$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/D292C0D27E1A11EFAE842E12C4F9AE02.roa File: D292C0D27E1A11EFAE842E12C4F9AE02.roa (raw, json) Hash identifier: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg= Subject key identifier: BE:A4:2E:14:C3:72:C7:60:7C:4B:50:B2:AA:58:0C:6A:F7:E6:FA:32 Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Certificate serial: 03 Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/D292C0D27E1A11EFAE842E12C4F9AE02.roa Signing time: Sun 29 Sep 2024 04:25:14 +0000 ROA not before: Sun 29 Sep 2024 04:25:14 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150142 IP address blocks: 2001:df4:52c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Validity Not Before: Sep 29 04:25:14 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66f8d6aa-7f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:8b:f4:be:83:60:61:a7:2d:47:b6:6c:de: 9d:03:8e:f1:ae:be:dd:3f:8e:91:a4:b6:b2:ef:de: e5:26:4e:c7:c5:6f:92:19:93:a8:e5:03:4c:d3:06: 07:27:94:c0:22:da:77:66:af:0d:79:5d:95:27:9b: 88:04:6a:8e:99:5e:30:d9:05:d7:7a:c9:87:e4:b5: ce:d0:69:b4:29:91:cf:59:0b:d9:a3:ca:7c:85:62: f0:38:25:00:c3:70:2f:28:52:87:a9:fd:4c:38:16: 37:ae:d6:b2:f0:8b:46:69:1e:28:07:7f:2a:8b:87: f8:d7:ef:3c:a7:64:4d:df:f2:a0:f4:9b:88:a9:b9: a6:8f:4b:9d:16:e6:6d:ee:75:60:7c:9a:98:88:f5: 89:9e:c5:87:e8:ca:2a:22:fa:bc:ce:2e:4a:4b:af: 4a:6f:a2:37:5f:22:aa:df:08:cc:6c:8a:b9:75:bb: 68:e8:ae:42:5d:a8:e4:26:e9:92:fc:3f:35:bb:0c: 3e:aa:dd:02:74:29:0a:2a:b2:33:4a:7f:af:ee:53: 2d:5c:54:4b:7f:b7:5f:74:ff:ef:b0:86:f3:8a:d3: 44:fc:c0:72:0b:54:78:6b:93:5b:d0:15:e1:d4:d2: 82:f7:c6:51:1f:8a:c8:79:a0:cc:70:49:ff:e2:81: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A4:2E:14:C3:72:C7:60:7C:4B:50:B2:AA:58:0C:6A:F7:E6:FA:32 X509v3 Authority Key Identifier: keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/D292C0D27E1A11EFAE842E12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:52c0::/48 Signature Algorithm: sha256WithRSAEncryption ac:9f:2a:04:8d:9c:03:03:9a:fd:73:11:fd:60:45:2c:73:e3: 73:de:c1:67:cb:fe:e4:28:5f:6a:31:53:4a:a6:30:02:73:cb: c2:4f:3c:0a:06:e5:61:dd:95:84:eb:46:8b:57:8a:b9:d7:97: a6:21:30:6a:c1:0a:38:5e:c0:29:97:00:c1:e9:67:6d:3c:63: c0:1f:c8:1b:7e:df:83:34:97:3a:66:1b:94:36:95:ba:d5:a8: 0d:f7:55:fb:6b:18:1f:2b:01:4c:40:71:d7:11:02:40:4b:ae: 53:5c:b0:83:95:6f:c2:2d:0f:4d:2a:a4:8c:0a:d4:82:1d:15: 95:b9:e3:aa:a7:ec:c2:9e:8a:da:c1:6e:bd:f3:17:39:6f:de: df:07:89:94:f6:a4:c8:b8:14:b8:8f:75:f2:ca:21:39:fa:09: 1b:c0:e6:c1:5e:43:6b:57:92:93:96:d7:6d:4c:98:d7:06:92: fc:8c:da:55:d8:df:06:0f:0c:69:3f:bf:3c:e2:4c:41:cf:ed: a3:09:c4:29:d5:2b:0f:cf:ec:9f:d2:69:d7:4b:8d:41:73:71: 96:ed:e3:7a:ec:85:38:c8:81:02:ea:2c:cf:7d:f8:2d:d0:b1: 25:69:05:33:89:47:5a:cd:30:f4:56:72:7a:2b:11:c0:88:8a: 34:43:82:9b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEEwNTExMC8GA1UEBRMoMjVBMEI4QjBDMTA0MTVGRDQwNkRCMjAzMjM2NjU5QzVG MTYzQUU0MzAeFw0yNDA5MjkwNDI1MTRaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZjhkNmFhLTdmODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXA4v0voNgYactR7Zs3p0DjvGuvt0/jpGktrLv3uUmTsfFb5IZk6jlA0zTBgcn lMAi2ndmrw15XZUnm4gEao6ZXjDZBdd6yYfktc7QabQpkc9ZC9mjynyFYvA4JQDD cC8oUoep/Uw4Fjeu1rLwi0ZpHigHfyqLh/jX7zynZE3f8qD0m4ipuaaPS50W5m3u dWB8mpiI9YmexYfoyioi+rzOLkpLr0pvojdfIqrfCMxsirl1u2jorkJdqOQm6ZL8 PzW7DD6q3QJ0KQoqsjNKf6/uUy1cVEt/t190/++whvOK00T8wHILVHhrk1vQFeHU 0oL3xlEfish5oMxwSf/igWf9AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUvqQuFMNy x2B8S1CyqlgMavfm+jIwHwYDVR0jBBgwFoAUJaC4sMEEFf1AbbIDI2ZZxfFjrkMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQTA1L0RBNUQxRDYyN0M4 QTExRUY4RkFCNjkwOUM0RjlBRTAyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJr TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmFDNHNNRUVGZjFBYmJJREkyWlp4ZkZqcmtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EQTVEMUQ2MjdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9EMjkyQzBEMjdF MUExMUVGQUU4NDJFMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfRSwDANBgkqhkiG9w0BAQsFAAOCAQEArJ8qBI2cAwOa /XMR/WBFLHPjc97BZ8v+5ChfajFTSqYwAnPLwk88CgblYd2VhOtGi1eKudeXpiEw asEKOF7AKZcAwelnbTxjwB/IG37fgzSXOmYblDaVutWoDfdV+2sYHysBTEBx1xEC QEuuU1ywg5Vvwi0PTSqkjArUgh0Vlbnjqqfswp6K2sFuvfMXOW/e3weJlPakyLgU uI918sohOfoJG8DmwV5Da1eSk5bXbUyY1waS/IzaVdjfBg8MaT+/POJMQc/townE KdUrD8/sn9Jp10uNQXNxlu3jeuyFOMiBAuosz334LdCxJWkFM4lHWs0w9FZyeisR wIiKNEOCmw== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org