$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/12D5B220296411EDB08A7E54C4F9AE02.roa File: 12D5B220296411EDB08A7E54C4F9AE02.roa (raw, json) Hash identifier: V7J1sx87oZjTjzfaaAQlCo2MB1AMyApiMzAigQvY2sA= Subject key identifier: D4:0D:84:D6:DF:67:46:7D:23:5C:CD:B3:63:FD:1D:B2:63:67:1A:5B Certificate issuer: /CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299 Certificate serial: 0662 Authority key identifier: A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/12D5B220296411EDB08A7E54C4F9AE02.roa Signing time: Wed 16 Aug 2023 18:15:55 +0000 ROA not before: Wed 16 Aug 2023 18:15:55 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 63944 IP address blocks: 2404:f140::/33 maxlen: 33 2404:f140:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299 Validity Not Before: Aug 16 18:15:55 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64dd125b-5f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:0c:15:62:45:6e:c8:97:0c:d4:4c:e8:c0: f0:bb:13:16:48:7f:b4:84:a8:38:05:14:19:54:e4: 64:b1:19:bf:9a:96:5c:6e:02:b8:5a:bf:ba:54:58: 22:9b:c5:62:67:be:19:d4:4d:0c:2f:57:8c:a8:a5: c8:94:0a:60:90:55:9a:1a:0d:8a:5b:d9:2a:8c:85: ab:f4:65:e3:0f:91:a9:29:3c:5a:af:3d:9d:43:fe: 1c:a2:5c:8e:ca:ed:98:a4:f1:2d:b1:28:1d:e0:1e: 08:91:6b:16:66:f3:ab:8d:a0:02:cf:94:09:6d:ee: e7:7d:11:7e:c7:de:f7:45:80:5c:32:79:5a:e3:66: 78:c2:45:df:b1:e4:cc:5f:5a:7a:a1:c0:98:b0:46: 71:dc:81:4f:a3:10:e3:fb:1a:e1:14:d7:4d:b9:f3: ef:c7:58:47:83:20:86:c8:0a:5e:9a:12:61:cb:b8: fd:e2:e1:c8:a8:b9:00:ff:45:67:97:3b:cb:1b:db: 1d:06:a9:32:2f:1d:e1:af:4a:28:6d:c1:86:ba:8a: 21:c1:9f:29:7e:a6:d3:59:aa:92:6b:f8:70:e8:c0: 48:64:5b:5d:0b:d2:8f:21:69:74:71:c9:88:96:f7: 7c:6c:ff:86:76:85:7d:a7:18:cb:40:e6:9c:11:05: d7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0D:84:D6:DF:67:46:7D:23:5C:CD:B3:63:FD:1D:B2:63:67:1A:5B X509v3 Authority Key Identifier: keyid:A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/12D5B220296411EDB08A7E54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f140::/32 Signature Algorithm: sha256WithRSAEncryption 87:ca:c2:be:aa:2d:dd:8f:2f:1a:ad:77:ae:37:33:fd:28:af: 0c:89:43:8c:a2:d8:65:d1:49:be:39:69:e1:1f:26:30:20:98: ec:15:2e:a3:55:42:af:3a:98:0b:ab:17:8e:1b:e1:36:f0:c5: 39:ad:8a:fc:ea:bf:82:e9:99:21:d7:ae:32:9b:77:09:bd:e9: 64:a8:1a:a3:37:e5:8a:00:b4:d3:b3:79:f7:bf:cb:2f:7c:8d: 0b:2f:4f:2e:85:2b:f4:ac:a7:e3:c9:80:0b:94:a9:df:47:60: 85:10:6f:72:71:6b:c4:4e:bc:c9:b0:f0:83:e3:27:57:58:d4: b2:d7:f2:70:58:c7:1a:2e:cb:3c:4a:62:57:31:7a:81:ba:51: a9:2c:06:54:80:8e:92:7a:1a:c1:ca:78:27:04:8b:54:16:9d: ec:b4:81:47:13:1c:6f:8b:48:65:e2:00:a2:b3:57:5b:f3:f4: dc:c4:35:f0:aa:7a:0c:9c:b9:4f:98:ab:b9:96:a8:90:78:50: 20:09:6e:3d:01:8a:94:72:4e:23:fb:07:08:eb:80:f3:64:9d: 5d:7d:91:a4:35:0f:f6:07:19:93:3a:c8:68:9f:00:95:45:09: 3a:76:5e:61:85:fd:6c:ed:e2:4e:ca:56:92:dd:f5:83:80:80: 2f:64:1e:98 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQ0YxMTAvBgNVBAUTKEE3ODkwMkY0RjBEODI0QjQwRjQ5NkQ1REZDM0U5RjA2 MzNCNzEyOTkwHhcNMjMwODE2MTgxNTU1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkMTI1Yi01ZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLEMFWJFbsiXDNRM6MDwuxMWSH+0hKg4BRQZVORksRm/mpZcbgK4Wr+6VFgi m8ViZ74Z1E0ML1eMqKXIlApgkFWaGg2KW9kqjIWr9GXjD5GpKTxarz2dQ/4colyO yu2YpPEtsSgd4B4IkWsWZvOrjaACz5QJbe7nfRF+x973RYBcMnla42Z4wkXfseTM X1p6ocCYsEZx3IFPoxDj+xrhFNdNufPvx1hHgyCGyApemhJhy7j94uHIqLkA/0Vn lzvLG9sdBqkyLx3hr0oobcGGuoohwZ8pfqbTWaqSa/hw6MBIZFtdC9KPIWl0ccmI lvd8bP+GdoV9pxjLQOacEQXXuQIDAQABo4ICljCCApIwHQYDVR0OBBYEFNQNhNbf Z0Z9I1zNs2P9HbJjZxpbMB8GA1UdIwQYMBaAFKeJAvTw2CS0D0ltXfw+nwYztxKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRDRi9GNEZERjVFRThE NDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBEWUpMUVBTVzFkX0Q2ZkJqTzNF cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0a0M5UERZSkxRUFNXMWRfRDZmQmpPM0Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZEQ0YvRjRGREY1RUU4RDQxMTFFOTgxNTE2QTMyQzRGOUFFMDIvMTJENUIyMjAy OTY0MTFFREIwOEE3RTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBPFAMA0GCSqGSIb3DQEBCwUAA4IBAQCHysK+qi3djy8a rXeuNzP9KK8MiUOMothl0Um+OWnhHyYwIJjsFS6jVUKvOpgLqxeOG+E28MU5rYr8 6r+C6Zkh164ym3cJvelkqBqjN+WKALTTs3n3v8svfI0LL08uhSv0rKfjyYALlKnf R2CFEG9ycWvETrzJsPCD4ydXWNSy1/JwWMcaLss8SmJXMXqBulGpLAZUgI6SehrB yngnBItUFp3stIFHExxvi0hl4gCis1db8/TcxDXwqnoMnLlPmKu5lqiQeFAgCW49 AYqUck4j+wcI64DzZJ1dfZGkNQ/2BxmTOshonwCVRQk6dl5hhf1s7eJOylaS3fWD gIAvZB6Y -----END CERTIFICATE-----Generated at Wed May 22 20:42:47 2024 by rpki-client on console-fra.rpki-client.org