$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa File: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (raw, json) Hash identifier: 0cvbxP20kbDfmHfHGVhiDmzqDHp8ThkRVUA3Ma5jp/o= Subject key identifier: 12:C8:25:F6:89:97:21:07:03:6F:0C:F7:BF:CA:A7:AC:5F:96:FA:69 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0995 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa Signing time: Tue 20 Feb 2024 20:49:17 +0000 ROA not before: Tue 20 Feb 2024 20:49:17 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 56111 IP address blocks: 2001:df3:f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2453 (0x995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Feb 20 20:49:17 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d5104c-e25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:e3:2a:28:26:e9:c0:2f:4c:29:01:40:54: ad:bf:ab:c4:27:2e:ff:77:3c:d9:25:2c:72:3c:25: e0:2a:56:f9:b1:3d:36:52:61:de:5e:72:a2:e6:95: 99:ad:d0:bd:d5:c7:36:dc:5d:03:97:81:0d:25:be: e6:de:17:4a:71:e5:32:7a:48:9e:ce:b1:5c:d8:0b: fb:2e:98:1e:3f:3b:e6:07:60:84:6a:8d:61:1d:01: 83:c4:89:22:3a:e8:5f:d4:10:29:2f:0e:a1:c4:7b: 14:d6:b7:0c:f8:da:bb:df:bc:01:04:a5:1c:e6:67: 1c:48:76:ec:60:e7:58:c9:25:b0:ef:6e:b2:9b:66: b6:19:6d:a6:d8:7c:21:91:b9:44:b2:83:ed:6f:65: 32:5b:09:e6:3a:6b:94:f3:81:95:9c:23:f8:ba:b2: d7:f0:54:7d:23:69:38:92:72:91:9f:31:e6:40:f7: 3a:a5:85:9a:e6:29:02:52:9d:1d:39:e5:71:50:ce: 49:5d:2c:a6:c8:66:a0:d4:ed:34:5e:37:04:82:e2: cb:28:0b:33:a4:7c:05:f0:81:7d:9d:f7:98:2b:0f: 3f:ba:e8:a9:73:c0:b6:f4:70:3e:ac:e9:aa:08:48: 91:b6:e3:75:5e:12:02:a8:a3:30:31:32:a9:c7:06: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C8:25:F6:89:97:21:07:03:6F:0C:F7:BF:CA:A7:AC:5F:96:FA:69 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:f80::/48 Signature Algorithm: sha256WithRSAEncryption 90:21:0f:e8:55:9c:2c:c8:eb:74:78:0b:4c:58:8a:f4:a6:c7: 31:34:37:b5:06:04:78:56:45:43:1c:8c:2e:b6:f1:2e:a5:8d: a0:8e:5e:70:dc:1b:64:aa:17:89:fb:98:39:ae:c8:a1:e8:9f: 0d:c9:e0:51:3f:34:1b:1b:33:5b:cc:70:73:07:ab:20:c4:79: 3b:f3:e2:0d:e2:9a:6e:11:65:00:2d:97:43:53:32:53:c4:20: ad:e4:fc:26:63:04:3e:22:e1:d2:af:22:b6:32:24:f7:a7:7a: 06:95:cd:fb:3f:a3:95:7c:0a:40:1f:8f:99:3e:94:92:b0:85: ad:2c:a0:c8:50:d0:50:7a:c2:a8:3a:7a:e8:4e:bd:94:4a:30: 0d:b5:e1:0d:e5:fa:66:fe:5a:37:29:37:51:1c:10:dd:96:f6: bb:25:ec:d6:e9:df:94:27:3f:68:9e:41:b1:87:54:a4:78:e1: e2:fc:95:3f:bf:02:46:19:8d:8c:4d:72:a7:0b:34:78:a1:1a: d8:2e:06:82:46:82:59:4e:b2:49:72:b7:34:bd:37:9d:64:d8: 9d:38:15:09:49:be:55:d2:63:00:f7:7c:eb:df:fc:03:22:25: c8:d0:79:43:d9:87:fa:7d:eb:b3:46:56:75:0c:17:b7:25:77: c1:de:35:46 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjQwMjIwMjA0OTE3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ1MTA0Yy1lMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSrjKigm6cAvTCkBQFStv6vEJy7/dzzZJSxyPCXgKlb5sT02UmHeXnKi5pWZ rdC91cc23F0Dl4ENJb7m3hdKceUyekiezrFc2Av7LpgePzvmB2CEao1hHQGDxIki Ouhf1BApLw6hxHsU1rcM+Nq737wBBKUc5mccSHbsYOdYySWw726ym2a2GW2m2Hwh kblEsoPtb2UyWwnmOmuU84GVnCP4urLX8FR9I2k4knKRnzHmQPc6pYWa5ikCUp0d OeVxUM5JXSymyGag1O00XjcEguLLKAszpHwF8IF9nfeYKw8/uuipc8C29HA+rOmq CEiRtuN1XhICqKMwMTKpxwbEywIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBLIJfaJ lyEHA28M97/Kp6xflvppMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM0NUIvMjhEODJDODI1RjZFMTFFQTkyNEI5QjgwQzRGOUFFMDIvODg1REFFMzgz QjFDMTFFRUE2REYxMTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zD4AwDQYJKoZIhvcNAQELBQADggEBAJAhD+hVnCzI 63R4C0xYivSmxzE0N7UGBHhWRUMcjC628S6ljaCOXnDcG2SqF4n7mDmuyKHonw3J 4FE/NBsbM1vMcHMHqyDEeTvz4g3imm4RZQAtl0NTMlPEIK3k/CZjBD4i4dKvIrYy JPenegaVzfs/o5V8CkAfj5k+lJKwha0soMhQ0FB6wqg6euhOvZRKMA214Q3l+mb+ WjcpN1EcEN2W9rsl7Nbp35QnP2ieQbGHVKR44eL8lT+/AkYZjYxNcqcLNHihGtgu BoJGgllOsklytzS9N51k2J04FQlJvlXSYwD3fOvf/AMiJcjQeUPZh/p967NGVnUM F7cld8HeNUY= -----END CERTIFICATE-----Generated at Thu May 16 22:34:44 2024 by rpki-client on console-ams.rpki-client.org