$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa File: 41C6F41AB84A11E98246736CC4F9AE02.roa (raw, json) Hash identifier: NsG8Yym5x5YJhEE8TufznJsUv5yfLQb4efscI1Gv6KI= Subject key identifier: C1:D3:31:43:F0:70:79:42:4A:A6:00:A3:CB:B2:63:79:52:09:20:5F Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2631 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa Signing time: Sun 06 Aug 2023 16:12:59 +0000 ROA not before: Sun 06 Aug 2023 16:12:59 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139308 IP address blocks: 2402:9e80:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9777 (0x2631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 6 16:12:59 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cfc68a-9a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:ae:20:1d:71:ac:de:4d:8d:62:a2:11:b0: f4:1e:13:5a:6f:d5:f9:5e:8a:28:67:1e:52:27:dd: 51:d2:a3:14:c0:8e:c9:40:eb:6b:c0:df:c1:88:0d: d5:23:06:9f:15:34:03:49:80:ff:a1:14:8a:8e:7a: 82:0d:87:da:3d:22:5b:25:f9:ae:a1:b6:96:c9:63: 36:00:ab:08:58:58:e1:b9:b3:0a:76:bf:1f:03:85: 23:6d:dd:9b:88:a7:76:0e:0a:66:a0:ad:79:c4:ba: 4e:54:5f:cd:73:c0:cb:31:74:7a:b1:b2:33:db:49: 50:f0:c4:22:f4:b5:e0:c1:05:2e:5c:63:2c:7f:46: 50:58:93:99:81:0e:85:3b:6a:de:c5:94:c1:cb:11: 1c:a5:ce:c7:19:a0:5f:68:32:c0:da:80:a1:49:c7: 98:0f:5f:f8:4a:cd:c5:54:1d:7f:95:8c:35:e3:cc: bb:c1:d0:19:24:6a:74:14:1e:23:e8:c7:d9:d6:37: 23:82:88:5c:11:39:dc:44:4e:38:13:75:15:c1:8b: f3:47:8c:80:6c:89:c3:0a:08:ea:8f:04:1a:e7:f2: 4d:62:2b:d5:04:51:93:7d:53:35:d3:a0:49:c5:64: e8:c2:d3:c5:2c:03:3f:f4:ef:60:39:ea:8d:f9:b5: 3f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D3:31:43:F0:70:79:42:4A:A6:00:A3:CB:B2:63:79:52:09:20:5F X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/41C6F41AB84A11E98246736CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:100::/40 Signature Algorithm: sha256WithRSAEncryption 79:b9:52:21:72:d2:f5:1f:54:97:f2:72:e0:05:c6:7f:16:a0: a2:01:70:cc:2b:30:a2:ee:2e:85:25:6e:ce:ce:65:6d:c8:31: 27:f3:77:8b:a8:a8:72:0c:7b:2f:ea:15:1b:06:42:1e:d2:c5: 7a:15:79:73:b8:ac:c4:d5:63:fb:cf:38:0a:fd:c6:10:6d:30: d3:9b:d1:88:58:59:ee:1c:60:43:ec:b7:31:40:d3:9b:0c:3a: 95:ed:ec:48:7d:bd:f0:88:24:ed:e1:50:f5:49:02:a2:6a:f7: 17:8b:e3:6c:87:d3:eb:c2:85:ec:6f:47:c3:e7:11:c7:c6:bf: 04:b4:41:d6:69:7f:b4:9f:ac:55:57:66:32:4b:c8:70:61:0c: 8a:0b:a1:b8:8c:0a:8f:24:67:05:46:ca:d3:94:88:5e:5c:60: 24:a1:5a:cc:05:c9:d1:df:2b:1c:cb:60:d2:92:d5:91:93:57: 8c:08:ef:9d:2c:c2:64:a6:e1:39:a1:6d:9d:73:a3:f5:05:b2: fd:5b:8a:03:83:b5:86:2a:26:c0:2b:5b:43:7e:cb:9c:57:85: 21:86:9d:7f:8c:2f:a2:5a:77:b6:2d:1e:0d:7c:1c:0f:ef:e3: b6:4a:77:d5:51:dc:35:b8:81:a4:83:94:81:4b:5a:dc:53:91: 7c:dd:84:1f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICJjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjMwODA2MTYxMjU5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNmYzY4YS05YTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLquIB1xrN5NjWKiEbD0HhNab9X5XoooZx5SJ91R0qMUwI7JQOtrwN/BiA3V IwafFTQDSYD/oRSKjnqCDYfaPSJbJfmuobaWyWM2AKsIWFjhubMKdr8fA4Ujbd2b iKd2DgpmoK15xLpOVF/Nc8DLMXR6sbIz20lQ8MQi9LXgwQUuXGMsf0ZQWJOZgQ6F O2rexZTByxEcpc7HGaBfaDLA2oChSceYD1/4Ss3FVB1/lYw148y7wdAZJGp0FB4j 6MfZ1jcjgohcETncRE44E3UVwYvzR4yAbInDCgjqjwQa5/JNYivVBFGTfVM106BJ xWTowtPFLAM/9O9gOeqN+bU/RQIDAQABo4IClzCCApMwHQYDVR0OBBYEFMHTMUPw cHlCSqYAo8uyY3lSCSBfMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDFDNkY0MUFC ODRBMTFFOTgyNDY3MzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkAp6AATANBgkqhkiG9w0BAQsFAAOCAQEAeblSIXLS9R9U l/Jy4AXGfxagogFwzCswou4uhSVuzs5lbcgxJ/N3i6iocgx7L+oVGwZCHtLFehV5 c7isxNVj+884Cv3GEG0w05vRiFhZ7hxgQ+y3MUDTmww6le3sSH298Igk7eFQ9UkC omr3F4vjbIfT68KF7G9Hw+cRx8a/BLRB1ml/tJ+sVVdmMkvIcGEMiguhuIwKjyRn BUbK05SIXlxgJKFazAXJ0d8rHMtg0pLVkZNXjAjvnSzCZKbhOaFtnXOj9QWy/VuK A4O1hiomwCtbQ37LnFeFIYadf4wvolp3ti0eDXwcD+/jtkp31VHcNbiBpIOUgUta 3FORfN2EHw== -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:46 2024 by rpki-client on console-ams.rpki-client.org