$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa File: 4239C32A61C211E9B8967426C4F9AE02.roa (raw, json) Hash identifier: /Wt1Z8ZJ6pWEHDdoPKqKbe9iqHVuyV2AhukpepB9rOg= Subject key identifier: 4A:06:89:8E:86:7F:39:30:52:CF:54:55:01:71:67:99:A6:8F:01:4D Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 262D Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa Signing time: Sun 06 Aug 2023 16:12:55 +0000 ROA not before: Sun 06 Aug 2023 16:12:55 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 138686 IP address blocks: 2402:e380:8c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9773 (0x262d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 6 16:12:55 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cfc687-66a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:a5:21:cc:13:8c:9a:3d:58:55:4f:b9:ba: 7f:22:17:a9:8c:12:37:43:6a:d6:5c:72:7f:66:2a: 43:3a:c8:74:ec:c4:e2:c5:46:8f:a1:af:52:5e:37: f5:4b:ef:4e:0d:15:34:f6:0d:d4:57:bf:73:18:d4: 58:f4:19:67:4b:2f:3f:31:93:2c:57:52:f5:8e:0d: db:9d:27:7d:cf:cd:37:40:93:2d:ab:9e:e1:ea:81: 5e:b8:82:89:45:08:b8:db:37:6b:e9:d6:e2:9d:cd: 71:5e:f3:56:3b:51:d2:4b:6a:15:e4:ac:fe:61:8e: 7a:c3:9c:22:20:c3:54:5f:af:5d:8b:fe:1f:9b:79: 4a:74:e6:23:67:6d:b9:fb:eb:7d:45:16:db:ac:67: 5d:e2:9d:d0:e5:35:d4:4e:c1:8c:f4:a3:2c:d3:14: 75:a5:9d:24:5c:c7:7b:af:73:da:80:da:3b:11:76: 7c:74:9b:c2:65:d5:34:31:23:8c:b0:ff:ba:04:ab: 0f:2c:10:10:65:44:56:d3:d8:e1:e8:12:a6:67:ec: 41:b4:cb:cb:df:2f:8b:54:63:57:91:83:bb:ee:7f: 87:36:cc:49:15:1a:e8:c4:9a:b9:8e:0e:e5:f9:d8: e0:d8:53:14:7d:c9:cc:71:45:bd:2c:68:66:95:f2: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:06:89:8E:86:7F:39:30:52:CF:54:55:01:71:67:99:A6:8F:01:4D X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:e380:8c::/46 Signature Algorithm: sha256WithRSAEncryption 88:e3:e8:42:ff:81:43:09:dc:0a:bb:93:b4:a5:65:6e:ae:39: 89:8f:a5:07:8b:cc:0c:5c:17:1b:d0:75:aa:80:41:c9:5b:3d: 42:ac:24:b1:3d:2b:70:4b:50:e0:2e:f0:a9:0b:14:2e:8e:2d: 94:29:18:15:08:77:1a:b6:14:cc:fa:3b:d8:45:c8:72:44:86: da:4b:88:3c:90:67:b2:fa:95:66:90:6a:7a:da:4e:6a:ed:95: 03:82:69:ab:bf:87:43:15:f7:bd:7a:20:12:86:24:30:c5:56: 03:38:23:49:fc:6e:ad:62:1a:29:ae:44:25:59:b8:56:10:9d: 20:41:34:b1:96:3d:6c:23:bf:62:f2:64:99:b6:de:30:a4:89: 88:39:e9:8d:d2:e8:fb:4d:7d:12:d3:8f:1e:b3:5e:12:77:fa: 1b:b7:04:32:17:55:eb:e8:34:94:fd:07:b7:ab:d3:a1:19:d3: 57:0c:f5:18:11:e5:56:30:1d:aa:48:0a:56:bb:28:7f:84:2b: 7b:17:d1:5c:7b:de:29:a8:b6:41:df:91:db:71:63:00:e5:11: 0f:fe:69:38:bc:c7:cc:6d:ed:92:e9:f0:d8:cb:86:32:c1:da: f0:1d:e8:95:39:a6:f2:de:a3:ce:a9:0d:fa:18:ae:ae:5b:b0: 5c:fd:ef:f3 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjMwODA2MTYxMjU1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNmYzY4Ny02NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsqlIcwTjJo9WFVPubp/IhepjBI3Q2rWXHJ/ZipDOsh07MTixUaPoa9SXjf1 S+9ODRU09g3UV79zGNRY9BlnSy8/MZMsV1L1jg3bnSd9z803QJMtq57h6oFeuIKJ RQi42zdr6dbinc1xXvNWO1HSS2oV5Kz+YY56w5wiIMNUX69di/4fm3lKdOYjZ225 ++t9RRbbrGdd4p3Q5TXUTsGM9KMs0xR1pZ0kXMd7r3PagNo7EXZ8dJvCZdU0MSOM sP+6BKsPLBAQZURW09jh6BKmZ+xBtMvL3y+LVGNXkYO77n+HNsxJFRroxJq5jg7l +djg2FMUfcnMcUW9LGhmlfIniQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEoGiY6G fzkwUs9UVQFxZ5mmjwFNMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDIzOUMzMkE2 MUMyMTFFOUI4OTY3NDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwIkAuOAAIwwDQYJKoZIhvcNAQELBQADggEBAIjj6EL/gUMJ 3Aq7k7SlZW6uOYmPpQeLzAxcFxvQdaqAQclbPUKsJLE9K3BLUOAu8KkLFC6OLZQp GBUIdxq2FMz6O9hFyHJEhtpLiDyQZ7L6lWaQanraTmrtlQOCaau/h0MV9716IBKG JDDFVgM4I0n8bq1iGimuRCVZuFYQnSBBNLGWPWwjv2LyZJm23jCkiYg56Y3S6PtN fRLTjx6zXhJ3+hu3BDIXVevoNJT9B7er06EZ01cM9RgR5VYwHapICla7KH+EK3sX 0Vx73imotkHfkdtxYwDlEQ/+aTi8x8xt7ZLp8NjLhjLB2vAd6JU5pvLeo86pDfoY rq5bsFz97/M= -----END CERTIFICATE-----Generated at Tue Apr 30 18:56:56 2024 by rpki-client on console-fra.rpki-client.org