$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa File: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (raw, json) Hash identifier: ZYNUMLt8+FZbOksD49SAxknb/1VgqjoVu37R/ssmcAY= Subject key identifier: CF:4B:8F:13:C9:FF:50:EB:A8:05:36:87:D1:1D:7D:7C:0F:7B:DD:09 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 276B Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa Signing time: Tue 30 Jul 2024 16:04:19 +0000 ROA not before: Tue 30 Jul 2024 16:04:19 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 20473 IP address blocks: 2402:9e80:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10091 (0x276b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 30 16:04:19 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a90f03-40d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:6c:44:ad:58:f2:46:24:9f:3c:72:0f:54: c0:30:e7:93:47:51:3b:cf:6f:d5:e0:9e:61:a1:a7: 7c:36:9b:01:41:ca:d0:a4:94:30:18:0c:91:10:43: b0:15:22:9c:90:61:3b:70:f0:bf:a9:66:3f:3a:47: db:22:68:4d:83:ce:ad:e4:bf:79:df:73:1a:fe:d1: 76:de:01:0c:f3:f6:23:bb:be:3a:0d:fb:db:22:17: 34:82:af:2f:02:27:6c:18:0d:51:de:d3:ad:25:c8: bf:63:9a:70:8c:0c:e3:1b:e3:33:ea:bd:a1:07:65: b7:59:39:32:25:5e:d1:30:7b:ee:c1:e5:a0:8e:e3: 53:b6:b8:24:a0:8f:70:43:de:e4:f0:2d:36:0c:a0: e0:09:0f:b5:95:de:bb:05:13:01:e6:f3:29:cd:ab: 30:30:ac:50:78:a5:11:b0:81:0b:a5:86:a5:2e:e6: a0:dc:7f:b2:b8:fd:3b:67:83:22:02:14:c4:19:b4: 82:c2:8a:d4:58:ce:39:4c:66:3b:85:95:3c:f6:a3: 86:4a:50:32:01:8c:67:60:03:06:f4:56:54:ba:06: 0c:7a:45:58:c6:14:14:6c:fc:62:2d:33:57:84:44: 6f:78:49:76:f4:36:ff:47:ed:05:4e:53:fa:93:63: 07:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:8F:13:C9:FF:50:EB:A8:05:36:87:D1:1D:7D:7C:0F:7B:DD:09 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:10::/48 Signature Algorithm: sha256WithRSAEncryption 33:a0:fc:5f:3f:70:51:09:56:c5:06:b4:bf:4f:5c:ba:ac:33: 99:33:e7:6d:2d:f5:42:01:7f:33:b4:7d:a5:28:ea:d8:79:05: 7d:e8:d7:4a:e1:d7:4d:4e:f6:97:66:ac:d2:ac:4a:f6:25:f1: 87:f8:17:70:e8:60:57:70:34:9f:30:25:1b:d2:cd:de:ff:43: 4a:83:b0:5e:01:21:76:f8:8e:e8:7f:e7:26:38:05:b9:dc:93: 79:e7:ad:c2:f0:ad:f5:6d:c7:06:4c:71:dc:1e:d0:89:0c:5b: 79:a4:40:33:eb:19:14:88:e2:70:d5:63:b0:ed:23:a8:90:63: d3:82:c6:c3:28:2e:26:0f:12:9f:fe:76:8d:e0:0c:09:86:60: a6:71:dd:7b:5f:21:1d:f7:48:48:7f:c4:2c:3b:c2:58:95:99: af:f6:38:f6:65:71:aa:84:1d:a7:7c:a3:28:1f:e7:fd:0c:07: 41:a2:fb:d4:3e:7a:8c:b8:4f:b2:ce:68:40:74:08:b5:8a:0c: a4:1f:e2:14:a8:d3:41:b5:5d:0d:e6:ef:2f:fb:27:a2:59:f2: 51:69:52:01:6a:f1:35:ba:f2:f4:e1:39:11:1c:f7:a2:7f:16: af:70:45:91:31:93:02:1c:66:d2:07:10:b6:2b:8e:f0:0d:55: 03:1f:5e:c9 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJ2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjQwNzMwMTYwNDE5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGYwMy00MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHlsRK1Y8kYknzxyD1TAMOeTR1E7z2/V4J5hoad8NpsBQcrQpJQwGAyREEOw FSKckGE7cPC/qWY/OkfbImhNg86t5L9533Ma/tF23gEM8/Yju746DfvbIhc0gq8v AidsGA1R3tOtJci/Y5pwjAzjG+Mz6r2hB2W3WTkyJV7RMHvuweWgjuNTtrgkoI9w Q97k8C02DKDgCQ+1ld67BRMB5vMpzaswMKxQeKURsIELpYalLuag3H+yuP07Z4Mi AhTEGbSCworUWM45TGY7hZU89qOGSlAyAYxnYAMG9FZUugYMekVYxhQUbPxiLTNX hERveEl29Db/R+0FTlP6k2MH7wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFM9LjxPJ /1DrqAU2h9EdfXwPe90JMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvOURFOThBNzZE OUI1MTFFQkE0RkM1QjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AABAwDQYJKoZIhvcNAQELBQADggEBADOg/F8/cFEJ VsUGtL9PXLqsM5kz520t9UIBfzO0faUo6th5BX3o10rh101O9pdmrNKsSvYl8Yf4 F3DoYFdwNJ8wJRvSzd7/Q0qDsF4BIXb4juh/5yY4Bbnck3nnrcLwrfVtxwZMcdwe 0IkMW3mkQDPrGRSI4nDVY7DtI6iQY9OCxsMoLiYPEp/+do3gDAmGYKZx3XtfIR33 SEh/xCw7wliVma/2OPZlcaqEHad8oygf5/0MB0Gi+9Q+eoy4T7LOaEB0CLWKDKQf 4hSo00G1XQ3m7y/7J6JZ8lFpUgFq8TW68vThOREc96J/Fq9wRZExkwIcZtIHELYr jvANVQMfXsk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:00 2024 by rpki-client on console-ams.rpki-client.org