$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/778B08A40A4911EC8BC5AF5EC4F9AE02.roa File: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (raw, json) Hash identifier: flwOcHA+r7QHLepeJ5z6vGwlO8KV3kAPYGbhTOTg9vc= Subject key identifier: 98:4E:9A:A8:23:9E:B7:3C:5F:78:27:59:EC:22:97:1B:45:EF:71:48 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 03DA Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/778B08A40A4911EC8BC5AF5EC4F9AE02.roa Signing time: Tue 19 Sep 2023 01:01:55 +0000 ROA not before: Tue 19 Sep 2023 01:01:55 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 146991 IP address blocks: 2407:d4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Sep 19 01:01:55 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6508f302-65a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:51:3b:f6:41:2c:da:fc:5c:0f:94:4b:45:75: aa:1d:a0:5f:66:2e:7c:78:71:ca:61:40:a3:fc:77: 24:4f:cc:3d:3c:62:48:e5:fd:14:fc:13:fb:ce:e8: a6:5c:38:73:a9:e7:f2:fe:20:ee:af:29:98:9a:5e: 2c:6f:7d:b3:b0:92:e8:c9:f8:bc:33:41:21:ad:a2: 67:0c:8c:ee:79:e0:13:b2:61:09:67:68:31:3e:a7: 14:d7:a7:1d:35:42:02:76:de:0a:f2:11:7f:8a:51: 5e:df:8c:59:17:66:37:b0:b2:0a:08:4c:ef:c1:97: 3b:44:fa:c7:1f:14:c2:1a:81:b1:69:c3:a5:1c:c7: dc:68:95:f2:69:c7:45:20:cf:81:ff:b8:2a:6c:41: 72:a6:49:46:a3:13:c4:b8:f5:5d:9b:2b:57:02:6f: d7:9b:7b:f7:f7:93:1c:b8:91:97:84:dc:84:6f:5e: 8d:87:c7:a1:a2:44:8b:e4:dc:d7:72:9a:8a:84:88: 5f:64:53:10:22:dd:9f:2e:25:d6:e1:69:7f:ab:c7: 6e:23:f5:cb:1e:66:fb:48:fc:03:1e:e6:bd:2e:bc: 9a:06:41:66:3e:d7:12:f1:a3:36:fc:60:48:4d:fb: a3:be:d3:70:77:09:bc:4a:0f:a3:33:ce:b9:69:7d: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4E:9A:A8:23:9E:B7:3C:5F:78:27:59:EC:22:97:1B:45:EF:71:48 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/778B08A40A4911EC8BC5AF5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d4c0::/32 Signature Algorithm: sha256WithRSAEncryption 30:63:26:2c:2f:12:ff:33:59:9f:e6:3a:0a:0b:66:91:a6:6f: 3a:20:e0:a5:d7:af:8e:5e:0c:b9:3c:f5:2e:38:93:1c:93:9f: 6f:28:e0:d7:5f:7c:93:c3:6b:bf:86:c2:bc:88:74:01:f7:90: 58:41:ff:d7:73:30:96:20:94:a6:7b:68:1b:70:1a:e3:7f:e4: cc:43:f7:be:c6:fb:30:f0:3e:dc:08:91:2b:8f:d8:c7:82:b3: d1:69:54:ce:f7:f2:d8:e1:5d:2d:01:ec:58:64:1a:9f:8f:af: ab:9f:a2:83:ef:b1:11:8f:1a:b2:42:39:0d:e9:5e:47:4b:f0: f4:eb:53:0a:00:6f:ae:b8:14:e0:6c:a1:c8:74:c6:c9:63:b7: af:1c:6f:fb:53:e7:21:a5:9e:1b:0a:62:d1:c1:d9:f5:d0:b9: fe:66:37:fd:77:cc:21:a8:25:d4:6b:63:68:36:a1:0d:3e:65: a3:cb:aa:25:c8:d7:16:9c:56:19:95:ba:8a:a6:27:34:dd:03: 76:dc:57:a4:31:12:67:2b:f1:13:d7:4d:47:fa:c3:7e:8e:af: 49:fc:fd:3e:3a:53:85:1e:24:ba:bc:60:fa:f9:6c:85:b9:48: b1:2a:11:9e:fc:35:12:c9:ee:0c:eb:ef:f9:1c:d1:d1:ac:bc: ca:73:23:d1 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjMwOTE5MDEwMTU1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTA4ZjMwMi02NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lE79kEs2vxcD5RLRXWqHaBfZi58eHHKYUCj/HckT8w9PGJI5f0U/BP7zuim XDhzqefy/iDurymYml4sb32zsJLoyfi8M0EhraJnDIzueeATsmEJZ2gxPqcU16cd NUICdt4K8hF/ilFe34xZF2Y3sLIKCEzvwZc7RPrHHxTCGoGxacOlHMfcaJXyacdF IM+B/7gqbEFypklGoxPEuPVdmytXAm/Xm3v395McuJGXhNyEb16Nh8ehokSL5NzX cpqKhIhfZFMQIt2fLiXW4Wl/q8duI/XLHmb7SPwDHua9LryaBkFmPtcS8aM2/GBI TfujvtNwdwm8Sg+jM865aX3xaQIDAQABo4ICljCCApIwHQYDVR0OBBYEFJhOmqgj nrc8X3gnWewilxtF73FIMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvNzc4QjA4QTQw QTQ5MTFFQzhCQzVBRjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkB9TAMA0GCSqGSIb3DQEBCwUAA4IBAQAwYyYsLxL/M1mf 5joKC2aRpm86IOCl16+OXgy5PPUuOJMck59vKODXX3yTw2u/hsK8iHQB95BYQf/X czCWIJSme2gbcBrjf+TMQ/e+xvsw8D7cCJErj9jHgrPRaVTO9/LY4V0tAexYZBqf j6+rn6KD77ERjxqyQjkN6V5HS/D061MKAG+uuBTgbKHIdMbJY7evHG/7U+chpZ4b CmLRwdn10Ln+Zjf9d8whqCXUa2NoNqENPmWjy6olyNcWnFYZlbqKpic03QN23Fek MRJnK/ET101H+sN+jq9J/P0+OlOFHiS6vGD6+WyFuUixKhGe/DUSye4M6+/5HNHR rLzKcyPR -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:27 2024 by rpki-client on console-ams.rpki-client.org