$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/8D6973CE77C311EE90D4BD46C4F9AE02.roa File: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (raw, json) Hash identifier: ndQXYZEDJrYkAW+jASzWJ8tE2xMBarAUb8KkLNaLzOo= Subject key identifier: FB:8B:4D:A3:65:F3:7D:CD:96:BD:6F:3E:A5:01:4A:FA:BA:FF:1B:AA Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 3384 Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/8D6973CE77C311EE90D4BD46C4F9AE02.roa Signing time: Tue 31 Oct 2023 08:00:27 +0000 ROA not before: Tue 31 Oct 2023 08:00:27 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 142502 IP address blocks: 2405:8a00:ffff::/48 maxlen: 48 2409:e:e1::/48 maxlen: 48 2409:e:e2::/48 maxlen: 48 2409:e:e3::/48 maxlen: 48 2409:e:e5::/48 maxlen: 48 2409:e:e7::/48 maxlen: 48 2409:e:e9::/48 maxlen: 48 2409:e:ef::/48 maxlen: 48 2409:f:f2::/48 maxlen: 48 2409:f:f4::/48 maxlen: 48 240a:eabc:abce::/48 maxlen: 48 240a:eabc:abcf::/48 maxlen: 48 240a:eabc:dabc::/48 maxlen: 48 240a:eabc:dabd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13188 (0x3384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Oct 31 08:00:27 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6540b41b-5e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:7a:83:72:08:0c:62:05:8a:0d:77:54:66: f2:da:ab:25:82:48:68:fd:68:8f:69:a4:b6:20:e2: 0c:64:99:70:3c:3a:48:ee:72:42:31:0a:09:aa:08: 16:3d:b5:b5:be:ea:bc:c8:c9:8d:25:ca:98:72:3c: 2e:ca:97:6c:ab:d2:f6:cb:a5:3f:4c:ac:97:6c:c9: 05:99:31:f6:2d:67:74:ec:eb:62:85:4d:90:f5:ba: f4:b1:70:61:57:f3:db:46:8c:b0:3a:02:59:22:18: a4:da:97:41:b6:e6:7e:3b:83:c0:ee:0b:17:07:58: 54:a9:87:74:16:24:de:a9:6d:1d:ad:55:7f:25:99: cf:0c:8f:ff:e2:78:db:cc:64:88:38:c1:70:b8:50: 3c:94:70:42:a2:e9:48:77:c6:bb:47:4b:12:aa:b5: e4:eb:30:c4:5c:95:b6:43:1d:a7:ab:74:c8:8b:4f: 70:2a:17:1a:01:32:9c:02:93:eb:e0:bf:59:1d:43: 81:11:5d:ab:75:29:61:9e:b2:db:59:a9:ab:fa:a4: d8:fb:56:d2:26:01:f0:80:5e:e1:7f:6c:fe:77:1e: 57:25:93:35:a6:78:0c:54:cd:f1:e0:7f:5a:cb:17: 28:32:3a:20:53:ba:64:2f:a3:34:59:20:11:2b:7f: 3c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8B:4D:A3:65:F3:7D:CD:96:BD:6F:3E:A5:01:4A:FA:BA:FF:1B:AA X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/8D6973CE77C311EE90D4BD46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:8a00:ffff::/48 2409:e:e1::-2409:e:e3:ffff:ffff:ffff:ffff:ffff 2409:e:e5::/48 