$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/A04B3184595A11EA8C79B30FC4F9AE02.roa File: A04B3184595A11EA8C79B30FC4F9AE02.roa (raw, json) Hash identifier: Ge3sA9vn4z8DktPLvZxRP3By2hr88qUHgnXklAjEj/I= Subject key identifier: 25:D2:59:54:2E:5B:F5:63:F5:A0:CE:26:75:46:45:3C:6B:EB:13:EC Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0A6C Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/A04B3184595A11EA8C79B30FC4F9AE02.roa Signing time: Thu 02 May 2024 20:39:25 +0000 ROA not before: Thu 02 May 2024 20:39:25 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9268 IP address blocks: 2403:5f40::/44 maxlen: 44 2403:5f40:4::/48 maxlen: 48 2403:5f40:5::/48 maxlen: 48 2403:5f40:6::/48 maxlen: 48 2403:5f40:7::/48 maxlen: 48 2403:5f40:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2668 (0xa6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: May 2 20:39:25 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633f9fd-d6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a7:75:35:89:ca:4b:cb:22:66:eb:f7:14:74: d9:15:42:e8:bd:3c:4f:48:b8:b1:fd:e4:04:57:fc: a6:93:23:8c:45:94:1a:54:b3:4c:34:e2:fa:8a:4f: ef:ff:69:bd:77:06:c2:40:1b:7f:7d:af:81:ef:c4: 35:d7:32:53:5c:d7:d1:16:6e:d7:73:8c:46:6f:0e: 3c:66:d6:76:eb:34:db:6e:a0:15:dc:ff:1a:89:6f: 19:9b:96:69:0e:69:86:91:3c:af:8e:fa:99:4b:f2: 2d:b5:f4:4f:35:39:8e:f7:75:10:fe:44:e8:a1:42: 13:33:6c:50:6a:ee:c1:d2:65:6a:13:79:6c:0e:f8: 45:cd:d7:ef:df:2e:05:e2:3f:3d:cc:6b:84:96:47: b6:ad:0d:5e:7d:70:95:6a:6c:fc:5c:67:31:96:91: e9:8b:6e:bb:d1:59:59:e4:fc:e3:58:5e:05:de:5f: 2a:bf:e1:61:16:a6:da:cc:8a:6c:45:09:0b:68:31: 7d:1f:81:0c:b8:e5:af:89:b5:2b:96:f4:ed:4c:f8: a7:97:96:3c:08:d3:bb:5a:6c:27:03:ce:53:c5:39: 40:cf:31:12:a1:e6:86:2f:c0:1c:54:0c:b5:1c:7c: fc:20:ab:40:b7:47:5e:5c:c8:8e:76:e8:4a:40:fb: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D2:59:54:2E:5B:F5:63:F5:A0:CE:26:75:46:45:3C:6B:EB:13:EC X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/A04B3184595A11EA8C79B30FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:5f40::/44 Signature Algorithm: sha256WithRSAEncryption d4:de:e3:be:14:d0:14:33:c0:72:e0:d2:52:f9:d4:91:12:80: a8:a7:07:08:1f:da:59:be:f9:07:43:a8:1e:4f:6f:b7:59:42: 13:53:4f:48:f4:8c:94:d1:50:76:18:4e:01:d3:67:3b:2b:a1: 09:fd:c0:48:d9:31:42:67:ee:b2:1b:d3:35:99:42:a2:4c:09: 56:cc:3c:a1:83:02:56:e4:17:e5:2c:7c:c5:11:a1:fb:36:5b: 86:d3:6e:db:eb:7a:a5:ec:1a:1f:94:94:f7:cc:a8:ca:53:2d: 19:8d:39:f9:6d:0c:a3:4b:85:91:63:82:01:01:fd:fb:3b:83: c0:6d:a9:89:4c:ef:1d:4a:4f:83:b6:39:dc:b7:36:e8:6d:37: 05:4b:65:fa:25:96:f9:cc:15:0f:95:be:64:86:9b:bb:3b:98: 8f:00:30:00:3f:c4:69:ca:a7:a3:d9:cb:8e:54:54:be:9c:d1: ff:03:6e:91:85:57:17:43:d5:61:cc:bc:c6:b1:60:27:a5:6f: 6b:b9:a7:6d:84:17:c6:5d:62:65:75:1e:a9:28:dd:62:65:ce: 17:ca:f9:ff:6f:0d:fe:81:5b:8e:49:25:07:6e:fc:1f:ff:41: 77:58:27:08:da:a7:bb:49:66:ca:11:5e:71:67:90:6a:fd:b4: 6a:f0:e0:2f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjQwNTAyMjAzOTI1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzZjlmZC1kNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qd1NYnKS8siZuv3FHTZFULovTxPSLix/eQEV/ymkyOMRZQaVLNMNOL6ik/v /2m9dwbCQBt/fa+B78Q11zJTXNfRFm7Xc4xGbw48ZtZ26zTbbqAV3P8aiW8Zm5Zp DmmGkTyvjvqZS/IttfRPNTmO93UQ/kTooUITM2xQau7B0mVqE3lsDvhFzdfv3y4F 4j89zGuElke2rQ1efXCVamz8XGcxlpHpi2670VlZ5PzjWF4F3l8qv+FhFqbazIps RQkLaDF9H4EMuOWvibUrlvTtTPinl5Y8CNO7WmwnA85TxTlAzzESoeaGL8AcVAy1 HHz8IKtAt0deXMiOduhKQPvUCQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCXSWVQu W/Vj9aDOJnVGRTxr6xPsMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERENzgvRDRFOTY0OUM0MkY4MTFFQUI0NjBFOTNGQzRGOUFFMDIvQTA0QjMxODQ1 OTVBMTFFQThDNzlCMzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkA19AAAAwDQYJKoZIhvcNAQELBQADggEBANTe474U0BQz wHLg0lL51JESgKinBwgf2lm++QdDqB5Pb7dZQhNTT0j0jJTRUHYYTgHTZzsroQn9 wEjZMUJn7rIb0zWZQqJMCVbMPKGDAlbkF+UsfMURofs2W4bTbtvreqXsGh+UlPfM qMpTLRmNOfltDKNLhZFjggEB/fs7g8BtqYlM7x1KT4O2Ody3NuhtNwVLZfollvnM FQ+VvmSGm7s7mI8AMAA/xGnKp6PZy45UVL6c0f8DbpGFVxdD1WHMvMaxYCelb2u5 p22EF8ZdYmV1Hqko3WJlzhfK+f9vDf6BW45JJQdu/B//QXdYJwjap7tJZsoRXnFn kGr9tGrw4C8= -----END CERTIFICATE-----Generated at Thu May 16 22:34:45 2024 by rpki-client on console-ams.rpki-client.org