$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/9017F7B806EC11EF8B407A22C4F9AE02.roa File: 9017F7B806EC11EF8B407A22C4F9AE02.roa (raw, json) Hash identifier: UgVGY+YeFe0NAWcUq6eAo2DeGkLVFztnk4i2uQnCQLY= Subject key identifier: DD:C1:84:5A:C0:7B:52:D0:E2:A2:79:A9:E2:56:D5:E9:1F:84:5E:89 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 04C0 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/9017F7B806EC11EF8B407A22C4F9AE02.roa Signing time: Tue 30 Apr 2024 12:24:17 +0000 ROA not before: Tue 30 Apr 2024 12:24:17 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 142559 IP address blocks: 2001:df6:f580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: Apr 30 12:24:17 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=6630e2f1-c334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:64:89:66:a6:de:ff:8e:82:3e:73:9c:fa: 08:53:aa:ce:d4:13:6f:e1:28:dc:d9:08:e4:21:f4: ce:8a:b8:a3:35:32:33:3d:76:6d:d8:22:68:12:b6: 8d:39:19:86:e4:22:81:69:a1:64:90:37:98:4c:db: 39:42:e5:a6:3d:cd:38:1f:d0:f1:5a:6f:45:93:be: 18:ae:02:22:ee:27:3a:9c:ef:cb:02:11:4e:74:92: b0:e1:68:ab:d7:70:7c:f0:5c:5c:d5:a7:51:5b:1c: d3:20:97:6d:a9:e9:82:38:82:a0:53:b4:a2:a2:a7: 78:46:17:f3:79:bd:38:f2:7b:d2:35:77:5d:ac:39: 7c:02:d8:1d:01:54:07:7f:fa:52:f0:de:43:2b:73: 31:95:84:f7:bb:ac:3e:67:e8:70:eb:5d:39:4c:42: 95:25:a6:97:13:39:51:41:7d:ea:be:98:b2:43:aa: 03:7a:3e:98:2a:c3:f7:3d:da:c2:df:10:45:8b:fb: 89:76:6b:e1:54:95:b3:95:a2:e1:34:a0:87:63:f7: 22:9c:df:95:e2:7d:eb:db:25:01:53:6f:d2:66:36: 95:49:44:2a:ea:e7:5b:af:91:cf:97:15:96:95:00: 9f:3e:e1:d0:cb:f4:d2:8a:c4:be:40:c5:d3:6c:4d: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C1:84:5A:C0:7B:52:D0:E2:A2:79:A9:E2:56:D5:E9:1F:84:5E:89 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/9017F7B806EC11EF8B407A22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:f580::/48 Signature Algorithm: sha256WithRSAEncryption b2:15:2d:14:d0:2b:35:4b:79:3f:97:a3:df:bf:88:12:8b:fb: 9e:f2:c5:c4:49:ca:13:9a:d2:9a:c2:51:54:d4:1c:50:9e:99: a2:fa:2f:44:83:07:f1:6e:6e:9d:95:28:ec:39:2c:c8:3d:69: 31:8a:7b:ff:fb:b5:27:84:da:4e:e8:3b:80:e7:79:f1:c3:dc: c7:48:e7:44:09:86:3f:0e:2f:f8:4a:10:a1:cd:b3:e2:15:58: 94:a7:05:7c:0e:88:c2:67:af:6e:b9:99:9f:5d:6f:28:f0:5d: 81:fc:c5:80:e6:6c:75:5c:ec:90:6a:1a:4e:c2:52:50:21:5b: 6c:d3:77:2c:b1:f3:15:82:f9:50:19:99:ec:dc:e7:06:85:73: b9:48:5c:b4:c4:6b:4e:29:c7:14:6f:2a:33:47:62:53:ed:6d: 85:44:3a:1b:54:3c:bd:a3:06:fe:53:9f:74:39:41:f1:b9:25: ca:fd:0f:0d:3c:15:58:99:5a:95:db:fd:e7:89:c3:5b:c4:be: d6:bb:df:70:73:c5:09:ee:a3:66:de:70:c9:2b:36:cb:28:ea: 0c:41:c0:d4:fc:4d:30:69:bd:f0:1e:e0:ec:67:00:bf:b4:59: 31:8c:4a:4b:c0:16:1c:df:ff:65:50:3c:3b:e7:00:aa:8e:26: bd:58:ac:b9 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjQwNDMwMTIyNDE3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMwZTJmMS1jMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF1kiWam3v+Ogj5znPoIU6rO1BNv4Sjc2QjkIfTOirijNTIzPXZt2CJoEraN ORmG5CKBaaFkkDeYTNs5QuWmPc04H9DxWm9Fk74YrgIi7ic6nO/LAhFOdJKw4Wir 13B88Fxc1adRWxzTIJdtqemCOIKgU7Sioqd4Rhfzeb048nvSNXddrDl8AtgdAVQH f/pS8N5DK3MxlYT3u6w+Z+hw6105TEKVJaaXEzlRQX3qvpiyQ6oDej6YKsP3PdrC 3xBFi/uJdmvhVJWzlaLhNKCHY/cinN+V4n3r2yUBU2/SZjaVSUQq6udbr5HPlxWW lQCfPuHQy/TSisS+QMXTbE01EQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFN3BhFrA e1LQ4qJ5qeJW1ekfhF6JMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjI4QkMvMEU3RDY0RDZERjBEMTFFQkIxMTMwRDgxQzRGOUFFMDIvOTAxN0Y3Qjgw NkVDMTFFRjhCNDA3QTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ329YAwDQYJKoZIhvcNAQELBQADggEBALIVLRTQKzVL eT+Xo9+/iBKL+57yxcRJyhOa0prCUVTUHFCemaL6L0SDB/Fubp2VKOw5LMg9aTGK e//7tSeE2k7oO4DnefHD3MdI50QJhj8OL/hKEKHNs+IVWJSnBXwOiMJnr265mZ9d byjwXYH8xYDmbHVc7JBqGk7CUlAhW2zTdyyx8xWC+VAZmezc5waFc7lIXLTEa04p xxRvKjNHYlPtbYVEOhtUPL2jBv5Tn3Q5QfG5Jcr9Dw08FViZWpXb/eeJw1vEvta7 33BzxQnuo2becMkrNsso6gxBwNT8TTBpvfAe4OxnAL+0WTGMSkvAFhzf/2VQPDvn AKqOJr1YrLk= -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org