$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/12D5B220296411EDB08A7E54C4F9AE02.roa File: 12D5B220296411EDB08A7E54C4F9AE02.roa (raw, json) Hash identifier: IfNUHhPvu7UsBRDPbxmJEbxn+CUXhUXh86S7/wAn8KI= Subject key identifier: 65:16:08:CE:BA:1D:E3:4A:07:CF:E9:9A:22:DA:B8:6A:CD:BC:54:E0 Certificate issuer: /CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299 Certificate serial: 0722 Authority key identifier: A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/12D5B220296411EDB08A7E54C4F9AE02.roa Signing time: Fri 16 Aug 2024 18:16:19 +0000 ROA not before: Fri 16 Aug 2024 18:16:19 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 63944 IP address blocks: 2404:f140::/33 maxlen: 33 2404:f140:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299 Validity Not Before: Aug 16 18:16:19 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66bf9773-175a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:85:76:20:c5:42:fa:f2:97:18:f5:c3:da:b4: 6f:ec:50:34:e4:9f:e0:d9:95:d7:f3:f3:91:77:13: b6:fa:4d:c8:a0:e9:35:38:7e:f1:04:54:42:3b:59: 8d:6d:e6:28:7b:89:b0:f4:8c:f7:c6:04:2b:7d:e6: 5f:94:31:6e:27:18:c5:df:9c:ba:74:37:8d:45:c7: 52:95:c8:e0:63:b8:54:3c:83:e2:0d:43:37:a2:0f: ca:37:17:18:80:1a:66:df:f3:3a:85:42:70:13:ae: fc:d3:cf:b3:ed:a1:1c:53:c1:a8:9f:fb:89:f7:c8: c7:3f:40:19:00:d0:9e:87:24:72:ca:be:3a:56:d2: cb:97:72:10:b2:7d:51:e0:81:58:9e:3b:91:b9:97: d7:83:2b:19:c7:ba:18:db:f1:51:34:d8:a5:ec:b6: fe:c9:8a:fc:75:3f:c8:58:bd:ac:c3:2e:82:ea:c4: dc:e8:2e:42:d8:cd:19:8e:22:66:79:7a:c1:53:d8: 31:21:5e:e1:1c:b4:14:89:18:d0:55:a3:c0:cb:67: 07:59:73:9d:ff:33:6c:3f:af:2e:fb:9b:54:6c:c6: b1:6a:6b:78:77:1b:15:77:c5:20:58:61:72:8c:2a: 16:e8:d8:ba:78:5f:e3:91:a2:54:d4:07:af:d2:08: 4c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:16:08:CE:BA:1D:E3:4A:07:CF:E9:9A:22:DA:B8:6A:CD:BC:54:E0 X509v3 Authority Key Identifier: keyid:A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/12D5B220296411EDB08A7E54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f140::/32 Signature Algorithm: sha256WithRSAEncryption 58:1c:9a:fb:fe:fc:31:da:fe:2f:f3:22:79:43:0b:80:10:5d: 9b:03:77:56:d9:6e:f4:57:2c:a5:87:ac:ac:37:b0:c4:ee:f4: 96:47:26:cb:71:f7:17:b0:45:93:c8:d3:71:a3:43:cf:7f:0c: f0:8a:71:77:fd:14:28:9f:c9:b0:6f:1e:45:00:57:bc:f1:0c: 61:90:60:2d:f1:90:4d:d1:17:12:b0:e5:f3:0f:12:60:8d:69: 4e:ee:42:53:ca:7c:b9:21:d1:7c:54:30:98:3e:fb:31:89:e9: 34:f5:4d:8f:5c:89:05:18:31:d9:18:e2:0c:96:76:6a:b5:f9: 47:95:66:97:32:81:70:a4:cc:db:4f:c9:da:e4:9c:42:91:46: 6c:20:1f:bb:3d:e7:1c:f9:47:8f:09:06:33:67:ed:d9:5e:4b: 73:80:1b:99:7c:7b:fa:f7:27:61:79:3b:c9:66:31:de:57:45: ec:3b:7b:2b:1c:dd:eb:f9:12:39:78:52:e7:ab:b5:68:d6:b1: c2:17:61:c2:01:77:9a:d5:dc:a5:54:09:31:9f:66:c1:f0:e3: 71:2e:18:43:f1:90:5d:7a:49:af:ec:d9:8d:2d:85:3c:18:1c: 72:2f:e2:04:6e:46:e8:15:12:7b:aa:17:69:77:2d:aa:c0:df: fc:ed:66:93 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQ0YxMTAvBgNVBAUTKEE3ODkwMkY0RjBEODI0QjQwRjQ5NkQ1REZDM0U5RjA2 MzNCNzEyOTkwHhcNMjQwODE2MTgxNjE5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmOTc3My0xNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9IV2IMVC+vKXGPXD2rRv7FA05J/g2ZXX8/ORdxO2+k3IoOk1OH7xBFRCO1mN beYoe4mw9Iz3xgQrfeZflDFuJxjF35y6dDeNRcdSlcjgY7hUPIPiDUM3og/KNxcY gBpm3/M6hUJwE67808+z7aEcU8Gon/uJ98jHP0AZANCehyRyyr46VtLLl3IQsn1R 4IFYnjuRuZfXgysZx7oY2/FRNNil7Lb+yYr8dT/IWL2swy6C6sTc6C5C2M0ZjiJm eXrBU9gxIV7hHLQUiRjQVaPAy2cHWXOd/zNsP68u+5tUbMaxamt4dxsVd8UgWGFy jCoW6Ni6eF/jkaJU1Aev0ghMFwIDAQABo4ICljCCApIwHQYDVR0OBBYEFGUWCM66 HeNKB8/pmiLauGrNvFTgMB8GA1UdIwQYMBaAFKeJAvTw2CS0D0ltXfw+nwYztxKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRDRi9GNEZERjVFRThE NDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBEWUpMUVBTVzFkX0Q2ZkJqTzNF cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0a0M5UERZSkxRUFNXMWRfRDZmQmpPM0Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZEQ0YvRjRGREY1RUU4RDQxMTFFOTgxNTE2QTMyQzRGOUFFMDIvMTJENUIyMjAy OTY0MTFFREIwOEE3RTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBPFAMA0GCSqGSIb3DQEBCwUAA4IBAQBYHJr7/vwx2v4v 8yJ5QwuAEF2bA3dW2W70Vyylh6ysN7DE7vSWRybLcfcXsEWTyNNxo0PPfwzwinF3 /RQon8mwbx5FAFe88QxhkGAt8ZBN0RcSsOXzDxJgjWlO7kJTyny5IdF8VDCYPvsx iek09U2PXIkFGDHZGOIMlnZqtflHlWaXMoFwpMzbT8na5JxCkUZsIB+7Pecc+UeP CQYzZ+3ZXktzgBuZfHv69ydheTvJZjHeV0XsO3srHN3r+RI5eFLnq7Vo1rHCF2HC AXea1dylVAkxn2bB8ONxLhhD8ZBdekmv7NmNLYU8GBxyL+IEbkboFRJ7qhdpdy2q wN/87WaT -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org