$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa File: E1AB1F92430F11EAA60DB885C4F9AE02.roa (raw, json) Hash identifier: Y5ilqY3EX1YlNkwmQC54jat5s6RkhEqIyQvx25IhbvA= Subject key identifier: 28:16:01:2C:F8:7B:63:48:6F:0B:15:14:7F:D7:7A:54:C4:5A:B6:93 Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0A7D Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa Signing time: Fri 30 Aug 2024 20:28:36 +0000 ROA not before: Fri 30 Aug 2024 20:28:36 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24014 IP address blocks: 2001:df3:c600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 19:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2685 (0xa7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: Aug 30 20:28:36 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d22b74-3a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:78:f8:7a:13:e2:66:ec:08:43:a8:d3:a0: 87:b9:0f:ea:22:4b:83:87:41:23:50:e3:f4:b6:22: d9:2f:bd:65:92:69:98:64:d1:4e:45:ae:0c:17:c8: a9:3e:5d:fb:c3:40:97:12:68:d5:88:de:48:10:f2: 6b:f0:0d:10:ec:9a:22:d3:f2:4a:40:e9:27:39:74: 24:9d:7f:82:b6:8e:3a:d0:c5:30:7c:f7:37:aa:91: 8b:eb:24:19:0f:a4:a0:3e:c3:e0:9f:7d:5c:40:cb: 68:4e:0f:e2:ad:8c:f5:a1:13:d1:71:58:66:0f:4f: e7:b5:03:b7:bb:40:d9:ee:82:4a:af:3a:96:d7:cb: a8:3b:4e:72:ac:37:0a:78:1b:01:b3:a0:5e:59:ee: ca:35:37:57:4f:9f:0b:09:16:5c:5e:65:36:4a:cd: 68:fc:17:f8:6a:c8:8d:b2:bf:9c:69:8f:91:47:9f: e5:44:34:f2:7e:2e:55:e6:71:c8:63:0d:ca:72:b6: 69:86:c0:5d:bf:44:a4:ab:95:ba:79:5d:47:45:6d: 0f:f9:bf:27:06:9b:b2:fc:99:47:c2:ad:e7:36:90: 2e:d9:cb:72:b7:7b:11:4e:61:b8:0d:0a:45:9a:32: fa:f7:64:92:8e:12:05:f1:36:97:0c:c6:ee:86:79: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:16:01:2C:F8:7B:63:48:6F:0B:15:14:7F:D7:7A:54:C4:5A:B6:93 X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:c600::/48 Signature Algorithm: sha256WithRSAEncryption 82:36:9b:65:18:93:f3:31:22:3d:07:9c:dd:66:48:cf:02:ec: b3:dc:ae:08:f2:9e:3b:8a:06:fe:f9:41:cf:b6:3b:5b:b0:8c: b5:b7:f4:69:4c:e2:1c:17:22:f7:b3:33:2f:4e:b2:92:73:59: bb:ad:bc:b5:78:08:a7:3e:93:65:63:8f:ee:a8:dd:5b:6c:44: a7:cc:79:eb:c4:23:d9:18:76:09:6b:fe:44:49:be:f0:b7:1b: fd:71:25:c2:64:92:ad:32:bc:2b:0e:27:62:ef:bd:42:98:23: 46:87:d8:f8:9d:88:3c:99:b8:3a:b4:cc:86:42:0b:a0:ab:2e: ca:5e:17:64:06:00:6e:41:a3:1f:a3:7f:85:1d:f2:be:9b:06: cd:3d:9d:f8:a9:e5:d1:6c:8a:19:b6:c9:dd:e1:29:6e:29:e9: 8b:f0:f7:39:a0:57:04:f6:04:14:05:f1:f2:91:e1:4d:3a:d9: e7:e2:c4:b1:97:54:56:25:88:a5:4e:58:41:58:18:1d:61:4a: 5e:18:e8:ad:9d:f2:05:99:19:75:74:fb:5d:32:67:20:f1:a1: c8:5f:a4:e8:07:51:8d:dd:ab:b7:c9:31:38:3a:d5:2b:a8:6b: 26:04:ac:2a:c0:5d:c7:21:02:61:99:20:76:90:0d:0f:26:65: c2:9b:63:22 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjQwODMwMjAyODM2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyMmI3NC0zYThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySd4+HoT4mbsCEOo06CHuQ/qIkuDh0EjUOP0tiLZL71lkmmYZNFORa4MF8ip Pl37w0CXEmjViN5IEPJr8A0Q7Joi0/JKQOknOXQknX+Cto460MUwfPc3qpGL6yQZ D6SgPsPgn31cQMtoTg/irYz1oRPRcVhmD0/ntQO3u0DZ7oJKrzqW18uoO05yrDcK eBsBs6BeWe7KNTdXT58LCRZcXmU2Ss1o/Bf4asiNsr+caY+RR5/lRDTyfi5V5nHI Yw3KcrZphsBdv0Skq5W6eV1HRW0P+b8nBpuy/JlHwq3nNpAu2ctyt3sRTmG4DQpF mjL692SSjhIF8TaXDMbuhnmtXwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCgWASz4 e2NIbwsVFH/XelTEWraTMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI0N0MvOTBGNjMyREE0MzBBMTFFQTg1OENEQzc2QzRGOUFFMDIvRTFBQjFGOTI0 MzBGMTFFQUE2MERCODg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zxgAwDQYJKoZIhvcNAQELBQADggEBAII2m2UYk/Mx Ij0HnN1mSM8C7LPcrgjynjuKBv75Qc+2O1uwjLW39GlM4hwXIvezMy9OspJzWbut vLV4CKc+k2Vjj+6o3VtsRKfMeevEI9kYdglr/kRJvvC3G/1xJcJkkq0yvCsOJ2Lv vUKYI0aH2PidiDyZuDq0zIZCC6CrLspeF2QGAG5Box+jf4Ud8r6bBs09nfip5dFs ihm2yd3hKW4p6Yvw9zmgVwT2BBQF8fKR4U062efixLGXVFYliKVOWEFYGB1hSl4Y 6K2d8gWZGXV0+10yZyDxochfpOgHUY3dq7fJMTg61SuoayYErCrAXcchAmGZIHaQ DQ8mZcKbYyI= -----END CERTIFICATE-----Generated at Tue Nov 26 21:52:48 2024 by rpki-client on console-ams.rpki-client.org