTAyL0JQRFlxVEFySXJZT01QUmxHNEt1bVpfM1RK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQlBEWXFUQXJJcllPTVBSbEc0S3VtWl8zVEpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9CMjM4QTE4NEYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi8wOEQxODcwRUYw QjQxMUVFOTYyRUU3ODRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBhKAwDQYJKoZIhvcNAQELBQADggEBAHQvu14BxcUSvbcb ARguVRcyLj8GS1k3rGHQoB3bH3T4IQEgHaXmXKEiA07zZfnXLoArXiJp82dU3FjX 9jMBQFOgQZm6CxboQzjHir5U9VGuSsKU6NqqL/lmWltwj7OsvNbHKcWUtGhXzYXX PZ/G2+YUV9aZKsBYarxf+lD0F0dIsq8u9uiYQUu5jaH6Xoj/mI0QXnXBv0tblMmM GsjxHKQWoFocW5sxofTD//XYfQphYUi/hqLsVFZidRyTJOF0oYGHrNqIXmVCwFWr pLmyqvlbr4pMPNEgtQfFR11665vHp7PQZToayUv3yJ4s5QokH15rCo8f8YwyD0au oKGKARw= -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:17 2024 by rpki-client on console-ams.rpki-client.org