$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F4717D0D89B11E9AB8A5F14C4F9AE02.roa File: 3F4717D0D89B11E9AB8A5F14C4F9AE02.roa (raw, json) Hash identifier: KWfNx4SOXYveByFCmq1j32wCwrFxa2uDVAzxYXK9pkg= Subject key identifier: 4E:6D:62:CD:84:C5:E6:AA:9D:31:C2:DA:01:DE:80:28:05:44:8E:5C Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3366 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F4717D0D89B11E9AB8A5F14C4F9AE02.roa Signing time: Tue 30 Jan 2024 16:12:54 +0000 ROA not before: Tue 30 Jan 2024 16:12:54 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 46047 IP address blocks: 2405:1dc0::/32 maxlen: 32 2405:1dc0::/36 maxlen: 36 2405:1dc0:1000::/36 maxlen: 36 2405:1dc0:2000::/36 maxlen: 36 2405:1dc0:3000::/36 maxlen: 36 2405:1dc0:4000::/36 maxlen: 36 2405:1dc0:5000::/36 maxlen: 36 2405:1dc0:6000::/36 maxlen: 36 2405:1dc0:7000::/36 maxlen: 36 2405:1dc0:8000::/36 maxlen: 36 2405:1dc0:9000::/36 maxlen: 36 2405:1dc0:a000::/36 maxlen: 36 2405:1dc0:b000::/36 maxlen: 36 2405:1dc0:c000::/36 maxlen: 36 2405:1dc0:d000::/36 maxlen: 36 2405:1dc0:e000::/36 maxlen: 36 2405:1dc0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13158 (0x3366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 30 16:12:54 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65b92006-d0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:69:fb:15:40:3d:3e:34:64:c1:53:d8:c0: 82:a2:e2:0c:8a:fd:d6:c5:29:27:15:b9:94:ad:d7: 04:65:d5:06:34:23:63:18:f8:79:6e:10:49:d1:8f: 66:2c:6e:17:e5:1f:58:bd:d5:92:64:68:4d:ad:99: 64:b7:ca:01:cb:4f:18:d0:50:ab:2c:77:fc:36:d7: d2:a0:e8:c1:f8:71:09:0c:c1:0a:2d:3b:2a:64:82: a6:c8:7d:f8:58:18:37:94:5a:32:47:a9:f0:8d:61: a7:ba:f4:62:79:00:7c:10:b8:cb:ef:35:0c:77:45: e4:27:c4:23:3e:7a:b2:16:72:ac:38:6a:fd:be:9a: cb:1f:07:8a:3c:27:7b:8b:a8:47:ad:ba:b0:0f:4a: 66:13:2b:26:ca:eb:71:de:d8:3e:4b:5e:69:05:1b: 7b:63:0d:85:2d:fc:c9:a6:78:c9:1a:3c:05:ef:c2: 6f:a6:76:df:18:0a:e8:a8:a8:3b:ef:3d:fd:f8:54: 72:5f:33:a1:74:20:d1:4d:54:3c:12:6d:ce:62:2f: ab:4b:72:38:b0:82:e1:04:df:2c:43:26:63:a0:6f: 45:b6:a9:91:17:02:83:39:46:1b:bc:66:04:78:01: 32:6c:92:66:e9:65:bf:ac:48:be:5d:2a:0f:f8:81: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6D:62:CD:84:C5:E6:AA:9D:31:C2:DA:01:DE:80:28:05:44:8E:5C X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F4717D0D89B11E9AB8A5F14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:1dc0::/32 Signature Algorithm: sha256WithRSAEncryption 23:95:c5:1d:a1:92:72:7d:3d:81:27:44:38:94:1c:01:8b:3b: 80:be:2d:89:d3:17:65:1a:16:68:a8:07:c5:24:5c:e3:e9:d4: 92:c5:1c:85:36:89:39:af:b2:69:e8:8d:de:49:34:ab:53:61: fc:e9:d5:f1:75:06:6d:49:cf:77:88:1c:6f:8a:f8:fc:bb:84: 4b:55:8a:a4:ac:50:e4:da:51:b1:38:66:d8:11:ee:ed:d4:95: 57:c8:9e:b0:62:7f:30:fe:1c:71:3d:f8:b9:18:6e:2e:b9:ba: 0a:7d:22:e3:ef:e8:36:20:32:75:f2:58:68:41:3f:bf:71:71: 49:54:02:95:2b:87:1e:c7:76:fa:fa:98:da:20:85:4f:5e:5d: b4:16:e2:5c:84:93:3c:8c:45:b7:13:c6:de:99:2f:a8:77:12: 8a:b6:97:a3:b0:de:f9:15:84:a7:27:e9:10:2c:f1:4c:d9:67: ff:05:7e:57:d3:1e:e2:b3:01:9f:68:88:37:ff:74:2e:d7:8e: d9:aa:35:76:c2:02:06:58:47:cf:1c:14:9f:70:ed:6e:10:96: 29:05:76:f3:55:b7:fb:11:ea:43:8c:45:0c:7a:b3:0f:74:18: 16:44:e1:95:16:b7:64:e6:8b:c7:87:59:b4:fe:45:f6:44:69: e6:d4:3f:f3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICM2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMjU0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MjAwNi1kMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuRp+xVAPT40ZMFT2MCCouIMiv3WxSknFbmUrdcEZdUGNCNjGPh5bhBJ0Y9m LG4X5R9YvdWSZGhNrZlkt8oBy08Y0FCrLHf8NtfSoOjB+HEJDMEKLTsqZIKmyH34 WBg3lFoyR6nwjWGnuvRieQB8ELjL7zUMd0XkJ8QjPnqyFnKsOGr9vprLHweKPCd7 i6hHrbqwD0pmEysmyutx3tg+S15pBRt7Yw2FLfzJpnjJGjwF78JvpnbfGAroqKg7 7z39+FRyXzOhdCDRTVQ8Em3OYi+rS3I4sILhBN8sQyZjoG9FtqmRFwKDOUYbvGYE eAEybJJm6WW/rEi+XSoP+IE1mwIDAQABo4ICljCCApIwHQYDVR0OBBYEFE5tYs2E xeaqnTHC2gHegCgFRI5cMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvM0Y0NzE3RDBE ODlCMTFFOUFCOEE1RjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBR3AMA0GCSqGSIb3DQEBCwUAA4IBAQAjlcUdoZJyfT2B J0Q4lBwBizuAvi2J0xdlGhZoqAfFJFzj6dSSxRyFNok5r7Jp6I3eSTSrU2H86dXx dQZtSc93iBxvivj8u4RLVYqkrFDk2lGxOGbYEe7t1JVXyJ6wYn8w/hxxPfi5GG4u uboKfSLj7+g2IDJ18lhoQT+/cXFJVAKVK4cex3b6+pjaIIVPXl20FuJchJM8jEW3 E8bemS+odxKKtpejsN75FYSnJ+kQLPFM2Wf/BX5X0x7iswGfaIg3/3Qu147ZqjV2 wgIGWEfPHBSfcO1uEJYpBXbzVbf7EepDjEUMerMPdBgWROGVFrdk5ovHh1m0/kX2 RGnm1D/z -----END CERTIFICATE-----Generated at Fri May 10 16:38:08 2024 by rpki-client on console-ams.rpki-client.org