$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/6806A9D07B4111EF87D2E951C4F9AE02.roa File: 6806A9D07B4111EF87D2E951C4F9AE02.roa (raw, json) Hash identifier: /KHhv0wFN+iPlsJ858r8JVJtCaymXIBJ4SFRGoaj2DM= Subject key identifier: 71:64:1A:E1:65:FE:FE:6B:09:ED:4F:58:0D:A6:56:61:4D:91:35:67 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 03F9 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/6806A9D07B4111EF87D2E951C4F9AE02.roa Signing time: Tue 29 Oct 2024 01:26:41 +0000 ROA not before: Tue 29 Oct 2024 01:26:41 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 5065 IP address blocks: 223.29.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Oct 29 01:26:41 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672039d1-5312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:7f:e1:d0:32:97:0c:df:2e:3f:e3:c1:6d: e6:5e:7d:ac:c9:c2:78:21:13:1a:c3:ab:77:12:72: e1:41:f2:fe:44:23:0c:1b:0e:d6:ba:39:61:77:8b: a0:32:3b:04:2d:0e:de:ef:21:0d:21:9e:13:e5:64: 04:57:02:ef:2a:fc:8f:09:6c:b8:c5:b2:c4:89:72: c7:d6:2c:c0:50:cd:02:34:c4:f8:49:ac:d3:95:c8: 8d:ec:5f:62:6b:02:97:d9:51:91:13:56:02:c3:87: c3:6b:73:5a:0f:9f:d2:15:a3:e9:ed:aa:4b:ee:89: 7e:c8:a2:d3:5b:cf:79:9a:03:7a:ab:9d:a7:d3:fd: 4e:0b:b8:18:fc:75:ea:62:34:64:5e:6a:33:c3:22: b6:cc:52:c3:57:c2:96:17:98:0a:5e:7c:16:35:7c: 0f:22:7f:d0:4b:fd:61:37:19:cf:ea:8b:58:e7:02: b2:9a:d8:f5:f8:9d:ff:c8:a6:61:a1:ed:03:0b:2f: 10:73:b8:13:52:b5:ab:ca:67:bb:10:3a:e0:88:a9: 0f:80:11:c6:12:cd:c5:dd:8f:62:a8:8a:fa:52:52: 33:36:00:51:59:b6:d3:3a:59:8b:cb:93:00:37:93: 2b:e5:d7:cc:46:ea:08:44:11:0d:3f:be:a6:e8:e7: a6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:64:1A:E1:65:FE:FE:6B:09:ED:4F:58:0D:A6:56:61:4D:91:35:67 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/6806A9D07B4111EF87D2E951C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.29.136.0/22 Signature Algorithm: sha256WithRSAEncryption ba:ed:dc:40:90:8a:62:d6:66:7e:8b:2b:27:82:fa:5b:f4:fd: 98:2d:e2:0e:21:f3:bd:39:fa:05:ae:2b:c4:7d:90:b2:67:ae: 32:da:4e:08:f2:f9:63:18:a7:77:32:ed:39:8c:56:ad:1f:03: 78:7e:3d:47:50:8d:85:9e:aa:9d:ff:34:d6:8d:f3:a2:94:c2: f4:52:5d:b7:ee:32:23:3b:c5:2e:07:9d:a6:54:b7:f9:15:1d: 27:43:36:b2:7b:59:0c:e0:c2:ee:f1:c2:a2:36:0e:a1:bd:51: c1:4f:34:11:f3:f9:0d:59:39:5a:72:ca:e0:44:7d:e5:4e:7d: e1:00:3b:45:fd:de:bb:5f:ca:25:e1:7a:f4:df:49:44:d9:ce: 8f:88:72:09:cb:09:8d:ec:e8:26:f2:a3:a3:bb:2b:b4:39:2d: 94:a0:47:ff:78:c0:14:5d:e0:9f:1d:1f:b5:86:f8:54:69:af: 82:d1:9f:10:cf:d2:73:95:a3:d7:43:55:b9:f9:c6:1f:40:85: 27:f9:00:b1:4f:99:90:d2:f0:f0:09:74:af:32:eb:a0:69:65: 70:93:9a:b4:2e:84:52:50:b4:2e:7c:58:ed:26:94:3a:8e:84: 4c:cb:81:b6:26:ad:41:cb:68:8d:7f:4c:23:a7:26:14:59:4e: 25:b7:d7:9a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjQxMDI5MDEyNjQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIwMzlkMS01MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kx/4dAylwzfLj/jwW3mXn2sycJ4IRMaw6t3EnLhQfL+RCMMGw7Wujlhd4ug MjsELQ7e7yENIZ4T5WQEVwLvKvyPCWy4xbLEiXLH1izAUM0CNMT4SazTlciN7F9i awKX2VGRE1YCw4fDa3NaD5/SFaPp7apL7ol+yKLTW895mgN6q52n0/1OC7gY/HXq YjRkXmozwyK2zFLDV8KWF5gKXnwWNXwPIn/QS/1hNxnP6otY5wKymtj1+J3/yKZh oe0DCy8Qc7gTUrWryme7EDrgiKkPgBHGEs3F3Y9iqIr6UlIzNgBRWbbTOlmLy5MA N5Mr5dfMRuoIRBENP76m6OemQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHFkGuFl /v5rCe1PWA2mVmFNkTVnMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvNjgwNkE5RDA3 QjQxMTFFRjg3RDJFOTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALfHYgwDQYJKoZIhvcNAQELBQADggEBALrt3ECQimLWZn6L KyeC+lv0/Zgt4g4h8705+gWuK8R9kLJnrjLaTgjy+WMYp3cy7TmMVq0fA3h+PUdQ jYWeqp3/NNaN86KUwvRSXbfuMiM7xS4HnaZUt/kVHSdDNrJ7WQzgwu7xwqI2DqG9 UcFPNBHz+Q1ZOVpyyuBEfeVOfeEAO0X93rtfyiXhevTfSUTZzo+IcgnLCY3s6Cby o6O7K7Q5LZSgR/94wBRd4J8dH7WG+FRpr4LRnxDP0nOVo9dDVbn5xh9AhSf5ALFP mZDS8PAJdK8y66BpZXCTmrQuhFJQtC58WO0mlDqOhEzLgbYmrUHLaI1/TCOnJhRZ TiW315o= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:33 2024 by rpki-client on console-fra.rpki-client.org