$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa File: 4239C32A61C211E9B8967426C4F9AE02.roa (raw, json) Hash identifier: u72uXA31Lv8jAYBmji/tVu+umDVdG7pS68qyRP1oSOQ= Subject key identifier: 87:C2:B3:35:66:FE:BB:8C:07:4A:AF:8B:B2:AB:63:43:65:D6:89:96 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2757 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa Signing time: Tue 30 Jul 2024 16:04:00 +0000 ROA not before: Tue 30 Jul 2024 16:04:00 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138686 IP address blocks: 2402:e380:8c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10071 (0x2757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 30 16:04:00 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a90ef0-5455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:52:a7:03:33:1f:bb:4d:42:3f:05:79:07: b8:f8:4b:23:cc:5b:ee:cc:13:4b:35:0e:e1:35:e4: 6b:63:d5:00:a0:0b:05:65:25:cc:27:b1:af:6e:98: e7:c2:08:17:39:2f:99:2b:56:6b:be:9a:6a:3e:36: 03:b0:d4:c5:19:7e:63:0d:1a:c9:1a:8b:44:d6:e2: bf:01:01:ad:4f:ff:5f:b4:20:09:3b:af:15:ef:d3: 77:b6:ec:35:be:c0:12:f9:7a:08:a9:3d:00:60:c7: 22:2d:79:9e:27:cf:9e:14:43:4f:80:ce:bf:fd:d6: fb:ae:06:15:f7:b8:cd:ff:55:13:6a:53:4a:20:49: b9:5b:64:0c:fc:c3:ed:61:86:9b:34:af:3d:b2:9e: 9f:49:ae:90:10:fb:4f:fe:ca:65:66:4f:94:3d:86: be:53:40:c3:7b:8f:8c:bc:a5:66:ba:80:95:16:52: a7:dc:eb:4e:12:90:c4:bb:86:a6:b0:33:00:8b:25: 9b:ac:2f:a4:ca:d0:32:fd:5c:50:cd:5d:e0:c7:12: 30:21:e5:c7:90:c7:16:9c:80:a5:07:01:d2:7f:9e: 67:b3:c8:de:2c:ef:2d:2b:d3:13:be:ef:ff:fd:1e: c4:f5:42:60:e0:8d:f2:eb:e8:27:8f:2b:c3:e6:07: aa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C2:B3:35:66:FE:BB:8C:07:4A:AF:8B:B2:AB:63:43:65:D6:89:96 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:e380:8c::/46 Signature Algorithm: sha256WithRSAEncryption 45:ed:c1:fa:d0:8d:c7:2a:32:28:7a:ec:09:e7:1b:4d:e7:2f: 27:f5:ac:3a:74:79:fc:f1:c9:d2:dd:2f:61:0d:a4:9c:35:93: f4:61:1d:93:59:d6:ab:38:17:4a:96:e8:71:dd:d1:2c:15:09: 30:4f:27:c6:5b:da:26:94:db:e5:bc:1d:ec:8d:87:9e:b6:ca: 45:9d:06:7c:fc:5e:20:10:82:67:76:2c:45:ec:8d:68:f6:1f: 20:e4:41:99:80:16:11:fa:80:33:d1:5a:4d:73:6f:b4:c0:21: 64:20:62:4b:87:19:57:2e:5b:4d:d9:22:7a:05:db:3d:05:1c: 78:32:5e:28:3e:ee:1c:f0:1f:e6:bc:ae:79:f4:03:a3:a0:8a: 35:47:e3:cb:2a:e8:36:47:4e:d2:56:2e:29:ff:a3:65:da:b4: 8b:18:da:50:96:d1:d6:d7:6f:15:bc:2b:49:73:b3:07:c2:83: 56:af:a5:86:ff:b6:31:b3:e5:a5:ab:68:2f:1a:bd:be:ec:34: 3c:bc:72:d0:09:6b:e0:fa:5a:65:1b:eb:21:4c:05:4a:fe:fd: b4:53:db:6b:9f:57:fe:07:f1:b9:62:c8:72:e7:cb:bc:d0:cf: 1f:a0:bf:a7:a9:bd:e7:55:45:be:0e:04:24:8b:bb:bd:95:53: 8e:5a:fc:b3 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJ1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjQwNzMwMTYwNDAwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGVmMC01NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxi5SpwMzH7tNQj8FeQe4+EsjzFvuzBNLNQ7hNeRrY9UAoAsFZSXMJ7Gvbpjn wggXOS+ZK1ZrvppqPjYDsNTFGX5jDRrJGotE1uK/AQGtT/9ftCAJO68V79N3tuw1 vsAS+XoIqT0AYMciLXmeJ8+eFENPgM6//db7rgYV97jN/1UTalNKIEm5W2QM/MPt YYabNK89sp6fSa6QEPtP/splZk+UPYa+U0DDe4+MvKVmuoCVFlKn3OtOEpDEu4am sDMAiyWbrC+kytAy/VxQzV3gxxIwIeXHkMcWnIClBwHSf55ns8jeLO8tK9MTvu// /R7E9UJg4I3y6+gnjyvD5geqaQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIfCszVm /ruMB0qvi7KrY0Nl1omWMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDIzOUMzMkE2 MUMyMTFFOUI4OTY3NDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwIkAuOAAIwwDQYJKoZIhvcNAQELBQADggEBAEXtwfrQjccq Mih67AnnG03nLyf1rDp0efzxydLdL2ENpJw1k/RhHZNZ1qs4F0qW6HHd0SwVCTBP J8Zb2iaU2+W8HeyNh562ykWdBnz8XiAQgmd2LEXsjWj2HyDkQZmAFhH6gDPRWk1z b7TAIWQgYkuHGVcuW03ZInoF2z0FHHgyXig+7hzwH+a8rnn0A6OgijVH48sq6DZH TtJWLin/o2XatIsY2lCW0dbXbxW8K0lzswfCg1avpYb/tjGz5aWraC8avb7sNDy8 ctAJa+D6WmUb6yFMBUr+/bRT22ufV/4H8bliyHLny7zQzx+gv6epvedVRb4OBCSL u72VU45a/LM= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:38 2024 by rpki-client on console-fra.rpki-client.org