$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa File: CC320712ACE011EAB535D034C4F9AE02.roa (raw, json) Hash identifier: JYY7Jlcu8MvbqrTObq1zVkDo+73nlBcySqwLIuU2yn4= Subject key identifier: 17:C7:13:8C:89:9F:B8:73:B9:29:1A:17:E1:5C:48:51:F0:A0:80:11 Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF Certificate serial: 0F58 Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa Signing time: Thu 08 Feb 2024 18:15:58 +0000 ROA not before: Thu 08 Feb 2024 18:15:58 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138467 IP address blocks: 2404:9ec0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3928 (0xf58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF Validity Not Before: Feb 8 18:15:58 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65c51a5e-6f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:cf:b0:e7:b8:5b:64:ea:aa:1b:41:4b:8c: d1:79:5d:f4:2d:c4:4a:f3:fa:15:af:f1:0d:a8:70: e1:26:3e:d7:c5:f9:e5:89:69:f5:d4:97:a3:a1:13: 15:a9:f2:9c:e2:68:b0:6e:91:7a:6d:5d:47:28:af: 3a:15:9a:6e:53:92:b1:c5:60:cb:2e:da:51:d9:45: 18:b3:1d:49:78:b7:ae:85:fd:2c:ea:1d:66:e7:9a: 8f:2f:a6:99:d9:58:ee:89:a3:7f:bd:4c:16:ac:05: 71:41:65:19:62:27:4a:59:e7:85:f5:21:a6:ea:5d: af:1b:b5:cb:4b:ed:fa:aa:9a:a2:99:04:eb:e8:67: 5a:04:6b:63:c1:df:ac:5d:a0:33:a6:1e:3e:b5:a9: 9e:90:dc:de:f1:3d:03:0c:a8:ab:76:1c:0d:80:0f: 04:ff:fd:d9:2c:27:7c:74:59:e6:3a:96:ed:4e:29: 61:4c:2a:fa:98:09:9f:2c:99:e3:bb:57:04:df:af: 3e:29:8b:58:3b:14:77:c4:a3:98:8d:b3:7b:88:d7: 0e:1a:b1:64:e0:f6:70:2a:8b:81:aa:b7:1e:7d:de: a1:c2:77:26:4f:65:1f:0c:19:8e:02:ff:58:f1:3e: af:24:3c:e9:71:ee:f9:94:26:b6:5c:ae:c1:e7:05: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C7:13:8C:89:9F:B8:73:B9:29:1A:17:E1:5C:48:51:F0:A0:80:11 X509v3 Authority Key Identifier: keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:9ec0:5::/48 Signature Algorithm: sha256WithRSAEncryption 84:35:0c:fc:97:6f:6e:46:38:ff:ae:03:7f:b4:0f:67:12:bf: b8:b0:2f:f4:b7:c1:4b:cc:7b:95:51:68:6e:32:de:c5:61:16: 64:ae:61:47:bc:0b:f8:1d:e4:30:d2:b4:78:73:41:81:c8:b3: be:f0:39:6c:80:fa:c6:d1:1f:ec:84:27:13:0d:18:5b:2a:6a: e1:5a:d4:30:7c:db:bc:d4:32:ef:f6:ec:fe:76:6d:22:67:74: d4:47:54:19:03:51:e6:28:ba:7c:37:be:95:00:ff:be:78:74: ce:4f:e6:80:f7:c0:b2:84:15:8e:fe:7c:79:75:08:58:98:58: 6e:97:57:e4:da:c8:8f:ca:5e:f1:70:a2:3a:3a:94:d6:38:8b: 5c:00:87:f3:0a:14:87:2e:45:7d:c2:b2:8a:41:12:84:ab:d2: f9:9c:ec:6c:54:19:48:3d:e2:7f:ed:ff:a2:60:1b:89:cc:2a: 2a:dd:67:e0:3d:bc:8e:c4:dc:a4:0c:63:9e:c4:58:29:0d:57: 69:d7:e0:b8:2c:46:4f:f8:0b:59:58:51:9d:1a:43:ba:13:61: d8:3e:aa:43:c8:61:9c:9b:86:73:03:e0:dc:a2:68:ac:1f:2a: 53:b2:6e:bb:fc:83:27:94:0d:87:a7:3d:22:56:34:23:74:5d: 44:b3:62:fb -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICD1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEOUMxMTAvBgNVBAUTKDVCMkNGMEZCNjJGMTYwRjE4MzhBRUUzRTZDREUwNzU0 NERGRjhCRkYwHhcNMjQwMjA4MTgxNTU4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM1MWE1ZS02ZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArazPsOe4W2TqqhtBS4zReV30LcRK8/oVr/ENqHDhJj7XxfnliWn11JejoRMV qfKc4miwbpF6bV1HKK86FZpuU5KxxWDLLtpR2UUYsx1JeLeuhf0s6h1m55qPL6aZ 2VjuiaN/vUwWrAVxQWUZYidKWeeF9SGm6l2vG7XLS+36qpqimQTr6GdaBGtjwd+s XaAzph4+tamekNze8T0DDKirdhwNgA8E//3ZLCd8dFnmOpbtTilhTCr6mAmfLJnj u1cE368+KYtYOxR3xKOYjbN7iNcOGrFk4PZwKouBqrcefd6hwncmT2UfDBmOAv9Y 8T6vJDzpce75lCa2XK7B5wWHwQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBfHE4yJ n7hzuSkaF+FcSFHwoIARMB8GA1UdIwQYMBaAFFss8Pti8WDxg4ruPmzeB1RN/4v/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Q5Qy80NTU5NDJENjUw QjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQR0RpdTQtYk40SFZFM19p XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d5enctMkx4WVBHRGl1NC1iTjRIVkUzX2lfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNEOUMvNDU1OTQyRDY1MEIyMTFFOUI1REI2QTZCQzRGOUFFMDIvQ0MzMjA3MTJB Q0UwMTFFQUI1MzVEMDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBJ7AAAUwDQYJKoZIhvcNAQELBQADggEBAIQ1DPyXb25G OP+uA3+0D2cSv7iwL/S3wUvMe5VRaG4y3sVhFmSuYUe8C/gd5DDStHhzQYHIs77w OWyA+sbRH+yEJxMNGFsqauFa1DB827zUMu/27P52bSJndNRHVBkDUeYounw3vpUA /754dM5P5oD3wLKEFY7+fHl1CFiYWG6XV+TayI/KXvFwojo6lNY4i1wAh/MKFIcu RX3CsopBEoSr0vmc7GxUGUg94n/t/6JgG4nMKirdZ+A9vI7E3KQMY57EWCkNV2nX 4LgsRk/4C1lYUZ0aQ7oTYdg+qkPIYZybhnMD4NyiaKwfKlOybrv8gyeUDYenPSJW NCN0XUSzYvs= -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org