$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/42431FFC8FF711EEA0FC990FC4F9AE02.roa File: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (raw, json) Hash identifier: dBVxIuxXi1IfubYTqCooyEf06bco+4CSqK6CVlwkBZQ= Subject key identifier: 41:A2:F3:BE:E2:BC:81:29:4E:A8:58:5D:11:ED:C1:6B:22:9D:A5:9F Certificate issuer: /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192 Certificate serial: 0DDC Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/42431FFC8FF711EEA0FC990FC4F9AE02.roa Signing time: Fri 02 Aug 2024 18:36:13 +0000 ROA not before: Fri 02 Aug 2024 18:36:13 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 138164 IP address blocks: 240c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3548 (0xddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192 Validity Not Before: Aug 2 18:36:13 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ad271d-faaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:03:2b:cf:e1:1d:27:f9:4c:8b:d0:b2:18: e9:05:75:2d:6e:80:97:5b:f4:22:0c:f4:e0:fd:3c: 19:50:44:4a:5e:fe:b1:3d:72:2f:98:0a:81:4e:55: da:df:08:25:a9:b8:5a:0c:bd:fd:f3:cc:eb:75:d9: 60:03:de:42:5a:f4:5b:a1:ac:dd:f0:a1:25:45:68: 37:3e:8a:ba:6e:b0:6a:7b:2e:d3:ff:d5:70:60:a0: ac:ae:ac:8a:b1:23:32:71:e5:5a:0f:c8:73:fe:c9: 09:83:34:35:d0:ca:cd:47:56:ba:7d:e0:47:18:9f: d4:56:df:e5:5c:d3:cd:8d:29:3b:9c:11:96:a1:10: 31:25:5b:82:ec:54:9d:21:87:26:82:10:bb:4b:4f: d1:aa:aa:2d:1f:b0:8f:f9:51:65:c0:54:de:a6:d7: c7:8a:a2:4d:ec:22:3e:b4:89:f6:6b:73:89:6e:26: eb:b7:16:72:b5:5a:92:a8:03:b2:5f:e3:b4:73:00: 66:50:61:f7:a2:2f:36:43:fd:96:e6:59:cd:14:a9: 22:6e:e4:a7:cf:00:e6:01:29:4a:c4:dc:b7:f3:fe: 8c:c5:8c:6d:ed:56:7a:25:c3:8f:90:3a:11:8f:1d: b2:6c:08:56:34:e8:0e:6d:4f:05:73:2b:54:6e:2c: 65:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:F3:BE:E2:BC:81:29:4E:A8:58:5D:11:ED:C1:6B:22:9D:A5:9F X509v3 Authority Key Identifier: keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/42431FFC8FF711EEA0FC990FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 240c::/48 Signature Algorithm: sha256WithRSAEncryption 2a:91:b8:69:49:91:97:64:75:32:9a:c0:a4:81:1e:3a:0c:98: fa:7b:d1:47:c3:36:ec:c5:09:d7:8c:d7:d5:62:d8:72:75:ab: af:25:6f:9a:bb:f2:d7:d8:90:f8:c4:02:a7:cb:33:a4:b7:f0: 98:5d:88:ae:d6:c2:9f:6e:a1:d0:6f:d0:7a:d1:2a:04:ff:79: f4:bf:28:5b:4e:29:a0:42:c3:e9:a4:a0:f0:5e:a3:2c:af:2d: 9b:9a:ef:00:3e:a8:e5:8b:fa:e2:09:a1:cf:51:7e:82:f5:c9: 80:1f:b7:5f:06:41:70:b1:d1:d5:c4:0d:98:13:40:d0:f0:45: 01:e7:22:87:ee:b9:97:28:fe:22:40:1e:df:a9:6f:67:0c:45: af:17:e7:c4:d8:3b:d8:0e:39:8b:8d:42:eb:bf:1f:5a:79:de: f1:31:7f:59:d0:36:4e:a2:7d:f9:e8:e7:9a:ea:85:a8:d9:48: 7b:36:ad:e4:d4:32:3e:dd:34:9c:b7:81:53:f1:b9:d8:c3:a2: e6:28:d2:9e:c4:ed:fb:e1:d5:a1:7a:56:b6:af:10:cd:a8:33: 97:d6:df:13:46:35:ef:2d:de:70:eb:c3:c1:98:06:81:17:ab: 21:22:76:5a:73:81:bf:ef:03:2d:5b:84:4c:18:f9:66:7c:03: a1:39:58:13 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBNkUxMTAvBgNVBAUTKEQwMDY2MTBFQkQ2ODI5Nzg0NTdERjhBREEyOTExMDAx MzM5MTAxOTIwHhcNMjQwODAyMTgzNjEzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkMjcxZC1mYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLoDK8/hHSf5TIvQshjpBXUtboCXW/QiDPTg/TwZUERKXv6xPXIvmAqBTlXa 3wglqbhaDL3988zrddlgA95CWvRboazd8KElRWg3Poq6brBqey7T/9VwYKCsrqyK sSMyceVaD8hz/skJgzQ10MrNR1a6feBHGJ/UVt/lXNPNjSk7nBGWoRAxJVuC7FSd IYcmghC7S0/RqqotH7CP+VFlwFTeptfHiqJN7CI+tIn2a3OJbibrtxZytVqSqAOy X+O0cwBmUGH3oi82Q/2W5lnNFKkibuSnzwDmASlKxNy38/6MxYxt7VZ6JcOPkDoR jx2ybAhWNOgObU8FcytUbixlWQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEGi877i vIEpTqhYXRHtwWsinaWfMB8GA1UdIwQYMBaAFNAGYQ69aCl4RX34raKREAEzkQGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0E2RS83OUVDRTgzODk4 QkQxMUU5QUM5OUU3NEVDNEY5QUUwMi8wQVpoRHIxb0tYaEZmZml0b3BFUUFUT1JB WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBWmhEcjFvS1hoRmZmaXRvcEVRQVRPUkFaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBNkUvNzlFQ0U4Mzg5OEJEMTFFOUFDOTlFNzRFQzRGOUFFMDIvNDI0MzFGRkM4 RkY3MTFFRUEwRkM5OTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkDAAAAAAwDQYJKoZIhvcNAQELBQADggEBACqRuGlJkZdk dTKawKSBHjoMmPp70UfDNuzFCdeM19Vi2HJ1q68lb5q78tfYkPjEAqfLM6S38Jhd iK7Wwp9uodBv0HrRKgT/efS/KFtOKaBCw+mkoPBeoyyvLZua7wA+qOWL+uIJoc9R foL1yYAft18GQXCx0dXEDZgTQNDwRQHnIofuuZco/iJAHt+pb2cMRa8X58TYO9gO OYuNQuu/H1p53vExf1nQNk6iffno55rqhajZSHs2reTUMj7dNJy3gVPxudjDouYo 0p7E7fvh1aF6VravEM2oM5fW3xNGNe8t3nDrw8GYBoEXqyEidlpzgb/vAy1bhEwY +WZ8A6E5WBM= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:02 2024 by rpki-client on console-ams.rpki-client.org