$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/2E2847223DB311EE9375493EC4F9AE02.roa File: 2E2847223DB311EE9375493EC4F9AE02.roa (raw, json) Hash identifier: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M= Subject key identifier: BF:B5:E5:AE:7C:E2:C4:E8:82:27:51:7D:F4:24:14:C4:78:64:36:25 Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 01BF Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/2E2847223DB311EE9375493EC4F9AE02.roa Signing time: Thu 21 Nov 2024 01:55:25 +0000 ROA not before: Thu 21 Nov 2024 01:55:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 137053 IP address blocks: 2001:df1:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: Nov 21 01:55:25 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=673e930d-bbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:09:36:8f:cb:7d:10:15:05:00:8a:8a:53: 8e:9b:3d:60:a4:36:bf:43:9d:1e:dd:33:88:bb:15: 3c:91:ca:c0:5b:12:5c:43:ae:0c:6b:97:65:4f:a8: de:35:6b:fb:8b:52:6b:bb:ed:00:28:50:18:5b:85: 26:35:ba:77:25:08:9b:a2:38:40:6e:92:9b:dd:e7: ff:19:0d:fb:f4:08:a9:36:42:46:59:e2:c2:a5:bf: 4b:ba:89:f0:8b:b4:88:e8:35:5e:1f:c6:6c:dc:df: eb:1c:7b:92:8a:94:12:cc:15:0d:75:e0:b4:dd:34: 85:62:0e:67:0a:2f:e1:ed:bd:d7:3c:04:11:15:b7: 58:79:43:a2:7b:48:3b:b7:cc:0b:2c:58:db:7c:f3: 16:e0:bb:80:f8:81:d3:6e:11:7a:7d:98:78:75:a2: c7:ae:7c:f0:42:6f:e4:46:c9:8c:31:de:3a:1e:85: 37:0d:30:f1:ae:0f:cc:21:9d:1a:a7:1d:1b:d0:6a: 7e:47:5b:99:18:81:26:c9:b9:3c:4b:5b:85:fe:75: 75:57:d0:e6:44:6a:23:df:8a:3c:e2:16:c1:0d:33: 31:b7:e9:18:69:55:db:dc:4b:7f:e0:35:d3:1c:b5: cb:d6:79:08:d4:22:28:cd:3f:6e:ab:fa:1b:2a:a9: 77:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B5:E5:AE:7C:E2:C4:E8:82:27:51:7D:F4:24:14:C4:78:64:36:25 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/2E2847223DB311EE9375493EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:4840::/48 Signature Algorithm: sha256WithRSAEncryption 5e:74:6e:86:37:78:9a:35:14:81:53:e0:d1:c5:8f:b7:2e:6c: c7:b0:09:f1:04:bf:8c:7b:7e:43:46:4b:b7:db:fb:6f:71:13: 8a:d5:2a:4a:aa:9b:07:fe:5d:e3:83:56:9b:e5:f6:b7:ae:39: b8:b7:b8:d9:f8:7e:bb:75:7e:b5:5a:d4:5b:0e:58:49:69:36: 85:9b:ff:9b:47:42:ca:f9:e4:81:5c:44:80:e2:93:33:32:65: 5b:82:f6:15:42:57:15:fa:28:9f:88:b1:b9:9d:e7:24:65:29: d4:d0:25:cb:9d:ae:02:e9:00:1d:59:eb:82:13:84:50:40:e8: bb:10:a7:14:0d:df:4f:3c:13:34:53:09:42:20:35:cd:e8:44: 9e:fb:fc:c3:f3:fa:cb:97:93:ef:2e:f8:32:23:b8:6f:b5:1a: d7:5b:89:62:81:7f:1c:6a:56:b1:ac:c8:a0:a0:a5:f5:0c:75: ba:a5:b9:2a:c6:ad:05:86:8a:f4:03:7b:75:4d:eb:37:f9:04: bd:43:85:be:5f:31:3f:94:2e:04:09:5d:cf:7e:33:bd:3e:20: 00:93:74:f3:de:7e:26:3c:56:6b:75:45:48:ac:40:38:92:8d: 2e:fe:c4:55:a1:48:77:75:39:36:eb:01:01:ee:a7:7d:98:c8: b7:e7:e9:72 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjQxMTIxMDE1NTI1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlOTMwZC1iYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjUJNo/LfRAVBQCKilOOmz1gpDa/Q50e3TOIuxU8kcrAWxJcQ64Ma5dlT6je NWv7i1Jru+0AKFAYW4UmNbp3JQibojhAbpKb3ef/GQ379AipNkJGWeLCpb9Luonw i7SI6DVeH8Zs3N/rHHuSipQSzBUNdeC03TSFYg5nCi/h7b3XPAQRFbdYeUOie0g7 t8wLLFjbfPMW4LuA+IHTbhF6fZh4daLHrnzwQm/kRsmMMd46HoU3DTDxrg/MIZ0a px0b0Gp+R1uZGIEmybk8S1uF/nV1V9DmRGoj34o84hbBDTMxt+kYaVXb3Et/4DXT HLXL1nkI1CIozT9uq/obKql3bQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFL+15a58 4sTogidRffQkFMR4ZDYlMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvMkUyODQ3MjIz REIzMTFFRTkzNzU0OTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xSEAwDQYJKoZIhvcNAQELBQADggEBAF50boY3eJo1 FIFT4NHFj7cubMewCfEEv4x7fkNGS7fb+29xE4rVKkqqmwf+XeODVpvl9reuObi3 uNn4frt1frVa1FsOWElpNoWb/5tHQsr55IFcRIDikzMyZVuC9hVCVxX6KJ+Isbmd 5yRlKdTQJcudrgLpAB1Z64IThFBA6LsQpxQN3088EzRTCUIgNc3oRJ77/MPz+suX k+8u+DIjuG+1GtdbiWKBfxxqVrGsyKCgpfUMdbqluSrGrQWGivQDe3VN6zf5BL1D hb5fMT+ULgQJXc9+M70+IACTdPPefiY8Vmt1RUisQDiSjS7+xFWhSHd1OTbrAQHu p32YyLfn6XI= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org