$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa File: 118F422C816F11EF9ACB654AC4F9AE02.roa (raw, json) Hash identifier: dqd2t4UXuMtWb1yN/NCXtKO4VOE3Updlpy8CHKQcrr4= Subject key identifier: 91:31:D2:9E:90:8C:C6:E7:27:E8:68:24:13:5C:87:EC:C2:20:70:B7 Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 1876 Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa Signing time: Thu 03 Oct 2024 10:05:51 +0000 ROA not before: Thu 03 Oct 2024 10:05:51 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 20940 IP address blocks: 2400:2000:6::/48 maxlen: 48 2400:2000:7::/48 maxlen: 48 2400:2000:b::/48 maxlen: 48 2400:2000:c::/48 maxlen: 48 2400:2000:f::/48 maxlen: 48 2400:2000:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6262 (0x1876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: Oct 3 10:05:51 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fe6c7f-d1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1d:ee:38:c6:bd:4f:a9:10:f0:aa:16:69:f7: b1:7a:0f:bc:b9:97:70:a9:7f:03:6b:33:1f:85:72: b8:15:a5:13:19:35:88:11:8c:db:4e:be:94:f7:d0: b4:ac:6d:ad:50:6b:fc:13:70:97:f9:f8:80:f0:55: a1:de:d9:28:37:09:70:17:6e:c7:c6:dc:95:93:12: 96:c2:a8:fd:d4:9a:26:7a:a4:ea:ba:6e:7c:26:a0: 63:8a:b0:f2:a7:3d:c6:10:70:7a:82:1b:f8:ca:4f: 33:74:bb:cb:58:a1:e7:89:dd:d9:c1:78:50:79:1c: fd:29:d6:da:da:e5:cc:d6:ae:73:52:39:1f:f1:ce: 0c:4b:f0:22:6a:44:e6:c6:f6:d9:a6:8f:11:ef:de: 13:9d:7d:af:78:41:c2:64:a3:ce:c4:c0:38:0c:04: 43:db:a0:59:f0:68:a3:5f:58:43:52:69:e9:33:15: 9a:32:31:4a:f2:38:b4:4d:c2:0e:94:d2:ea:42:fe: 30:a4:35:5a:25:ea:96:56:36:c4:54:4f:64:06:48: 8a:ba:07:0c:74:10:58:e0:69:fd:29:22:fe:9c:e3: cf:eb:3b:ac:0a:89:53:ca:18:63:dc:0b:b1:bb:72: 56:fb:ec:ff:6e:51:85:95:43:3b:27:1e:51:54:b1: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:31:D2:9E:90:8C:C6:E7:27:E8:68:24:13:5C:87:EC:C2:20:70:B7 X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:2000:6::/47 2400:2000:b::-2400:2000:c:ffff:ffff:ffff:ffff:ffff 2400:2000:f::-2400:2000:10:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1a:e2:a3:5c:a5:65:f0:c3:12:e3:7c:fb:e1:c6:23:4b:9a:2e: 5e:91:ae:3f:2b:04:36:b5:9f:b4:e9:82:e2:66:16:de:27:80: 4f:a3:5f:b4:bf:d6:21:89:dd:ca:50:13:50:48:33:6c:17:97: 75:fb:d1:8a:e4:ee:5a:4d:d0:79:b2:b0:1c:89:53:2f:99:16: f3:df:e3:3b:a9:c3:b1:e4:29:f2:70:35:57:f5:fa:fe:c7:92: b6:d2:72:35:77:5c:5c:f8:1e:3f:0a:50:c2:18:70:16:10:92: 09:54:13:47:0f:8e:03:7b:8d:d5:d1:8a:ea:5a:7e:f2:c4:75: 57:b7:38:a3:63:c1:ff:7b:e0:9a:9b:34:43:0f:e3:e7:1e:e8: 7c:4f:09:d3:1c:72:92:5c:72:96:a3:17:a3:93:84:3d:3c:5d: f5:77:98:c7:3a:34:c3:bd:9d:dc:be:fe:f5:03:ba:d6:02:32: 96:c5:ac:dc:4e:67:f3:e0:1b:f4:71:8e:6d:99:9b:a8:b8:04: 9d:f0:bb:a9:a5:c4:6a:be:2b:89:da:c9:16:0f:7f:29:7d:11: 86:70:c1:e1:ea:e6:99:bd:b8:47:e9:51:31:7b:96:d0:e4:75: 5f:af:bb:03:3a:ec:83:e3:f6:6e:41:ab:33:5a:11:2d:16:19: 29:cc:d1:a9 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICGHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjQxMDAzMTAwNTUxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZlNmM3Zi1kMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R3uOMa9T6kQ8KoWafexeg+8uZdwqX8DazMfhXK4FaUTGTWIEYzbTr6U99C0 rG2tUGv8E3CX+fiA8FWh3tkoNwlwF27HxtyVkxKWwqj91JomeqTqum58JqBjirDy pz3GEHB6ghv4yk8zdLvLWKHnid3ZwXhQeRz9Kdba2uXM1q5zUjkf8c4MS/AiakTm xvbZpo8R794TnX2veEHCZKPOxMA4DARD26BZ8GijX1hDUmnpMxWaMjFK8ji0TcIO lNLqQv4wpDVaJeqWVjbEVE9kBkiKugcMdBBY4Gn9KSL+nOPP6zusColTyhhj3Aux u3JW++z/blGFlUM7Jx5RVLHLAwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFJEx0p6Q jMbnJ+hoJBNch+zCIHC3MB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBRTEvNjM4NDNFRDA5NDQwMTFFN0JDOTlDMTFBQzRGOUFFMDIvMTE4RjQyMkM4 MTZGMTFFRjlBQ0I2NTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MDcEAgACMDEDBwEkACAAAAYwEgMHACQAIAAACwMHACQAIAAADDASAwcAJAAg AAAPAwcAJAAgAAAQMA0GCSqGSIb3DQEBCwUAA4IBAQAa4qNcpWXwwxLjfPvhxiNL mi5eka4/KwQ2tZ+06YLiZhbeJ4BPo1+0v9Yhid3KUBNQSDNsF5d1+9GK5O5aTdB5 srAciVMvmRbz3+M7qcOx5CnycDVX9fr+x5K20nI1d1xc+B4/ClDCGHAWEJIJVBNH D44De43V0YrqWn7yxHVXtzijY8H/e+CamzRDD+PnHuh8TwnTHHKSXHKWoxejk4Q9 PF31d5jHOjTDvZ3cvv71A7rWAjKWxazcTmfz4Bv0cY5tmZuouASd8LuppcRqviuJ 2skWD38pfRGGcMHh6uaZvbhH6VExe5bQ5HVfr7sDOuyD4/ZuQaszWhEtFhkpzNGp -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:18 2024 by rpki-client on console-ams.rpki-client.org