$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/437375BC7F5111EFB8735348C4F9AE02.roa File: 437375BC7F5111EFB8735348C4F9AE02.roa (raw, json) Hash identifier: ntU5A+HLeVovcRHLXCxsmuQ1WJafor08JAoFk5ZmBCg= Subject key identifier: 17:25:80:25:43:DC:39:C7:BC:2E:45:1C:19:06:27:B9:84:A5:43:4D Certificate issuer: /CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Certificate serial: D5 Authority key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/437375BC7F5111EFB8735348C4F9AE02.roa Signing time: Mon 30 Sep 2024 17:27:27 +0000 ROA not before: Mon 30 Sep 2024 17:27:27 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 151805 IP address blocks: 2401:56a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Validity Not Before: Sep 30 17:27:27 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66fadf7f-44e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:c4:4c:2d:7e:d7:8a:a8:f5:55:19:5c:fd: 4b:5a:4d:a1:86:ed:b4:b9:8b:35:d5:1b:34:d6:05: 80:09:04:0f:53:9f:f4:df:27:2a:0b:4a:16:85:da: 1f:a2:d1:32:f9:5d:9e:ed:f4:bf:49:64:e7:f6:7a: cb:59:cc:60:f8:9e:9d:0f:a0:0a:a2:5c:87:78:52: 8f:a7:e7:a2:00:32:92:b3:de:b7:b2:ef:ea:a0:8a: da:b4:80:10:c7:c6:9e:74:de:5e:51:ac:63:45:17: 3b:0d:33:95:64:f2:20:2d:b6:05:7c:8a:48:8a:91: e6:bf:fb:33:ea:2c:79:43:5b:7d:14:ee:0c:a4:bc: f8:2f:67:e2:e3:9b:75:c0:f7:b0:cc:5f:42:31:36: bc:e1:eb:1b:41:24:d9:40:3c:08:8a:c9:ac:87:9b: 62:77:4d:7d:f6:1a:b0:b0:a9:d1:6f:72:0d:ee:fe: bf:d0:35:8e:6c:db:d7:61:26:72:1f:e0:1c:80:99: 88:7f:80:e5:7f:f8:98:26:8f:9c:44:8b:9b:cd:89: e0:4b:8b:61:40:6a:2d:19:9d:6c:29:d6:b4:c3:64: 7b:c9:ec:dd:a8:e1:14:b8:b0:0a:d3:53:8f:95:c4: b0:75:be:f4:ac:6a:1a:0b:b8:97:01:44:13:9c:45: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:25:80:25:43:DC:39:C7:BC:2E:45:1C:19:06:27:B9:84:A5:43:4D X509v3 Authority Key Identifier: keyid:42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/437375BC7F5111EFB8735348C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:56a0::/32 Signature Algorithm: sha256WithRSAEncryption 94:56:60:31:9c:33:23:bb:9c:51:4f:b8:b4:d7:69:f5:59:70: b0:63:45:2c:19:1d:71:2f:0a:02:4a:a8:49:ac:1f:69:a7:e5: 22:6c:d2:45:ab:5d:5a:36:5f:c5:6f:ef:b0:e4:17:f4:c2:07: 94:fc:e9:c0:5f:49:7b:de:98:52:ab:ef:fe:1e:30:2e:9d:19: 57:d6:a4:df:91:55:98:3d:26:9e:37:f1:5c:a5:32:88:75:d1: cc:3d:28:f9:62:af:16:31:c5:72:a9:55:90:24:54:1e:89:cf: cd:54:b3:4f:90:6e:d0:e5:83:f2:84:e7:f4:01:ce:ce:61:02: e5:f2:20:d1:9f:84:77:3d:39:8a:05:d5:50:3b:99:55:d4:3a: 2b:cc:36:a9:40:71:2a:03:05:04:4c:d3:cd:06:e5:93:0c:92: ea:4f:a9:d0:15:30:55:24:dd:83:3f:55:aa:0e:c1:6c:31:73: 89:67:78:2c:47:37:48:62:19:a6:08:30:60:d7:79:3b:12:1a: 7e:d8:5f:20:de:9b:18:88:26:5f:9c:4e:ef:f7:19:db:bf:6f: 4f:70:81:3f:c4:06:77:c4:7f:51:ff:dc:63:95:ad:07:21:64: 27:dc:9c:57:3a:05:ba:93:c9:f0:16:f1:52:fd:10:d3:4d:d8: 82:77:6a:5d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCMTcxMTAvBgNVBAUTKDQyRjI3OTFFRUFDMUZDN0Q3RUMxMEI2OUYyNUU5RUU5 NURBQjM0RTEwHhcNMjQwOTMwMTcyNzI3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZhZGY3Zi00NGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IDETC1+14qo9VUZXP1LWk2hhu20uYs11Rs01gWACQQPU5/03ycqC0oWhdof otEy+V2e7fS/SWTn9nrLWcxg+J6dD6AKolyHeFKPp+eiADKSs963su/qoIratIAQ x8aedN5eUaxjRRc7DTOVZPIgLbYFfIpIipHmv/sz6ix5Q1t9FO4MpLz4L2fi45t1 wPewzF9CMTa84esbQSTZQDwIismsh5tid0199hqwsKnRb3IN7v6/0DWObNvXYSZy H+AcgJmIf4Dlf/iYJo+cRIubzYngS4thQGotGZ1sKda0w2R7yezdqOEUuLAK01OP lcSwdb70rGoaC7iXAUQTnEX5/QIDAQABo4ICljCCApIwHQYDVR0OBBYEFBclgCVD 3DnHvC5FHBkGJ7mEpUNNMB8GA1UdIwQYMBaAFELyeR7qwfx9fsELafJenuldqzTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUIxNy81OTY2REQyNjcy QTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9IMS13UXRwOGw2ZTZWMnJO T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2SjVIdXJCX0gxLXdRdHA4bDZlNlYyck5PRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFCMTcvNTk2NkREMjY3MkE3MTFFRUIxMEJFODUyQzRGOUFFMDIvNDM3Mzc1QkM3 RjUxMTFFRkI4NzM1MzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAVagMA0GCSqGSIb3DQEBCwUAA4IBAQCUVmAxnDMju5xR T7i012n1WXCwY0UsGR1xLwoCSqhJrB9pp+UibNJFq11aNl/Fb++w5Bf0wgeU/OnA X0l73phSq+/+HjAunRlX1qTfkVWYPSaeN/FcpTKIddHMPSj5Yq8WMcVyqVWQJFQe ic/NVLNPkG7Q5YPyhOf0Ac7OYQLl8iDRn4R3PTmKBdVQO5lV1DorzDapQHEqAwUE TNPNBuWTDJLqT6nQFTBVJN2DP1WqDsFsMXOJZ3gsRzdIYhmmCDBg13k7Ehp+2F8g 3psYiCZfnE7v9xnbv29PcIE/xAZ3xH9R/9xjla0HIWQn3JxXOgW6k8nwFvFS/RDT TdiCd2pd -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org