$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C2C631C8A47911E99DBEDD52C4F9AE02.roa File: C2C631C8A47911E99DBEDD52C4F9AE02.roa (raw, json) Hash identifier: zbVd4r8+yDb5a0Mbw61ZGzSogFoSbPCNdNi83lNrSnE= Subject key identifier: 09:B7:15:99:E2:8F:3F:C3:0B:76:F9:A8:C6:94:61:EC:FA:DC:E0:9E Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Certificate serial: 35CC Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C2C631C8A47911E99DBEDD52C4F9AE02.roa Signing time: Tue 20 Aug 2024 14:30:27 +0000 ROA not before: Tue 20 Aug 2024 14:30:27 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 58562 IP address blocks: 2001:c20:c817::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13772 (0x35cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Validity Not Before: Aug 20 14:30:27 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c4a883-cbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:97:07:af:91:6d:78:fa:93:89:e9:10:b2:9d: 79:83:d2:37:4a:14:1a:ad:98:c2:3f:64:51:d8:9f: 70:f6:74:aa:54:49:84:b4:15:5d:49:92:63:85:66: 05:d5:b0:98:9a:be:c0:da:45:1c:c6:9a:7a:5d:94: b1:1c:09:0c:57:ae:99:19:b1:f2:59:c3:74:67:6e: 19:fa:b4:d5:d3:eb:b9:e2:a2:f4:1b:ae:67:bc:8a: 90:5a:48:ff:0a:13:60:bd:dc:77:ad:dc:a9:b6:ae: 4f:9d:06:64:da:51:4a:ec:2a:3e:e1:60:14:23:79: 88:9f:80:a8:64:05:96:f5:a2:fc:28:54:86:8b:9b: 7f:36:b6:e6:28:ec:7a:f6:3f:d1:44:8d:0c:cf:2e: 7e:3f:9a:2d:60:5d:f4:5d:94:56:96:5e:24:65:8a: b7:0a:cf:00:7a:9a:71:4f:55:f9:d3:98:b2:bf:d7: 82:04:fa:a7:32:00:25:89:50:4f:05:a6:af:b8:9c: 65:2b:e9:e2:34:d0:f4:14:87:26:ea:c9:71:a8:e8: e6:28:a9:7e:af:58:8c:eb:87:b8:fc:f9:b3:46:74: df:d5:ec:70:f8:c1:05:2d:aa:e9:a6:f1:84:f2:27: b2:00:ec:da:a9:f6:1b:f3:67:46:af:15:06:1e:7a: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B7:15:99:E2:8F:3F:C3:0B:76:F9:A8:C6:94:61:EC:FA:DC:E0:9E X509v3 Authority Key Identifier: keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C2C631C8A47911E99DBEDD52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:c20:c817::/48 Signature Algorithm: sha256WithRSAEncryption aa:4d:46:d1:7e:a4:15:06:89:fa:2d:7b:f0:e9:01:6a:08:04: 80:29:82:b9:20:05:5f:e2:73:aa:a0:76:dd:34:5c:72:3e:47: 34:28:1d:0c:98:b6:a7:67:6e:05:78:b6:af:8e:0f:26:fa:8d: 2f:85:34:0a:41:3c:2c:24:33:99:8f:da:f4:6b:66:85:82:b8: 64:91:ec:46:10:5b:68:f7:2c:77:b8:be:0e:e9:84:83:e3:f1: 68:48:d1:15:0b:7f:e4:78:24:ae:ec:66:79:07:dd:c7:b3:8b: ac:56:ae:e4:33:d3:cb:45:d6:f2:04:5d:4c:36:d5:0a:e7:70: 88:1e:9b:7e:43:1e:72:b2:d2:70:ad:85:c3:0a:4c:2b:cc:20: 7f:9b:27:49:7a:b5:00:48:51:a5:0f:a1:08:35:2a:a1:d0:b9: 6f:cb:07:d6:6b:97:4a:db:62:fc:19:57:7f:43:2d:e2:8b:e7: ce:77:df:48:4f:85:58:31:7e:87:82:2c:b9:13:1d:50:ba:f4: f1:ac:2a:90:f5:69:11:bd:83:b0:70:cc:81:8e:b2:01:f4:4c: 89:7b:86:b9:fc:93:fe:1d:b8:05:37:60:06:f9:5e:c1:e2:1c: 15:71:fa:c0:44:2e:fa:e3:ac:9f:cb:ad:cc:70:83:b5:32:49: 05:09:cf:cb -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICNcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0 MkI1MDUxQ0UwHhcNMjQwODIwMTQzMDI3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM0YTg4My1jYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05cHr5FtePqTiekQsp15g9I3ShQarZjCP2RR2J9w9nSqVEmEtBVdSZJjhWYF 1bCYmr7A2kUcxpp6XZSxHAkMV66ZGbHyWcN0Z24Z+rTV0+u54qL0G65nvIqQWkj/ ChNgvdx3rdyptq5PnQZk2lFK7Co+4WAUI3mIn4CoZAWW9aL8KFSGi5t/NrbmKOx6 9j/RRI0Mzy5+P5otYF30XZRWll4kZYq3Cs8AeppxT1X505iyv9eCBPqnMgAliVBP BaavuJxlK+niNND0FIcm6slxqOjmKKl+r1iM64e4/PmzRnTf1exw+MEFLarppvGE 8ieyAOzaqfYb82dGrxUGHnqq6wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAm3FZni jz/DC3b5qMaUYez63OCeMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvQzJDNjMxQzhB NDc5MTFFOTlEQkVERDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQwgyBcwDQYJKoZIhvcNAQELBQADggEBAKpNRtF+pBUG ifote/DpAWoIBIApgrkgBV/ic6qgdt00XHI+RzQoHQyYtqdnbgV4tq+ODyb6jS+F NApBPCwkM5mP2vRrZoWCuGSR7EYQW2j3LHe4vg7phIPj8WhI0RULf+R4JK7sZnkH 3cezi6xWruQz08tF1vIEXUw21QrncIgem35DHnKy0nCthcMKTCvMIH+bJ0l6tQBI UaUPoQg1KqHQuW/LB9Zrl0rbYvwZV39DLeKL585330hPhVgxfoeCLLkTHVC69PGs KpD1aRG9g7BwzIGOsgH0TIl7hrn8k/4duAU3YAb5XsHiHBVx+sBELvrjrJ/Lrcxw g7UySQUJz8s= -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:37 2024 by rpki-client on console-fra.rpki-client.org