$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa File: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (raw, json) Hash identifier: vOZZW9Fz+Ew432aoBZJQA6i/cbgp+fKwlVmKDZ1QXVU= Subject key identifier: D9:25:E3:BA:78:48:C5:3A:AA:54:31:E2:D4:F5:D2:16:E5:49:44:78 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 02BE Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa Signing time: Sun 21 Apr 2024 03:45:30 +0000 ROA not before: Sun 21 Apr 2024 03:45:30 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 7586 IP address blocks: 2401:1740:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Apr 21 03:45:30 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66248bda-96e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:f0:70:c1:79:1c:f7:85:01:b8:2d:92:98: 7e:d4:b8:20:19:c4:3d:b5:03:35:75:ad:2f:78:a6: df:4a:d5:9a:95:9e:2b:d2:0c:51:1d:fb:e5:d0:54: 31:41:f9:5d:3a:94:3b:29:3b:1b:3b:82:85:fb:f7: cc:af:15:8b:6a:e1:f3:bd:d6:94:12:50:85:8f:a1: 41:f2:b2:06:6c:c2:f6:b4:9d:db:29:8f:fe:25:2e: 47:db:57:51:8e:8e:e0:ad:a0:93:fa:6b:c9:7b:0b: 6d:5e:47:b4:5c:45:70:92:b4:50:13:14:53:a3:a7: 81:b5:25:0b:94:dc:82:e9:93:61:bb:37:81:fd:8d: b5:a7:5c:42:68:41:d9:ba:b8:04:dc:99:df:07:22: a5:4e:2a:06:f5:a1:e3:fa:6b:7c:c6:e9:7b:75:22: 60:9a:8b:9b:b5:1e:e5:9c:32:a0:29:cb:87:98:97: 63:2a:fc:5e:db:c4:f7:8e:e3:fe:f0:d4:b5:f1:84: 0f:2e:21:de:ef:11:49:f9:50:91:8c:49:d2:0b:80: f4:75:99:3b:bf:05:c0:3b:8e:25:4e:f7:cf:40:cb: 83:10:ef:80:8b:54:47:6d:63:c8:1c:16:a0:5f:8a: 87:1e:e9:db:da:2d:26:f9:42:0e:47:ed:7e:9a:45: b3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:25:E3:BA:78:48:C5:3A:AA:54:31:E2:D4:F5:D2:16:E5:49:44:78 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:1740:2000::/48 Signature Algorithm: sha256WithRSAEncryption 18:e4:ff:fe:2e:6c:48:59:26:b0:80:18:a1:fe:26:0e:91:d9: 7b:1e:d4:e5:b8:38:b6:6c:15:5e:3f:c7:f4:93:a4:4f:67:66: 2b:21:c3:df:10:c1:d5:ea:32:d7:d0:ff:ea:5b:4a:82:e3:cc: 44:ac:9f:47:d6:12:c7:b1:fc:78:5c:c4:59:8a:85:64:c4:65: 8a:57:16:8d:7e:ed:51:f5:27:73:13:97:89:23:8b:c9:5e:95: 63:4b:6f:cb:4e:7b:19:17:00:61:06:9c:f3:a0:f2:fd:15:75: aa:4e:96:8c:57:4f:15:64:a3:d4:fd:e8:32:f2:0f:66:77:d8: 1d:76:0a:54:b3:15:28:d9:58:8f:70:6b:18:52:e8:eb:a9:71: 36:28:01:92:a8:03:ab:5f:a2:08:b7:aa:75:47:39:14:a5:da: 43:15:5b:40:21:97:1f:7e:a9:60:e0:83:00:d4:35:4b:66:bc: aa:7f:7b:ad:fe:08:4a:02:e7:85:90:62:50:69:1d:e3:cc:72: c0:53:64:01:9c:09:de:65:61:c1:61:31:8a:40:4e:be:5a:a1: df:52:c0:ef:ce:c1:76:31:ef:3e:bb:87:92:b6:98:32:5a:e9: 23:8d:7c:bf:55:92:e7:2c:87:d4:10:1b:13:31:01:33:88:33: 98:03:92:f9 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjQwNDIxMDM0NTMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI0OGJkYS05NmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdvwcMF5HPeFAbgtkph+1LggGcQ9tQM1da0veKbfStWalZ4r0gxRHfvl0FQx QfldOpQ7KTsbO4KF+/fMrxWLauHzvdaUElCFj6FB8rIGbML2tJ3bKY/+JS5H21dR jo7graCT+mvJewttXke0XEVwkrRQExRTo6eBtSULlNyC6ZNhuzeB/Y21p1xCaEHZ urgE3JnfByKlTioG9aHj+mt8xul7dSJgmoubtR7lnDKgKcuHmJdjKvxe28T3juP+ 8NS18YQPLiHe7xFJ+VCRjEnSC4D0dZk7vwXAO44lTvfPQMuDEO+Ai1RHbWPIHBag X4qHHunb2i0m+UIOR+1+mkWzgwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNkl47p4 SMU6qlQx4tT10hblSUR4MB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdGQzIvNUUzMEJGNzBCQkE2MTFFQ0JBRjQzMTU2QzRGOUFFMDIvQUI5NUVFQzRC Q0ZBMTFFREFEMzI4RDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkARdAIAAwDQYJKoZIhvcNAQELBQADggEBABjk//4ubEhZ JrCAGKH+Jg6R2Xse1OW4OLZsFV4/x/STpE9nZishw98QwdXqMtfQ/+pbSoLjzESs n0fWEsex/HhcxFmKhWTEZYpXFo1+7VH1J3MTl4kji8lelWNLb8tOexkXAGEGnPOg 8v0VdapOloxXTxVko9T96DLyD2Z32B12ClSzFSjZWI9waxhS6OupcTYoAZKoA6tf ogi3qnVHORSl2kMVW0Ahlx9+qWDggwDUNUtmvKp/e63+CEoC54WQYlBpHePMcsBT ZAGcCd5lYcFhMYpATr5aod9SwO/OwXYx7z67h5K2mDJa6SONfL9Vkucsh9QQGxMx ATOIM5gDkvk= -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org