$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa File: 68979DAE337B11EA9A024941C4F9AE02.roa (raw, json) Hash identifier: wh5nOAjSD5/uVFm68bLbFzjtYyorFqY49ptthFoWPss= Subject key identifier: 9F:1A:9C:D3:80:76:05:70:88:89:55:33:E6:86:C5:85:1C:17:56:2A Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0AB8 Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa Signing time: Tue 04 Apr 2023 20:16:56 +0000 ROA not before: Tue 04 Apr 2023 20:16:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 24305 IP address blocks: 2405:b640::/32 maxlen: 32 2405:b640::/48 maxlen: 48 2405:b640:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2744 (0xab8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: Apr 4 20:16:56 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=642c85b8-dbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:a4:fd:c4:d9:b4:be:21:13:8e:18:0c:da: f6:c2:83:d8:71:af:4a:ac:92:c8:ef:e8:ed:d4:13: 03:f4:8c:c2:dc:02:ed:8a:2e:8e:9d:00:d5:c2:3a: 8d:42:38:49:46:fd:71:e5:68:0e:d4:55:d5:2d:0c: e9:7d:56:cc:c8:66:fb:9b:97:a6:ab:52:49:01:3c: e1:65:29:15:d9:c9:29:ee:ba:e3:96:00:10:c2:5c: 65:a8:4d:9e:3e:47:92:c3:2c:b5:b5:4c:de:f9:6b: 94:bd:3d:71:c6:84:b1:d7:be:66:32:73:b7:5e:fc: e6:08:90:96:a6:2f:37:c2:9d:b7:89:2d:7c:3a:c2: ec:fa:c8:15:b1:e5:ff:3b:5e:a5:73:07:ff:40:48: f4:2c:4c:4e:9a:78:64:8b:1d:a1:72:d0:55:b4:5d: e8:a7:87:63:8c:f7:68:55:d9:b6:33:0a:68:c9:50: 7a:f7:c2:0a:9d:b3:fd:94:a0:57:05:87:b9:c4:97: ea:b3:5f:93:41:76:eb:fe:a9:85:69:d7:c3:b7:02: b7:7b:c2:11:60:a6:ae:37:83:6c:8a:c9:28:c8:3a: 9f:89:b2:48:df:c5:e6:75:9f:76:62:22:f9:28:2f: 0b:9a:80:59:71:d2:cb:17:70:e0:e5:69:6a:23:01: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1A:9C:D3:80:76:05:70:88:89:55:33:E6:86:C5:85:1C:17:56:2A X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:b640::/32 Signature Algorithm: sha256WithRSAEncryption 51:4a:5a:d0:66:08:59:ce:a6:b1:56:0d:77:de:79:56:8b:a2: da:98:65:2a:f2:4d:a8:30:9f:9d:23:e0:65:af:5f:74:0b:f8: ce:00:6a:f2:35:ef:b9:60:b3:63:21:e7:ff:02:0e:65:5f:3f: 44:c1:be:18:7f:51:cd:2d:ca:5b:1e:0b:62:40:d7:d6:a7:81: 71:df:11:94:84:d1:ef:5e:02:f0:2b:39:e6:95:ec:b1:f8:84: 9e:a9:ab:d2:f3:31:11:2e:e8:34:c7:a2:a5:fe:ea:c2:e1:36: 7e:9c:88:c8:b8:42:ec:54:a8:73:68:ed:5f:3d:f6:39:7d:1a: 66:cd:55:92:cb:bc:b7:84:19:42:bd:3f:2c:36:93:99:db:7a: e0:43:d2:3c:c3:1e:26:b3:8a:93:0d:71:43:57:98:2d:ce:80: 57:2a:43:73:2e:89:0a:50:6c:1d:21:c9:7e:43:2b:4c:6f:09: 80:3b:2f:df:d0:d1:84:f4:3d:4d:49:4f:35:9a:a0:b1:4f:f8: 16:ac:af:c7:e6:f8:67:d3:e6:5e:31:c0:bd:9f:d5:b4:3d:b3: 87:e9:08:92:55:ee:44:28:51:6e:21:bc:3c:c5:de:40:ac:23: 57:a6:40:da:5c:62:95:29:e9:9c:a2:15:5e:c2:09:d8:bc:d3: c1:af:29:35 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjMwNDA0MjAxNjU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDJjODViOC1kYmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7ak/cTZtL4hE44YDNr2woPYca9KrJLI7+jt1BMD9IzC3ALtii6OnQDVwjqN QjhJRv1x5WgO1FXVLQzpfVbMyGb7m5emq1JJATzhZSkV2ckp7rrjlgAQwlxlqE2e PkeSwyy1tUze+WuUvT1xxoSx175mMnO3XvzmCJCWpi83wp23iS18OsLs+sgVseX/ O16lcwf/QEj0LExOmnhkix2hctBVtF3op4djjPdoVdm2MwpoyVB698IKnbP9lKBX BYe5xJfqs1+TQXbr/qmFadfDtwK3e8IRYKauN4NsiskoyDqfibJI38XmdZ92YiL5 KC8LmoBZcdLLF3Dg5WlqIwED0wIDAQABo4ICljCCApIwHQYDVR0OBBYEFJ8anNOA dgVwiIlVM+aGxYUcF1YqMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkEzRTEvOUZENThEQTYwNUIwMTFFQTkyMzU0QjVBQzRGOUFFMDIvNjg5NzlEQUUz MzdCMTFFQTlBMDI0OTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBbZAMA0GCSqGSIb3DQEBCwUAA4IBAQBRSlrQZghZzqax Vg133nlWi6LamGUq8k2oMJ+dI+Blr190C/jOAGryNe+5YLNjIef/Ag5lXz9Ewb4Y f1HNLcpbHgtiQNfWp4Fx3xGUhNHvXgLwKznmleyx+ISeqavS8zERLug0x6Kl/urC 4TZ+nIjIuELsVKhzaO1fPfY5fRpmzVWSy7y3hBlCvT8sNpOZ23rgQ9I8wx4ms4qT DXFDV5gtzoBXKkNzLokKUGwdIcl+QytMbwmAOy/f0NGE9D1NSU81mqCxT/gWrK/H 5vhn0+ZeMcC9n9W0PbOH6QiSVe5EKFFuIbw8xd5ArCNXpkDaXGKVKemcohVewgnY vNPBryk1 -----END CERTIFICATE-----Generated at Wed May 8 20:35:48 2024 by rpki-client on console-ams.rpki-client.org