$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/34D73F3E230C11EB825ED82EC4F9AE02.roa File: 34D73F3E230C11EB825ED82EC4F9AE02.roa (raw, json) Hash identifier: BfI++zL7rX8hbCo8B0hIfCfWtfcAlWLoZxVH5oImA/8= Subject key identifier: 45:51:99:E2:17:22:3F:7E:81:78:99:9B:50:0F:8A:B7:DE:54:F3:A8 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2637 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/34D73F3E230C11EB825ED82EC4F9AE02.roa Signing time: Sun 06 Aug 2023 16:13:04 +0000 ROA not before: Sun 06 Aug 2023 16:13:04 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 141380 IP address blocks: 2402:9e80:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9783 (0x2637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 6 16:13:04 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cfc690-49c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:fd:f0:7d:b5:83:a6:e4:37:e2:5d:77:96: 17:55:92:78:f9:41:18:a7:0f:88:07:8b:29:8e:5a: 96:e3:64:a5:19:5d:3f:39:13:42:23:94:35:3f:5c: df:dc:8b:bc:71:03:b1:e8:c2:eb:03:c2:97:92:4f: 0c:9b:cb:2e:8a:3a:ac:14:12:ed:2b:5e:14:7d:9e: e7:53:af:26:b6:c5:bd:60:8d:36:43:61:a5:d0:5c: 29:3c:bf:47:b5:97:63:db:5b:92:b7:9b:9b:fd:62: 9b:d7:a8:0b:8b:aa:47:00:4c:38:91:7b:25:f5:2f: ef:34:e5:f7:77:2f:8a:b0:7b:dc:56:56:cb:d7:45: cb:d0:7c:3e:3b:bc:04:33:03:af:cc:d7:cd:22:3d: 4a:ab:6a:72:60:08:5b:f1:ba:b4:cc:30:ae:47:ae: 92:eb:67:c6:a1:27:43:b7:d9:a9:0d:03:1b:fa:f5: ea:9b:75:40:6e:38:e0:1d:21:1a:b3:a4:e0:bc:69: 92:9a:5d:de:3d:b0:5f:5a:83:27:35:d6:a9:20:fc: f0:cb:15:37:46:a9:12:99:e4:2d:31:29:71:ae:58: c5:dc:b2:d7:0e:bf:81:f5:ad:92:24:d3:5a:36:20: d3:c6:4b:5c:ef:7b:77:b9:55:12:15:d5:65:df:2d: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:51:99:E2:17:22:3F:7E:81:78:99:9B:50:0F:8A:B7:DE:54:F3:A8 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/34D73F3E230C11EB825ED82EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:57::/48 Signature Algorithm: sha256WithRSAEncryption c8:77:26:b3:5b:ea:85:3b:92:20:b5:b5:c5:9f:d4:f2:e5:e9: 40:40:bd:53:01:f9:65:0c:42:d5:d0:50:cd:d1:b7:2b:97:8a: 2c:55:12:6d:02:87:9b:58:46:21:53:fa:0c:c9:22:fa:13:86: 1b:c4:74:e0:b9:90:27:8d:60:c1:4b:6e:bb:21:f6:ea:3b:2e: bc:36:a9:0e:bf:ab:7f:bd:1c:d1:6e:ab:eb:f6:02:88:f8:c4: e7:4c:58:53:4e:d9:07:a0:eb:0d:ab:90:12:1c:c5:bb:ca:f2: d1:7c:33:85:c4:8b:7d:77:b5:c5:25:f8:89:be:90:c4:ba:e9: 68:2a:a7:73:54:7e:56:86:e4:43:4c:8b:99:04:0c:8b:8c:d7: 35:cf:f8:0e:4c:6f:3f:49:9a:fe:5d:a3:58:3e:c6:50:0d:17: e7:1f:cd:a9:71:95:d8:d8:77:b4:f2:a7:92:93:58:61:af:03: ce:01:6c:f4:9c:14:61:30:c2:d4:e6:ce:94:36:21:59:3d:17: 75:83:51:9b:19:aa:fa:06:cd:82:1c:d6:0d:91:04:c4:08:b3: 2f:63:17:9c:fe:95:d2:53:97:f4:77:0f:c2:d3:e3:f8:f3:54: 2d:0c:b1:94:13:a4:53:30:05:d8:f8:8f:5d:49:2e:ff:d3:b1: 1e:57:7e:36 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjMwODA2MTYxMzA0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNmYzY5MC00OWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/n98H21g6bkN+Jdd5YXVZJ4+UEYpw+IB4spjlqW42SlGV0/ORNCI5Q1P1zf 3Iu8cQOx6MLrA8KXkk8Mm8suijqsFBLtK14UfZ7nU68mtsW9YI02Q2Gl0FwpPL9H tZdj21uSt5ub/WKb16gLi6pHAEw4kXsl9S/vNOX3dy+KsHvcVlbL10XL0Hw+O7wE MwOvzNfNIj1Kq2pyYAhb8bq0zDCuR66S62fGoSdDt9mpDQMb+vXqm3VAbjjgHSEa s6TgvGmSml3ePbBfWoMnNdapIPzwyxU3RqkSmeQtMSlxrljF3LLXDr+B9a2SJNNa NiDTxktc73t3uVUSFdVl3y036wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEVRmeIX Ij9+gXiZm1APirfeVPOoMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMzRENzNGM0Uy MzBDMTFFQjgyNUVEODJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AAFcwDQYJKoZIhvcNAQELBQADggEBAMh3JrNb6oU7 kiC1tcWf1PLl6UBAvVMB+WUMQtXQUM3RtyuXiixVEm0Ch5tYRiFT+gzJIvoThhvE dOC5kCeNYMFLbrsh9uo7Lrw2qQ6/q3+9HNFuq+v2Aoj4xOdMWFNO2Qeg6w2rkBIc xbvK8tF8M4XEi313tcUl+Im+kMS66Wgqp3NUflaG5ENMi5kEDIuM1zXP+A5Mbz9J mv5do1g+xlANF+cfzalxldjYd7Typ5KTWGGvA84BbPScFGEwwtTmzpQ2IVk9F3WD UZsZqvoGzYIc1g2RBMQIsy9jF5z+ldJTl/R3D8LT4/jzVC0MsZQTpFMwBdj4j11J Lv/TsR5XfjY= -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org