$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/C1B3DE082BBE11EF809E1831C4F9AE02.roa File: C1B3DE082BBE11EF809E1831C4F9AE02.roa (raw, json) Hash identifier: tW1tMolm5x3GeEA1HyFZqPW/WUluhI939ppCe/JxxEw= Subject key identifier: D3:95:56:49:0A:E5:1C:F5:9D:00:2B:17:BD:72:84:D0:91:FB:B1:2C Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Certificate serial: 0945 Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/C1B3DE082BBE11EF809E1831C4F9AE02.roa Signing time: Sun 30 Jun 2024 12:40:08 +0000 ROA not before: Sun 30 Jun 2024 12:40:08 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 151952 IP address blocks: 2400:6100::/32 maxlen: 32 2400:6100::/33 maxlen: 33 2400:6100:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Validity Not Before: Jun 30 12:40:08 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66815228-4532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:78:79:f8:26:ed:c2:d7:1a:97:b6:60:d8:23: 57:0a:61:60:33:ac:71:aa:1c:25:31:d4:c5:e7:95: 4e:b0:b5:2f:a9:6d:98:5c:42:e6:5a:c2:0f:e5:a4: e0:37:2f:5e:6c:5a:f2:30:68:c0:e6:e0:b5:3c:82: 18:0f:21:7f:46:44:f3:a1:57:8e:d4:0e:9a:97:7f: 33:07:2c:94:54:22:60:68:e7:48:09:87:07:3f:39: 00:1c:cc:24:a6:79:72:05:03:ef:1a:4e:5b:63:97: 73:e2:ef:6b:ed:22:c6:87:0d:8d:ff:c5:30:f2:bd: d8:c3:9d:cf:b7:89:80:79:35:d0:15:7e:1c:80:f2: a7:4b:91:89:75:f2:73:85:4b:02:b2:96:2a:28:99: c8:3a:aa:99:74:39:22:90:a4:42:43:6f:87:4e:64: 79:aa:62:38:90:56:29:e5:e1:76:ee:34:ab:45:73: 52:ac:31:d6:3c:97:a9:05:c1:78:70:10:55:4e:69: 4f:aa:3c:97:60:ef:95:6d:9d:ef:5d:c5:9b:7c:f4: 2a:16:0f:5d:a2:4e:2f:e5:88:0f:bf:21:fb:48:3f: 59:e6:a3:6a:22:ad:3f:13:6d:de:d0:30:6d:a9:40: a1:76:d3:b9:0c:00:6a:b2:1d:b2:a7:2b:5b:b5:bd: 7f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:95:56:49:0A:E5:1C:F5:9D:00:2B:17:BD:72:84:D0:91:FB:B1:2C X509v3 Authority Key Identifier: keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/C1B3DE082BBE11EF809E1831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:6100::/32 Signature Algorithm: sha256WithRSAEncryption 6a:cf:32:28:87:a8:d6:8f:6f:92:02:ca:32:d0:1a:d5:d8:9f: d4:57:23:aa:67:d6:c7:33:22:c8:5b:cf:c8:f5:12:20:13:04: fc:0c:d6:81:3d:0e:75:4d:92:1e:9d:3a:a6:83:af:92:f7:81: 22:e2:b4:e2:d7:6b:ab:a2:65:18:ed:47:dd:8c:71:27:67:f8: 81:4c:5c:26:5b:32:d3:8c:f9:73:96:5d:5b:6a:fc:c8:dc:bf: 84:95:8b:08:34:cc:b9:d9:5e:89:24:54:1b:c2:f9:dd:1d:8d: 22:d4:82:fb:bd:e7:26:c2:54:03:89:67:f8:45:ba:b0:26:24: 81:aa:be:59:52:cd:cf:c7:a9:69:27:7c:d3:dd:04:2a:df:d7: c2:b1:f4:74:1e:56:e3:94:77:97:af:a1:97:db:16:c2:8e:02: 49:12:29:b8:d5:87:85:af:a5:a6:3c:4b:04:98:30:6a:1b:88: 2b:b2:ec:ba:34:8c:bb:a5:70:a1:76:5e:08:6b:d8:64:4e:66: 44:21:70:d3:23:60:db:e0:a2:82:20:44:a7:fc:ee:f5:9f:46: ab:7e:47:a0:07:8c:99:f7:2f:b1:a3:e9:67:73:4a:cf:58:d2: fc:42:45:bb:3c:3a:04:ee:27:d0:a1:fa:f1:35:64:3b:ef:d4: a4:d9:b2:6d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzNUExMTAvBgNVBAUTKERDNjIyMDA4QThBMUFENDJCRTJBMjU0OTQzNDkxQUZB QTg0NTQ5QTUwHhcNMjQwNjMwMTI0MDA4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjgxNTIyOC00NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nh5+Cbtwtcal7Zg2CNXCmFgM6xxqhwlMdTF55VOsLUvqW2YXELmWsIP5aTg Ny9ebFryMGjA5uC1PIIYDyF/RkTzoVeO1A6al38zByyUVCJgaOdICYcHPzkAHMwk pnlyBQPvGk5bY5dz4u9r7SLGhw2N/8Uw8r3Yw53Pt4mAeTXQFX4cgPKnS5GJdfJz hUsCspYqKJnIOqqZdDkikKRCQ2+HTmR5qmI4kFYp5eF27jSrRXNSrDHWPJepBcF4 cBBVTmlPqjyXYO+VbZ3vXcWbfPQqFg9dok4v5YgPvyH7SD9Z5qNqIq0/E23e0DBt qUChdtO5DABqsh2ypytbtb1/wwIDAQABo4ICljCCApIwHQYDVR0OBBYEFNOVVkkK 5Rz1nQArF71yhNCR+7EsMB8GA1UdIwQYMBaAFNxiIAiooa1CviolSUNJGvqoRUml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDM1QS8zQzYwOUI0NDdD NjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJVSy1LaVZKUTBrYS1xaEZT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHSWdDS2loclVLLUtpVkpRMGthLXFoRlNhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTAzNUEvM0M2MDlCNDQ3QzY2MTFFQTgwODlGMzUxQzRGOUFFMDIvQzFCM0RFMDgy QkJFMTFFRjgwOUUxODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAGEAMA0GCSqGSIb3DQEBCwUAA4IBAQBqzzIoh6jWj2+S Asoy0BrV2J/UVyOqZ9bHMyLIW8/I9RIgEwT8DNaBPQ51TZIenTqmg6+S94Ei4rTi 12uromUY7UfdjHEnZ/iBTFwmWzLTjPlzll1bavzI3L+ElYsINMy52V6JJFQbwvnd HY0i1IL7vecmwlQDiWf4RbqwJiSBqr5ZUs3Px6lpJ3zT3QQq39fCsfR0HlbjlHeX r6GX2xbCjgJJEim41YeFr6WmPEsEmDBqG4grsuy6NIy7pXChdl4Ia9hkTmZEIXDT I2Db4KKCIESn/O71n0arfkegB4yZ9y+xo+lnc0rPWNL8QkW7PDoE7ifQofrxNWQ7 79Sk2bJt -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:25 2024 by rpki-client on console-fra.rpki-client.org