$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/A90DA1C0C71611EE9465BF5EC4F9AE02.roa File: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (raw, json) Hash identifier: KO3X+kWRiKLazzrkbzu0DKHBpkxZVE3We7EWB6/aSe8= Subject key identifier: F6:0F:78:5C:A1:2F:D4:20:2F:48:34:C5:51:6A:2D:7B:C8:8C:59:02 Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Certificate serial: 92 Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/A90DA1C0C71611EE9465BF5EC4F9AE02.roa Signing time: Fri 09 Feb 2024 06:44:23 +0000 ROA not before: Fri 09 Feb 2024 06:44:23 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 400618 IP address blocks: 2401:5a0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Validity Not Before: Feb 9 06:44:23 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65c5c9c7-a694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:e8:bb:77:8a:be:3b:ae:8d:1c:1e:95:b9: e5:e6:86:69:f8:69:d4:1c:e9:fc:f1:ea:7d:e1:c5: dd:a4:ee:95:62:64:28:2d:72:42:57:69:d9:fe:42: 64:de:ed:0b:62:31:62:62:b8:62:44:75:41:3e:d2: 5c:b1:cc:82:5f:84:bc:4d:d8:ce:86:70:3f:2f:af: 49:7e:1d:95:13:dd:18:20:95:60:1d:c4:a3:c3:f0: 95:a4:a7:19:75:37:f2:c1:bf:9b:d1:95:79:55:ef: 19:9b:74:47:cc:0b:ac:21:35:0a:2e:a1:a2:39:f5: f9:4d:6c:68:cf:c4:4c:81:2a:de:13:ae:dd:af:64: 79:3b:02:d2:8c:3a:bb:57:11:58:3a:a9:60:96:fa: 79:13:da:3a:63:c5:b1:7d:f2:80:7b:49:31:60:53: 4c:54:8a:83:81:90:4e:cb:3a:b5:08:14:c9:c9:31: 18:c1:50:9b:e8:28:a7:c7:a6:ab:45:1f:47:e7:ca: e8:da:2f:d8:a9:d6:56:02:16:be:f1:bb:25:24:8a: 2f:11:52:bd:14:63:ea:61:7f:b7:65:45:1c:b4:90: 7e:a1:cb:ab:d7:f3:73:bd:b3:2b:e4:75:c9:0a:40: e3:27:39:86:6c:16:30:a4:11:26:69:78:ea:e8:e7: 5b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0F:78:5C:A1:2F:D4:20:2F:48:34:C5:51:6A:2D:7B:C8:8C:59:02 X509v3 Authority Key Identifier: keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/A90DA1C0C71611EE9465BF5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:5a0:2000::/40 Signature Algorithm: sha256WithRSAEncryption 6b:e3:25:5c:3f:1b:85:f1:96:20:96:2b:b1:6d:1c:50:a3:57: c6:d2:62:55:cc:56:2a:b1:d6:55:6a:60:69:12:25:91:ca:3f: a1:d0:ad:63:bd:a4:a3:f6:c3:7f:2d:d2:3f:46:34:f0:fa:10: e8:26:98:7a:b1:e5:fe:f5:71:fe:29:eb:34:81:de:6e:d4:e6: 99:23:b6:1b:9b:30:00:f6:ce:03:a6:78:e1:9a:66:21:e8:33: 8e:a0:40:69:e2:a5:b7:e1:43:72:dc:6e:93:c3:6a:08:19:bb: 87:fd:57:fb:d7:32:70:0b:b6:22:22:18:b7:bc:93:74:22:43: 50:39:1a:62:79:4e:df:74:e0:19:30:6b:df:3d:c2:96:7b:f7: d4:b5:29:7a:f3:20:10:e4:dd:a2:95:c4:c0:3c:ae:79:3f:9c: 5c:0a:32:ae:ed:ef:32:3f:6a:fd:a7:f8:2a:8e:d3:99:b1:bb: d3:bc:79:fb:be:73:29:ac:bb:d7:1b:20:69:c1:ce:c6:83:a6: b2:7d:bb:40:69:16:fd:92:ee:64:10:43:ea:13:09:ae:3b:e8: 12:e8:7c:b9:fa:c0:f4:dc:02:09:99:94:83:dd:4d:5e:48:d7: 15:4e:a4:bd:bd:a8:bc:ba:a7:e1:37:b6:bc:54:02:08:29:17: 26:30:75:17 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3 NDYxOTkzODMwHhcNMjQwMjA5MDY0NDIzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM1YzljNy1hNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9bou3eKvjuujRwelbnl5oZp+GnUHOn88ep94cXdpO6VYmQoLXJCV2nZ/kJk 3u0LYjFiYrhiRHVBPtJcscyCX4S8TdjOhnA/L69Jfh2VE90YIJVgHcSjw/CVpKcZ dTfywb+b0ZV5Ve8Zm3RHzAusITUKLqGiOfX5TWxoz8RMgSreE67dr2R5OwLSjDq7 VxFYOqlglvp5E9o6Y8WxffKAe0kxYFNMVIqDgZBOyzq1CBTJyTEYwVCb6Cinx6ar RR9H58ro2i/YqdZWAha+8bslJIovEVK9FGPqYX+3ZUUctJB+ocur1/NzvbMr5HXJ CkDjJzmGbBYwpBEmaXjq6OdbXQIDAQABo4IClzCCApMwHQYDVR0OBBYEFPYPeFyh L9QgL0g0xVFqLXvIjFkCMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTcxMEUvQzkzRTE3OEEwMUI1MTFFRTg5RjZFQjc4QzRGOUFFMDIvQTkwREExQzBD NzE2MTFFRTk0NjVCRjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkAQWgIDANBgkqhkiG9w0BAQsFAAOCAQEAa+MlXD8bhfGW IJYrsW0cUKNXxtJiVcxWKrHWVWpgaRIlkco/odCtY72ko/bDfy3SP0Y08PoQ6CaY erHl/vVx/inrNIHebtTmmSO2G5swAPbOA6Z44ZpmIegzjqBAaeKlt+FDctxuk8Nq CBm7h/1X+9cycAu2IiIYt7yTdCJDUDkaYnlO33TgGTBr3z3Clnv31LUpevMgEOTd opXEwDyueT+cXAoyru3vMj9q/af4Ko7TmbG707x5+75zKay71xsgacHOxoOmsn27 QGkW/ZLuZBBD6hMJrjvoEuh8ufrA9NwCCZmUg91NXkjXFU6kvb2ovLqn4Te2vFQC CCkXJjB1Fw== -----END CERTIFICATE-----Generated at Wed May 1 07:55:37 2024 by rpki-client on console-fra.rpki-client.org