$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/30A1B4D0C67E11EEB4008058C4F9AE02.roa File: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (raw, json) Hash identifier: Y33xkPd/NcEVAXjbSrIl1ngKcwYgoXKhM/ZonEg3diE= Subject key identifier: FA:A0:96:E0:A9:55:31:19:36:8C:39:79:6F:C3:03:08:69:64:4D:2B Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 02 Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/30A1B4D0C67E11EEB4008058C4F9AE02.roa Signing time: Thu 08 Feb 2024 12:32:58 +0000 ROA not before: Thu 08 Feb 2024 12:32:58 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 152456 IP address blocks: 2001:df3:7040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Feb 8 12:32:58 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65c4c9fa-6f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8d:be:65:54:3a:a3:ba:22:19:3a:f2:89:8b: 69:90:a3:c4:79:5a:d3:8e:a1:34:cb:29:0e:41:ca: e5:38:5c:1e:36:5d:90:67:34:2f:67:c0:b7:29:ed: 4d:d5:08:38:b1:8b:81:d0:06:72:78:e9:3e:6b:8e: 9e:78:48:fd:76:04:f1:02:fb:9f:31:e4:b5:48:a7: 43:5b:c1:ac:c1:a6:c7:11:2f:d0:86:ad:be:1d:03: 47:f3:67:59:00:d3:b9:bc:c9:41:d1:73:4f:cb:d9: 3b:04:6f:e1:44:8e:c3:1e:d6:77:f8:ba:12:25:9d: e7:4a:61:36:68:a5:14:c9:bf:de:af:35:0f:05:a6: 74:ab:86:49:3b:14:17:8d:92:17:8b:59:e1:98:b1: b2:62:52:b9:97:ee:21:e8:79:3f:15:eb:36:32:4c: d0:7d:50:a6:51:40:b2:0b:bf:6d:cb:b2:51:ef:2b: b2:46:bc:c3:fd:4e:a9:89:28:f3:e1:54:ff:2c:cf: a7:9c:58:3d:0e:b9:8e:43:75:a0:a0:ff:e8:4b:c2: af:16:8f:75:c6:73:1d:72:ad:7d:aa:02:d7:4f:20: 77:4b:c3:63:21:41:d5:05:a0:a9:4c:36:41:8c:8c: 07:5d:39:75:09:65:0b:34:18:7f:6b:af:d7:a3:f3: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A0:96:E0:A9:55:31:19:36:8C:39:79:6F:C3:03:08:69:64:4D:2B X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/30A1B4D0C67E11EEB4008058C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:7040::/48 Signature Algorithm: sha256WithRSAEncryption 43:fc:9e:7e:82:f6:47:1e:76:e2:a0:79:b5:fe:c8:40:69:2a: af:f2:e7:43:81:b0:f9:04:ef:0d:02:cd:dd:da:a6:b0:ec:b4: 30:d5:e4:23:c7:e5:d4:5d:26:c9:79:a2:a1:1c:37:0d:dd:b5: 12:86:89:e6:aa:40:63:7b:ca:4b:80:53:e1:7c:23:b8:b7:d3: e4:82:e6:cf:a0:13:20:8b:d4:11:47:7d:f8:e8:1d:eb:1a:06: df:72:cc:5b:ae:72:e0:ea:d8:e2:88:ab:bd:8f:b9:ce:f5:3d: 7f:4f:0a:de:11:71:d6:49:ff:0f:d9:27:00:b6:e1:c3:46:b3: 34:f4:15:54:48:b8:34:c5:f9:2f:15:5b:a9:6b:cb:da:c4:53: 78:7a:2c:47:53:2f:f9:97:98:f4:56:02:f6:4e:c1:c4:29:50: d7:ec:9e:20:44:dc:d3:99:34:75:db:35:af:2d:1b:6c:c1:ae: d8:12:50:d7:7c:50:70:80:61:02:c8:38:ec:a6:9c:c0:78:13: 19:d9:a8:7c:b8:3b:ad:ec:0f:99:d4:66:c1:17:3b:7a:12:a6: 4a:e9:86:4a:b3:e6:9e:79:0b:4d:53:af:09:28:6a:2b:61:0d: 3f:e0:50:06:9c:44:f8:a6:4e:21:15:a0:95:d4:01:56:77:94: 4f:f4:98:c2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjRFMTExMC8GA1UEBRMoMUY2MzNGNzJEMUM2NzgxNkMyMDY0QTU2RTUzODNDRDk1 NEREQzBFNTAeFw0yNDAyMDgxMjMyNThaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YzRjOWZhLTZmMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5jb5lVDqjuiIZOvKJi2mQo8R5WtOOoTTLKQ5ByuU4XB42XZBnNC9nwLcp7U3V CDixi4HQBnJ46T5rjp54SP12BPEC+58x5LVIp0NbwazBpscRL9CGrb4dA0fzZ1kA 07m8yUHRc0/L2TsEb+FEjsMe1nf4uhIlnedKYTZopRTJv96vNQ8FpnSrhkk7FBeN kheLWeGYsbJiUrmX7iHoeT8V6zYyTNB9UKZRQLILv23LslHvK7JGvMP9TqmJKPPh VP8sz6ecWD0OuY5DdaCg/+hLwq8Wj3XGcx1yrX2qAtdPIHdLw2MhQdUFoKlMNkGM jAddOXUJZQs0GH9rr9ej86LTAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQU+qCW4KlV MRk2jDl5b8MDCGlkTSswHwYDVR0jBBgwFoAUH2M/ctHGeBbCBkpW5Tg82VTdwOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NEUxLzZCNTg0RDI0QzY3 RDExRUU4NzAyN0IzQUM0RjlBRTAyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdP VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSDJNX2N0SEdlQmJDQmtwVzVUZzgyVlRkd09VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi8zMEExQjREMEM2 N0UxMUVFQjQwMDgwNThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfNwQDANBgkqhkiG9w0BAQsFAAOCAQEAQ/yefoL2Rx52 4qB5tf7IQGkqr/LnQ4Gw+QTvDQLN3dqmsOy0MNXkI8fl1F0myXmioRw3Dd21EoaJ 5qpAY3vKS4BT4XwjuLfT5ILmz6ATIIvUEUd9+Ogd6xoG33LMW65y4OrY4oirvY+5 zvU9f08K3hFx1kn/D9knALbhw0azNPQVVEi4NMX5LxVbqWvL2sRTeHosR1Mv+ZeY 9FYC9k7BxClQ1+yeIETc05k0dds1ry0bbMGu2BJQ13xQcIBhAsg47KacwHgTGdmo fLg7rewPmdRmwRc7ehKmSumGSrPmnnkLTVOvCShqK2ENP+BQBpxE+KZOIRWgldQB VneUT/SYwg== -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:07 2024 by rpki-client on console-ams.rpki-client.org