$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa File: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (raw, json) Hash identifier: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI= Subject key identifier: 60:90:C0:A2:DD:B4:CF:4C:96:E6:70:17:48:F0:C9:5E:97:78:CB:0C Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: 02 Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa Signing time: Fri 08 Nov 2024 06:38:45 +0000 ROA not before: Fri 08 Nov 2024 06:38:45 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 142294 IP address blocks: 2001:df4:6c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Nov 8 06:38:45 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672db1f5-b594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:af:cb:9f:ea:87:0a:6f:ee:06:50:a3:5d:19: e9:50:24:a6:b8:27:de:a1:fc:0f:e1:63:a5:0c:9e: 16:f7:a9:06:70:7b:75:7d:06:58:98:34:5e:2f:cf: 57:04:16:1d:b2:fe:cb:96:ee:cf:e0:59:ee:89:f5: e3:3e:0f:27:a3:2a:7a:59:53:c1:5c:2a:de:17:1d: a9:e4:8e:62:ac:5a:79:88:ad:e1:cd:aa:a1:07:6f: 0c:0e:bf:3d:d6:e2:46:31:03:7a:9f:ca:fd:8a:ff: 9e:75:fd:aa:50:ed:e0:64:f8:93:2b:06:9d:58:a7: 49:0a:2c:1b:2c:ec:21:b8:bb:04:30:c0:e5:f4:f3: e3:94:75:50:89:a5:e2:80:6e:03:06:ca:4a:e0:3d: 66:40:e9:bd:53:b0:01:ae:5a:49:ec:56:54:3b:20: 9b:0c:ee:e0:79:c4:18:9e:43:7e:99:10:36:b9:66: d1:3c:42:9f:86:21:22:d0:bf:7f:bb:d7:ba:e9:95: 51:d9:3b:e3:32:fb:2b:20:af:45:e6:12:8f:dc:d2: 5b:49:f3:77:fc:81:bc:08:52:1f:1a:67:51:1c:1c: 19:75:c3:20:23:46:d0:bc:17:3b:55:65:d8:8a:96: 01:36:65:28:72:c6:bb:c2:95:fd:a7:87:f7:b8:d3: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:90:C0:A2:DD:B4:CF:4C:96:E6:70:17:48:F0:C9:5E:97:78:CB:0C X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:6c40::/48 Signature Algorithm: sha256WithRSAEncryption 86:00:b2:15:f4:c4:b4:02:e6:92:9d:a6:89:37:ae:ed:c6:cc: 3e:d1:83:29:05:e3:d7:a6:d0:58:12:6d:e6:12:3e:fc:ad:3f: b7:e9:08:88:18:2d:41:fd:1e:6a:57:e5:ee:e0:d2:01:85:fc: 05:90:dc:b7:8f:58:ff:63:c5:fb:c2:3b:98:16:f7:4d:f2:7f: d8:e3:67:0e:67:d4:79:39:7e:ed:50:ac:99:a0:23:42:50:0e: 68:99:00:92:99:68:ba:36:69:84:36:b0:a0:aa:a1:57:f3:12: e8:7e:ea:ce:32:56:ee:16:6e:29:01:31:da:d5:25:ec:9b:70: 44:4d:62:80:e1:f3:fc:7f:7f:bc:19:a0:41:05:98:7f:84:9f: 42:47:07:dc:aa:f6:d8:71:07:ef:4b:3f:c3:b9:ff:5f:01:0a: 07:19:59:d7:07:e4:da:ae:46:c7:b9:cf:8e:af:cd:5a:2d:52: 16:a0:5a:c6:36:5e:8b:32:d1:4e:c0:04:5a:60:be:c8:7b:1b: 94:b2:10:6a:b5:0d:ec:a6:c1:97:52:51:1e:71:4e:9b:42:81: 43:77:10:94:b6:ca:14:39:90:2b:67:04:9f:ee:3d:fa:f7:45: 03:f6:d4:11:54:a3:60:d5:67:cd:f8:dd:c8:38:1b:8e:f8:5a: 52:23:07:32 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNzE3MkVEMENGNDQ3MDVFQ0VCMTk2MUQxM0EwNTdFQ0ZG MzA3Qzg2RjAeFw0yNDExMDgwNjM4NDVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmRiMWY1LWI1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrr8uf6ocKb+4GUKNdGelQJKa4J96h/A/hY6UMnhb3qQZwe3V9BliYNF4vz1cE Fh2y/suW7s/gWe6J9eM+DyejKnpZU8FcKt4XHankjmKsWnmIreHNqqEHbwwOvz3W 4kYxA3qfyv2K/551/apQ7eBk+JMrBp1Yp0kKLBss7CG4uwQwwOX08+OUdVCJpeKA bgMGykrgPWZA6b1TsAGuWknsVlQ7IJsM7uB5xBieQ36ZEDa5ZtE8Qp+GISLQv3+7 17rplVHZO+My+ysgr0XmEo/c0ltJ83f8gbwIUh8aZ1EcHBl1wyAjRtC8FztVZdiK lgE2ZShyxrvClf2nh/e40xnFAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUYJDAot20 z0yW5nAXSPDJXpd4ywwwHwYDVR0jBBgwFoAUcXLtDPRHBezrGWHROgV+z/MHyG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0FBMkE3ODRDOUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY1hMdERQUkhCZXpyR1dIUk9nVi16X01IeUc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi8xQTFDNUFGODlE OUMxMUVGQUFBOUZBNkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfRsQDANBgkqhkiG9w0BAQsFAAOCAQEAhgCyFfTEtALm kp2miTeu7cbMPtGDKQXj16bQWBJt5hI+/K0/t+kIiBgtQf0ealfl7uDSAYX8BZDc t49Y/2PF+8I7mBb3TfJ/2ONnDmfUeTl+7VCsmaAjQlAOaJkAkploujZphDawoKqh V/MS6H7qzjJW7hZuKQEx2tUl7JtwRE1igOHz/H9/vBmgQQWYf4SfQkcH3Kr22HEH 70s/w7n/XwEKBxlZ1wfk2q5Gx7nPjq/NWi1SFqBaxjZeizLRTsAEWmC+yHsblLIQ arUN7KbBl1JRHnFOm0KBQ3cQlLbKFDmQK2cEn+49+vdFA/bUEVSjYNVnzfjdyDgb jvhaUiMHMg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org