$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa File: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (raw, json) Hash identifier: BOLLpMA7NYzKLHZD9vK+VKPPwmbIWcIzW4dBb6y7qoE= Subject key identifier: D6:25:30:58:43:89:AF:E4:89:B1:15:B6:07:D2:43:68:8D:16:22:52 Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 1018 Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa Signing time: Fri 02 Feb 2024 18:06:32 +0000 ROA not before: Fri 02 Feb 2024 18:06:32 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138560 IP address blocks: 2404:43c0::/32 maxlen: 32 2404:43c0::/48 maxlen: 48 2404:43c0:1::/48 maxlen: 48 2404:43c0:2::/48 maxlen: 48 2404:43c0:3::/48 maxlen: 48 2404:43c0:4::/48 maxlen: 48 2404:43c0:5::/48 maxlen: 48 2404:43c0:6::/48 maxlen: 48 2404:43c0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4120 (0x1018) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Validity Not Before: Feb 2 18:06:32 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65bd2f28-fc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:6e:aa:7d:03:57:9e:33:da:81:26:a0:c5:e1: 70:85:c2:f8:41:00:08:c1:8c:b7:c3:fa:0e:6a:7b: d9:a3:b6:35:28:37:00:f1:d4:62:d6:c8:4e:d3:cf: ee:5b:f4:ee:e3:5d:28:75:6e:29:cd:ff:cf:11:ec: 99:c7:e6:3a:63:dc:4c:0e:48:e4:32:a6:35:f8:23: ef:fd:78:0c:7f:c1:b9:82:ce:5e:cc:db:61:5c:13: bf:f5:d2:1c:8f:a2:80:4f:67:9a:9f:50:38:ab:d6: 11:f9:c6:17:4f:c3:c4:e3:d9:b6:ce:a9:ea:81:2b: 4d:c3:71:2c:bc:db:c7:e4:02:70:d6:23:47:74:dd: dc:0f:93:fe:2e:9b:0e:6f:cb:40:aa:2f:37:37:09: 8a:08:85:b2:19:e4:66:47:86:26:0a:a4:4f:d5:c9: b5:38:a8:33:6f:b8:fb:d1:5f:cf:21:86:36:10:c9: 76:0a:2d:c4:cc:3f:d1:48:49:1a:41:af:d7:7e:95: 56:3c:b9:6b:28:0d:f5:df:b2:85:7b:3c:bd:30:03: a9:b2:1d:4d:c1:85:81:03:8b:01:a3:15:29:a4:94: ce:68:df:b7:7f:0b:b2:6d:1b:da:7d:02:59:14:3a: 5e:62:81:88:e3:7b:02:a2:aa:c9:1c:27:2b:57:90: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:25:30:58:43:89:AF:E4:89:B1:15:B6:07:D2:43:68:8D:16:22:52 X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:43c0::/32 Signature Algorithm: sha256WithRSAEncryption 06:a1:e2:b6:8a:c6:91:2a:e8:35:a8:05:44:16:7a:9c:c5:65: 86:b6:42:02:11:47:6a:0c:69:a5:25:b4:1e:1c:ed:c5:a8:6a: 7f:c8:f9:c3:fb:4c:8a:22:9a:2e:64:34:48:1c:01:da:9f:12: 4a:64:e3:24:7a:78:ca:63:de:cf:4b:ce:8a:6f:06:ae:ca:18: 9b:e9:b6:36:06:eb:1a:bd:53:d5:7a:4f:a7:15:7a:ea:30:35: 1a:75:95:c1:fb:42:da:a2:e8:cf:91:c2:b4:94:ab:3a:35:73: d3:eb:a6:89:4d:d0:ff:76:75:f3:59:68:30:09:19:dc:e9:57: ed:09:40:b7:d1:e2:5e:df:54:9f:6a:eb:3b:50:99:95:bd:45: 30:8c:72:28:f2:68:a7:18:ce:d4:61:f0:a7:ab:67:9a:13:ab: 44:f5:f1:4d:f4:9a:76:8c:eb:28:33:be:03:99:ca:8f:4e:55: da:9a:0c:70:4d:f8:a4:ae:6e:f6:ca:c6:59:e4:49:f9:33:76: b5:fd:26:53:04:57:da:eb:15:6f:94:54:59:0b:5c:02:28:89: 04:18:80:3b:75:3e:e0:d1:5b:ae:01:2d:4e:37:74:34:b7:40: c4:2e:39:08:09:f4:6c:3a:e1:98:eb:3f:a2:91:18:3f:5f:1f: 50:e1:29:d5 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICEBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjQwMjAyMTgwNjMyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJkMmYyOC1mYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/G6qfQNXnjPagSagxeFwhcL4QQAIwYy3w/oOanvZo7Y1KDcA8dRi1shO08/u W/Tu410odW4pzf/PEeyZx+Y6Y9xMDkjkMqY1+CPv/XgMf8G5gs5ezNthXBO/9dIc j6KAT2ean1A4q9YR+cYXT8PE49m2zqnqgStNw3EsvNvH5AJw1iNHdN3cD5P+LpsO b8tAqi83NwmKCIWyGeRmR4YmCqRP1cm1OKgzb7j70V/PIYY2EMl2Ci3EzD/RSEka Qa/XfpVWPLlrKA3137KFezy9MAOpsh1NwYWBA4sBoxUppJTOaN+3fwuybRvafQJZ FDpeYoGI43sCoqrJHCcrV5AtoQIDAQABo4ICljCCApIwHQYDVR0OBBYEFNYlMFhD ia/kibEVtgfSQ2iNFiJSMB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk3OTcvMDlGMkQ5OTQxQTIyMTFFOUJDMDZEMzBBQzRGOUFFMDIvNkI1QTgwQjgw QjgyMTFFQUFENUI2QjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBEPAMA0GCSqGSIb3DQEBCwUAA4IBAQAGoeK2isaRKug1 qAVEFnqcxWWGtkICEUdqDGmlJbQeHO3FqGp/yPnD+0yKIpouZDRIHAHanxJKZOMk enjKY97PS86Kbwauyhib6bY2BusavVPVek+nFXrqMDUadZXB+0LaoujPkcK0lKs6 NXPT66aJTdD/dnXzWWgwCRnc6VftCUC30eJe31Sfaus7UJmVvUUwjHIo8minGM7U YfCnq2eaE6tE9fFN9Jp2jOsoM74DmcqPTlXamgxwTfikrm72ysZZ5En5M3a1/SZT BFfa6xVvlFRZC1wCKIkEGIA7dT7g0VuuAS1ON3Q0t0DELjkICfRsOuGY6z+ikRg/ Xx9Q4SnV -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org