$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa File: 68979DAE337B11EA9A024941C4F9AE02.roa (raw, json) Hash identifier: cs9csxclLbT2VZkBXhivKDsv1cu/tEkHFvTr8v3XfJc= Subject key identifier: 77:5D:73:19:2E:D6:A9:28:96:A6:A9:DC:45:F1:16:89:7C:D8:5E:20 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0B9B Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa Signing time: Thu 16 May 2024 19:58:12 +0000 ROA not before: Thu 16 May 2024 19:58:12 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 24305 IP address blocks: 2405:b640::/32 maxlen: 32 2405:b640::/48 maxlen: 48 2405:b640:1::/48 maxlen: 48 2405:b640:2::/48 maxlen: 48 2405:b640:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: May 16 19:58:12 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66466554-008b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6c:ae:2a:d8:94:80:ce:a3:8c:28:01:30:37: f0:d1:f9:de:0d:d8:1d:ad:d9:82:6e:b8:98:78:db: 14:cb:51:34:21:ec:78:ef:77:7e:ae:ee:e5:ed:92: a0:1d:11:52:87:c5:f9:f5:c3:8b:8c:f5:5c:ba:20: 84:91:33:be:8c:a2:7e:39:37:56:06:31:e0:4c:24: d5:7f:7d:9f:57:bf:03:8d:2b:3f:2c:65:5d:c3:00: 62:29:08:bd:5d:94:51:d3:f9:ba:78:63:b9:9e:b8: 7b:52:41:81:0a:30:45:81:7c:4b:0d:c5:3f:fc:b1: d7:f8:a4:fb:6e:ae:c0:1f:6b:81:8d:ba:15:41:1e: a6:c2:d7:c6:66:ad:fd:f2:ac:cf:40:48:fb:9e:35: 30:59:7f:55:b1:46:5f:2d:f7:a1:ab:47:ee:d2:7a: 38:95:a6:d2:33:9a:23:11:9c:6e:e1:cd:96:b7:52: 70:4c:d8:6c:a3:13:35:81:43:23:db:52:3b:3f:b1: 1d:36:dd:5e:5a:48:e6:bf:54:ba:d6:9b:a0:f3:5b: c8:d6:3c:89:ed:29:a7:a1:12:6f:80:5b:47:d5:cf: 33:af:d2:c8:b7:ec:ea:9e:ce:13:a1:e7:6f:2f:ca: cd:16:04:b2:ea:44:7a:8e:5a:af:cc:18:b3:05:ae: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5D:73:19:2E:D6:A9:28:96:A6:A9:DC:45:F1:16:89:7C:D8:5E:20 X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:b640::/32 Signature Algorithm: sha256WithRSAEncryption 46:13:2c:6c:96:0c:73:8c:3d:a1:ad:1d:8b:e7:fa:04:86:07: b3:e0:91:f2:bd:d1:97:1e:a1:65:3a:3c:f6:13:30:72:96:1b: 00:f8:18:cb:b8:dc:d1:6b:9d:15:f5:b6:20:20:ea:5f:f8:06: 62:c1:5e:96:e9:41:54:2f:e6:88:57:a9:38:40:4d:c9:b4:ae: 02:94:ef:31:d2:c4:b0:05:ae:4e:6c:ac:c8:f1:b2:a4:d7:48: c9:5c:9e:d6:9c:83:08:3d:ae:6f:49:8b:65:ce:3e:51:7b:a9: da:66:fa:75:96:89:9a:a2:df:ce:84:0d:48:0e:e1:d8:b4:fc: 6d:2c:5e:b7:39:76:c1:e5:e8:a5:6f:59:ce:34:b7:75:63:38: 61:2b:13:75:4f:b9:d7:4d:86:1d:d4:6f:1b:cc:30:7f:9d:1c: be:af:99:3e:c7:c3:62:1a:90:4a:c1:92:51:45:f4:62:08:08: 06:b1:01:41:d2:b1:53:60:46:1c:8c:1f:0d:6e:9b:59:88:d6: 5b:1d:7e:29:24:f0:11:bf:4c:4d:73:7d:f7:5b:8a:ab:f6:80: ed:4e:8f:2a:f1:14:1a:13:9e:82:60:9e:9b:86:89:6a:35:81: 4d:ca:bc:5e:f7:e8:f4:ef:83:1a:b2:84:16:80:12:51:83:c9: 19:22:dc:e2 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjQwNTE2MTk1ODEyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2NjU1NC0wMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GyuKtiUgM6jjCgBMDfw0fneDdgdrdmCbriYeNsUy1E0Iex473d+ru7l7ZKg HRFSh8X59cOLjPVcuiCEkTO+jKJ+OTdWBjHgTCTVf32fV78DjSs/LGVdwwBiKQi9 XZRR0/m6eGO5nrh7UkGBCjBFgXxLDcU//LHX+KT7bq7AH2uBjboVQR6mwtfGZq39 8qzPQEj7njUwWX9VsUZfLfehq0fu0no4labSM5ojEZxu4c2Wt1JwTNhsoxM1gUMj 21I7P7EdNt1eWkjmv1S61pug81vI1jyJ7SmnoRJvgFtH1c8zr9LIt+zqns4Toedv L8rNFgSy6kR6jlqvzBizBa4iAwIDAQABo4ICljCCApIwHQYDVR0OBBYEFHddcxku 1qkolqap3EXxFol82F4gMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkEzRTEvOUZENThEQTYwNUIwMTFFQTkyMzU0QjVBQzRGOUFFMDIvNjg5NzlEQUUz MzdCMTFFQTlBMDI0OTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBbZAMA0GCSqGSIb3DQEBCwUAA4IBAQBGEyxslgxzjD2h rR2L5/oEhgez4JHyvdGXHqFlOjz2EzBylhsA+BjLuNzRa50V9bYgIOpf+AZiwV6W 6UFUL+aIV6k4QE3JtK4ClO8x0sSwBa5ObKzI8bKk10jJXJ7WnIMIPa5vSYtlzj5R e6naZvp1lomaot/OhA1IDuHYtPxtLF63OXbB5eilb1nONLd1YzhhKxN1T7nXTYYd 1G8bzDB/nRy+r5k+x8NiGpBKwZJRRfRiCAgGsQFB0rFTYEYcjB8NbptZiNZbHX4p JPARv0xNc333W4qr9oDtTo8q8RQaE56CYJ6bholqNYFNyrxe9+j074MasoQWgBJR g8kZItzi -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:53 2024 by rpki-client on console-fra.rpki-client.org