$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/642A8EA2887911ECAFCDDE1FC4F9AE02.roa File: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (raw, json) Hash identifier: biN9tdHvCrBXyCcQr8koJ0sIQQhBNypDbtvOi2obKUY= Subject key identifier: 91:4B:A8:27:7F:EB:9C:73:06:89:66:7C:56:F4:23:CE:8E:DA:65:AC Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 036D Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/642A8EA2887911ECAFCDDE1FC4F9AE02.roa Signing time: Mon 06 May 2024 14:39:17 +0000 ROA not before: Mon 06 May 2024 14:39:17 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 147293 IP address blocks: 2001:df0:64c0::/48 maxlen: 48 2400:8a20:120::/48 maxlen: 48 2400:8a20:121::/48 maxlen: 48 2400:8a20:122::/48 maxlen: 48 2400:8a20:130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 03:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: May 6 14:39:17 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6638eb95-edd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a5:97:b8:fa:ec:34:3c:93:6e:b3:eb:4f:34: 17:94:43:b5:f7:7c:a8:d5:d3:c3:31:97:4f:e5:cb: 0b:39:74:17:0a:27:2c:fc:72:9f:b9:49:67:a1:11: 94:83:3e:02:3f:fd:f0:96:75:39:70:8f:a6:28:48: 32:f5:e9:63:08:fd:88:65:cd:14:2a:92:64:cd:40: 33:5d:96:d2:52:a2:7b:59:68:c4:03:c7:4d:e1:1a: d5:47:b6:1c:13:39:a4:2e:bb:4a:fa:b3:5f:4f:ef: c9:45:23:a1:db:9e:32:4d:f0:2a:4c:8a:47:6f:0c: 44:04:a6:75:e4:c5:0a:d3:bd:6a:3e:e6:7d:a6:0a: e0:b7:a7:0d:29:5f:28:c6:d7:76:56:45:d9:85:c5: 06:69:0b:a5:b2:59:60:5a:cf:97:95:b2:c6:43:aa: fc:9f:f3:12:cc:2c:dd:ef:b5:8a:84:4d:7b:64:d1: 08:af:4e:24:3a:0a:76:0a:6d:85:c4:46:da:55:01: d9:f8:c6:e4:24:b9:49:8c:82:b8:96:49:6f:60:b9: d6:af:47:48:2f:b6:fc:f5:31:19:50:b0:43:b2:a1: 36:c1:0a:e8:0a:c2:ea:ea:f4:6f:81:cf:71:9e:d8: 80:b3:5d:2b:6b:c1:26:84:e4:01:c5:50:d1:14:75: 17:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4B:A8:27:7F:EB:9C:73:06:89:66:7C:56:F4:23:CE:8E:DA:65:AC X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/642A8EA2887911ECAFCDDE1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:64c0::/48 2400:8a20:120::-2400:8a20:122:ffff:ffff:ffff:ffff:ffff 2400:8a20:130::/48 Signature Algorithm: sha256WithRSAEncryption 03:8c:1a:60:65:ef:2c:31:bd:fa:a2:01:9f:c8:e1:32:af:d6: 21:b4:a3:2e:08:52:48:22:c4:a7:c7:6a:5a:e8:c3:7b:dd:08: 0c:de:e1:14:d7:37:e3:72:56:3c:98:46:f6:e5:fe:1c:7f:64: 0d:58:08:cc:15:cf:ec:5e:9d:3f:d7:d1:89:e1:07:13:e5:2c: 75:53:7c:e5:36:55:7b:2b:4c:f3:f8:d6:64:36:d0:0d:66:c5: e0:51:90:dc:21:1d:e1:c0:f6:e5:2e:1f:05:29:cb:5a:d4:26: e1:b2:12:c4:6b:00:09:e9:cf:25:25:cc:f4:88:f5:fb:6d:fd: b9:44:92:55:91:f2:6e:f0:4d:0d:ad:ce:74:ce:ec:c6:8b:0b: c3:13:00:d7:67:30:a9:e7:2e:5c:98:c7:e6:a6:96:e8:b8:c9: 7f:6f:d9:5f:14:b6:fe:f4:28:54:36:1d:c0:a6:d5:8b:9a:7e: bd:25:04:5b:8d:e0:72:c5:7e:25:f0:e4:f2:e8:28:0b:7d:95: cc:64:c6:26:f1:73:07:0e:5a:5d:f4:c1:d7:64:c6:b2:f3:07: 7e:24:be:47:d0:77:21:3a:87:3e:cd:9c:16:e7:c9:67:c8:37: e4:99:83:29:9a:87:10:dd:8e:b7:2c:c4:ba:94:b8:5a:e3:b1: a8:6a:b5:d3 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjQwNTA2MTQzOTE3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM4ZWI5NS1lZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aWXuPrsNDyTbrPrTzQXlEO193yo1dPDMZdP5csLOXQXCics/HKfuUlnoRGU gz4CP/3wlnU5cI+mKEgy9eljCP2IZc0UKpJkzUAzXZbSUqJ7WWjEA8dN4RrVR7Yc EzmkLrtK+rNfT+/JRSOh254yTfAqTIpHbwxEBKZ15MUK071qPuZ9pgrgt6cNKV8o xtd2VkXZhcUGaQulsllgWs+XlbLGQ6r8n/MSzCzd77WKhE17ZNEIr04kOgp2Cm2F xEbaVQHZ+MbkJLlJjIK4lklvYLnWr0dIL7b89TEZULBDsqE2wQroCsLq6vRvgc9x ntiAs10ra8EmhOQBxVDRFHUXgQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFJFLqCd/ 65xzBolmfFb0I86O2mWsMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJEQjEvM0ZBNjkyMDA4M0MwMTFFQ0I1NEIzOTdGQzRGOUFFMDIvNjQyQThFQTI4 ODc5MTFFQ0FGQ0RERTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgACMCYDBwAgAQ3wZMAwEgMHBSQAiiABIAMHACQAiiABIgMHACQAiiAB MDANBgkqhkiG9w0BAQsFAAOCAQEAA4waYGXvLDG9+qIBn8jhMq/WIbSjLghSSCLE p8dqWujDe90IDN7hFNc343JWPJhG9uX+HH9kDVgIzBXP7F6dP9fRieEHE+UsdVN8 5TZVeytM8/jWZDbQDWbF4FGQ3CEd4cD25S4fBSnLWtQm4bISxGsACenPJSXM9Ij1 +239uUSSVZHybvBNDa3OdM7sxosLwxMA12cwqecuXJjH5qaW6LjJf2/ZXxS2/vQo VDYdwKbVi5p+vSUEW43gcsV+JfDk8ugoC32VzGTGJvFzBw5aXfTB12TGsvMHfiS+ R9B3ITqHPs2cFufJZ8g35JmDKZqHEN2OtyzEupS4WuOxqGq10w== -----END CERTIFICATE-----Generated at Fri Jun 7 05:07:34 2024 by rpki-client on console-ams.rpki-client.org