$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/4664F7042B7411EF9E28ED19C4F9AE02.roa File: 4664F7042B7411EF9E28ED19C4F9AE02.roa (raw, json) Hash identifier: Aa7zYmJq6heh8Y7nRX8mflbiKrA5BuJIy7DgV5gkvRc= Subject key identifier: 81:29:0C:A4:5D:79:81:51:3E:BD:F8:9B:6E:26:57:95:26:0B:D5:35 Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1DC9 Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/4664F7042B7411EF9E28ED19C4F9AE02.roa Signing time: Sun 16 Jun 2024 00:06:27 +0000 ROA not before: Sun 16 Jun 2024 00:06:27 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9297 IP address blocks: 43.248.44.0/22 maxlen: 22 119.252.0.0/19 maxlen: 19 2401:1400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7625 (0x1dc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: Jun 16 00:06:27 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=666e2c83-cd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:1d:d4:b2:6d:c5:b7:bb:5b:94:19:25:5c: ff:94:8b:4d:d3:51:1f:22:ee:8e:3e:f8:06:1b:bb: ee:d5:60:3c:4a:c6:be:ab:38:1e:1a:fc:ee:9d:64: a1:73:ee:78:0a:fb:b2:1d:4a:9e:6e:44:49:39:e3: c8:d9:aa:ca:50:22:cd:bb:d6:65:93:fd:cf:08:a1: 05:a2:c5:37:25:0b:0c:39:b6:da:8c:f0:1d:92:07: 72:36:38:0d:23:fc:c3:f5:35:ce:6f:fe:48:a6:80: 6d:a2:d1:87:1d:a2:2d:2c:32:8c:7b:73:74:b4:18: a2:a2:25:fc:c5:eb:cf:68:9f:2b:e0:4f:bc:e6:c0: 4d:e1:9f:c0:8b:79:1e:44:ee:b9:5f:22:7f:75:47: 66:25:eb:2b:f6:dd:af:d4:0f:c6:90:8c:80:7b:f1: f6:e0:2a:6a:0e:7a:a3:b3:3d:7a:0a:fd:28:70:8a: 8c:f7:79:af:a5:80:b1:1e:96:98:42:38:f4:6e:29: b9:d5:6d:64:8f:99:04:f3:d0:4a:1a:97:65:f3:b3: 05:ee:de:88:bb:8e:70:b7:84:3f:51:e4:a4:4c:d9: 3b:4f:59:70:ca:00:64:ea:df:ca:1a:92:c4:7e:76: 9a:93:53:e6:23:f9:b6:b2:c3:a5:89:84:b2:1d:93: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:29:0C:A4:5D:79:81:51:3E:BD:F8:9B:6E:26:57:95:26:0B:D5:35 X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/4664F7042B7411EF9E28ED19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.44.0/22 119.252.0.0/19 IPv6: 2401:1400::/32 Signature Algorithm: sha256WithRSAEncryption 0b:e0:64:c5:2a:60:af:1f:25:88:3c:b1:a7:f7:af:ad:6e:01: 6f:d9:8d:b4:a1:83:d8:60:4a:18:70:83:5b:2f:29:44:e4:97: 87:fe:a9:b3:84:ad:72:b1:63:e2:36:07:33:5d:74:9d:f9:52: 5f:c7:71:5e:02:d2:a5:5b:3a:db:d5:d6:4f:28:f9:e4:25:9a: 4b:d1:cf:69:3d:38:c0:16:03:f1:5c:fb:7b:ed:26:59:b8:60: 41:a1:34:aa:86:de:9c:c4:5b:f9:94:ae:fe:66:ed:bc:08:b9: 5f:26:0c:87:80:f8:cd:a2:ff:ab:12:40:c4:9e:f7:69:68:67: 9a:30:5a:02:fd:df:74:40:26:66:d7:c1:c0:74:1e:75:4a:33: b6:de:0f:50:6f:17:6e:ee:26:9a:15:3e:42:f3:fa:e5:44:2b: e9:97:bd:35:b0:d2:b1:6c:e9:17:99:70:31:1b:ad:d3:cd:93: 9a:7f:d6:68:74:72:1f:21:c3:d4:ec:0d:0d:4e:f5:b9:a9:e4: 62:f5:52:a0:04:2c:0e:e9:ae:73:25:d4:1c:02:3f:ab:21:d2: 76:7d:01:f7:1b:bb:cf:d3:ea:dd:56:88:15:56:04:dd:b0:41: 4e:6b:47:e9:0c:39:09:58:21:11:6e:9b:7f:5a:3e:ce:21:ba: bc:78:a4:9b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICHckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjQwNjE2MDAwNjI3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjZlMmM4My1jZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4Ed1LJtxbe7W5QZJVz/lItN01EfIu6OPvgGG7vu1WA8Ssa+qzgeGvzunWSh c+54CvuyHUqebkRJOePI2arKUCLNu9Zlk/3PCKEFosU3JQsMObbajPAdkgdyNjgN I/zD9TXOb/5IpoBtotGHHaItLDKMe3N0tBiioiX8xevPaJ8r4E+85sBN4Z/Ai3ke RO65XyJ/dUdmJesr9t2v1A/GkIyAe/H24CpqDnqjsz16Cv0ocIqM93mvpYCxHpaY Qjj0bim51W1kj5kE89BKGpdl87MF7t6Iu45wt4Q/UeSkTNk7T1lwygBk6t/KGpLE fnaak1PmI/m2ssOliYSyHZMGBQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIEpDKRd eYFRPr34m24mV5UmC9U1MB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM3N0QvN0Q0QkZFMDY3NDk5MTFFNkIwMjUyQjg0QzRGOUFFMDIvNDY2NEY3MDQy Qjc0MTFFRjlFMjhFRDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr+CwDBAV3/AAwDQQCAAIwBwMFACQBFAAwDQYJKoZIhvcN AQELBQADggEBAAvgZMUqYK8fJYg8saf3r61uAW/ZjbShg9hgShhwg1svKUTkl4f+ qbOErXKxY+I2BzNddJ35Ul/HcV4C0qVbOtvV1k8o+eQlmkvRz2k9OMAWA/Fc+3vt Jlm4YEGhNKqG3pzEW/mUrv5m7bwIuV8mDIeA+M2i/6sSQMSe92loZ5owWgL933RA JmbXwcB0HnVKM7beD1BvF27uJpoVPkLz+uVEK+mXvTWw0rFs6ReZcDEbrdPNk5p/ 1mh0ch8hw9TsDQ1O9bmp5GL1UqAELA7prnMl1BwCP6sh0nZ9Afcbu8/T6t1WiBVW BN2wQU5rR+kMOQlYIRFum39aPs4hurx4pJs= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org