$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3549E00001E711EDB2C82D0FC4F9AE02.roa File: 3549E00001E711EDB2C82D0FC4F9AE02.roa (raw, json) Hash identifier: KtddW729xrlJk7DbI0m5suHr7SPSQixb4Aj2SNBTVS0= Subject key identifier: 2C:88:9E:A5:34:1D:91:C6:B6:E1:3F:F3:FA:01:D8:27:8D:AF:71:A4 Certificate issuer: /CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8 Certificate serial: 01D8 Authority key identifier: 46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3549E00001E711EDB2C82D0FC4F9AE02.roa Signing time: Wed 01 May 2024 05:07:27 +0000 ROA not before: Wed 01 May 2024 05:07:27 +0000 ROA not after: Thu 29 Aug 2024 00:00:00 +0000 asID: 36351 IP address blocks: 2001:df3:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8 Validity Not Before: May 1 05:07:27 2024 GMT Not After : Aug 29 00:00:00 2024 GMT Subject: CN=6631ce0e-1ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d4:8f:1b:c0:ce:f9:cf:d7:ed:58:c3:65:3a: 0a:6c:0f:f6:16:a9:21:12:a2:ff:8b:d8:83:e2:3a: 28:95:93:39:6a:ba:fe:84:99:27:24:98:5f:63:40: df:3f:42:a7:9f:2e:12:41:0d:c8:db:44:28:4c:e0: ac:13:be:f8:ec:88:2d:2f:ee:88:f6:09:b9:56:7d: 0d:bd:9f:ad:34:2d:68:7e:72:4a:36:a9:f5:78:34: b7:41:b0:9d:cf:17:96:7a:00:17:8f:fc:2a:3d:2a: d5:8e:a3:e7:7c:61:cd:02:0f:b4:b5:09:fe:cc:39: 40:61:28:ea:7e:93:d6:fd:4d:ba:2b:23:4f:fe:09: b1:0e:f4:49:7a:be:d9:95:78:0e:4e:eb:33:ae:ec: 63:72:7b:17:2a:08:e5:62:61:e6:99:3a:e6:9a:99: be:43:68:d9:fd:6a:74:c3:a7:5d:2f:e0:e7:a0:b1: b0:5b:21:a1:19:ab:b3:a4:7a:c3:fc:5e:20:32:67: 50:eb:aa:fc:c3:ad:53:5d:3b:44:57:53:bc:66:96: 57:35:31:b3:46:97:85:76:4a:dd:6c:15:5c:03:9e: e6:e7:e8:0a:e6:9d:19:30:02:9d:3d:6a:54:f5:2a: 13:53:b8:6b:e5:9e:87:64:41:2b:6e:9c:6c:86:4b: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:9E:A5:34:1D:91:C6:B6:E1:3F:F3:FA:01:D8:27:8D:AF:71:A4 X509v3 Authority Key Identifier: keyid:46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3549E00001E711EDB2C82D0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:8800::/48 Signature Algorithm: sha256WithRSAEncryption 68:5a:e0:97:21:e3:f9:e9:01:77:eb:9b:29:85:7a:04:29:f2: 50:51:20:50:2a:a6:31:12:65:a6:96:d0:5c:9a:7a:ca:30:e9: cd:40:60:37:7b:7a:82:ae:ce:2c:dc:64:ce:64:a9:52:50:f0: 30:45:88:df:7f:da:e9:3d:56:25:78:d9:6b:f7:b1:3b:23:1c: 94:53:a0:16:22:86:ac:b8:85:11:bf:42:83:73:ce:29:b8:29: 56:9a:8f:dc:b9:0d:99:31:ea:02:e5:0f:27:8a:1b:81:ef:7e: a9:38:6b:43:25:66:7f:e1:06:ef:2e:18:fd:e0:71:48:35:84: ff:99:13:d3:29:b1:89:ef:c2:66:eb:bb:1f:db:74:5b:e6:5d: 87:29:71:94:05:c5:48:74:1f:6d:32:a2:7c:5f:79:e2:e0:95: 4a:c9:8a:df:d9:32:b6:e1:fb:a3:22:53:18:25:ae:a4:0f:fd: 42:79:09:03:7f:94:85:25:ea:d3:d8:82:f1:0d:7a:04:7c:2c: 9c:d6:75:64:92:42:3f:9e:76:b8:1f:b9:37:1d:be:42:77:ad: dd:6d:d0:d1:f3:fb:95:38:d9:74:09:ef:d5:f0:96:45:51:67: f9:b6:38:8f:f9:0e:42:90:ad:a1:82:e9:d8:f8:8c:8f:87:d3: 7e:53:c8:e8 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGMzQxMTAvBgNVBAUTKDQ2MEZBOEZBRkZDOEJFNDA5RUMyQkRGODQ2MzcwNTg2 M0E0NUU4RTgwHhcNMjQwNTAxMDUwNzI3WhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxY2UwZS0xZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNSPG8DO+c/X7VjDZToKbA/2FqkhEqL/i9iD4joolZM5arr+hJknJJhfY0Df P0Knny4SQQ3I20QoTOCsE7747IgtL+6I9gm5Vn0NvZ+tNC1ofnJKNqn1eDS3QbCd zxeWegAXj/wqPSrVjqPnfGHNAg+0tQn+zDlAYSjqfpPW/U26KyNP/gmxDvRJer7Z lXgOTuszruxjcnsXKgjlYmHmmTrmmpm+Q2jZ/Wp0w6ddL+DnoLGwWyGhGauzpHrD /F4gMmdQ66r8w61TXTtEV1O8ZpZXNTGzRpeFdkrdbBVcA57m5+gK5p0ZMAKdPWpU 9SoTU7hr5Z6HZEErbpxshkvgCwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCyInqU0 HZHGtuE/8/oB2CeNr3GkMB8GA1UdIwQYMBaAFEYPqPr/yL5AnsK9+EY3BYY6Rejo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUYzNC9GOTYwRDFCNDAx RTMxMUVEODEyRTUwMEJDNEY5QUUwMi9SZy1vLXZfSXZrQ2V3cjM0UmpjRmhqcEY2 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnLW8tdl9JdmtDZXdyMzRSamNGaGpwRjZPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFGMzQvRjk2MEQxQjQwMUUzMTFFRDgxMkU1MDBCQzRGOUFFMDIvMzU0OUUwMDAw MUU3MTFFREIyQzgyRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3ziAAwDQYJKoZIhvcNAQELBQADggEBAGha4Jch4/np AXfrmymFegQp8lBRIFAqpjESZaaW0Fyaesow6c1AYDd7eoKuzizcZM5kqVJQ8DBF iN9/2uk9ViV42Wv3sTsjHJRToBYihqy4hRG/QoNzzim4KVaaj9y5DZkx6gLlDyeK G4Hvfqk4a0MlZn/hBu8uGP3gcUg1hP+ZE9MpsYnvwmbrux/bdFvmXYcpcZQFxUh0 H20yonxfeeLglUrJit/ZMrbh+6MiUxglrqQP/UJ5CQN/lIUl6tPYgvENegR8LJzW dWSSQj+edrgfuTcdvkJ3rd1t0NHz+5U42XQJ79XwlkVRZ/m2OI/5DkKQraGC6dj4 jI+H035TyOg= -----END CERTIFICATE-----Generated at Fri May 3 05:32:31 2024 by rpki-client on console-ams.rpki-client.org