$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa File: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (raw, json) Hash identifier: 4uQI4pUXnWzfYHdgbJNZzm+RMbPwp0sMW3SM9UXkSAA= Subject key identifier: 31:4C:0C:B4:B7:88:20:02:4F:27:D6:3D:BB:56:C3:ED:83:5D:B7:23 Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Certificate serial: 3433 Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa Signing time: Sun 02 Jun 2024 16:21:19 +0000 ROA not before: Sun 02 Jun 2024 16:21:19 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 56264 IP address blocks: 2401:9440::/33 maxlen: 33 2401:9440:8000::/33 maxlen: 33 2406:9b00::/33 maxlen: 36 2406:9b00::/48 maxlen: 48 2406:9b00:1::/48 maxlen: 48 2406:9b00:2::/48 maxlen: 48 2406:9b00:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13363 (0x3433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Validity Not Before: Jun 2 16:21:19 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665c9bff-0fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:c1:7c:33:77:be:6b:0d:36:71:fb:15:28: 88:5d:d6:7e:a5:8b:62:37:8a:12:3d:86:b2:76:da: 11:e7:92:00:67:b4:bb:53:39:7a:a6:89:7f:5f:1d: a9:38:8b:b7:6b:73:01:41:60:eb:b4:d6:14:af:1a: 25:38:e4:e1:aa:87:37:c0:5b:46:8b:b2:18:60:da: dd:a9:90:88:00:98:63:85:5b:ed:50:03:2c:0b:d1: 93:06:84:b0:c6:73:0f:68:2e:48:91:e5:fd:af:7e: d9:f4:46:8c:c0:e3:d8:29:ca:2f:75:2d:7a:78:58: e8:aa:dd:95:42:4c:be:ac:6d:92:23:1e:ae:25:30: 60:24:58:60:8b:4b:9f:b0:8b:f2:c6:33:0b:12:75: 07:6b:f1:6d:e3:e4:94:e9:e5:d4:36:58:47:fa:47: c7:92:f6:3c:a2:20:a3:83:ce:23:1b:ab:5d:a0:52: 37:08:86:4d:57:2f:e4:a0:fb:9e:12:65:fd:45:63: d5:ec:ba:47:10:ea:66:48:fd:16:c5:4d:c8:b4:59: 97:41:18:4c:f4:cd:bd:d9:4e:2b:d0:60:82:12:4d: e1:cc:31:4d:04:a2:27:10:98:6e:1b:88:e6:8e:c1: 34:b2:af:3f:1c:ce:b9:f9:f6:34:01:97:72:d0:e3: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4C:0C:B4:B7:88:20:02:4F:27:D6:3D:BB:56:C3:ED:83:5D:B7:23 X509v3 Authority Key Identifier: keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:9440::/32 2406:9b00::/32 Signature Algorithm: sha256WithRSAEncryption 07:c8:56:f0:e9:8c:b3:6d:34:a6:34:b3:0b:2c:2c:e7:86:c1: b2:90:a2:f5:f3:27:95:b6:b4:0b:e3:b8:f1:df:77:40:7d:3e: eb:f4:ea:79:de:e3:56:02:1f:00:05:99:fd:44:c8:20:48:47: 0b:5a:26:04:f2:bc:1b:c6:04:29:28:46:45:33:58:f5:23:4b: db:f4:cd:92:33:26:61:36:2e:5f:1f:e2:a3:28:4c:ad:bf:d3: 3f:8f:dc:72:e1:b6:c7:03:6c:9b:6a:d5:9d:2b:db:0b:5d:79: 1a:a7:a0:03:6e:49:ce:a8:67:83:05:5b:db:6c:1e:3a:d0:97: 19:41:d2:60:3a:ac:f9:b1:93:fa:d3:93:3e:b5:a1:ce:4f:fe: 7a:25:d9:85:6b:02:2b:f9:54:63:23:08:3b:8e:b6:5e:ed:2d: 33:5f:75:2d:47:c2:e5:7f:f8:af:24:e7:89:eb:73:1f:b2:18: 5a:2c:3d:33:5c:1d:08:dd:54:12:47:14:28:31:22:e3:61:43: 68:39:59:54:4c:ab:48:ae:ec:67:75:38:30:91:e9:0c:03:10: 3b:02:72:81:9e:75:24:a5:a6:e8:e8:ac:d4:1c:05:aa:e2:32: 22:be:c5:a7:35:bb:a3:8f:1d:28:22:73:ee:3c:e3:63:5a:d5: 05:b3:00:55 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICNDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC NjcxRTVFRUUwHhcNMjQwNjAyMTYyMTE5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVjOWJmZi0wZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlHBfDN3vmsNNnH7FSiIXdZ+pYtiN4oSPYaydtoR55IAZ7S7Uzl6pol/Xx2p OIu3a3MBQWDrtNYUrxolOOThqoc3wFtGi7IYYNrdqZCIAJhjhVvtUAMsC9GTBoSw xnMPaC5IkeX9r37Z9EaMwOPYKcovdS16eFjoqt2VQky+rG2SIx6uJTBgJFhgi0uf sIvyxjMLEnUHa/Ft4+SU6eXUNlhH+kfHkvY8oiCjg84jG6tdoFI3CIZNVy/koPue EmX9RWPV7LpHEOpmSP0WxU3ItFmXQRhM9M292U4r0GCCEk3hzDFNBKInEJhuG4jm jsE0sq8/HM65+fY0AZdy0OMz4wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFDFMDLS3 iCACTyfWPbtWw+2DXbcjMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc3MjYvRjlGRkY2QUMxREE3MTFFMjk2M0FGQUExMDhCMDJDRDIvOUQwMzAyM0VB ODZFMTFFREFCQTFGQTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgACMA4DBQAkAZRAAwUAJAabADANBgkqhkiG9w0BAQsFAAOCAQEAB8hW 8OmMs200pjSzCyws54bBspCi9fMnlba0C+O48d93QH0+6/Tqed7jVgIfAAWZ/UTI IEhHC1omBPK8G8YEKShGRTNY9SNL2/TNkjMmYTYuXx/ioyhMrb/TP4/ccuG2xwNs m2rVnSvbC115GqegA25JzqhngwVb22weOtCXGUHSYDqs+bGT+tOTPrWhzk/+eiXZ hWsCK/lUYyMIO462Xu0tM191LUfC5X/4ryTnietzH7IYWiw9M1wdCN1UEkcUKDEi 42FDaDlZVEyrSK7sZ3U4MJHpDAMQOwJygZ51JKWm6Ois1BwFquIyIr7FpzW7o48d KCJz7jzjY1rVBbMAVQ== -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:58 2024 by rpki-client on console-fra.rpki-client.org