$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa File: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (raw, json) Hash identifier: VBJprD7+TtKMLPbz8klB2orCy+U8Nc+n0lT8H2YEjQs= Subject key identifier: 44:2B:9C:EE:50:BA:6D:42:A9:28:6F:DE:14:CB:1D:1B:F6:E4:81:EF Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2754 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa Signing time: Tue 30 Jul 2024 16:03:57 +0000 ROA not before: Tue 30 Jul 2024 16:03:57 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138564 IP address blocks: 2402:9e80:42::/48 maxlen: 48 2402:9e80:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10068 (0x2754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 30 16:03:57 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a90eed-cbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:42:69:c7:9c:fd:7f:8a:87:01:69:65:c6: 0d:a0:a7:78:7d:58:58:aa:20:61:eb:05:9c:4c:63: e4:65:d8:40:7e:80:e4:46:08:f1:7e:2c:d1:25:bf: 9b:16:fa:8a:4e:93:ff:18:5f:64:09:e5:15:c8:d7: 8a:9e:4b:f1:d0:58:99:70:90:df:f9:1a:ad:14:df: 7f:83:9f:bc:00:76:b5:48:b7:32:4b:63:e1:fc:aa: f4:69:c3:75:78:08:a5:b5:42:9a:b1:5b:5b:ff:d7: 06:5f:d5:52:23:ea:84:f5:40:29:8a:6d:a7:a0:c7: 10:8b:2e:28:b5:f8:e7:e9:08:a1:2c:b7:42:c9:96: e6:5a:13:3e:e7:52:90:dd:18:47:56:b1:ce:ad:de: 0d:1e:a2:d1:e4:93:38:86:a9:87:76:22:48:dd:ab: ac:e7:e7:82:bc:0a:fa:1a:28:3b:70:88:41:d7:91: ba:7f:67:0b:64:0b:c3:11:d5:3f:5a:18:8e:de:f4: bd:bf:98:28:4a:86:93:2d:b5:86:7b:1e:d9:e5:92: a4:ec:0f:8e:71:9f:75:73:36:4e:48:b1:18:38:0e: 8f:61:c5:17:20:1a:a5:b7:11:1e:09:35:27:59:cc: 18:68:b7:85:87:1f:57:54:e0:e0:25:3a:2d:14:70: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2B:9C:EE:50:BA:6D:42:A9:28:6F:DE:14:CB:1D:1B:F6:E4:81:EF X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/77C98D46C8E011EA9FF8027AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:42::/48 2402:9e80:a00::/40 Signature Algorithm: sha256WithRSAEncryption cb:af:99:80:00:25:da:bd:28:dc:64:88:87:87:e1:fa:45:d9: e4:ee:ba:31:0d:2a:58:c2:f9:af:e1:c5:9d:93:36:57:87:71: 04:14:c7:41:92:7b:dc:96:b3:32:00:cf:40:05:fa:3c:a2:ac: f3:2f:cf:6d:1d:1a:70:3a:7b:bd:e5:4d:bc:26:9f:9b:0a:09: 02:2b:3b:4a:32:a8:c4:df:56:f3:2e:30:95:1f:f7:76:6d:ac: b5:76:5e:64:31:6f:19:aa:7e:03:5d:90:75:1b:a5:0f:e5:08: 00:6b:76:46:63:1a:21:9f:2a:eb:ce:3c:56:0e:eb:75:47:f7: eb:b8:96:47:6e:8d:15:be:3e:df:43:54:07:d4:7c:67:ff:91: 59:0a:26:d9:63:4a:79:7c:29:d5:a1:30:df:a5:7b:58:19:f3: ca:de:21:25:c0:ae:15:eb:8f:13:17:24:c3:e9:42:7d:a0:d6: 7d:bc:0e:60:d7:29:cd:e4:be:92:61:55:4b:e3:a2:c9:02:12: 25:99:7e:b4:61:82:ba:27:e4:87:ea:4e:44:ab:b6:50:cf:52: f8:98:85:d9:a8:37:39:ac:3c:aa:00:cf:93:08:b6:f4:bf:37: 87:a6:7b:da:29:82:0b:d2:61:67:79:8c:f8:df:8f:00:cb:09: 5c:3e:7c:32 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICJ1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjQwNzMwMTYwMzU3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGVlZC1jYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24VCacec/X+KhwFpZcYNoKd4fVhYqiBh6wWcTGPkZdhAfoDkRgjxfizRJb+b FvqKTpP/GF9kCeUVyNeKnkvx0FiZcJDf+RqtFN9/g5+8AHa1SLcyS2Ph/Kr0acN1 eAiltUKasVtb/9cGX9VSI+qE9UApim2noMcQiy4otfjn6QihLLdCyZbmWhM+51KQ 3RhHVrHOrd4NHqLR5JM4hqmHdiJI3aus5+eCvAr6Gig7cIhB15G6f2cLZAvDEdU/ WhiO3vS9v5goSoaTLbWGex7Z5ZKk7A+OcZ91czZOSLEYOA6PYcUXIBqltxEeCTUn WcwYaLeFhx9XVODgJTotFHDIEQIDAQABo4ICoDCCApwwHQYDVR0OBBYEFEQrnO5Q um1CqShv3hTLHRv25IHvMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNzdDOThENDZD OEUwMTFFQTlGRjgwMjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E GzAZMBcEAgACMBEDBwAkAp6AAEIDBgAkAp6ACjANBgkqhkiG9w0BAQsFAAOCAQEA y6+ZgAAl2r0o3GSIh4fh+kXZ5O66MQ0qWML5r+HFnZM2V4dxBBTHQZJ73JazMgDP QAX6PKKs8y/PbR0acDp7veVNvCafmwoJAis7SjKoxN9W8y4wlR/3dm2stXZeZDFv Gap+A12QdRulD+UIAGt2RmMaIZ8q6848Vg7rdUf367iWR26NFb4+30NUB9R8Z/+R WQom2WNKeXwp1aEw36V7WBnzyt4hJcCuFeuPExckw+lCfaDWfbwOYNcpzeS+kmFV S+OiyQISJZl+tGGCuifkh+pORKu2UM9S+JiF2ag3Oaw8qgDPkwi29L83h6Z72imC C9JhZ3mM+N+PAMsJXD58Mg== -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:38 2024 by rpki-client on console-fra.rpki-client.org