$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/9929CD6EE93611EE984B9214C4F9AE02.roa File: 9929CD6EE93611EE984B9214C4F9AE02.roa (raw, json) Hash identifier: 17rqRfbHAT+IisHkaExuhiubFZOiFgz977xkdXxPIzE= Subject key identifier: 3A:E1:B6:9C:6C:97:6F:DA:38:B9:63:53:4B:37:2A:27:E2:C1:EE:97 Certificate issuer: /CN=A9171D3B/serialNumber=C4A558BB7C23E7F728D6CE6899853414C8767F47 Certificate serial: 0382 Authority key identifier: C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/9929CD6EE93611EE984B9214C4F9AE02.roa Signing time: Sat 23 Mar 2024 16:58:40 +0000 ROA not before: Sat 23 Mar 2024 16:58:40 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 136765 IP address blocks: 2404:5a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.crl rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3B/serialNumber=C4A558BB7C23E7F728D6CE6899853414C8767F47 Validity Not Before: Mar 23 16:58:40 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65ff0a40-2b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:f6:34:04:ee:3f:9f:fe:1a:d7:57:c5:26: 22:eb:47:22:46:c6:31:8e:16:1e:c0:7e:98:2b:b1: 6f:1d:d9:aa:0c:fd:d0:c4:29:c1:1f:93:d6:d6:6f: a6:a9:8e:66:b7:5c:0b:67:a3:19:99:c8:49:3b:9a: 5f:54:e0:66:14:46:65:2f:de:0a:b7:68:d0:4f:e1: a4:6c:30:78:76:b7:31:e0:42:0d:5d:42:4f:c3:24: ec:46:f8:cb:43:82:d9:68:da:6e:e5:a1:db:df:9b: a2:e6:dc:57:35:ad:fe:dc:65:1d:d4:8f:61:30:6e: 94:1b:d7:65:44:fc:9c:11:27:80:15:46:2a:99:0f: 57:1c:f0:c8:1b:d2:ef:40:20:ff:6d:a8:f0:e7:ec: 07:c1:f8:33:89:29:a6:32:63:64:a5:d4:46:62:89: 89:68:c1:5b:03:28:0c:2e:fd:93:5d:bc:80:7b:87: 9f:28:7d:10:1b:c5:5c:2c:a6:95:d6:02:dc:50:4c: 46:51:90:f3:ab:76:ce:e5:c1:48:65:16:75:f1:72: a0:47:13:26:dd:3d:db:78:53:98:cd:82:39:b8:b5: f5:ee:70:dd:0b:3c:a2:85:e9:98:da:bc:72:66:f9: 05:f7:69:c5:77:04:a4:33:0a:4f:28:f3:99:bd:b5: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E1:B6:9C:6C:97:6F:DA:38:B9:63:53:4B:37:2A:27:E2:C1:EE:97 X509v3 Authority Key Identifier: keyid:C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/9929CD6EE93611EE984B9214C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:5a40::/32 Signature Algorithm: sha256WithRSAEncryption a5:47:79:66:86:3e:62:b0:d3:66:44:20:15:7c:7d:04:c2:2b: b0:63:b4:40:fe:69:26:8c:13:c3:b3:8f:14:90:2d:44:8f:f3: 85:02:e1:ba:8b:a7:a6:22:84:72:ec:f0:4b:62:f2:e6:98:00: 7e:54:19:39:e3:55:fa:9f:49:d7:86:b9:0a:e7:cd:e8:c5:d3: 70:a3:87:3a:1f:6f:0e:e3:8b:d0:ee:96:68:ed:8b:0f:7d:4e: d0:bf:e7:c9:37:a8:a8:5d:30:e1:0e:65:8f:83:14:5e:ba:67: 13:f4:9a:60:8c:e4:e8:7d:e6:07:6f:b1:6d:fe:d0:3a:f2:3a: 13:3e:7c:9a:a4:fe:78:56:aa:d9:c6:be:d2:5a:8a:5b:8c:88: e4:64:01:be:2e:07:72:2a:ff:c8:d2:fe:79:ec:fa:4b:bd:f1: 55:44:c9:7f:5a:4e:ad:dd:0c:5f:a0:ea:bb:70:50:cd:91:06: 27:3f:82:59:50:80:d3:e8:d7:51:55:fc:c4:76:af:f5:a5:1e: f0:6a:fd:8e:99:51:5c:47:3d:d3:10:c9:43:22:b3:82:56:b1: 4b:9f:7a:2b:56:89:69:02:e9:54:2c:ff:f8:43:cf:96:68:33: 28:45:26:30:db:88:81:d7:08:c5:7c:75:36:d9:29:87:40:21: 04:4a:02:88 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0IxMTAvBgNVBAUTKEM0QTU1OEJCN0MyM0U3RjcyOEQ2Q0U2ODk5ODUzNDE0 Qzg3NjdGNDcwHhcNMjQwMzIzMTY1ODQwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZmMGE0MC0yYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FD2NATuP5/+GtdXxSYi60ciRsYxjhYewH6YK7FvHdmqDP3QxCnBH5PW1m+m qY5mt1wLZ6MZmchJO5pfVOBmFEZlL94Kt2jQT+GkbDB4drcx4EINXUJPwyTsRvjL Q4LZaNpu5aHb35ui5txXNa3+3GUd1I9hMG6UG9dlRPycESeAFUYqmQ9XHPDIG9Lv QCD/bajw5+wHwfgziSmmMmNkpdRGYomJaMFbAygMLv2TXbyAe4efKH0QG8VcLKaV 1gLcUExGUZDzq3bO5cFIZRZ18XKgRxMm3T3beFOYzYI5uLX17nDdCzyihemY2rxy ZvkF92nFdwSkMwpPKPOZvbUCBwIDAQABo4ICljCCApIwHQYDVR0OBBYEFDrhtpxs l2/aOLljU0s3Kifiwe6XMB8GA1UdIwQYMBaAFMSlWLt8I+f3KNbOaJmFNBTIdn9H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQi9CMjQ5OTg1ODMx MzgxMUU5OURFMzI2NkZDNEY5QUUwMi94S1ZZdTN3ajVfY28xczVvbVlVMEZNaDJm MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLVll1M3dqNV9jbzFzNW9tWVUwRk1oMmYwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFEM0IvQjI0OTk4NTgzMTM4MTFFOTlERTMyNjZGQzRGOUFFMDIvOTkyOUNENkVF OTM2MTFFRTk4NEI5MjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBFpAMA0GCSqGSIb3DQEBCwUAA4IBAQClR3lmhj5isNNm RCAVfH0EwiuwY7RA/mkmjBPDs48UkC1Ej/OFAuG6i6emIoRy7PBLYvLmmAB+VBk5 41X6n0nXhrkK583oxdNwo4c6H28O44vQ7pZo7YsPfU7Qv+fJN6ioXTDhDmWPgxRe umcT9JpgjOTofeYHb7Ft/tA68joTPnyapP54VqrZxr7SWopbjIjkZAG+LgdyKv/I 0v557PpLvfFVRMl/Wk6t3QxfoOq7cFDNkQYnP4JZUIDT6NdRVfzEdq/1pR7wav2O mVFcRz3TEMlDIrOCVrFLn3orVolpAulULP/4Q8+WaDMoRSYw24iB1wjFfHU22SmH QCEESgKI -----END CERTIFICATE-----Generated at Fri May 31 20:34:06 2024 by rpki-client on console-ams.rpki-client.org