$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa File: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (raw, json) Hash identifier: plIi+41lWpb6w3VNKuTTjFw/cUn/OAD0m7eyUjEewck= Subject key identifier: C2:FE:11:F2:17:19:D5:18:7A:17:EE:51:AC:52:5E:C7:B9:4B:00:1E Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Certificate serial: 04 Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa Signing time: Wed 26 Jun 2024 05:41:06 +0000 ROA not before: Wed 26 Jun 2024 05:41:06 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 135302 IP address blocks: 2402:1300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Validity Not Before: Jun 26 05:41:06 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=667ba9f2-ef0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:a3:61:45:18:9c:cc:2b:c9:a8:1b:cc:a6: ac:c1:e9:8e:6c:95:84:58:4a:a2:fb:5e:ca:d1:12: d0:de:67:57:0a:69:53:b8:25:35:81:b0:50:bf:a2: bf:8b:0b:02:c2:b3:84:78:f2:c1:91:66:7d:89:ff: d5:a4:4e:4b:20:1c:ca:d9:84:d5:d3:16:0a:2e:98: e8:70:8d:38:11:d0:5e:43:22:76:25:a1:56:b8:5f: 51:60:67:db:cf:48:df:15:6a:38:99:89:3b:2e:3e: 0b:39:e3:76:bf:10:a0:06:9e:09:0c:b2:79:17:9e: dd:29:37:62:35:aa:f5:0f:ff:47:aa:98:d1:58:f7: 4f:1b:e5:fe:1a:fa:22:39:a8:ad:94:7b:a9:94:47: d8:04:d0:66:16:4a:70:d2:0c:d1:8b:75:de:04:95: 8c:eb:05:46:9d:39:42:55:7b:cd:6c:23:15:e5:4b: 2b:af:c5:81:83:cb:3d:1a:27:3e:5f:e8:0c:cf:18: f8:ab:8d:3e:33:a9:e6:e3:5c:52:41:a5:9d:60:75: 5f:7f:fe:5a:7e:8b:57:ac:d0:79:f3:aa:cc:13:f3: 0b:de:b8:54:20:73:95:bf:34:23:46:69:9a:31:f6: 15:66:94:d6:b9:ea:9d:16:a4:0d:dc:83:4d:8c:1e: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FE:11:F2:17:19:D5:18:7A:17:EE:51:AC:52:5E:C7:B9:4B:00:1E X509v3 Authority Key Identifier: keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:1300::/32 Signature Algorithm: sha256WithRSAEncryption bc:5a:33:c7:1f:02:b1:bd:2d:d1:96:19:8c:31:f9:b1:b4:4a: 0e:78:cf:33:3a:b9:0c:ce:39:34:23:70:36:60:86:4e:9e:a3: 50:52:a7:71:b6:83:f1:6b:8b:26:9f:16:fe:44:fc:b2:a0:0b: 04:e2:57:02:40:94:64:43:d7:6b:d0:a7:6e:2d:5c:92:f3:a7: ec:39:8d:7e:6b:57:08:ec:68:ca:cc:d6:58:b0:1b:f0:82:87: 6a:df:e5:87:e7:d0:4a:71:bf:81:8d:ea:40:e0:b2:ef:00:db: 8c:90:e9:85:e4:99:57:d0:8d:73:36:99:b9:97:d3:bc:d0:59: 55:f0:d5:59:dd:88:d3:a9:4e:e9:72:4e:4e:dd:9f:66:a7:e8: 21:1e:bc:94:c2:83:22:d1:52:a4:7b:2b:4f:82:d4:11:31:a8: b9:16:f6:4a:4f:1c:8d:03:87:26:c4:ac:ba:cb:c9:9c:ca:4b: 45:4c:2c:82:ff:24:39:ea:98:9b:4b:8b:4a:02:3b:9b:a8:14: 18:77:6b:82:ed:3e:ce:e3:b6:83:f1:aa:6b:33:a2:fa:ba:34: a1:4f:8c:96:65:82:52:d3:71:04:be:fe:28:23:90:94:e2:ff: 92:ea:fd:a4:4e:0c:80:33:68:28:75:43:b6:df:47:c5:d9:7c: db:3b:2d:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUE5MDExMC8GA1UEBRMoNTE4OTJCRTVCMEI0QUJDNjAyNTQ0NUY0MDM5RkM3OTVE OEJBNThFMjAeFw0yNDA2MjYwNTQxMDZaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2N2JhOWYyLWVmMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ+6NhRRiczCvJqBvMpqzB6Y5slYRYSqL7XsrREtDeZ1cKaVO4JTWBsFC/or+L CwLCs4R48sGRZn2J/9WkTksgHMrZhNXTFgoumOhwjTgR0F5DInYloVa4X1FgZ9vP SN8VajiZiTsuPgs543a/EKAGngkMsnkXnt0pN2I1qvUP/0eqmNFY908b5f4a+iI5 qK2Ue6mUR9gE0GYWSnDSDNGLdd4ElYzrBUadOUJVe81sIxXlSyuvxYGDyz0aJz5f 6AzPGPirjT4zqebjXFJBpZ1gdV9//lp+i1es0HnzqswT8wveuFQgc5W/NCNGaZox 9hVmlNa56p0WpA3cg02MHk0hAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUwv4R8hcZ 1Rh6F+5RrFJex7lLAB4wHwYDVR0jBBgwFoAUUYkr5bC0q8YCVEX0A5/Hldi6WOIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5QTkwLzFGRTg0RUQyMzM3 NjExRUY5OTNFNDY3M0M0RjlBRTAyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldP SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVVlrcjViQzBxOFlDVkVYMEE1X0hsZGk2V09JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUE5MC8xRkU4NEVEMjMzNzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9BRTk3N0RGODMz N0UxMUVGQjNDQ0Q3MkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCEwAwDQYJKoZIhvcNAQELBQADggEBALxaM8cfArG9LdGW GYwx+bG0Sg54zzM6uQzOOTQjcDZghk6eo1BSp3G2g/FriyafFv5E/LKgCwTiVwJA lGRD12vQp24tXJLzp+w5jX5rVwjsaMrM1liwG/CCh2rf5Yfn0Epxv4GN6kDgsu8A 24yQ6YXkmVfQjXM2mbmX07zQWVXw1VndiNOpTulyTk7dn2an6CEevJTCgyLRUqR7 K0+C1BExqLkW9kpPHI0DhybErLrLyZzKS0VMLIL/JDnqmJtLi0oCO5uoFBh3a4Lt Ps7jtoPxqmszovq6NKFPjJZlglLTcQS+/igjkJTi/5Lq/aRODIAzaCh1Q7bfR8XZ fNs7LYU= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:46 2024 by rpki-client on console-fra.rpki-client.org