$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/A647525E853B11EFB513D149C4F9AE02.roa File: A647525E853B11EFB513D149C4F9AE02.roa (raw, json) Hash identifier: NVZ/4pC5x+KRkn1xpv0XuIrsdCyF6l6g38IM7lDAhYA= Subject key identifier: 96:24:65:18:C2:BD:59:C9:F1:93:A6:B3:4E:58:D8:91:1B:02:EE:72 Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 03 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/A647525E853B11EFB513D149C4F9AE02.roa Signing time: Tue 08 Oct 2024 06:07:51 +0000 ROA not before: Tue 08 Oct 2024 06:07:51 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 150154 IP address blocks: 2001:df4:5e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Oct 8 06:07:51 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6704cc37-4369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ee:f5:07:7f:45:b4:26:c4:ed:13:28:d2:d2: 98:39:7d:f1:ae:38:87:58:74:13:27:54:18:da:cd: 5c:2e:7b:6b:44:63:ef:be:02:e2:50:72:7e:5f:d2: bb:e1:e4:1d:ae:25:33:52:25:23:bb:69:1d:23:50: 2f:f1:f4:8f:77:27:04:b3:0b:1e:0d:65:5d:90:f0: fa:2a:5c:42:f0:7f:cd:3c:de:2b:85:fe:f8:c9:a4: 6f:96:0d:04:f1:db:f6:7d:b5:cd:84:54:44:60:a2: 05:6f:a5:ee:21:07:eb:53:85:59:86:5f:1c:79:8e: 02:08:dc:79:e2:ba:67:22:ca:9f:d4:3b:71:2a:2a: 54:c6:54:28:2a:0a:a5:59:59:7e:04:3b:3d:e7:0a: c2:9a:fe:71:e1:65:5e:cc:6b:96:54:41:1f:e0:2d: 7d:c1:45:8f:1a:42:e9:e3:dc:33:60:be:7d:ab:ca: e4:1e:46:85:c8:78:4d:11:8d:2a:ed:fc:64:4a:f0: 42:81:e7:df:24:62:f1:5e:8e:62:79:2d:7a:92:bd: d2:82:8e:91:b0:85:db:8a:ba:74:7e:55:29:89:65: db:70:0c:f6:67:52:9d:bc:2c:bc:0c:7c:fd:d1:c7: c0:0f:4e:9c:52:4a:7c:9b:9d:e0:92:cb:a3:8c:9f: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:24:65:18:C2:BD:59:C9:F1:93:A6:B3:4E:58:D8:91:1B:02:EE:72 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/A647525E853B11EFB513D149C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:5e40::/48 Signature Algorithm: sha256WithRSAEncryption 5f:ac:0f:21:9d:22:c9:d4:65:09:e8:4f:11:4a:d1:2c:fe:50: 70:1c:39:ab:d2:df:bc:36:9a:75:e2:39:55:4a:9c:a7:da:2d: 7e:20:b6:f1:b8:c9:d8:f0:61:ae:25:94:eb:2b:b1:c6:64:a7: ce:9b:b9:2e:de:bf:34:85:45:f5:47:d5:43:ce:31:2a:57:eb: a6:52:22:0b:5f:5d:21:06:87:63:a5:22:e5:37:d5:b0:ee:c9: 55:be:a4:59:e8:8c:91:12:0f:d3:99:6d:49:e1:01:42:5c:95: a4:b6:fd:3c:3e:6f:b6:f6:7e:8d:71:ad:68:b8:c2:34:79:a5: 3c:7d:a1:a2:0c:d5:a9:8a:3e:55:21:2d:5a:7f:b9:17:14:aa: 3f:d9:41:aa:66:aa:64:7d:23:18:48:15:5b:1c:04:e4:87:ca: 2f:1d:fd:8b:8f:08:e9:e1:97:31:46:06:15:31:9d:26:d0:22: 9a:fb:e4:23:eb:d7:5d:13:a5:20:a6:04:03:c3:fa:01:7f:01: e1:97:22:ad:45:06:5d:2c:09:7e:fa:01:2e:68:61:2d:e5:e8: 00:75:e7:1e:7b:8e:9e:7b:66:cc:aa:67:9d:f3:6e:90:5b:99: a8:35:ed:54:33:3a:07:3c:44:92:d5:d6:0e:2e:df:6c:90:95: a3:9c:3f:98 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEVFRDExMC8GA1UEBRMoRURGRTcwNkM5NDlCNUVDRjFEQkJFNDYwREJEMDRFRkU3 QzFFMTI4QjAeFw0yNDEwMDgwNjA3NTFaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MDRjYzM3LTQzNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY7vUHf0W0JsTtEyjS0pg5ffGuOIdYdBMnVBjazVwue2tEY+++AuJQcn5f0rvh 5B2uJTNSJSO7aR0jUC/x9I93JwSzCx4NZV2Q8PoqXELwf8083iuF/vjJpG+WDQTx 2/Z9tc2EVERgogVvpe4hB+tThVmGXxx5jgII3Hniumciyp/UO3EqKlTGVCgqCqVZ WX4EOz3nCsKa/nHhZV7Ma5ZUQR/gLX3BRY8aQunj3DNgvn2ryuQeRoXIeE0RjSrt /GRK8EKB598kYvFejmJ5LXqSvdKCjpGwhduKunR+VSmJZdtwDPZnUp28LLwMfP3R x8APTpxSSnybneCSy6OMn0vtAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUliRlGMK9 Wcnxk6azTljYkRsC7nIwHwYDVR0jBBgwFoAU7f5wbJSbXs8du+Rg29BO/nweEosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRUVELzNGRjM5NDBFODUz QjExRUZBMzA3MjM0OUM0RjlBRTAyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2Y1d2JKU2JYczhkdS1SZzI5Qk9fbndlRW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi9BNjQ3NTI1RTg1 M0IxMUVGQjUxM0QxNDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfReQDANBgkqhkiG9w0BAQsFAAOCAQEAX6wPIZ0iydRl CehPEUrRLP5QcBw5q9LfvDaadeI5VUqcp9otfiC28bjJ2PBhriWU6yuxxmSnzpu5 Lt6/NIVF9UfVQ84xKlfrplIiC19dIQaHY6Ui5TfVsO7JVb6kWeiMkRIP05ltSeEB QlyVpLb9PD5vtvZ+jXGtaLjCNHmlPH2hogzVqYo+VSEtWn+5FxSqP9lBqmaqZH0j GEgVWxwE5IfKLx39i48I6eGXMUYGFTGdJtAimvvkI+vXXROlIKYEA8P6AX8B4Zci rUUGXSwJfvoBLmhhLeXoAHXnHnuOnntmzKpnnfNukFuZqDXtVDM6BzxEktXWDi7f bJCVo5w/mA== -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org