$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa File: 470E849A389E11EF83D66176C4F9AE02.roa (raw, json) Hash identifier: I6wYLUXo9wiy4AQAxb2ubHia3GZFxKPK++eH7JKRPwI= Subject key identifier: B1:9B:0C:B8:E3:E8:AC:42:89:15:34:66:82:AC:C9:85:6B:AE:81:05 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: 02 Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa Signing time: Tue 02 Jul 2024 18:09:52 +0000 ROA not before: Tue 02 Jul 2024 18:09:52 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 153048 IP address blocks: 2001:df4:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Validity Not Before: Jul 2 18:09:52 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66844270-526c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:0b:a4:ad:25:e0:33:7e:00:51:a5:fc:14: 31:14:72:f6:f1:4e:85:c1:21:4d:42:46:c4:96:24: b0:e9:00:5d:f7:e6:5f:06:06:a5:3e:d2:6c:8c:ee: b8:4f:29:bf:fc:33:d6:69:7e:2b:4f:57:da:79:1a: 99:08:bf:5a:51:fb:9c:c9:fc:06:4a:b5:fa:af:4b: 38:36:76:4e:65:6b:02:ec:dc:b8:e5:8c:a1:33:10: 4f:62:2c:42:f2:07:2e:78:54:ef:55:44:2f:1c:38: b8:14:a8:92:c0:fe:f4:46:83:9c:87:56:5e:25:71: 9f:0a:2e:d1:5f:b1:92:73:9f:6f:a4:59:86:35:71: 46:a3:db:bb:93:ec:12:4d:70:66:15:19:bb:8e:d0: 38:fc:0f:4d:cc:b8:2b:b8:1d:e0:fc:55:36:10:44: 75:ee:de:fe:6a:4f:e3:8e:0f:b1:56:4f:68:f5:4e: 8a:da:a5:42:d0:2e:7c:30:7d:da:04:e6:be:4d:3e: a2:2b:82:f2:ff:5e:00:6d:56:fc:03:62:c1:68:e5: 52:d6:b4:5a:57:ad:2c:60:0c:7a:ea:24:0b:b5:cd: 44:33:b1:18:4d:b3:c2:61:49:6b:9a:94:93:a9:41: 99:dd:d6:91:f9:d6:e4:85:15:30:7e:93:11:d2:dd: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:0C:B8:E3:E8:AC:42:89:15:34:66:82:AC:C9:85:6B:AE:81:05 X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/470E849A389E11EF83D66176C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:c0::/48 Signature Algorithm: sha256WithRSAEncryption 29:d8:58:d8:8e:26:9e:3b:33:e6:25:99:f9:76:48:ac:f3:4c: 5e:44:56:d9:e8:dc:0f:b8:c6:29:48:1c:37:8d:39:d9:9a:6b: 70:46:71:33:c9:4d:ba:87:4b:3b:86:a3:10:10:2f:09:b0:ae: 20:c8:b8:ab:e3:4a:51:55:7b:1a:32:46:27:be:d7:66:bc:74: 66:0f:b9:3f:f2:fa:78:80:7e:1f:ab:76:59:b1:ba:de:d9:ac: d6:74:35:44:3e:ef:de:2b:e8:c7:b5:7a:36:48:99:b2:37:2e: 98:88:bc:dd:79:ec:5e:23:91:bf:e8:54:dd:b9:5f:ff:a7:63: 54:bb:0a:46:43:cc:58:7f:1c:f7:c4:40:51:ed:0d:a8:73:d4: 13:2a:96:a6:cb:bf:f2:0b:6f:db:83:83:05:71:7c:28:df:12: b4:e1:a8:ff:1c:94:57:b4:5d:7e:e3:07:3c:c0:38:72:e4:81: 9c:aa:11:96:94:da:62:78:b1:94:0c:66:eb:5c:d1:a9:d5:94: 38:7d:a5:81:08:44:e1:15:44:6d:7a:24:42:c7:15:fa:de:19: cb:97:b6:a4:d3:ad:ce:f1:b3:4f:32:3c:33:5c:15:70:ad:9d: a8:11:0e:d5:00:2e:1d:43:d9:dd:4b:df:44:ef:f3:13:25:c7: b9:12:00:c0 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjJCRDExMC8GA1UEBRMoOTdEMDQxNTlGQkIzN0VBNjc0NjJCODk2OTc2QzExNDBD OTU5RTY5MTAeFw0yNDA3MDIxODA5NTJaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODQ0MjcwLTUyNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDqAukrSXgM34AUaX8FDEUcvbxToXBIU1CRsSWJLDpAF335l8GBqU+0myM7rhP Kb/8M9ZpfitPV9p5GpkIv1pR+5zJ/AZKtfqvSzg2dk5lawLs3LjljKEzEE9iLELy By54VO9VRC8cOLgUqJLA/vRGg5yHVl4lcZ8KLtFfsZJzn2+kWYY1cUaj27uT7BJN cGYVGbuO0Dj8D03MuCu4HeD8VTYQRHXu3v5qT+OOD7FWT2j1TorapULQLnwwfdoE 5r5NPqIrgvL/XgBtVvwDYsFo5VLWtFpXrSxgDHrqJAu1zUQzsRhNs8JhSWualJOp QZnd1pH51uSFFTB+kxHS3XaZAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUsZsMuOPo rEKJFTRmgqzJhWuugQUwHwYDVR0jBBgwFoAUl9BBWfuzfqZ0YriWl2wRQMlZ5pEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGMkJELzQ3ODQ0MjAwMzg5 NjExRUY5RURFODEzNkM0RjlBRTAyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDlCQldmdXpmcVowWXJpV2wyd1JRTWxaNXBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi80NzBFODQ5QTM4 OUUxMUVGODNENjYxNzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfQAwDANBgkqhkiG9w0BAQsFAAOCAQEAKdhY2I4mnjsz 5iWZ+XZIrPNMXkRW2ejcD7jGKUgcN4052ZprcEZxM8lNuodLO4ajEBAvCbCuIMi4 q+NKUVV7GjJGJ77XZrx0Zg+5P/L6eIB+H6t2WbG63tms1nQ1RD7v3ivox7V6NkiZ sjcumIi83XnsXiORv+hU3blf/6djVLsKRkPMWH8c98RAUe0NqHPUEyqWpsu/8gtv 24ODBXF8KN8StOGo/xyUV7RdfuMHPMA4cuSBnKoRlpTaYnixlAxm61zRqdWUOH2l gQhE4RVEbXokQscV+t4Zy5e2pNOtzvGzTzI8M1wVcK2dqBEO1QAuHUPZ3UvfRO/z EyXHuRIAwA== -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:52 2024 by rpki-client on console-ams.rpki-client.org