$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa File: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (raw, json) Hash identifier: GVBpw7aJUub44ZbJtEvSUbkIwE6PmkrwRxp/s21AmLw= Subject key identifier: 0C:7F:FE:B4:77:2D:52:24:F9:97:45:35:4F:F4:D0:FE:55:B8:45:C9 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 24CE Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa Signing time: Tue 02 Aug 2022 04:23:14 +0000 ROA not before: Tue 02 Aug 2022 04:23:14 +0000 ROA not after: Sat 30 Sep 2023 00:00:00 +0000 asID: 20473 IP address blocks: 2402:9e80:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Mar 2023 16:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9422 (0x24ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 2 04:23:14 2022 GMT Not After : Sep 30 00:00:00 2023 GMT Subject: CN=62e8a6b2-01b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7c:32:01:65:26:7a:9e:29:44:87:98:01:71: 87:5a:92:b9:84:5e:8b:a3:80:d8:f6:b8:28:10:f8: d0:c3:3b:2e:9f:b5:80:d4:5c:56:c0:60:a0:ef:f8: 59:5b:0d:2a:9c:ab:8e:e9:9d:d7:47:7d:8f:58:e4: e6:27:12:fa:09:b4:7b:53:55:09:b3:67:61:4a:28: 7e:fd:c8:99:07:66:18:45:d2:ff:3f:5f:39:13:73: ef:da:3e:a3:04:07:23:c2:be:89:1a:c1:ca:c1:dd: 56:72:1c:02:c8:ab:64:f0:7d:eb:18:2f:8f:ad:2b: c4:85:a8:d9:b8:85:0e:21:fc:f4:b8:2f:df:26:84: 25:ab:84:d1:48:b2:0c:4a:a5:70:1b:d9:58:6f:ad: a0:00:03:e6:be:69:ad:58:91:61:39:37:3c:a8:63: 0f:50:24:1f:39:df:fc:8c:74:03:32:30:0a:24:b2: d7:d3:c2:aa:90:ff:79:0a:ee:d2:aa:63:4c:55:2a: 28:41:fc:d7:52:67:e9:8f:ad:29:cd:c4:2d:cd:7e: 1f:fd:5a:d2:ac:75:69:4a:28:1f:43:9b:9c:41:03: ec:24:ec:62:d1:b5:62:9c:65:b2:0a:98:35:db:8a: 4a:c0:3a:ea:bb:18:db:b0:fa:36:aa:0b:ed:2c:52: 29:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7F:FE:B4:77:2D:52:24:F9:97:45:35:4F:F4:D0:FE:55:B8:45:C9 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:10::/48 Signature Algorithm: sha256WithRSAEncryption 02:ac:51:b9:a8:44:d6:80:4c:6a:6b:67:b7:a5:8f:ac:db:5e: 84:5a:5a:6d:1b:0c:25:c6:49:42:08:b6:1e:f0:3f:07:2f:17: df:1f:c6:57:5f:82:8a:a1:ff:72:fb:c3:56:be:ba:3d:dd:1d: f7:24:ca:2d:24:eb:a5:d9:33:15:40:9b:d7:aa:5f:35:88:5e: 24:9e:eb:bd:f9:f7:2b:cf:2a:6e:35:e8:8d:10:9c:c3:e5:a8: 36:bf:4f:e9:d2:ad:25:f5:0b:72:10:8f:38:6c:c7:53:d2:4b: 39:a3:ae:7a:b0:c0:6a:a6:2a:30:43:8f:be:b7:6b:02:56:c5: 30:df:f3:1d:2d:e8:dc:25:90:9f:ed:e4:73:9f:b3:f0:6f:9f: 7c:2f:22:a4:e2:0c:a6:7a:c2:92:a1:ae:75:e3:23:b1:c8:59: 7d:e3:71:28:73:be:c0:4c:b8:0a:68:fd:77:ee:8c:6e:72:07: c5:28:04:d5:13:c6:77:79:53:84:cd:eb:37:c7:f2:bb:07:b8: 4a:04:1a:ee:0b:39:d6:82:d9:d5:57:cb:d5:02:8f:c9:60:39: 36:db:ef:10:84:f6:a6:ba:97:55:94:55:6b:c7:d0:ae:ed:7e: ca:de:65:a1:35:2d:39:05:d0:62:c0:71:31:69:9a:dc:39:70: b0:46:2a:4f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjIwODAyMDQyMzE0WhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02MmU4YTZiMi0wMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3wyAWUmep4pRIeYAXGHWpK5hF6Lo4DY9rgoEPjQwzsun7WA1FxWwGCg7/hZ Ww0qnKuO6Z3XR32PWOTmJxL6CbR7U1UJs2dhSih+/ciZB2YYRdL/P185E3Pv2j6j BAcjwr6JGsHKwd1WchwCyKtk8H3rGC+PrSvEhajZuIUOIfz0uC/fJoQlq4TRSLIM SqVwG9lYb62gAAPmvmmtWJFhOTc8qGMPUCQfOd/8jHQDMjAKJLLX08KqkP95Cu7S qmNMVSooQfzXUmfpj60pzcQtzX4f/VrSrHVpSigfQ5ucQQPsJOxi0bVinGWyCpg1 24pKwDrquxjbsPo2qgvtLFIp8QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAx//rR3 LVIk+ZdFNU/00P5VuEXJMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvOURFOThBNzZE OUI1MTFFQkE0RkM1QjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AABAwDQYJKoZIhvcNAQELBQADggEBAAKsUbmoRNaA TGprZ7elj6zbXoRaWm0bDCXGSUIIth7wPwcvF98fxldfgoqh/3L7w1a+uj3dHfck yi0k66XZMxVAm9eqXzWIXiSe67359yvPKm416I0QnMPlqDa/T+nSrSX1C3IQjzhs x1PSSzmjrnqwwGqmKjBDj763awJWxTDf8x0t6NwlkJ/t5HOfs/Bvn3wvIqTiDKZ6 wpKhrnXjI7HIWX3jcShzvsBMuApo/XfujG5yB8UoBNUTxnd5U4TN6zfH8rsHuEoE Gu4LOdaC2dVXy9UCj8lgOTbb7xCE9qa6l1WUVWvH0K7tfsreZaE1LTkF0GLAcTFp mtw5cLBGKk8= -----END CERTIFICATE-----Generated at Wed Mar 15 11:53:11 2023 by rpki-client on console-fra.rpki-client.org