$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/FEFB8698666C11EE99E97C1CC4F9AE02.roa File: FEFB8698666C11EE99E97C1CC4F9AE02.roa (raw, json) Hash identifier: 176XxzfzBjk8/c0cHQLL3AuB2K5c8na4rKzTdeIsnp8= Subject key identifier: 89:54:BF:F1:82:E3:43:87:3F:2F:FD:81:93:6B:7B:E6:CA:CB:5A:88 Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: D9 Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/FEFB8698666C11EE99E97C1CC4F9AE02.roa Signing time: Mon 01 Jan 2024 05:06:32 +0000 ROA not before: Mon 01 Jan 2024 05:06:32 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150180 IP address blocks: 2001:df1:9540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 05:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: Jan 1 05:06:32 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65924857-1ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:d4:0e:30:5f:75:f6:b4:5f:6f:77:40:75: de:ed:40:5e:9b:7b:11:2a:99:39:09:64:13:13:f8: 2f:f2:bc:c1:f6:a9:34:da:5d:cb:2e:fc:d9:ba:69: 32:83:89:b8:96:15:63:b6:80:19:d5:ae:ae:24:f6: c6:d8:0d:84:c8:ea:66:a4:21:4e:c6:9c:0d:5e:65: 3e:a7:f3:a9:50:24:cb:eb:0d:56:44:9d:8c:24:18: 20:66:a0:42:87:60:6b:73:73:de:77:cf:41:10:b1: 4e:05:63:05:3a:8b:7d:63:9b:28:02:98:fe:3d:d4: ef:bf:8c:f2:30:38:9a:81:bf:9e:36:95:db:80:22: 46:f5:4f:33:4b:2c:b9:85:ae:de:b0:5c:ce:0f:30: 2e:c1:84:fd:6a:31:86:9e:1c:97:16:a7:f9:f8:25: bc:49:e0:6f:d0:20:00:ce:92:cb:b5:c4:4d:fe:72: 2e:e2:b6:27:1e:18:26:3b:a9:c9:ed:d9:78:61:30: cd:12:0d:82:09:11:fa:e1:82:09:4c:c4:6e:81:9b: 2f:87:6b:c5:c2:9e:56:52:fe:70:ea:1c:53:d9:6e: 98:47:d8:49:a2:c1:45:d7:a6:f0:e9:b5:6c:33:13: 25:a4:49:81:e0:f5:f7:ac:f4:41:3d:67:ea:26:16: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:54:BF:F1:82:E3:43:87:3F:2F:FD:81:93:6B:7B:E6:CA:CB:5A:88 X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/FEFB8698666C11EE99E97C1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:9540::/48 Signature Algorithm: sha256WithRSAEncryption 00:e3:5d:eb:90:a7:f3:a1:93:c9:8b:a1:3b:a3:0e:f4:39:3a: 80:27:f7:13:55:a1:ad:50:32:fd:8d:d8:59:0d:84:df:3c:3f: af:64:7f:54:e4:64:80:a0:21:c9:a4:9c:cc:3e:44:71:42:ac: 4c:b8:98:d7:c2:ba:6b:d1:39:c6:52:1a:8e:82:26:f1:f1:82: c0:cc:61:35:21:ca:95:86:cb:35:02:cf:b7:df:8f:47:df:9c: 00:35:2d:c6:dd:91:e3:41:c0:61:a8:59:3e:ec:6c:1e:5a:8d: 55:a7:1c:38:a4:53:3e:f7:15:27:cb:a0:eb:4d:8a:48:86:75: bb:84:c4:b6:0c:9f:d0:71:7d:e8:d6:cc:3b:b7:a5:c4:71:34: 26:9a:bb:fc:ce:2a:0b:6e:29:74:ff:35:34:46:3a:38:28:65: 17:11:fa:26:f9:76:89:9b:2f:ca:56:32:77:36:4c:b6:e3:7f: c9:17:9c:c7:0d:f4:5a:69:69:62:ac:64:5b:08:4d:15:5a:26: 3e:d6:c2:bb:5c:bc:f8:1c:26:80:6a:53:64:11:d5:b8:bb:f9: bd:33:f3:d1:8b:5c:e4:5a:98:76:65:6c:f2:63:eb:c3:ae:c4: 3a:d3:a6:0a:76:1d:aa:96:01:35:76:55:6e:2f:61:29:f0:30: b3:1a:c4:5f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjQwMTAxMDUwNjMyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTkyNDg1Ny0xY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqnUDjBfdfa0X293QHXe7UBem3sRKpk5CWQTE/gv8rzB9qk02l3LLvzZumky g4m4lhVjtoAZ1a6uJPbG2A2EyOpmpCFOxpwNXmU+p/OpUCTL6w1WRJ2MJBggZqBC h2Brc3Ped89BELFOBWMFOot9Y5soApj+PdTvv4zyMDiagb+eNpXbgCJG9U8zSyy5 ha7esFzODzAuwYT9ajGGnhyXFqf5+CW8SeBv0CAAzpLLtcRN/nIu4rYnHhgmO6nJ 7dl4YTDNEg2CCRH64YIJTMRugZsvh2vFwp5WUv5w6hxT2W6YR9hJosFF16bw6bVs MxMlpEmB4PX3rPRBPWfqJhbh8wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIlUv/GC 40OHPy/9gZNre+bKy1qIMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTVBQzgvQkE2RDI3RDQ2QzVEMTFFRDhDNUM2NDFDQzRGOUFFMDIvRkVGQjg2OTg2 NjZDMTFFRTk5RTk3QzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xlUAwDQYJKoZIhvcNAQELBQADggEBAADjXeuQp/Oh k8mLoTujDvQ5OoAn9xNVoa1QMv2N2FkNhN88P69kf1TkZICgIcmknMw+RHFCrEy4 mNfCumvROcZSGo6CJvHxgsDMYTUhypWGyzUCz7ffj0ffnAA1LcbdkeNBwGGoWT7s bB5ajVWnHDikUz73FSfLoOtNikiGdbuExLYMn9BxfejWzDu3pcRxNCaau/zOKgtu KXT/NTRGOjgoZRcR+ib5dombL8pWMnc2TLbjf8kXnMcN9FppaWKsZFsITRVaJj7W wrtcvPgcJoBqU2QR1bi7+b0z89GLXORamHZlbPJj68OuxDrTpgp2HaqWATV2VW4v YSnwMLMaxF8= -----END CERTIFICATE-----Generated at Mon May 13 07:28:53 2024 by rpki-client on console-ams.rpki-client.org