$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/A20F60064E3511EFBFA22132C4F9AE02.roa File: A20F60064E3511EFBFA22132C4F9AE02.roa (raw, json) Hash identifier: R0gTc/BmIYY22dSLnRIvYfPD+cuEeRCvek/dGjTJ5eA= Subject key identifier: 38:FD:1D:42:AA:7A:C4:97:57:04:D1:A1:BC:61:98:43:17:03:2E:74 Certificate issuer: /CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB Certificate serial: 12 Authority key identifier: B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/A20F60064E3511EFBFA22132C4F9AE02.roa Signing time: Tue 30 Jul 2024 05:36:13 +0000 ROA not before: Tue 30 Jul 2024 05:36:13 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 137496 IP address blocks: 2402:8dc0::/32 maxlen: 32 2402:8dc0::/48 maxlen: 48 2402:8dc0:1::/48 maxlen: 48 2402:8dc0:2::/48 maxlen: 48 2402:8dc0:3::/48 maxlen: 48 2402:8dc0:4::/48 maxlen: 48 2402:8dc0:10::/48 maxlen: 48 2402:8dc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Aug 2024 05:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB Validity Not Before: Jul 30 05:36:13 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66a87bcd-4129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bd:c5:78:67:b9:c9:f5:9d:dd:01:6a:0e:8e: db:69:57:04:9e:a9:5b:ee:f4:c2:7c:eb:35:92:a6: fa:46:7f:96:97:85:c6:ab:f5:61:12:d2:10:40:6c: 05:43:0c:a6:c2:16:4d:29:c8:e3:73:d1:27:0a:77: 62:b9:42:da:12:14:f8:05:4c:1f:f1:e7:f4:e1:c0: 9f:52:d7:a5:e2:09:b5:e0:38:b2:de:e5:d7:ae:30: d7:da:1e:6c:aa:b2:12:11:8f:6f:36:fe:ce:ec:e1: c4:fa:45:4f:30:a0:4f:98:35:90:03:e3:5c:c3:3a: 09:c7:2c:fd:d7:11:b5:e8:e6:36:ba:40:eb:cc:a0: 40:6b:74:cd:8e:dc:8e:9b:37:c3:78:1b:ca:e1:92: 21:92:de:65:47:70:69:16:f7:07:f6:07:d0:ae:9a: 87:3d:30:c9:10:eb:38:eb:45:cc:fa:60:3d:17:31: d4:9b:d8:8b:9c:12:e1:b0:a7:66:7e:93:ee:9d:79: 36:1a:00:e9:05:40:a1:1d:96:27:34:71:7c:7a:01: 40:89:72:23:b5:d7:42:13:0d:e0:5e:de:1d:3f:2c: 8a:b6:0e:e6:53:2f:76:0b:ae:1a:52:a2:3f:bc:37: db:fd:eb:d1:48:98:2e:ef:c9:a7:71:6d:8f:2d:2a: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FD:1D:42:AA:7A:C4:97:57:04:D1:A1:BC:61:98:43:17:03:2E:74 X509v3 Authority Key Identifier: keyid:B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/A20F60064E3511EFBFA22132C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:8dc0::/32 Signature Algorithm: sha256WithRSAEncryption 43:d5:4b:cb:4f:a8:f5:16:d5:28:39:07:f4:da:6a:42:64:ea: 37:ab:28:89:e2:d7:a1:c3:08:e1:e6:88:1e:75:a8:47:77:94: b0:a4:fb:48:71:44:37:58:19:e8:ad:fb:c8:7b:e9:b4:05:c6: 4f:71:4f:54:7d:83:60:8b:2b:43:d7:86:58:73:1b:10:9e:51: 41:d9:ef:aa:e5:d0:e9:33:77:c8:0c:df:06:0e:41:b8:b5:b4: ff:0a:4a:b0:7d:4e:29:6a:50:d2:6b:aa:e1:39:ea:f1:d2:ff: b1:93:7c:f1:50:bc:86:51:3d:6c:b1:dc:ae:54:1c:0d:18:dc: 8f:27:3e:75:77:53:59:4f:36:c3:99:1e:bc:87:69:2b:74:90: d6:fa:1e:9e:9a:ab:70:b0:b8:bf:72:78:02:2c:b4:91:50:c8: 11:42:f3:31:fd:bc:0f:5c:ca:9d:41:bd:6c:7b:8d:4e:b6:1e: 4d:eb:78:d4:9b:35:ab:21:d9:55:e0:04:87:58:ff:ca:94:86: 9f:81:26:ac:18:ed:5b:a4:6b:99:c5:90:0f:4f:3a:71:4c:18: 53:68:7c:10:4a:42:db:36:ae:e6:55:3d:b1:d9:0d:ee:ce:c4: 9d:b9:0f:5d:b2:e4:98:84:88:f3:66:40:7b:6f:17:d9:98:61: 62:b4:da:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkEyNTExMC8GA1UEBRMoQjAwMTRBODMwNkM1MkU0MDRGNjdDQTJGOEU1ODZGOUI4 NjhFOENBQjAeFw0yNDA3MzAwNTM2MTNaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YTg3YmNkLTQxMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXvcV4Z7nJ9Z3dAWoOjttpVwSeqVvu9MJ86zWSpvpGf5aXhcar9WES0hBAbAVD DKbCFk0pyONz0ScKd2K5QtoSFPgFTB/x5/ThwJ9S16XiCbXgOLLe5deuMNfaHmyq shIRj282/s7s4cT6RU8woE+YNZAD41zDOgnHLP3XEbXo5ja6QOvMoEBrdM2O3I6b N8N4G8rhkiGS3mVHcGkW9wf2B9Cumoc9MMkQ6zjrRcz6YD0XMdSb2IucEuGwp2Z+ k+6deTYaAOkFQKEdlic0cXx6AUCJciO110ITDeBe3h0/LIq2DuZTL3YLrhpSoj+8 N9v969FImC7vyadxbY8tKud3AgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUOP0dQqp6 xJdXBNGhvGGYQxcDLnQwHwYDVR0jBBgwFoAUsAFKgwbFLkBPZ8ovjlhvm4aOjKsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGQTI1LzJCQkNCQ0FBMURB QzExRUFBRjRBMzc2M0M0RjlBRTAyL3NBRktnd2JGTGtCUFo4b3ZqbGh2bTRhT2pL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0FGS2d3YkZMa0JQWjhvdmpsaHZtNGFPaktzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9BMjBGNjAwNjRF MzUxMUVGQkZBMjIxMzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCjcAwDQYJKoZIhvcNAQELBQADggEBAEPVS8tPqPUW1Sg5 B/TaakJk6jerKIni16HDCOHmiB51qEd3lLCk+0hxRDdYGeit+8h76bQFxk9xT1R9 g2CLK0PXhlhzGxCeUUHZ76rl0Okzd8gM3wYOQbi1tP8KSrB9TilqUNJrquE56vHS /7GTfPFQvIZRPWyx3K5UHA0Y3I8nPnV3U1lPNsOZHryHaSt0kNb6Hp6aq3CwuL9y eAIstJFQyBFC8zH9vA9cyp1BvWx7jU62Hk3reNSbNash2VXgBIdY/8qUhp+BJqwY 7Vuka5nFkA9POnFMGFNofBBKQts2ruZVPbHZDe7OxJ25D12y5JiEiPNmQHtvF9mY YWK02kQ= -----END CERTIFICATE-----Generated at Wed Jul 31 08:49:57 2024 by rpki-client on console-fra.rpki-client.org