$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/A6449CBA54A011EFB35AED26C4F9AE02.roa File: A6449CBA54A011EFB35AED26C4F9AE02.roa (raw, json) Hash identifier: MkKraPCVKYSh4EUGWEmc6lPBWcmV9tHqmd6kNTqMDpY= Subject key identifier: 3E:F5:5E:D9:D2:9E:82:EC:90:A8:31:D4:DE:CC:F8:12:80:7C:31:A2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: 02 Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/A6449CBA54A011EFB35AED26C4F9AE02.roa Signing time: Wed 07 Aug 2024 09:37:23 +0000 ROA not before: Wed 07 Aug 2024 09:37:23 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131108 IP address blocks: 2401:b860::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: Aug 7 09:37:23 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b34053-f5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:84:8b:c4:cc:0a:bb:d2:1d:53:1f:9e:c4: 32:46:57:79:db:29:e8:62:43:3e:d6:9a:89:da:a8: f0:99:89:97:aa:9d:70:e2:77:6a:02:54:60:eb:38: 07:58:fa:e0:24:e2:2c:a4:94:a9:5f:fc:b5:59:18: f4:eb:8f:be:3b:62:08:3e:ec:03:c0:63:7d:e3:b3: 2c:b9:81:cf:7d:c9:d5:25:44:6e:e0:93:03:d4:d7: 41:5f:3a:dd:b7:b8:42:89:72:0f:9a:c7:d7:1b:71: 3a:fb:b0:5a:87:0e:50:2e:44:ca:67:a8:5f:b9:b7: 08:b9:40:2e:b8:e7:a0:ff:bc:f7:0b:97:17:b3:7a: d3:af:af:cf:43:7a:35:9e:c0:73:9c:6e:57:e1:4e: 30:e0:96:9d:b0:bd:1c:29:0f:db:e9:f8:a1:35:41: 74:e0:a9:5b:04:be:9f:56:bb:3e:a9:6e:c4:02:59: 89:8f:a0:14:13:27:41:23:67:4c:cc:af:e3:5e:23: 7d:90:53:66:8f:73:b1:8f:53:89:52:32:33:35:ab: d0:df:13:e6:28:18:46:5e:f2:90:65:4a:9d:f0:9c: 30:ca:60:76:ef:eb:e5:55:5a:6e:a5:d6:25:0a:3c: d7:e0:84:3a:3c:c1:5a:5d:3d:39:75:0c:c9:c8:56: 70:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F5:5E:D9:D2:9E:82:EC:90:A8:31:D4:DE:CC:F8:12:80:7C:31:A2 X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/A6449CBA54A011EFB35AED26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b860::/32 Signature Algorithm: sha256WithRSAEncryption a7:41:e6:94:fb:f9:96:7e:e2:f3:ef:36:2f:56:f5:d7:b1:32: 50:70:87:6d:f1:cd:fc:74:fc:c1:0e:eb:b3:0f:61:56:ba:5e: 59:48:f2:d9:49:1b:fe:00:2b:bf:a9:f3:68:c1:4c:71:ad:60: 74:a7:33:27:23:34:ae:b8:d7:54:f5:81:f7:4e:1c:e7:56:73: bf:c8:2b:ff:13:7f:2e:d0:2f:59:bf:f1:f7:7b:a3:09:9c:e6: 2a:15:b6:5a:75:43:9d:47:66:52:73:f1:99:ac:7f:a2:f7:7c: 4c:cf:a4:fd:b5:dd:61:82:57:fc:82:6c:56:dd:f4:2c:9e:8a: 75:61:f6:99:7a:5a:20:1d:5a:dc:56:66:4d:74:70:d5:4c:5d: a2:0c:f3:09:91:cd:e1:8c:cb:2a:84:57:e1:36:49:cf:ce:e9: 30:44:60:8d:33:67:60:29:c6:69:22:08:0c:be:92:03:88:21: 22:a1:4f:10:ba:d0:4f:56:b3:05:0b:db:bb:b6:4d:65:dc:60: 2c:95:9e:3f:c2:f4:01:94:2d:66:7e:e8:5c:29:13:58:e9:1b: 27:36:c6:79:d7:30:85:0f:b5:07:af:98:56:fd:b4:dd:fc:e1: 4e:33:eb:47:0c:8c:3f:51:5d:75:a3:8e:62:bf:e2:0c:8c:9c: e0:47:78:3f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0VCOTExMC8GA1UEBRMoM0NDNzc5MEUyMDM3NjY1RUY0OTYyQjgxREFEMkZEMDdF RDQ2RjhCMjAeFw0yNDA4MDcwOTM3MjNaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YjM0MDUzLWY1ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIPoSLxMwKu9IdUx+exDJGV3nbKehiQz7WmonaqPCZiZeqnXDid2oCVGDrOAdY +uAk4iyklKlf/LVZGPTrj747Ygg+7APAY33jsyy5gc99ydUlRG7gkwPU10FfOt23 uEKJcg+ax9cbcTr7sFqHDlAuRMpnqF+5twi5QC6456D/vPcLlxezetOvr89DejWe wHOcblfhTjDglp2wvRwpD9vp+KE1QXTgqVsEvp9Wuz6pbsQCWYmPoBQTJ0EjZ0zM r+NeI32QU2aPc7GPU4lSMjM1q9DfE+YoGEZe8pBlSp3wnDDKYHbv6+VVWm6l1iUK PNfghDo8wVpdPTl1DMnIVnAZAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUPvVe2dKe guyQqDHU3sz4EoB8MaIwHwYDVR0jBBgwFoAUPMd5DiA3Zl70liuB2tL9B+1G+LIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzRUI5LzA1MUM5RTY0NTRB MDExRUY4NkFFNTkyMkM0RjlBRTAyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1M SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE1kNURpQTNabDcwbGl1QjJ0TDlCLTFHLUxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS8wNTFDOUU2NDU0QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9BNjQ0OUNCQTU0 QTAxMUVGQjM1QUVEMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBuGAwDQYJKoZIhvcNAQELBQADggEBAKdB5pT7+ZZ+4vPv Ni9W9dexMlBwh23xzfx0/MEO67MPYVa6XllI8tlJG/4AK7+p82jBTHGtYHSnMycj NK6411T1gfdOHOdWc7/IK/8Tfy7QL1m/8fd7owmc5ioVtlp1Q51HZlJz8Zmsf6L3 fEzPpP213WGCV/yCbFbd9CyeinVh9pl6WiAdWtxWZk10cNVMXaIM8wmRzeGMyyqE V+E2Sc/O6TBEYI0zZ2ApxmkiCAy+kgOIISKhTxC60E9WswUL27u2TWXcYCyVnj/C 9AGULWZ+6FwpE1jpGyc2xnnXMIUPtQevmFb9tN384U4z60cMjD9RXXWjjmK/4gyM nOBHeD8= -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:06 2024 by rpki-client on console-fra.rpki-client.org