$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3D34A750A88111ED80831318C4F9AE02.roa File: 3D34A750A88111ED80831318C4F9AE02.roa (raw, json) Hash identifier: GXf50bZcG1n6p3Us5c1/OEfGfKM9bn6FVedygnnny50= Subject key identifier: 07:B5:3D:A1:9C:FC:0D:FD:C4:5E:FA:EA:C5:C8:8F:D1:38:45:16:61 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 0143 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3D34A750A88111ED80831318C4F9AE02.roa Signing time: Thu 17 Aug 2023 03:43:42 +0000 ROA not before: Thu 17 Aug 2023 03:43:42 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 60445 IP address blocks: 2400:9ce0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 05:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Aug 17 03:43:42 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64dd976d-46ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:f7:7c:fc:63:fa:86:bc:b9:eb:f0:9f:2b: 2b:08:01:74:26:04:f7:74:16:b4:36:13:e9:ac:68: 3c:df:56:86:9e:58:55:e9:87:6a:4d:d0:1a:07:d6: fa:50:40:7f:8a:5d:a9:b5:49:8b:ad:92:6c:46:9b: b5:33:a2:00:96:05:de:8a:6b:9f:d4:aa:fa:f3:72: fe:bc:02:c6:fd:78:a0:23:c3:e5:1f:9c:bb:44:cb: 21:09:6c:d8:76:2d:5f:78:5d:eb:32:77:2a:2d:66: 7e:21:08:b3:a2:91:d8:36:69:a1:40:4b:95:20:5d: f4:04:79:a9:f6:8a:ff:62:a9:08:03:a7:f4:7b:58: 33:f7:5a:5d:cc:79:09:6b:b7:a5:80:58:65:48:a6: b7:f1:c3:77:1a:9d:7f:74:d7:dc:dd:a7:7f:f5:b8: 9f:ae:7e:c4:25:85:3e:91:c8:f2:ea:55:25:2c:8b: 8a:86:51:e9:b5:aa:58:2c:95:7e:28:22:f9:cb:69: 12:30:cb:3d:02:20:28:1f:ea:18:39:60:ce:7e:80: f0:12:f2:fb:d1:1f:d8:09:fb:aa:04:ab:4f:87:aa: ce:b3:fc:24:57:49:98:d0:79:bf:5d:88:41:6b:b8: 24:37:92:c4:0f:b6:1c:6c:12:66:07:ce:d7:4c:05: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B5:3D:A1:9C:FC:0D:FD:C4:5E:FA:EA:C5:C8:8F:D1:38:45:16:61 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3D34A750A88111ED80831318C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:9ce0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 35:00:49:ae:ec:42:fd:74:da:a6:f1:5e:9f:b7:35:13:f6:3b: a9:9a:2d:5f:55:5d:a2:a2:29:bc:5b:19:86:ff:69:9d:2c:5f: 6a:28:da:df:82:2e:00:dc:7f:c5:6d:65:69:17:4b:c0:10:16: 33:c0:35:6f:24:32:78:ac:44:de:5c:b8:64:80:ab:9b:d9:b9: bf:8a:6b:a5:50:e9:47:1d:5f:37:03:58:08:32:e5:67:bc:bb: 26:29:98:ff:a8:cb:e9:a5:b2:e3:41:f8:83:1b:68:74:98:ed: 02:47:7c:dd:9c:84:0f:9a:da:3d:6b:1a:06:b7:53:48:01:94: 83:c4:f5:50:87:14:56:5b:34:d7:73:a2:2e:f7:82:c0:23:0d: 8f:36:9f:ab:b0:8b:0d:1d:d1:ba:6c:b1:83:4c:2a:70:5a:88: 69:c0:11:57:f1:d6:76:ec:a0:c8:d2:38:82:29:0b:f4:f9:0d: 19:43:76:a3:87:dd:6e:51:45:e3:ad:36:5e:22:21:e2:42:86: a0:bd:b6:da:a5:ed:86:21:60:57:d3:94:8e:3f:01:2e:15:38: ca:42:cb:e0:7b:56:55:03:63:59:76:fa:5d:4b:8a:d1:5e:23: 0b:0e:00:d2:44:0d:cf:73:f0:78:81:40:b9:61:73:a7:75:e9: da:3c:8f:67 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjMwODE3MDM0MzQyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkOTc2ZC00NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorz3fPxj+oa8uevwnysrCAF0JgT3dBa0NhPprGg831aGnlhV6YdqTdAaB9b6 UEB/il2ptUmLrZJsRpu1M6IAlgXeimuf1Kr683L+vALG/XigI8PlH5y7RMshCWzY di1feF3rMncqLWZ+IQizopHYNmmhQEuVIF30BHmp9or/YqkIA6f0e1gz91pdzHkJ a7elgFhlSKa38cN3Gp1/dNfc3ad/9bifrn7EJYU+kcjy6lUlLIuKhlHptapYLJV+ KCL5y2kSMMs9AiAoH+oYOWDOfoDwEvL70R/YCfuqBKtPh6rOs/wkV0mY0Hm/XYhB a7gkN5LED7YcbBJmB87XTAUzdwIDAQABo4IClzCCApMwHQYDVR0OBBYEFAe1PaGc /A39xF766sXIj9E4RRZhMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JBQzUvNDcwQTYyMDQxNTMwMTFFREJBQTNEMDI3QzRGOUFFMDIvM0QzNEE3NTBB ODgxMTFFRDgwODMxMzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgQkAJzgQDANBgkqhkiG9w0BAQsFAAOCAQEANQBJruxC/XTa pvFen7c1E/Y7qZotX1VdoqIpvFsZhv9pnSxfaija34IuANx/xW1laRdLwBAWM8A1 byQyeKxE3ly4ZICrm9m5v4prpVDpRx1fNwNYCDLlZ7y7JimY/6jL6aWy40H4gxto dJjtAkd83ZyED5raPWsaBrdTSAGUg8T1UIcUVls013OiLveCwCMNjzafq7CLDR3R umyxg0wqcFqIacARV/HWduygyNI4gikL9PkNGUN2o4fdblFF4602XiIh4kKGoL22 2qXthiFgV9OUjj8BLhU4ykLL4HtWVQNjWXb6XUuK0V4jCw4A0kQNz3PweIFAuWFz p3Xp2jyPZw== -----END CERTIFICATE-----Generated at Wed May 29 06:12:16 2024 by rpki-client on console-ams.rpki-client.org