$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/164D3C32379711EF9ECC714EC4F9AE02.roa File: 164D3C32379711EF9ECC714EC4F9AE02.roa (raw, json) Hash identifier: MwAJLA+u3nsJdB5hxYAQtsiYv2wQXxIJZHkWx14cyEw= Subject key identifier: CC:DE:B9:1C:B6:5C:0D:C7:97:17:04:39:04:94:91:A8:3A:59:69:49 Certificate issuer: /CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60 Certificate serial: 02 Authority key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/164D3C32379711EF9ECC714EC4F9AE02.roa Signing time: Mon 01 Jul 2024 10:45:52 +0000 ROA not before: Mon 01 Jul 2024 10:45:52 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 152932 IP address blocks: 2001:df3:f940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60 Validity Not Before: Jul 1 10:45:52 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=668288e0-f79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:88:8d:d7:8b:de:69:67:75:dd:d9:95:05:be: f9:96:08:ef:cd:e4:00:76:b3:f7:41:44:9b:8a:8a: 61:b1:bf:4f:d7:fe:00:1f:8d:3c:ba:75:a3:cb:57: 05:9c:9d:cb:50:69:2b:2c:58:1b:99:ae:74:8a:e7: a4:4a:15:1c:33:c6:aa:ab:8f:9b:2c:82:a5:65:42: 6e:5d:9e:0a:25:75:9d:fc:39:ba:f9:c9:bc:31:5b: 06:e9:34:b5:da:ab:10:f1:e3:a7:6c:bd:67:9d:c0: 7b:aa:d3:8b:8b:44:82:ca:a9:8e:1e:b6:af:2c:cf: 74:e8:98:0a:77:44:b0:f1:ab:27:de:99:c5:a6:06: 24:18:e9:54:5a:52:b9:eb:77:3b:80:41:f0:8e:7c: 71:73:a2:11:8f:21:90:ce:d3:a9:cd:28:ab:d2:cc: 77:62:c2:06:7d:0d:d0:04:7b:5b:03:9e:9c:eb:b1: 52:c8:2d:de:03:a9:db:c8:d8:cc:0c:50:bf:7b:1f: 7d:e7:86:68:85:00:fe:c3:d5:d1:42:4a:4f:24:21: 85:27:ca:fc:58:bf:68:27:76:a4:4c:0b:13:a5:18: 6f:e8:4b:6c:2b:20:a6:72:66:e3:0a:14:78:c8:f8: f0:1c:d5:07:41:ab:75:74:f7:fc:18:a5:99:31:bd: 32:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DE:B9:1C:B6:5C:0D:C7:97:17:04:39:04:94:91:A8:3A:59:69:49 X509v3 Authority Key Identifier: keyid:FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/164D3C32379711EF9ECC714EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:f940::/48 Signature Algorithm: sha256WithRSAEncryption 94:81:9d:21:7d:71:8c:6b:00:d5:e9:a7:08:8c:03:16:df:bd: e2:c4:6e:52:1c:e1:6b:d8:39:3c:ad:32:da:41:99:27:7c:f5: 4d:08:47:87:2e:92:76:5b:fa:b5:1f:87:a5:79:85:e4:6a:46: 79:94:77:61:fa:6e:36:b8:d7:ba:01:3f:76:57:db:d8:eb:47: 69:32:02:1c:d3:db:1c:35:86:64:e2:13:ba:e7:d9:91:1a:98: 19:11:21:13:ab:74:a5:74:8a:c0:43:99:6c:c1:db:cb:4a:de: 89:4b:f4:05:2c:fd:8a:1b:a6:aa:b0:7e:5e:a8:e4:7b:01:1b: 4f:e8:f1:1e:9f:dc:45:6e:79:0c:43:c3:d4:4c:1d:c5:6c:e6: a3:67:dc:3c:29:5b:77:b9:4b:72:35:64:06:c9:52:25:80:75: ca:11:81:97:30:14:cf:00:f6:41:67:28:0d:27:e1:ba:fc:a7: 55:c4:7e:06:69:c8:64:27:c8:a6:ab:2b:f6:15:ec:3d:d7:51: 7a:e1:c9:14:c0:01:13:7b:9d:f2:33:9d:9a:8d:38:dc:e1:e2: e8:f3:9f:57:0a:f6:13:4a:e8:69:1c:8c:ec:25:73:d8:ca:c0: 63:c5:9e:fe:2a:21:89:ef:98:92:36:c9:2a:67:a1:fb:4c:c9: 68:93:5a:ac -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjIyRTExMC8GA1UEBRMoRkFDQzMzNTJCQ0UzODAyODUzREJGNEIwNDA1MjVDRkMx RTE1MkU2MDAeFw0yNDA3MDExMDQ1NTJaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODI4OGUwLWY3OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqiI3Xi95pZ3Xd2ZUFvvmWCO/N5AB2s/dBRJuKimGxv0/X/gAfjTy6daPLVwWc nctQaSssWBuZrnSK56RKFRwzxqqrj5ssgqVlQm5dngoldZ38Obr5ybwxWwbpNLXa qxDx46dsvWedwHuq04uLRILKqY4etq8sz3TomAp3RLDxqyfemcWmBiQY6VRaUrnr dzuAQfCOfHFzohGPIZDO06nNKKvSzHdiwgZ9DdAEe1sDnpzrsVLILd4DqdvI2MwM UL97H33nhmiFAP7D1dFCSk8kIYUnyvxYv2gndqRMCxOlGG/oS2wrIKZyZuMKFHjI +PAc1QdBq3V09/wYpZkxvTJrAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUzN65HLZc DceXFwQ5BJSRqDpZaUkwHwYDVR0jBBgwFoAU+swzUrzjgChT2/SwQFJc/B4VLmAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCMjJFLzhCRTEwMDg0Mzc5 NTExRUY4N0NGRDY0QkM0RjlBRTAyLy1zd3pVcnpqZ0NoVDJfU3dRRkpjX0I0Vkxt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXN3elVyempnQ2hUMl9Td1FGSmNfQjRWTG1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjIyRS84QkUxMDA4NDM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi8xNjREM0MzMjM3 OTcxMUVGOUVDQzcxNEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfP5QDANBgkqhkiG9w0BAQsFAAOCAQEAlIGdIX1xjGsA 1emnCIwDFt+94sRuUhzha9g5PK0y2kGZJ3z1TQhHhy6Sdlv6tR+HpXmF5GpGeZR3 YfpuNrjXugE/dlfb2OtHaTICHNPbHDWGZOITuufZkRqYGREhE6t0pXSKwEOZbMHb y0reiUv0BSz9ihumqrB+XqjkewEbT+jxHp/cRW55DEPD1EwdxWzmo2fcPClbd7lL cjVkBslSJYB1yhGBlzAUzwD2QWcoDSfhuvynVcR+BmnIZCfIpqsr9hXsPddReuHJ FMABE3ud8jOdmo043OHi6POfVwr2E0roaRyM7CVz2MrAY8We/iohie+YkjbJKmeh +0zJaJNarA== -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:50 2024 by rpki-client on console-ams.rpki-client.org