$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa File: 671FC40EE29211EE94348874C4F9AE02.roa (raw, json) Hash identifier: zylwlyfQcRU6ehbr04cNoWE1AgSNT1tCrRy3GfEdHx0= Subject key identifier: D8:89:01:54:05:48:11:DF:D0:2C:B1:DA:5F:AD:19:BD:D9:3E:7E:8D Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Certificate serial: 0616 Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa Signing time: Sat 10 Aug 2024 23:31:07 +0000 ROA not before: Sat 10 Aug 2024 23:31:07 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 17762 IP address blocks: 2403:8600:c0::/44 maxlen: 44 2403:8600:d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Validity Not Before: Aug 10 23:31:07 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b7f83b-5004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:aa:17:7e:2f:77:38:f9:9e:cf:2f:67:86: e8:b0:e0:71:d8:66:19:9f:fa:73:ba:f5:53:7d:f4: b3:cb:eb:c0:18:5f:17:5d:d0:32:c7:1c:db:4e:61: 70:51:16:91:3d:d5:a5:b4:e2:07:35:fb:35:6c:c9: f7:3c:ff:bc:89:1c:6d:c2:13:47:99:45:83:3e:3e: cc:5f:52:0c:02:71:88:04:29:d5:bd:86:f7:19:38: c2:86:15:a6:fa:97:30:4a:43:96:cb:8a:80:b0:59: 72:9b:8e:99:67:f2:61:a5:1b:a0:a6:f8:2f:31:df: c0:46:d8:11:a7:71:c1:18:bd:b0:d0:96:e5:e4:54: 6d:43:45:2a:65:ff:cc:ad:4b:82:6a:8c:d2:e5:3c: c5:f9:f8:f5:4e:9e:32:09:4e:17:c7:57:e8:26:ec: 48:9e:4b:34:ee:4d:c3:15:8c:f7:cd:6c:62:52:af: be:b0:30:d0:0b:dc:2d:3b:0d:e8:b5:5a:f1:e4:3e: 7f:5e:d1:1f:90:a3:de:48:ab:c5:de:65:3e:df:d7: 4b:ff:3e:e8:ec:6b:75:15:96:08:d2:10:f8:18:35: 8a:d6:c8:c4:40:31:c6:cd:cb:36:e2:9a:21:27:40: 56:0f:c4:40:3e:75:de:c6:bd:d4:95:f5:4b:4e:29: 81:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:89:01:54:05:48:11:DF:D0:2C:B1:DA:5F:AD:19:BD:D9:3E:7E:8D X509v3 Authority Key Identifier: keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:8600:c0::/43 Signature Algorithm: sha256WithRSAEncryption 8c:86:cf:ac:db:fc:2b:5f:bb:46:21:dd:15:a4:7b:76:d9:e8: 39:b9:62:9e:35:1f:39:16:24:7d:33:fd:38:94:56:79:eb:01: 79:89:e7:8e:d9:d9:22:98:ab:b1:38:0e:14:fc:f8:15:8f:b1: 33:b4:b2:8e:b8:d3:f9:14:36:27:97:b5:63:94:b5:46:1a:fd: d5:f7:b7:e0:62:9f:fe:33:02:ae:00:e5:74:f3:2f:35:65:dc: fb:03:64:c1:c3:27:5a:55:61:34:cd:45:0a:fe:05:1e:87:42: 48:94:23:7a:e5:78:8f:d9:ad:12:2b:88:91:51:61:6f:d8:0d: 09:39:c6:a4:b6:33:4a:c5:c7:69:1a:f0:70:3a:02:d3:13:52: 04:51:11:6a:b2:d9:d0:04:e7:76:d8:8c:54:e0:a6:18:9d:8c: 65:68:0e:85:dc:c3:75:3a:b3:b4:ab:05:fe:21:01:b6:8d:88: ca:a0:ac:1b:2b:a3:e9:a5:9a:19:5c:84:b9:90:43:33:f0:55: 73:a4:ac:84:ef:95:11:09:6d:46:45:43:14:85:20:44:47:c9: d4:6b:2d:12:b8:d3:6d:4d:42:76:02:4e:a5:4c:7e:dc:c1:ce: 08:06:00:f9:34:8f:62:5d:29:28:4c:fa:b7:98:d8:44:1d:18: b3:df:35:6e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFOUQxMTAvBgNVBAUTKEJGNkFEMUFCQzlEOTE2MTlBMDkyODdGQjZDNjRGNDY0 N0I5RkQzMUMwHhcNMjQwODEwMjMzMTA3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI3ZjgzYi01MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcaqF34vdzj5ns8vZ4bosOBx2GYZn/pzuvVTffSzy+vAGF8XXdAyxxzbTmFw URaRPdWltOIHNfs1bMn3PP+8iRxtwhNHmUWDPj7MX1IMAnGIBCnVvYb3GTjChhWm +pcwSkOWy4qAsFlym46ZZ/JhpRugpvgvMd/ARtgRp3HBGL2w0Jbl5FRtQ0UqZf/M rUuCaozS5TzF+fj1Tp4yCU4Xx1foJuxInks07k3DFYz3zWxiUq++sDDQC9wtOw3o tVrx5D5/XtEfkKPeSKvF3mU+39dL/z7o7Gt1FZYI0hD4GDWK1sjEQDHGzcs24poh J0BWD8RAPnXexr3UlfVLTimBXQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNiJAVQF SBHf0Cyx2l+tGb3ZPn6NMB8GA1UdIwQYMBaAFL9q0avJ2RYZoJKH+2xk9GR7n9Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU5RC9EMzA1RTRFRTk5 MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZobWdrb2Y3YkdUMFpIdWYw eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YyclJxOG5aRmhtZ2tvZjdiR1QwWkh1ZjB4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJFOUQvRDMwNUU0RUU5OTBFMTFFQjg5Qjc2RDY4QzRGOUFFMDIvNjcxRkM0MEVF MjkyMTFFRTk0MzQ4ODc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwUkA4YAAMAwDQYJKoZIhvcNAQELBQADggEBAIyGz6zb/Ctf u0Yh3RWke3bZ6Dm5Yp41HzkWJH0z/TiUVnnrAXmJ547Z2SKYq7E4DhT8+BWPsTO0 so640/kUNieXtWOUtUYa/dX3t+Bin/4zAq4A5XTzLzVl3PsDZMHDJ1pVYTTNRQr+ BR6HQkiUI3rleI/ZrRIriJFRYW/YDQk5xqS2M0rFx2ka8HA6AtMTUgRREWqy2dAE 53bYjFTgphidjGVoDoXcw3U6s7SrBf4hAbaNiMqgrBsro+mlmhlchLmQQzPwVXOk rITvlREJbUZFQxSFIERHydRrLRK4021NQnYCTqVMftzBzggGAPk0j2JdKShM+reY 2EQdGLPfNW4= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org