$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2E6430C595F11EF8C3B3D31C4F9AE02.roa File: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (raw, json) Hash identifier: uTNV8vfPbOqOvQgw4kqLGgweQoS/h+YACeR/Qh/rfj8= Subject key identifier: 6E:5E:F8:33:B2:B1:28:B3:36:F6:7B:8F:AF:85:9F:00:F8:7F:94:BA Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0DE3 Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2E6430C595F11EF8C3B3D31C4F9AE02.roa Signing time: Tue 13 Aug 2024 10:34:36 +0000 ROA not before: Tue 13 Aug 2024 10:34:36 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 997 IP address blocks: 2404:8ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3555 (0xde3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: Aug 13 10:34:36 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66bb36bc-f730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:c3:3e:e5:38:53:a2:d5:18:8b:cf:97:69: 44:a4:e2:c7:2a:e4:6c:40:03:4b:0c:3a:8d:f7:35: 51:2d:f5:29:6c:09:d2:3c:75:94:a2:aa:49:6d:85: 87:89:f8:1c:72:d9:67:58:f9:44:ed:e2:65:b5:03: ed:fd:d8:fe:ff:53:7a:34:50:72:fc:c6:ca:af:65: 31:ef:d4:c5:78:8e:24:d2:66:6e:14:82:e4:be:6d: 91:e6:ae:08:87:cc:e4:0e:6a:ab:aa:a7:69:60:40: 1c:be:b9:17:c2:c1:0c:cf:1e:e1:f5:a0:98:dc:0b: 10:69:9b:c6:7b:80:a3:26:56:c9:b8:b8:f4:7e:d3: 0a:c1:f5:d4:b4:95:e2:3a:0d:a5:7e:31:a2:6d:59: 6a:01:f6:2b:b7:3e:84:2e:2a:88:f3:98:01:72:1b: 71:ac:03:f5:0a:89:a0:15:49:ed:41:d3:c0:ad:86: e5:d5:32:5f:13:63:94:41:4d:8b:c7:a6:74:3d:40: 8a:9f:0a:82:32:06:a7:60:9c:83:f0:4f:ce:12:3d: 4b:50:69:27:a1:a5:95:5b:80:88:f1:ac:d6:d3:4e: aa:78:75:24:dd:ce:94:d4:d0:6d:a5:fd:ca:f8:84: 5a:52:a1:ca:8e:c7:b2:5b:30:9b:c2:c5:eb:09:76: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5E:F8:33:B2:B1:28:B3:36:F6:7B:8F:AF:85:9F:00:F8:7F:94:BA X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2E6430C595F11EF8C3B3D31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 77:fb:3b:7b:4b:27:3c:59:13:0e:07:d0:6e:f6:5b:09:77:a0: e0:43:ff:bf:c0:a1:58:60:21:8b:7f:70:28:84:2c:de:fd:52: 66:a1:42:49:f4:7c:79:33:f8:19:f0:e6:1d:fd:57:76:05:7d: 16:91:17:68:f2:90:48:20:cf:4e:2e:23:8d:1a:8c:d4:76:20: 04:0d:f5:63:7d:44:55:5d:b8:0c:52:9b:b6:a7:0e:b4:36:7b: 05:37:ab:b3:03:42:f4:91:a4:c9:1a:d5:00:a2:3d:bb:fa:2e: 36:a2:e5:e4:33:e3:21:93:4b:d7:a8:69:9c:c4:df:69:eb:32: 3a:11:1a:f4:0b:89:b5:41:b5:7f:47:87:61:69:09:a9:63:ae: b6:ea:de:0c:f7:31:9a:0d:c6:f7:74:cf:e9:66:c2:a6:9e:f6: 6b:94:81:a8:0d:2a:77:a2:a0:d1:60:92:ef:34:12:e4:b3:00: d9:71:bf:31:d8:56:f2:69:29:93:a5:6d:f6:5c:32:ed:cd:69: 6f:91:ab:49:e4:29:9a:15:8f:54:b2:e2:2b:07:fa:e4:8b:f7: 2c:51:18:99:39:6e:a1:dc:ee:dc:8f:bb:08:09:2f:46:7a:59: 84:d5:95:b6:96:ee:65:ce:66:75:cd:23:85:3c:3d:78:fa:5a: ec:d2:a3:cf -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICDeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjQwODEzMTAzNDM2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJiMzZiYy1mNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA657DPuU4U6LVGIvPl2lEpOLHKuRsQANLDDqN9zVRLfUpbAnSPHWUoqpJbYWH ifgcctlnWPlE7eJltQPt/dj+/1N6NFBy/MbKr2Ux79TFeI4k0mZuFILkvm2R5q4I h8zkDmqrqqdpYEAcvrkXwsEMzx7h9aCY3AsQaZvGe4CjJlbJuLj0ftMKwfXUtJXi Og2lfjGibVlqAfYrtz6ELiqI85gBchtxrAP1ComgFUntQdPArYbl1TJfE2OUQU2L x6Z0PUCKnwqCMganYJyD8E/OEj1LUGknoaWVW4CI8azW006qeHUk3c6U1NBtpf3K +IRaUqHKjseyWzCbwsXrCXa0zQIDAQABo4ICljCCApIwHQYDVR0OBBYEFG5e+DOy sSizNvZ7j6+FnwD4f5S6MB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjY5OEUvRjE5QTdDOTQ5QzFDMTFFOTkyRkFGQjFCQzRGOUFFMDIvQTJFNjQzMEM1 OTVGMTFFRjhDM0IzRDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBIrAMA0GCSqGSIb3DQEBCwUAA4IBAQB3+zt7Syc8WRMO B9Bu9lsJd6DgQ/+/wKFYYCGLf3AohCze/VJmoUJJ9Hx5M/gZ8OYd/Vd2BX0WkRdo 8pBIIM9OLiONGozUdiAEDfVjfURVXbgMUpu2pw60NnsFN6uzA0L0kaTJGtUAoj27 +i42ouXkM+Mhk0vXqGmcxN9p6zI6ERr0C4m1QbV/R4dhaQmpY6626t4M9zGaDcb3 dM/pZsKmnvZrlIGoDSp3oqDRYJLvNBLkswDZcb8x2FbyaSmTpW32XDLtzWlvkatJ 5CmaFY9UsuIrB/rki/csURiZOW6h3O7cj7sICS9GelmE1ZW2lu5lzmZ1zSOFPD14 +lrs0qPP -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:48 2024 by rpki-client on console-fra.rpki-client.org