$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/5B57754A026F11EDBE22EF64C4F9AE02.roa File: 5B57754A026F11EDBE22EF64C4F9AE02.roa (raw, json) Hash identifier: 1HFLFVcOO0LUQO4rRQ5Ol/sMGSHPJCO5RT00EtcBsvU= Subject key identifier: 02:EA:6E:61:50:41:71:A2:A7:61:C7:C8:B1:16:A7:D0:98:E8:4B:F8 Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Certificate serial: 0873 Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/5B57754A026F11EDBE22EF64C4F9AE02.roa Signing time: Fri 02 Jun 2023 22:34:05 +0000 ROA not before: Fri 02 Jun 2023 22:34:05 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 137549 IP address blocks: 2400:6100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Validity Not Before: Jun 2 22:34:05 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a6e5d-adc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:2a:49:36:82:b6:15:c0:01:2d:9f:25:6f: 15:7d:c7:c5:1f:89:39:c4:eb:7c:3e:5c:70:71:f3: 79:47:ee:00:60:d2:35:4c:af:ea:54:a6:17:6e:35: 53:ae:7a:0c:86:c7:76:9c:ac:81:43:22:22:52:18: 20:88:1d:75:16:16:e0:aa:fd:39:06:af:98:69:0f: e7:f9:ed:a8:c3:f7:af:c4:59:f4:dc:b2:9a:8f:63: c4:89:99:ee:0c:b1:a7:5d:66:df:92:13:87:f8:6f: 0e:81:69:c8:ca:76:8d:ee:1b:16:dd:c4:c3:b2:f4: 08:6f:d2:c9:4c:55:24:fa:93:4f:7c:35:bb:36:58: e5:95:ba:25:0a:df:af:ff:3c:36:c8:7b:e5:58:89: ff:df:4c:94:d6:af:5f:e2:65:c3:8f:b5:06:ca:34: 08:0e:23:6a:ef:21:56:9a:9a:84:46:0d:8f:7a:ed: c8:bd:a9:99:29:14:ea:fb:6e:aa:b8:62:92:1c:40: 39:50:0d:de:55:4d:b0:33:d4:87:83:89:a4:45:32: 49:14:85:f1:f8:a5:61:a0:0a:af:3f:64:22:e9:da: a0:8b:b0:66:16:15:64:e5:11:ac:90:88:e8:fe:ce: 5d:17:21:e4:94:9f:f4:16:f2:06:ec:d5:36:47:c0: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:6E:61:50:41:71:A2:A7:61:C7:C8:B1:16:A7:D0:98:E8:4B:F8 X509v3 Authority Key Identifier: keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/5B57754A026F11EDBE22EF64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:6100::/32 Signature Algorithm: sha256WithRSAEncryption 40:95:bf:7c:3a:4c:09:47:cd:6a:82:86:92:59:bc:54:92:62: 50:ad:bc:0c:0a:81:b0:af:1d:94:30:68:5c:02:71:42:57:ba: 62:1c:72:84:b2:2b:2d:58:f5:e9:fa:79:d6:a3:94:30:8a:55: a9:f2:73:46:dc:ee:5e:09:45:bf:45:11:d4:08:1a:82:da:3f: a2:33:58:bb:73:1d:f0:72:75:7a:74:d3:32:f2:a1:bc:96:4a: 9e:eb:96:ae:00:49:1b:88:b8:a9:10:14:7d:60:19:d0:29:7a: 5d:f6:64:62:b5:a6:ae:c8:60:14:c2:ef:8e:81:ec:99:01:cb: bf:01:2d:dd:50:db:82:bd:53:7f:52:8a:f8:4f:a8:8a:ab:8d: ab:5b:86:f8:c7:87:60:75:23:12:b7:6d:d5:25:3b:33:02:87: b4:5f:e1:6a:c9:35:27:c9:54:82:17:4e:2f:90:66:05:d6:c3: e2:e9:af:42:b8:07:9d:4b:b9:c2:10:da:1d:69:9d:16:fd:cf: be:e5:78:01:1f:35:26:d6:c3:82:fa:03:b5:05:90:88:fd:84: e6:a0:c5:f1:2f:c4:9b:bf:bb:50:22:c7:d6:30:f2:ef:16:2b: d0:0e:df:51:2a:6b:d2:87:dd:63:76:06:e1:b4:d2:45:fa:84: f7:1b:b9:b1 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzNUExMTAvBgNVBAUTKERDNjIyMDA4QThBMUFENDJCRTJBMjU0OTQzNDkxQUZB QTg0NTQ5QTUwHhcNMjMwNjAyMjIzNDA1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNmU1ZC1hZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOIqSTaCthXAAS2fJW8VfcfFH4k5xOt8PlxwcfN5R+4AYNI1TK/qVKYXbjVT rnoMhsd2nKyBQyIiUhggiB11Fhbgqv05Bq+YaQ/n+e2ow/evxFn03LKaj2PEiZnu DLGnXWbfkhOH+G8OgWnIynaN7hsW3cTDsvQIb9LJTFUk+pNPfDW7NljllbolCt+v /zw2yHvlWIn/30yU1q9f4mXDj7UGyjQIDiNq7yFWmpqERg2Peu3IvamZKRTq+26q uGKSHEA5UA3eVU2wM9SHg4mkRTJJFIXx+KVhoAqvP2Qi6dqgi7BmFhVk5RGskIjo /s5dFyHklJ/0FvIG7NU2R8CDtwIDAQABo4ICljCCApIwHQYDVR0OBBYEFALqbmFQ QXGip2HHyLEWp9CY6Ev4MB8GA1UdIwQYMBaAFNxiIAiooa1CviolSUNJGvqoRUml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDM1QS8zQzYwOUI0NDdD NjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJVSy1LaVZKUTBrYS1xaEZT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHSWdDS2loclVLLUtpVkpRMGthLXFoRlNhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTAzNUEvM0M2MDlCNDQ3QzY2MTFFQTgwODlGMzUxQzRGOUFFMDIvNUI1Nzc1NEEw MjZGMTFFREJFMjJFRjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAGEAMA0GCSqGSIb3DQEBCwUAA4IBAQBAlb98OkwJR81q goaSWbxUkmJQrbwMCoGwrx2UMGhcAnFCV7piHHKEsistWPXp+nnWo5QwilWp8nNG 3O5eCUW/RRHUCBqC2j+iM1i7cx3wcnV6dNMy8qG8lkqe65auAEkbiLipEBR9YBnQ KXpd9mRitaauyGAUwu+OgeyZAcu/AS3dUNuCvVN/Uor4T6iKq42rW4b4x4dgdSMS t23VJTszAoe0X+FqyTUnyVSCF04vkGYF1sPi6a9CuAedS7nCENodaZ0W/c++5XgB HzUm1sOC+gO1BZCI/YTmoMXxL8Sbv7tQIsfWMPLvFivQDt9RKmvSh91jdgbhtNJF +oT3G7mx -----END CERTIFICATE-----Generated at Sun May 26 22:03:57 2024 by rpki-client on console-fra.rpki-client.org