$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2369FBA595F11EF8C3B3D31C4F9AE02.roa File: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (raw, json) Hash identifier: bwOilKkFH3gA2ITdGBNjHTtXXoE0VHn2T54WZ0kqiDg= Subject key identifier: C1:70:FC:00:55:62:18:9B:AB:54:12:B4:BA:05:E0:5E:F3:CC:6B:26 Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0DE2 Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2369FBA595F11EF8C3B3D31C4F9AE02.roa Signing time: Tue 13 Aug 2024 10:34:35 +0000 ROA not before: Tue 13 Aug 2024 10:34:35 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 18254 IP address blocks: 2404:8ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: Aug 13 10:34:35 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66bb36bb-a1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:0a:40:eb:c0:75:ff:98:ff:df:70:25:e2: 07:08:e0:2e:43:f1:8e:98:07:07:ea:fe:13:58:ac: dd:d7:0d:b9:f4:cc:c1:9f:30:3a:79:49:eb:28:d2: e9:ce:fc:a3:ab:d7:2a:7f:f2:a2:b8:5c:eb:1f:dc: 82:54:14:32:cc:bf:b1:7f:a8:89:ab:ef:db:a0:ba: 74:6c:8c:99:bf:94:a5:26:e3:96:42:33:0a:c3:c4: 97:49:8c:10:1b:1a:9f:46:5a:0b:0b:ea:32:e8:37: 0b:18:92:5d:e2:08:d7:a9:a1:e0:8c:ae:d5:22:56: 3b:f5:87:7d:d5:60:af:55:a5:cd:26:e9:88:31:ab: 96:29:71:f3:ae:ce:ba:fc:6f:cc:6e:28:b0:97:57: 4c:2a:1b:67:de:a6:f1:6e:b6:fc:d8:16:7c:99:9a: ff:1f:4c:cb:04:fc:99:00:7e:47:5e:aa:ef:78:83: 77:f9:32:29:05:a4:f0:fe:8f:76:b0:ad:3f:7f:af: 6c:09:fa:ac:77:a2:4d:d4:5b:87:b6:82:08:80:e2: 44:55:53:ff:62:fe:02:11:8a:8e:37:00:68:59:e5: 0d:77:16:27:17:65:bb:69:67:43:23:35:52:40:b6: c6:26:e3:53:12:50:d7:be:15:79:b5:4f:94:b7:a7: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:70:FC:00:55:62:18:9B:AB:54:12:B4:BA:05:E0:5E:F3:CC:6B:26 X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2369FBA595F11EF8C3B3D31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 90:a9:5d:1e:6e:24:04:26:72:0e:b8:7c:4e:98:ff:74:33:e4: f4:c9:7d:cc:42:2c:3e:a8:f0:b0:0a:fa:2c:57:03:62:d0:fc: 2b:bb:a5:0f:58:9a:f5:79:75:9a:58:cf:e9:bd:64:89:bf:00: 2b:33:57:eb:83:c5:94:c1:26:b0:61:f9:cd:2a:a5:43:64:38: e7:6c:5f:dc:60:d5:a7:dc:5a:ec:0f:8c:0e:30:6c:2c:89:47: 08:81:78:f2:02:d4:d3:d2:36:94:ac:d0:41:f6:2d:20:47:63: a1:70:4c:0a:65:79:03:c3:29:f1:84:80:b1:6c:1c:5f:cb:36: a1:f7:ee:e5:14:ce:7e:40:a1:e8:a3:ee:d4:5f:71:e4:f1:d3: df:f8:58:f0:6d:f9:a9:6f:fd:80:5f:25:00:5d:7e:33:a3:30: 7a:1b:cd:e7:ab:95:8b:30:df:66:40:ef:fd:37:c4:5f:46:67: d8:4d:60:dc:4f:1f:bb:b7:24:fe:ba:e8:6f:d8:fa:1b:0c:49: bb:3e:47:9c:08:3d:73:29:a3:81:9d:70:3a:9f:5b:9c:7f:b7: cb:d5:1c:f9:68:db:6f:56:8c:6f:cf:e4:db:0c:ee:da:b4:ff: 00:67:e1:04:9d:c8:e6:df:10:69:b6:91:17:75:54:72:41:9b: 8b:be:7b:d6 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjQwODEzMTAzNDM1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJiMzZiYi1hMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JYKQOvAdf+Y/99wJeIHCOAuQ/GOmAcH6v4TWKzd1w259MzBnzA6eUnrKNLp zvyjq9cqf/KiuFzrH9yCVBQyzL+xf6iJq+/boLp0bIyZv5SlJuOWQjMKw8SXSYwQ GxqfRloLC+oy6DcLGJJd4gjXqaHgjK7VIlY79Yd91WCvVaXNJumIMauWKXHzrs66 /G/Mbiiwl1dMKhtn3qbxbrb82BZ8mZr/H0zLBPyZAH5HXqrveIN3+TIpBaTw/o92 sK0/f69sCfqsd6JN1FuHtoIIgOJEVVP/Yv4CEYqONwBoWeUNdxYnF2W7aWdDIzVS QLbGJuNTElDXvhV5tU+Ut6fMHQIDAQABo4ICljCCApIwHQYDVR0OBBYEFMFw/ABV Yhibq1QStLoF4F7zzGsmMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjY5OEUvRjE5QTdDOTQ5QzFDMTFFOTkyRkFGQjFCQzRGOUFFMDIvQTIzNjlGQkE1 OTVGMTFFRjhDM0IzRDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBIrAMA0GCSqGSIb3DQEBCwUAA4IBAQCQqV0ebiQEJnIO uHxOmP90M+T0yX3MQiw+qPCwCvosVwNi0Pwru6UPWJr1eXWaWM/pvWSJvwArM1fr g8WUwSawYfnNKqVDZDjnbF/cYNWn3FrsD4wOMGwsiUcIgXjyAtTT0jaUrNBB9i0g R2OhcEwKZXkDwynxhICxbBxfyzah9+7lFM5+QKHoo+7UX3Hk8dPf+Fjwbfmpb/2A XyUAXX4zozB6G83nq5WLMN9mQO/9N8RfRmfYTWDcTx+7tyT+uuhv2PobDEm7Pkec CD1zKaOBnXA6n1ucf7fL1Rz5aNtvVoxvz+TbDO7atP8AZ+EEncjm3xBptpEXdVRy QZuLvnvW -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:14 2024 by rpki-client on console-ams.rpki-client.org