$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa File: 339E038C223B11EF8750653DC4F9AE02.roa (raw, json) Hash identifier: VZ310XHqz7E6kV4iYMzKDA4mHeyDyg0Ah9OXuNqLvJc= Subject key identifier: D9:CA:9E:2F:A7:CD:6F:FD:60:42:8F:B0:41:4C:C5:62:AF:78:9C:4B Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0947 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa Signing time: Tue 04 Jun 2024 06:25:14 +0000 ROA not before: Tue 04 Jun 2024 06:25:14 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134995 IP address blocks: 2402:6640::/32 maxlen: 32 2402:6640:5::/48 maxlen: 48 2402:6640:10::/48 maxlen: 48 2402:6640:11::/48 maxlen: 48 2402:6640:17::/48 maxlen: 48 2402:6640:18::/48 maxlen: 48 2402:6640:19::/48 maxlen: 48 2402:6640:20::/48 maxlen: 48 2402:6640:21::/48 maxlen: 48 2402:6640:22::/48 maxlen: 48 2402:6640:23::/48 maxlen: 48 2402:6640:24::/48 maxlen: 48 2402:6640:25::/48 maxlen: 48 2402:6640:26::/48 maxlen: 48 2402:6640:30::/48 maxlen: 48 2402:6640:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Jun 4 06:25:14 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=665eb349-8bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:c3:a1:b0:20:03:5b:1d:4f:ba:85:0e:73: 47:ac:ef:c3:1e:be:fa:c5:69:c0:37:4a:6e:0e:d2: 01:7c:a1:d4:dd:d5:5f:75:10:4b:65:94:ab:dd:34: 7b:77:9d:52:84:52:60:cf:37:e1:17:be:52:84:69: 2d:c0:49:68:64:64:cf:e0:50:e2:8b:06:3a:52:b4: 23:33:bc:b4:89:93:ec:2b:5a:1e:7a:02:f8:bb:85: 06:7a:d9:07:13:d0:3c:4e:a4:00:53:ed:36:de:db: 19:a5:92:04:2f:1e:e3:a4:6f:66:a2:31:35:06:b2: 0b:35:88:dc:d3:4a:e0:e5:45:b6:3e:7d:7b:45:47: 68:fa:73:a4:21:70:eb:1f:a5:56:47:45:35:c7:bf: 15:41:9c:cd:fb:e4:d8:d5:a1:10:37:a2:8d:0a:d7: ba:fc:bf:f2:0a:c4:dd:40:f2:60:64:f8:28:3a:19: 77:5b:8c:71:00:40:15:34:8f:1c:a2:b4:30:79:8e: 82:58:42:72:89:42:a9:57:93:bd:81:42:a4:ae:1f: 60:f9:3f:88:ae:09:b5:66:34:81:7f:fa:ca:f8:75: 92:3e:ec:08:d5:24:cb:0a:91:4f:4f:74:41:e9:34: da:6d:30:3b:9d:fe:17:14:4a:32:24:8f:27:0f:2f: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CA:9E:2F:A7:CD:6F:FD:60:42:8F:B0:41:4C:C5:62:AF:78:9C:4B X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:6640::/32 Signature Algorithm: sha256WithRSAEncryption 18:34:a3:35:25:84:04:13:6c:db:3f:65:1b:38:d1:26:47:c8: 55:74:e2:1f:d1:0f:b7:4f:ec:1e:ae:c3:90:15:79:98:bc:5f: 0d:04:24:0e:c8:c9:65:27:b1:e2:bb:9d:2b:f9:e3:fb:c4:7d: f2:ff:5d:8f:32:64:34:32:98:ea:ec:e6:92:4b:f1:10:9f:47: 3d:00:ad:af:10:4e:7d:7f:b7:18:20:46:a4:7b:65:5f:ff:fb: d0:9c:35:9a:2e:3a:aa:47:66:a7:3d:31:55:7f:10:e2:cc:9e: 87:95:aa:b6:24:f7:39:d9:64:f4:34:12:57:3c:a4:74:4d:3e: 27:ca:d0:f1:b1:e4:b0:df:6b:ef:01:8d:a2:0a:8c:f6:a7:17: f6:05:27:eb:d8:92:0f:6e:08:7d:0c:99:5d:eb:e2:b3:73:ac: c2:b5:69:59:02:2d:e4:d4:bb:f4:08:d3:40:a2:2a:d1:d5:31: 89:78:af:6e:bd:17:ec:3b:83:db:09:60:37:df:3b:14:c4:1a: e6:44:79:28:bb:6c:2c:97:55:93:74:ae:b0:a1:d1:c4:2d:9b: 53:87:e4:92:f1:57:6b:3a:d4:05:9c:87:ca:c4:22:dd:b1:1f: a8:ba:c9:a7:c7:5f:1d:6f:4c:56:7f:92:49:36:c1:11:ff:ba: 09:e2:c5:4f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjQwNjA0MDYyNTE0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVlYjM0OS04YmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lbDobAgA1sdT7qFDnNHrO/DHr76xWnAN0puDtIBfKHU3dVfdRBLZZSr3TR7 d51ShFJgzzfhF75ShGktwEloZGTP4FDiiwY6UrQjM7y0iZPsK1oeegL4u4UGetkH E9A8TqQAU+023tsZpZIELx7jpG9mojE1BrILNYjc00rg5UW2Pn17RUdo+nOkIXDr H6VWR0U1x78VQZzN++TY1aEQN6KNCte6/L/yCsTdQPJgZPgoOhl3W4xxAEAVNI8c orQweY6CWEJyiUKpV5O9gUKkrh9g+T+Irgm1ZjSBf/rK+HWSPuwI1STLCpFPT3RB 6TTabTA7nf4XFEoyJI8nDy9KcQIDAQABo4ICljCCApIwHQYDVR0OBBYEFNnKni+n zW/9YEKPsEFMxWKveJxLMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdGMEMvMEE1OEExOUE3MEFCMTFFOTgzMTdBNTdCQzRGOUFFMDIvMzM5RTAzOEMy MjNCMTFFRjg3NTA2NTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAmZAMA0GCSqGSIb3DQEBCwUAA4IBAQAYNKM1JYQEE2zb P2UbONEmR8hVdOIf0Q+3T+wersOQFXmYvF8NBCQOyMllJ7Hiu50r+eP7xH3y/12P MmQ0Mpjq7OaSS/EQn0c9AK2vEE59f7cYIEake2Vf//vQnDWaLjqqR2anPTFVfxDi zJ6Hlaq2JPc52WT0NBJXPKR0TT4nytDxseSw32vvAY2iCoz2pxf2BSfr2JIPbgh9 DJld6+Kzc6zCtWlZAi3k1Lv0CNNAoirR1TGJeK9uvRfsO4PbCWA33zsUxBrmRHko u2wsl1WTdK6wodHELZtTh+SS8VdrOtQFnIfKxCLdsR+ousmnx18db0xWf5JJNsER /7oJ4sVP -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org