$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/44B0DD4AFDE611ED880C3C6AC4F9AE02.roa File: 44B0DD4AFDE611ED880C3C6AC4F9AE02.roa (raw, json) Hash identifier: EUrWENHkCtf/6pr7KnyPgjT2NJ7YAUQ15WI2ElDkxGo= Subject key identifier: FE:E6:07:86:E4:90:BC:C9:E7:C3:0D:23:1B:58:C9:03:C6:B5:7D:C7 Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F Certificate serial: 06A7 Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/44B0DD4AFDE611ED880C3C6AC4F9AE02.roa Signing time: Mon 12 Aug 2024 22:41:32 +0000 ROA not before: Mon 12 Aug 2024 22:41:32 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 141047 IP address blocks: 2001:df1:ffc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F Validity Not Before: Aug 12 22:41:32 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ba8f9b-0fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:8e:09:51:86:90:f8:63:e0:85:59:66:cb: 6c:d6:79:5a:7c:7a:7a:e1:65:55:dc:82:4c:d1:40: c1:e8:b5:69:be:00:76:a2:8a:97:29:27:fa:77:4f: 21:40:67:f8:08:4a:82:be:a1:17:46:9f:13:eb:8d: cc:f7:ff:d4:00:49:9b:b8:33:a5:03:f1:65:91:5e: 7a:92:d0:06:21:3f:71:af:46:98:f2:11:d0:b8:9c: 94:d1:a6:5d:2a:7e:72:d7:1c:7d:e8:9a:a0:ad:29: a2:7f:4c:52:a1:a3:38:40:c3:13:24:91:7b:60:9a: c3:cf:cf:58:63:20:83:b5:c1:f4:b8:98:a5:55:0a: e0:95:16:5e:bb:39:4c:9b:86:e6:38:aa:6a:79:f1: 57:5e:7c:cb:d6:1e:36:3a:0b:ab:c4:36:82:f4:49: 6d:e0:04:fc:c8:0a:0d:dd:3f:68:cd:bc:bb:bb:b4: d8:57:6d:11:40:c0:f6:96:57:b4:48:f6:7c:d2:02: 2d:9f:17:21:1e:8f:b9:39:2f:2a:24:24:39:d4:90: 07:f8:d9:65:11:ea:df:69:8f:60:7a:15:40:8f:ef: 25:08:d0:fb:fc:1c:ba:b2:24:83:2c:ca:f6:de:43: 46:67:81:f5:17:8b:51:ce:78:df:28:43:b2:65:db: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E6:07:86:E4:90:BC:C9:E7:C3:0D:23:1B:58:C9:03:C6:B5:7D:C7 X509v3 Authority Key Identifier: keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/44B0DD4AFDE611ED880C3C6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption 73:8b:c1:b7:c4:02:15:58:b5:ba:d0:36:83:c0:10:da:db:b5: 0b:95:8e:f9:3e:16:bb:f7:b1:4e:01:64:34:ba:4b:89:3f:b0: d8:89:66:b8:22:77:a7:a4:d7:b2:20:59:66:a7:01:87:2c:e4: e3:29:64:3f:7e:14:a8:df:f2:9a:54:f6:66:a2:9d:32:b3:01: e4:88:38:a4:9f:d0:00:82:03:40:f4:6b:40:15:b5:a8:55:ed: 6f:16:9b:4f:30:dc:71:72:2e:76:de:71:ea:8c:6f:55:f9:dc: 5c:f2:be:fc:33:f7:ac:9d:bf:0b:3f:4a:db:e2:ec:7f:f1:bb: 21:e2:0a:dc:80:3b:ea:46:65:45:4f:bd:9b:f2:b1:6c:46:83: b6:73:03:3d:b5:f9:73:da:68:c2:a2:58:ed:95:72:c1:ac:14: 9e:46:c1:4d:a9:b0:12:e4:cf:bc:36:78:98:3b:4b:13:46:88: 54:3f:65:da:f2:d5:1d:ba:d1:b1:0e:00:f8:34:7c:76:07:18: eb:ca:43:ca:8f:69:f1:7e:9e:74:ba:31:04:c0:29:d3:62:48: ce:0e:a1:8c:39:49:5d:51:d9:59:80:fd:0f:92:89:f7:24:f7: bf:ac:0c:04:d0:6f:92:58:74:6b:55:fc:86:77:09:e4:34:d3: 39:37:f2:a8 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4NTYxMTAvBgNVBAUTKEU4REE1QkYwMUM3OTQzRjFBRUMyNDg2MTBDNUM0RDFC RTQ0QjcwNEYwHhcNMjQwODEyMjI0MTMyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJhOGY5Yi0wZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/OOCVGGkPhj4IVZZsts1nlafHp64WVV3IJM0UDB6LVpvgB2ooqXKSf6d08h QGf4CEqCvqEXRp8T643M9//UAEmbuDOlA/FlkV56ktAGIT9xr0aY8hHQuJyU0aZd Kn5y1xx96JqgrSmif0xSoaM4QMMTJJF7YJrDz89YYyCDtcH0uJilVQrglRZeuzlM m4bmOKpqefFXXnzL1h42OgurxDaC9Elt4AT8yAoN3T9ozby7u7TYV20RQMD2lle0 SPZ80gItnxchHo+5OS8qJCQ51JAH+NllEerfaY9gehVAj+8lCND7/By6siSDLMr2 3kNGZ4H1F4tRznjfKEOyZduZeQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFP7mB4bk kLzJ58MNIxtYyQPGtX3HMB8GA1UdIwQYMBaAFOjaW/AceUPxrsJIYQxcTRvkS3BP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzg1Ni85MUNDMzE1MjM3 OUYxMUVCQjMzMTYxMzVDNEY5QUUwMi82TnBiOEJ4NVFfR3V3a2hoREZ4TkctUkxj RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOcGI4Qng1UV9HdXdraGhERnhORy1STGNFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc4NTYvOTFDQzMxNTIzNzlGMTFFQkIzMzE2MTM1QzRGOUFFMDIvNDRCMERENEFG REU2MTFFRDg4MEMzQzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3x/8AwDQYJKoZIhvcNAQELBQADggEBAHOLwbfEAhVY tbrQNoPAENrbtQuVjvk+Frv3sU4BZDS6S4k/sNiJZrgid6ek17IgWWanAYcs5OMp ZD9+FKjf8ppU9mainTKzAeSIOKSf0ACCA0D0a0AVtahV7W8Wm08w3HFyLnbeceqM b1X53Fzyvvwz96ydvws/Stvi7H/xuyHiCtyAO+pGZUVPvZvysWxGg7ZzAz21+XPa aMKiWO2VcsGsFJ5GwU2psBLkz7w2eJg7SxNGiFQ/Zdry1R260bEOAPg0fHYHGOvK Q8qPafF+nnS6MQTAKdNiSM4OoYw5SV1R2VmA/Q+Sifck97+sDATQb5JYdGtV/IZ3 CeQ00zk38qg= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org