$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/73E16BB27C4711EFACFB1228C4F9AE02.roa File: 73E16BB27C4711EFACFB1228C4F9AE02.roa (raw, json) Hash identifier: 8LOnykbqINKaZ+L5my3UzBmhmDiX2dGDooRzuen4vMo= Subject key identifier: B5:B7:9A:13:88:EF:D2:77:40:AC:C1:D7:91:C5:FF:AA:EC:4B:D6:B3 Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Certificate serial: 0CE6 Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/73E16BB27C4711EFACFB1228C4F9AE02.roa Signing time: Fri 08 Nov 2024 18:06:44 +0000 ROA not before: Fri 08 Nov 2024 18:06:44 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139660 IP address blocks: 2001:df1:7780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Validity Not Before: Nov 8 18:06:44 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672e5333-edd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0c:68:60:c2:da:6b:10:34:d8:79:eb:85:35: 77:b7:57:59:79:e8:36:1f:85:d8:14:90:3e:9f:a7: b4:8c:92:70:2a:59:af:7c:ce:83:22:81:ca:b7:14: 48:24:18:a4:8d:b9:72:c1:2b:c9:4f:0a:a5:3c:38: 05:fc:46:87:e3:ab:c1:1c:43:a6:26:bc:89:4c:05: f7:8b:3e:98:b5:bf:f4:66:ad:d3:cf:2c:3f:aa:f1: f3:cb:81:d1:b3:69:1b:65:e7:79:ca:ac:8f:de:5e: d0:60:70:b8:23:74:b4:63:c4:be:fb:1c:53:d1:16: cc:b2:22:a6:50:5c:b6:ab:ff:b9:9d:49:76:9a:0e: e8:5d:78:42:42:e3:e8:c8:32:e3:3c:7a:84:e7:6e: 53:76:ee:41:ac:eb:d6:ae:6d:e6:ee:a3:06:67:b0: e8:54:f7:37:24:8f:94:da:2c:38:95:fa:8d:83:28: 3d:a2:56:ad:e1:77:3d:f0:de:b7:94:41:95:bf:84: 6e:5e:ec:03:34:a1:9e:ea:4a:6b:19:a2:15:10:d6: 96:0c:99:a8:84:6f:e8:36:29:d2:34:d0:30:b8:ab: 95:ef:52:b3:59:fc:90:e6:1e:dd:0f:e3:05:97:3d: db:66:ab:d8:e7:67:c9:7a:18:78:ba:e9:7b:81:2e: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B7:9A:13:88:EF:D2:77:40:AC:C1:D7:91:C5:FF:AA:EC:4B:D6:B3 X509v3 Authority Key Identifier: keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/73E16BB27C4711EFACFB1228C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:7780::/48 Signature Algorithm: sha256WithRSAEncryption 74:82:1a:84:b1:0e:cf:3d:57:af:fe:c3:ca:27:de:07:bd:66: fb:a3:48:29:a0:18:bf:1d:2e:95:67:78:05:e6:1b:71:80:7f: da:f1:a5:bd:71:28:ad:b7:e2:b3:f9:d9:b5:23:9d:62:80:8c: 9e:a6:1b:2a:38:5c:31:fb:62:a7:1c:b3:31:87:b7:c3:d5:2c: 57:a3:c9:b1:8a:bb:53:47:d8:55:67:73:30:bf:a8:40:de:32: 9b:88:68:d0:54:63:05:5a:ab:62:c4:d8:a0:fe:84:64:d6:9c: f8:d2:41:a1:1b:fd:b4:ff:69:b8:c8:4e:d9:3e:4e:6e:c1:bc: e1:8a:b2:49:f3:6b:4a:c6:33:ff:a6:1e:36:15:d3:dd:77:d9: 62:fa:3f:5a:5f:e5:fe:1d:95:95:4d:61:55:1b:37:f9:94:f0: a7:2e:74:7d:53:41:bb:65:34:f5:6a:ee:c7:a8:13:4f:b6:f9: c5:35:4e:57:c6:3a:68:cc:f5:fe:32:57:ae:82:06:71:30:df: a8:22:a3:55:a9:37:8a:6e:e3:10:ed:e8:00:67:f1:2b:91:8d: d7:60:2a:7a:03:3a:3f:5d:7f:dc:23:b1:f0:8e:cc:e3:a2:cb: 5d:23:dd:c7:48:5a:bf:26:dc:80:67:1c:c9:e3:63:04:89:4c: 10:ab:e9:8c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyQjExMTAvBgNVBAUTKENGM0U3Qjc0MkE0QzUyRTBGOEY3RjhFNzQwNUZCMkJC QkNGNENBQTMwHhcNMjQxMTA4MTgwNjQ0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJlNTMzMy1lZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gxoYMLaaxA02HnrhTV3t1dZeeg2H4XYFJA+n6e0jJJwKlmvfM6DIoHKtxRI JBikjblywSvJTwqlPDgF/EaH46vBHEOmJryJTAX3iz6Ytb/0Zq3Tzyw/qvHzy4HR s2kbZed5yqyP3l7QYHC4I3S0Y8S++xxT0RbMsiKmUFy2q/+5nUl2mg7oXXhCQuPo yDLjPHqE525Tdu5BrOvWrm3m7qMGZ7DoVPc3JI+U2iw4lfqNgyg9olat4Xc98N63 lEGVv4RuXuwDNKGe6kprGaIVENaWDJmohG/oNinSNNAwuKuV71KzWfyQ5h7dD+MF lz3bZqvY52fJehh4uul7gS4H8QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLW3mhOI 79J3QKzB15HF/6rsS9azMB8GA1UdIwQYMBaAFM8+e3QqTFLg+Pf450Bfsru89Mqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJCMS8xREFFQTIyQ0Q5 RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1RDQ5X2puUUYteXU3ejB5 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6NTdkQ3BNVXVENDlfam5RRi15dTd6MHlxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkMyQjEvMURBRUEyMkNEOUZBMTFFOTg5NDI4OTREQzRGOUFFMDIvNzNFMTZCQjI3 QzQ3MTFFRkFDRkIxMjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xd4AwDQYJKoZIhvcNAQELBQADggEBAHSCGoSxDs89 V6/+w8on3ge9ZvujSCmgGL8dLpVneAXmG3GAf9rxpb1xKK234rP52bUjnWKAjJ6m Gyo4XDH7YqccszGHt8PVLFejybGKu1NH2FVnczC/qEDeMpuIaNBUYwVaq2LE2KD+ hGTWnPjSQaEb/bT/abjITtk+Tm7BvOGKsknza0rGM/+mHjYV09132WL6P1pf5f4d lZVNYVUbN/mU8KcudH1TQbtlNPVq7seoE0+2+cU1TlfGOmjM9f4yV66CBnEw36gi o1WpN4pu4xDt6ABn8SuRjddgKnoDOj9df9wjsfCOzOOiy10j3cdIWr8m3IBnHMnj YwSJTBCr6Yw= -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:17 2024 by rpki-client on console-fra.rpki-client.org