$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4FB7C576376811E9847C6223C4F9AE02.roa File: 4FB7C576376811E9847C6223C4F9AE02.roa (raw, json) Hash identifier: qzPjyr9EpmNtUu1Sgb+DxHbEaZiwqxj6sIunF5BOJKY= Subject key identifier: A7:94:02:A3:EB:1E:C5:48:F0:0F:F9:52:16:9C:33:D5:00:7E:56:B0 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 262B Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4FB7C576376811E9847C6223C4F9AE02.roa Signing time: Sun 06 Aug 2023 16:12:53 +0000 ROA not before: Sun 06 Aug 2023 16:12:53 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 138631 IP address blocks: 2402:9e80:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9771 (0x262b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 6 16:12:53 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cfc685-d948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9e:57:10:e8:68:2f:f1:db:07:b1:76:51:63: 09:9e:22:07:1a:eb:51:d3:08:3d:f2:ce:32:97:f6: 65:7e:98:75:b1:c3:3e:b1:03:10:80:59:06:fa:bf: 49:ab:56:bc:d0:7b:26:b5:ae:82:af:32:ed:a8:84: 96:9c:4c:86:53:70:f2:7d:04:1f:26:c1:46:81:de: cd:90:07:0e:f4:8e:d2:5f:dd:e7:69:b1:76:97:fd: a2:3e:5b:d0:0e:d2:ed:3b:7b:3f:19:39:5d:d1:4f: af:f3:bf:29:98:4f:6e:c1:89:8b:0e:0b:8b:fb:04: 03:03:02:96:51:f5:5b:4a:c8:5d:bd:b9:dc:e3:65: 1a:cc:4c:25:9c:a3:c1:cb:6d:c0:24:84:cd:db:73: 1e:31:26:b7:fc:78:0e:de:31:f9:28:10:5e:53:7b: 04:b5:e1:7e:84:18:e8:d1:dd:22:ea:1a:7d:8b:00: 73:2b:a2:91:da:86:97:2f:ce:31:0e:6d:10:7a:95: 4f:9f:78:9a:1a:f0:d4:1d:e5:0c:7a:39:b3:11:e9: 3c:f6:da:43:52:fd:ac:bc:1e:b1:92:a3:f0:8b:25: f8:c6:a6:db:00:46:c9:65:df:df:0f:6d:1e:c9:33: 8c:8e:58:f3:97:d5:5a:6b:f2:d0:67:76:27:ab:66: 4d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:94:02:A3:EB:1E:C5:48:F0:0F:F9:52:16:9C:33:D5:00:7E:56:B0 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4FB7C576376811E9847C6223C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:43::/48 Signature Algorithm: sha256WithRSAEncryption b5:c4:31:82:69:2d:c3:2d:a2:22:ab:8f:7e:43:60:98:c4:a4: 66:3c:a2:50:dc:e4:90:ff:02:40:7b:8d:6a:7e:a2:e3:40:99: 99:1f:df:e9:d7:e1:99:76:d3:b1:ff:c8:c5:65:0f:ea:ad:22: 0e:22:c7:3c:fa:d9:f1:49:29:c6:57:65:88:56:e1:35:0e:78: b2:b9:74:a1:26:09:b9:ad:bf:72:c3:c9:05:5c:2a:b3:d0:5a: 53:ab:b2:33:f2:6a:a1:ce:56:52:79:83:d0:8a:e6:71:0f:a3: e7:40:41:95:8c:c5:37:6b:b0:02:c4:65:f1:89:69:97:84:3e: 9a:40:ac:4d:fa:0c:f3:e5:56:cd:c6:d1:19:18:aa:47:2a:14: 92:57:2f:b6:00:47:34:c3:3d:c2:42:45:3f:79:5d:ec:9e:e2: 5e:f6:0e:8c:ce:2c:0e:58:35:d5:fe:ea:3f:2f:5d:fa:f0:ce: cb:36:04:b0:ea:cf:22:b2:43:42:c7:1a:62:12:2a:ca:5e:9a: d0:0c:8a:27:51:b6:be:e5:72:88:fa:db:61:95:28:c2:28:0d: 4d:ce:0e:d6:c4:fb:ec:23:eb:0a:13:de:c7:af:5e:7b:f6:5f: 53:9e:82:eb:d6:71:ec:da:ec:0e:5d:43:98:75:88:30:38:69: f9:9f:52:3e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjMwODA2MTYxMjUzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNmYzY4NS1kOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Z5XEOhoL/HbB7F2UWMJniIHGutR0wg98s4yl/Zlfph1scM+sQMQgFkG+r9J q1a80Hsmta6CrzLtqISWnEyGU3DyfQQfJsFGgd7NkAcO9I7SX93nabF2l/2iPlvQ DtLtO3s/GTld0U+v878pmE9uwYmLDguL+wQDAwKWUfVbSshdvbnc42UazEwlnKPB y23AJITN23MeMSa3/HgO3jH5KBBeU3sEteF+hBjo0d0i6hp9iwBzK6KR2oaXL84x Dm0QepVPn3iaGvDUHeUMejmzEek89tpDUv2svB6xkqPwiyX4xqbbAEbJZd/fD20e yTOMjljzl9Vaa/LQZ3Ynq2ZN0wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKeUAqPr HsVI8A/5UhacM9UAflawMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNEZCN0M1NzYz NzY4MTFFOTg0N0M2MjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AAEMwDQYJKoZIhvcNAQELBQADggEBALXEMYJpLcMt oiKrj35DYJjEpGY8olDc5JD/AkB7jWp+ouNAmZkf3+nX4Zl207H/yMVlD+qtIg4i xzz62fFJKcZXZYhW4TUOeLK5dKEmCbmtv3LDyQVcKrPQWlOrsjPyaqHOVlJ5g9CK 5nEPo+dAQZWMxTdrsALEZfGJaZeEPppArE36DPPlVs3G0RkYqkcqFJJXL7YARzTD PcJCRT95Xeye4l72DozOLA5YNdX+6j8vXfrwzss2BLDqzyKyQ0LHGmISKspemtAM iidRtr7lcoj622GVKMIoDU3ODtbE++wj6woT3sevXnv2X1OeguvWceza7A5dQ5h1 iDA4afmfUj4= -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:46 2024 by rpki-client on console-ams.rpki-client.org