2409:e:e7::/48 2409:e:e9::/48 2409:e:ef::/48 2409:f:f2::/48 2409:f:f4::/48 240a:eabc:abce::/47 240a:eabc:dabc::/47 Signature Algorithm: sha256WithRSAEncryption 01:34:f6:d9:bc:d9:0a:04:30:50:f8:73:40:54:28:75:bf:fd: 27:dc:0b:96:14:dc:9f:79:45:46:a7:7b:9b:c5:bc:26:2f:4e: f1:3d:de:2d:7b:8d:6d:8a:b5:1f:37:7c:b0:88:39:92:99:36: 74:c1:90:a8:51:44:71:d0:20:78:0c:97:b0:a6:fb:b3:63:ba: 54:f1:02:57:fc:99:45:2f:ac:7e:0e:75:d0:7f:91:57:46:f1: 7c:2b:27:32:d8:b3:a6:e2:61:2c:73:4b:ad:f5:5f:1d:6e:80: cf:d4:59:3f:69:8b:f3:ac:5c:1a:53:51:7b:01:7c:c0:02:d9: 81:3b:b5:dc:17:7c:7d:ac:d6:fb:3a:1c:88:e6:c7:47:6c:54: 27:2e:fb:d4:9f:98:86:84:f2:85:42:60:ef:89:73:12:8c:33: 98:d3:09:25:ab:bd:7d:a3:79:05:ce:d5:c7:a0:c5:fa:09:a1: b1:03:96:8c:76:1f:df:c9:53:f1:48:31:fb:28:c0:da:f8:54: 56:6a:dd:c6:9b:17:bd:07:97:20:09:a3:7e:00:ed:24:38:bf: 2a:63:5c:79:25:01:fd:8d:03:9b:25:f6:d9:a3:c1:35:50:c9: 70:d5:85:73:64:c1:93:66:fb:43:04:bb:c4:76:f4:a6:1f:59: 85:dc:9a:da -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgICM4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjMxMDMxMDgwMDI3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQwYjQxYi01ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20p6g3IIDGIFig13VGby2qslgkho/WiPaaS2IOIMZJlwPDpI7nJCMQoJqggW PbW1vuq8yMmNJcqYcjwuypdsq9L2y6U/TKyXbMkFmTH2LWd07OtihU2Q9br0sXBh V/PbRoywOgJZIhik2pdBtuZ+O4PA7gsXB1hUqYd0FiTeqW0drVV/JZnPDI//4njb zGSIOMFwuFA8lHBCoulId8a7R0sSqrXk6zDEXJW2Qx2nq3TIi09wKhcaATKcApPr 4L9ZHUOBEV2rdSlhnrLbWamr+qTY+1bSJgHwgF7hf2z+dx5XJZM1pngMVM3x4H9a yxcoMjogU7pkL6M0WSARK388gwIDAQABo4IC9DCCAvAwHQYDVR0OBBYEFPuLTaNl 833Nlr1vPqUBSvq6/xuqMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvOEQ2OTczQ0U3 N0MzMTFFRTkwRDRCRDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwfgYIKwYBBQUHAQcBAf8E bzBtMGsEAgACMGUDBwAkBYoA//8wEgMHACQJAA4A4QMHAiQJAA4A4AMHACQJAA4A 5QMHACQJAA4A5wMHACQJAA4A6QMHACQJAA4A7wMHACQJAA8A8gMHACQJAA8A9AMH ASQK6ryrzgMHASQK6rzavDANBgkqhkiG9w0BAQsFAAOCAQEAATT22bzZCgQwUPhz QFQodb/9J9wLlhTcn3lFRqd7m8W8Ji9O8T3eLXuNbYq1Hzd8sIg5kpk2dMGQqFFE cdAgeAyXsKb7s2O6VPECV/yZRS+sfg510H+RV0bxfCsnMtizpuJhLHNLrfVfHW6A z9RZP2mL86xcGlNRewF8wALZgTu13Bd8fazW+zociObHR2xUJy771J+YhoTyhUJg 74lzEowzmNMJJau9faN5Bc7Vx6DF+gmhsQOWjHYf38lT8Ugx+yjA2vhUVmrdxpsX vQeXIAmjfgDtJDi/KmNceSUB/Y0DmyX22aPBNVDJcNWFc2TBk2b7QwS7xHb0ph9Z hdya2g== -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org