$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa File: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (raw, json) Hash identifier: iv8nOulwcqxdim1eSXcRBYccKrkLkRNyX1DMR62JmfM= Subject key identifier: E9:47:6B:E4:61:6C:48:BC:5B:4E:37:D0:92:27:28:1E:C7:E5:3E:B8 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2642 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa Signing time: Sun 06 Aug 2023 16:13:15 +0000 ROA not before: Sun 06 Aug 2023 16:13:15 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 20473 IP address blocks: 2402:9e80:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9794 (0x2642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 6 16:13:15 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cfc69a-c455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:f1:d0:30:54:93:d5:85:57:e5:a6:3e:91: 3c:a7:45:53:05:02:1a:cc:95:98:1e:26:ff:d3:e8: 25:f7:69:b4:d3:fb:4f:15:d0:c7:a9:90:71:5e:b5: fd:44:22:ec:46:ad:ad:33:2a:e7:b6:59:15:61:f7: ba:df:7b:34:83:35:df:a4:54:54:1e:d6:f9:f2:50: 12:2c:73:8d:fb:dc:de:06:3f:03:78:48:73:e4:9f: b2:bc:ad:1e:af:d7:90:cd:d1:94:ee:1b:8b:76:95: 91:a8:d3:ed:9c:22:01:11:6f:b4:27:f3:d0:e5:5a: 8a:61:9b:db:03:8e:32:3f:48:1c:aa:09:3b:85:3d: 76:23:aa:86:72:94:16:61:5f:7f:74:e9:17:56:30: a9:e5:43:d6:91:7d:cb:d2:07:f8:4b:00:00:fe:a9: 92:e7:17:91:45:fb:e9:aa:77:eb:07:04:46:6f:84: 8e:11:7f:88:9f:77:8b:14:bd:26:1f:6a:53:62:ef: 41:f5:ea:13:2a:25:e0:e4:6c:43:6c:58:df:c3:b5: 5b:94:34:60:35:0c:19:24:87:94:c9:a3:18:dd:13: c8:f5:40:82:63:95:2c:ad:5e:88:32:80:1c:b6:a0: 1d:72:1f:62:02:bd:9b:82:93:f2:50:36:9d:b9:97: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:47:6B:E4:61:6C:48:BC:5B:4E:37:D0:92:27:28:1E:C7:E5:3E:B8 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:10::/48 Signature Algorithm: sha256WithRSAEncryption 2e:23:ba:f5:0a:15:ac:e3:58:3c:67:ad:62:df:ed:f8:88:60: 42:4a:61:22:5a:65:c0:44:c4:55:28:18:1d:dc:1b:02:24:a8: 09:b6:4b:36:fe:b4:23:98:2e:a1:76:b9:7c:d9:70:e1:25:53: 68:c2:8d:11:2e:a6:10:fe:16:a3:30:3d:c7:d6:9a:92:d5:ed: 6e:24:3c:90:b1:d5:89:08:56:d7:18:ef:12:2f:45:18:a8:94: c4:af:eb:3e:99:f1:e7:e8:af:89:8f:05:b6:e8:b5:8a:a4:2d: e7:82:87:aa:17:ec:93:cc:3c:76:2f:36:71:67:51:5b:19:1f: ed:bf:37:b6:9e:84:ca:0b:f1:75:ee:87:0a:96:82:bf:da:37: 47:bf:b6:a9:35:09:73:0e:fe:7c:5f:41:6e:3c:dc:8a:a4:68: f8:f4:ba:24:5d:15:a6:df:93:b1:2d:6e:80:fd:b2:70:bd:47: ba:23:84:18:7f:3a:1a:64:f7:2e:6e:41:e8:d6:41:a0:f7:d1: 69:8b:40:0e:12:f8:10:08:9d:4c:19:67:3f:87:c9:97:fc:2c: 8a:81:66:82:86:96:4e:75:11:d7:5a:79:c6:e3:ba:fa:29:51: 23:e5:6f:a1:da:6d:3e:73:6f:ea:c6:0e:7e:bf:d4:2a:75:ab: 26:2b:6e:5e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjMwODA2MTYxMzE1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNmYzY5YS1jNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskbx0DBUk9WFV+WmPpE8p0VTBQIazJWYHib/0+gl92m00/tPFdDHqZBxXrX9 RCLsRq2tMyrntlkVYfe633s0gzXfpFRUHtb58lASLHON+9zeBj8DeEhz5J+yvK0e r9eQzdGU7huLdpWRqNPtnCIBEW+0J/PQ5VqKYZvbA44yP0gcqgk7hT12I6qGcpQW YV9/dOkXVjCp5UPWkX3L0gf4SwAA/qmS5xeRRfvpqnfrBwRGb4SOEX+In3eLFL0m H2pTYu9B9eoTKiXg5GxDbFjfw7VblDRgNQwZJIeUyaMY3RPI9UCCY5UsrV6IMoAc tqAdch9iAr2bgpPyUDaduZcIWwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOlHa+Rh bEi8W0430JInKB7H5T64MB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvOURFOThBNzZE OUI1MTFFQkE0RkM1QjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AABAwDQYJKoZIhvcNAQELBQADggEBAC4juvUKFazj WDxnrWLf7fiIYEJKYSJaZcBExFUoGB3cGwIkqAm2Szb+tCOYLqF2uXzZcOElU2jC jREuphD+FqMwPcfWmpLV7W4kPJCx1YkIVtcY7xIvRRiolMSv6z6Z8efor4mPBbbo tYqkLeeCh6oX7JPMPHYvNnFnUVsZH+2/N7aehMoL8XXuhwqWgr/aN0e/tqk1CXMO /nxfQW483IqkaPj0uiRdFabfk7EtboD9snC9R7ojhBh/Ohpk9y5uQejWQaD30WmL QA4S+BAInUwZZz+HyZf8LIqBZoKGlk51EddaecbjuvopUSPlb6HabT5zb+rGDn6/ 1Cp1qyYrbl4= -----END CERTIFICATE-----Generated at Mon May 6 17:42:38 2024 by rpki-client on console-ams.rpki-client.org