$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa File: 467B9370E1B311EE9D77BF36C4F9AE02.roa (raw, json) Hash identifier: olYzUk3gwLC0xRa80SA0mb8yJeeTyjxH0wAAm7kRikA= Subject key identifier: 90:60:8F:BC:9A:9E:AA:7E:39:D1:BD:F4:69:9D:CD:4C:EC:1E:87:B6 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 78 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa Signing time: Sun 11 Aug 2024 06:17:22 +0000 ROA not before: Sun 11 Aug 2024 06:17:22 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137897 IP address blocks: 2403:27c0:c03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Aug 11 06:17:22 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b85771-d653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:cc:32:0f:16:ba:3e:ae:6e:20:a8:94:33: 6b:89:49:1c:4f:c4:49:5a:15:0d:56:07:5b:9f:e5: b3:72:86:d3:f7:c5:fc:d1:01:df:97:ca:0c:b6:d0: d7:b1:21:82:55:da:c7:82:ca:36:e9:ce:e5:32:fd: 7a:ee:d1:c7:89:dc:10:21:26:24:ac:27:e7:7f:81: 59:59:27:1b:3e:67:39:cb:50:7e:95:54:90:4a:bf: d0:9e:c5:05:fe:38:21:02:6a:21:cc:38:31:57:12: 78:24:ba:f1:05:fd:af:cb:b5:f7:53:f5:eb:d8:60: 5b:30:f6:d5:7d:17:e0:f6:93:4e:55:c7:4e:4b:e6: b9:93:9e:bb:9f:54:50:80:96:cc:cb:05:c8:f4:72: 81:47:03:10:72:18:f7:ec:6c:a2:5a:66:39:d1:9d: 2a:de:8e:aa:90:26:64:72:46:be:b6:38:14:90:b0: 84:cd:a2:4c:9d:7e:8b:ae:d7:8a:6e:f3:d4:4e:ec: 29:d5:ac:00:c2:75:03:5a:7f:7b:be:b4:f7:21:78: d7:c2:08:12:da:cd:30:4d:f9:ee:a8:15:92:06:85: 23:53:9d:ac:90:20:9f:da:d5:ae:b3:3e:df:3c:df: 14:dc:00:e7:e2:98:fd:ea:a6:1e:d1:25:e7:58:a5: 58:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:60:8F:BC:9A:9E:AA:7E:39:D1:BD:F4:69:9D:CD:4C:EC:1E:87:B6 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:27c0:c03::/48 Signature Algorithm: sha256WithRSAEncryption c8:40:e6:3b:1d:6a:bc:e1:b1:03:57:cc:07:bd:c0:d3:76:e7: 6b:19:32:57:f7:d7:ae:6c:36:5c:66:6d:47:7e:fa:4e:87:ba: 41:65:9e:b9:67:eb:75:8d:42:6c:6b:18:a5:c0:67:9e:56:4e: 5e:53:f5:46:29:80:ff:39:ad:3c:77:e1:7c:0b:ba:f9:aa:5e: 8e:f7:86:67:ce:fd:a0:c0:c5:51:d9:3f:51:39:43:b1:d2:87: f6:57:b2:b1:06:9c:84:03:f9:56:ab:d2:47:32:7d:d4:33:e1: 38:d6:1c:d4:75:55:77:fc:67:99:f1:de:1d:a2:69:02:11:83: 97:8b:40:73:c6:09:b6:b1:eb:d8:c1:61:6d:30:58:c1:5b:ff: cb:21:31:96:35:4a:54:95:61:1e:5e:fe:0e:b0:5b:6a:a3:98: 44:df:27:08:02:fd:3d:ed:a3:83:2a:31:b7:ee:74:2d:33:07: 76:fd:70:e0:85:75:f0:96:70:86:6e:5b:98:d7:1f:67:48:6e: 88:7f:d8:2d:92:8a:31:07:cb:ae:4e:f3:db:d3:eb:d5:61:67: 62:6f:cc:5f:26:3c:f2:fe:87:55:99:ef:c3:54:d4:5b:31:89: a4:ed:3b:95:03:e4:56:3c:7a:55:cc:9c:40:4c:c6:c1:54:f7: 65:a3:24:29 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTY2RjExMC8GA1UEBRMoQjIyQzNEMEFCQ0QzOTE5NDg2QTNFNjFFOEQ3ODg5MjM5 MjJCRjZBNTAeFw0yNDA4MTEwNjE3MjJaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2Yjg1NzcxLWQ2NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKLswyDxa6Pq5uIKiUM2uJSRxPxElaFQ1WB1uf5bNyhtP3xfzRAd+Xygy20Nex IYJV2seCyjbpzuUy/Xru0ceJ3BAhJiSsJ+d/gVlZJxs+ZznLUH6VVJBKv9CexQX+ OCECaiHMODFXEngkuvEF/a/LtfdT9evYYFsw9tV9F+D2k05Vx05L5rmTnrufVFCA lszLBcj0coFHAxByGPfsbKJaZjnRnSrejqqQJmRyRr62OBSQsITNokydfouu14pu 89RO7CnVrADCdQNaf3u+tPcheNfCCBLazTBN+e6oFZIGhSNTnayQIJ/a1a6zPt88 3xTcAOfimP3qph7RJedYpVi5AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUkGCPvJqe qn450b30aZ3NTOweh7YwHwYDVR0jBBgwFoAUsiw9CrzTkZSGo+YejXiJI5Ir9qUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjZGLzhGQ0M5RDI4QzZG OTExRUU5N0U2RkIxREM0RjlBRTAyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2l3OUNyelRrWlNHby1ZZWpYaUpJNUlyOXFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi80NjdCOTM3MEUx QjMxMUVFOUQ3N0JGMzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQDJ8AMAzANBgkqhkiG9w0BAQsFAAOCAQEAyEDmOx1qvOGx A1fMB73A03bnaxkyV/fXrmw2XGZtR376Toe6QWWeuWfrdY1CbGsYpcBnnlZOXlP1 RimA/zmtPHfhfAu6+apejveGZ879oMDFUdk/UTlDsdKH9leysQachAP5VqvSRzJ9 1DPhONYc1HVVd/xnmfHeHaJpAhGDl4tAc8YJtrHr2MFhbTBYwVv/yyExljVKVJVh Hl7+DrBbaqOYRN8nCAL9Pe2jgyoxt+50LTMHdv1w4IV18JZwhm5bmNcfZ0huiH/Y LZKKMQfLrk7z29Pr1WFnYm/MXyY88v6HVZnvw1TUWzGJpO07lQPkVjx6VcycQEzG wVT3ZaMkKQ== -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:07 2024 by rpki-client on console-ams.rpki-client.org