$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa File: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (raw, json) Hash identifier: Urnbb3WwZrA7rnMnP0+t9Rx88lYq3mJh+CKBhIzde4E= Subject key identifier: E2:7B:72:48:A3:5E:55:50:54:5D:6E:2A:BC:67:56:7A:23:C3:F3:1E Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: 18 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa Signing time: Tue 26 Mar 2024 21:01:49 +0000 ROA not before: Tue 26 Mar 2024 21:01:49 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 139623 IP address blocks: 2401:7f20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: Mar 26 21:01:49 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660337bd-7f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:4c:6f:4f:61:97:b4:5e:44:0b:a6:ea:08: 8a:ea:26:94:2b:5f:4f:c4:20:69:dc:93:49:aa:2f: 35:18:ae:15:b1:d1:99:8c:ce:38:14:9c:c0:1d:f3: 2c:4f:a3:c9:a2:9a:dd:80:49:d5:e2:c4:6c:74:47: 00:7e:e6:9f:d7:27:a4:6b:09:fb:f6:97:29:fe:ff: 87:29:00:3e:d3:96:d3:72:51:fc:15:96:81:7b:06: 92:6c:fe:d7:d1:a8:d4:8f:87:e0:a0:e3:25:74:5b: b7:3a:21:ec:68:63:bc:40:af:38:5e:61:8c:b6:65: a3:f4:4e:57:fd:87:0f:4f:70:5b:b1:57:df:8b:ba: c0:69:d3:87:61:18:73:f0:11:9c:2f:a3:9e:b8:8a: 25:5f:53:5b:0a:3c:ca:e3:3d:16:ea:cb:09:49:c6: f6:a0:ac:fb:14:a0:8d:cb:10:89:7c:6b:e5:25:a3: 89:73:dd:fd:3b:38:10:d8:bb:0b:87:ca:49:83:1a: bc:ca:23:65:a8:cf:5c:8f:9d:3f:a2:6c:9c:af:aa: 9c:38:d1:6b:8c:d5:d3:6f:0f:51:60:c1:5c:52:26: 2c:07:c8:ac:d4:22:63:23:95:75:ae:d0:22:5a:f4: 51:de:da:ea:89:7d:b3:56:ca:c9:9e:cc:6a:c9:fe: 37:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7B:72:48:A3:5E:55:50:54:5D:6E:2A:BC:67:56:7A:23:C3:F3:1E X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:7f20::/32 Signature Algorithm: sha256WithRSAEncryption 7c:73:36:f5:dc:08:bb:79:8c:38:0f:6e:54:c9:1d:8d:54:5f: 46:25:1e:fc:a7:1c:71:4a:fe:b5:7f:11:09:71:45:39:54:bf: 4f:35:fd:dc:4e:c5:66:ff:fc:26:dc:4f:40:cb:e3:db:cd:b0: 27:23:47:d9:67:68:64:19:32:83:cf:75:e1:c3:f5:67:51:7a: ea:49:cf:4c:48:57:49:10:11:04:ce:11:e3:dd:ea:e6:34:b5: cd:1a:fe:ca:56:18:f1:27:6e:ea:5a:63:ad:8d:98:58:b0:79: 4b:2a:03:60:93:ff:a0:e3:2b:80:f2:d1:69:11:62:33:8d:13: 5f:bd:41:e9:fb:be:5d:36:f9:d4:e1:98:d8:9e:8c:4e:71:ec: 9e:b8:61:57:82:d0:61:0d:79:1f:91:cd:28:4a:bd:bc:b7:cd: e4:42:b4:5c:59:2c:0c:01:a1:fe:c0:8e:3d:1b:4c:f0:28:be: 1d:4a:4e:c1:04:26:49:f1:51:c0:96:64:cb:27:13:db:e1:27: dc:7c:f1:69:b6:48:c4:c9:2f:89:ca:64:28:66:43:5b:2a:32: 3f:d0:99:c3:33:e3:d3:c0:df:58:36:48:1f:6f:47:56:83:12: 16:16:ba:c0:67:13:ce:f3:78:a1:9b:62:0e:25:3c:dd:8c:dd: eb:f5:6e:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzQ5MDExMC8GA1UEBRMoMTM3MzUzRDBFOEMxNDVBNTgwQ0IwMEJDMzIyMjA4OUM0 MDQ4QUU1MTAeFw0yNDAzMjYyMTAxNDlaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MDMzN2JkLTdmM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVd0xvT2GXtF5EC6bqCIrqJpQrX0/EIGnck0mqLzUYrhWx0ZmMzjgUnMAd8yxP o8mimt2ASdXixGx0RwB+5p/XJ6RrCfv2lyn+/4cpAD7TltNyUfwVloF7BpJs/tfR qNSPh+Cg4yV0W7c6IexoY7xArzheYYy2ZaP0Tlf9hw9PcFuxV9+LusBp04dhGHPw EZwvo564iiVfU1sKPMrjPRbqywlJxvagrPsUoI3LEIl8a+Ulo4lz3f07OBDYuwuH ykmDGrzKI2Woz1yPnT+ibJyvqpw40WuM1dNvD1FgwVxSJiwHyKzUImMjlXWu0CJa 9FHe2uqJfbNWysmezGrJ/jcVAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQU4ntySKNe VVBUXW4qvGdWeiPD8x4wHwYDVR0jBBgwFoAUE3NT0OjBRaWAywC8MiIInEBIrlEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNDkwLzk5MTk4RjEyRDA1 NDExRUVBRjc5OUYxNkM0RjlBRTAyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJs RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRTNOVDBPakJSYVdBeXdDOE1pSUluRUJJcmxFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi8wRkUxM0M5MkVC QjQxMUVFOUQ4NjA5NUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBfyAwDQYJKoZIhvcNAQELBQADggEBAHxzNvXcCLt5jDgP blTJHY1UX0YlHvynHHFK/rV/EQlxRTlUv081/dxOxWb//CbcT0DL49vNsCcjR9ln aGQZMoPPdeHD9WdReupJz0xIV0kQEQTOEePd6uY0tc0a/spWGPEnbupaY62NmFiw eUsqA2CT/6DjK4Dy0WkRYjONE1+9Qen7vl02+dThmNiejE5x7J64YVeC0GENeR+R zShKvby3zeRCtFxZLAwBof7Ajj0bTPAovh1KTsEEJknxUcCWZMsnE9vhJ9x88Wm2 SMTJL4nKZChmQ1sqMj/QmcMz49PA31g2SB9vR1aDEhYWusBnE87zeKGbYg4lPN2M 3ev1bic= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:27 2024 by rpki-client on console-fra.rpki-client.org