$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A085C546F64511EAAF5AD93BC4F9AE02.roa File: A085C546F64511EAAF5AD93BC4F9AE02.roa (raw, json) Hash identifier: db0U/TsFANPOKCaSANYPTiaFmXaAI4B890DaAhbxEP0= Subject key identifier: 52:7F:3A:74:99:FC:5C:D3:CB:14:EC:F2:C8:9C:FB:38:70:9A:95:89 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2752 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A085C546F64511EAAF5AD93BC4F9AE02.roa Signing time: Tue 30 Jul 2024 16:03:55 +0000 ROA not before: Tue 30 Jul 2024 16:03:55 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138408 IP address blocks: 2402:9e80:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10066 (0x2752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 30 16:03:55 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a90eeb-549d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:f0:05:23:45:3d:25:1e:3c:9a:89:7f:c5: 87:08:aa:cd:41:90:69:f5:2a:fb:7f:20:67:21:4d: 6c:a9:9d:a8:20:72:70:48:f1:1d:5f:73:a2:00:48: 82:76:32:f2:af:05:e7:24:0b:a2:1e:e6:f8:3a:3f: 67:b5:07:0f:c2:f6:33:8c:a9:70:37:6b:03:4f:93: 66:bd:79:63:a5:22:ca:8d:d3:87:9f:f5:ab:c3:18: 52:55:11:3c:25:aa:ba:2b:97:0b:c4:e7:ee:b6:4a: e9:44:4c:98:36:90:21:7a:9e:75:e7:dd:38:6a:d9: b7:dd:1a:f1:d7:f9:7b:e6:ba:52:ef:06:41:56:c1: de:35:15:e7:37:26:c4:b7:94:09:ee:48:fa:1e:0a: 50:bd:94:63:be:6f:75:e3:e4:25:b2:f8:d8:88:16: 0e:75:24:2a:b6:33:3e:8b:f8:47:ee:e9:af:fd:01: 7b:a7:5a:76:e0:85:a7:0a:9e:ce:1b:71:fe:32:a9: 0a:09:75:ad:38:1a:cd:cd:27:41:29:84:e3:62:df: 84:f3:28:d1:f8:31:66:22:00:88:ef:ba:7b:3e:b1: 18:86:fc:7e:74:0b:ec:79:3c:a9:ec:dd:ae:ff:e7: d0:31:7b:ad:e8:5e:e2:1a:45:cb:7f:e6:3c:d8:db: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7F:3A:74:99:FC:5C:D3:CB:14:EC:F2:C8:9C:FB:38:70:9A:95:89 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A085C546F64511EAAF5AD93BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:12::/48 Signature Algorithm: sha256WithRSAEncryption 79:cb:6c:9f:bc:9d:91:5c:57:5d:3a:14:ee:c5:7e:c9:9d:ac: e9:52:79:99:77:2e:db:c8:8d:3d:e5:27:e7:90:75:44:c3:78: 22:46:eb:8e:59:cc:14:61:01:c4:ac:18:7b:f8:ca:be:c5:a0: 99:27:08:9f:d5:0e:99:24:32:91:c4:ed:32:44:9d:17:c1:05: 40:6c:be:af:6d:6d:2f:b5:77:55:aa:15:2b:d7:5f:4a:78:22: 2d:d3:4b:a2:89:b2:c4:cd:de:c2:0f:3e:62:ab:df:ba:96:e8: a6:ce:92:d6:4a:79:34:fd:45:22:af:15:96:1c:b3:cb:b3:da: 21:40:55:0f:ad:0d:a7:d5:04:b6:21:d7:19:1d:36:b4:fa:fa: b9:a8:8e:82:32:ac:4a:46:7f:47:e4:04:9e:39:5e:7c:5b:7a: 8b:72:dd:f7:27:ff:20:82:60:41:2d:de:51:2a:60:aa:fd:78: b9:17:8d:a6:d6:55:58:b2:94:91:1d:28:71:ac:f1:a1:1d:47: b7:d1:85:e4:73:cd:48:60:c9:9e:53:6e:0f:38:e3:dd:c3:e9: 6f:93:ae:23:72:68:29:fe:27:24:87:8a:1a:39:55:17:2a:47: b8:5e:70:62:79:37:85:43:6b:92:61:35:ef:f7:26:b3:45:68: e3:4d:e0:24 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJ1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjQwNzMwMTYwMzU1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGVlYi01NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutzwBSNFPSUePJqJf8WHCKrNQZBp9Sr7fyBnIU1sqZ2oIHJwSPEdX3OiAEiC djLyrwXnJAuiHub4Oj9ntQcPwvYzjKlwN2sDT5NmvXljpSLKjdOHn/WrwxhSVRE8 Jaq6K5cLxOfutkrpREyYNpAhep515904atm33Rrx1/l75rpS7wZBVsHeNRXnNybE t5QJ7kj6HgpQvZRjvm914+QlsvjYiBYOdSQqtjM+i/hH7umv/QF7p1p24IWnCp7O G3H+MqkKCXWtOBrNzSdBKYTjYt+E8yjR+DFmIgCI77p7PrEYhvx+dAvseTyp7N2u /+fQMXut6F7iGkXLf+Y82NseUQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFJ/OnSZ /FzTyxTs8sic+zhwmpWJMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQTA4NUM1NDZG NjQ1MTFFQUFGNUFEOTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AABIwDQYJKoZIhvcNAQELBQADggEBAHnLbJ+8nZFc V106FO7FfsmdrOlSeZl3LtvIjT3lJ+eQdUTDeCJG645ZzBRhAcSsGHv4yr7FoJkn CJ/VDpkkMpHE7TJEnRfBBUBsvq9tbS+1d1WqFSvXX0p4Ii3TS6KJssTN3sIPPmKr 37qW6KbOktZKeTT9RSKvFZYcs8uz2iFAVQ+tDafVBLYh1xkdNrT6+rmojoIyrEpG f0fkBJ45Xnxbeoty3fcn/yCCYEEt3lEqYKr9eLkXjabWVViylJEdKHGs8aEdR7fR heRzzUhgyZ5Tbg84493D6W+TriNyaCn+JySHiho5VRcqR7hecGJ5N4VDa5JhNe/3 JrNFaONN4CQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:38 2024 by rpki-client on console-fra.rpki-client.org