$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa File: 6023AFB22F5F11EEBE311577C4F9AE02.roa (raw, json) Hash identifier: 49Phf83M/BDNcmAGvej0vL1yUca9YSTCXUbi0nuOASc= Subject key identifier: 29:A0:B5:B3:EC:8C:96:68:F5:88:73:8F:08:E6:B9:B1:7E:E8:7E:D8 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 5D Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa Signing time: Mon 31 Jul 2023 05:01:57 +0000 ROA not before: Mon 31 Jul 2023 05:01:57 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 7674 IP address blocks: 2401:4640:170::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Jul 31 05:01:57 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64c74045-f473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:c5:33:95:fb:47:93:f3:73:58:43:80:3b: ef:6e:a1:21:7b:65:16:4d:70:ec:d1:d0:41:6f:32: 4a:b6:f6:98:de:0c:d3:3f:f6:00:1c:3f:cc:5d:55: e7:10:e7:7f:79:47:a6:27:59:48:7e:a3:66:78:5f: 0e:69:3f:28:90:6a:76:19:fa:d2:8c:c7:95:46:7f: 30:15:8b:fb:8e:7f:b3:49:ce:e8:23:a2:0a:bf:21: c2:c7:23:35:5d:3e:9d:72:64:0b:cf:79:f0:13:4f: 3f:c4:e6:1c:2a:5e:ac:75:d9:03:ff:30:7c:3c:49: 9e:86:30:ee:0e:b3:35:37:5d:db:c4:81:b5:90:05: 44:62:f0:99:a2:37:ee:bd:1d:78:87:20:6c:cb:20: 22:67:ff:c1:8d:5c:62:87:da:67:d8:5f:e1:ef:e5: 08:d0:78:c1:72:8b:6d:d7:00:ab:3b:b5:49:a1:e0: 13:8e:c4:9d:00:7c:ac:a2:8c:58:02:ac:6f:35:ab: 90:0f:c0:13:3a:64:5b:95:ed:0e:47:36:9a:94:84: d4:57:16:79:78:ee:90:9f:40:cc:28:1b:f3:e7:a1: 71:d9:e1:ea:68:aa:7f:ed:2c:5b:c4:f6:70:1b:05: 4b:cc:00:e5:6d:73:02:e1:cf:31:3e:76:0e:bb:fa: a2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A0:B5:B3:EC:8C:96:68:F5:88:73:8F:08:E6:B9:B1:7E:E8:7E:D8 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:4640:170::/48 Signature Algorithm: sha256WithRSAEncryption 73:28:7d:16:21:1a:89:1d:a9:71:e5:0a:f4:46:74:30:4c:10: 11:ad:fe:b4:48:4d:dd:58:48:5c:12:cb:d7:96:68:10:10:01: b6:d3:4e:56:05:c3:37:c7:29:bc:ee:00:e0:35:19:d0:4f:47: 4a:5c:9c:54:29:12:e7:86:e5:56:67:e3:5d:8e:cf:32:d8:9f: bc:f5:93:d3:6a:a9:b5:8d:0a:54:f8:ef:4c:44:37:5a:68:0f: 25:62:e2:3b:b8:93:6b:15:14:6b:44:fc:b5:c5:8a:52:53:85: 2b:55:ce:b1:03:48:2e:5b:ca:49:4d:5b:c4:3d:74:b0:5e:53: ce:20:bf:89:8e:40:99:8d:83:67:4e:e3:ed:d5:19:98:f3:7d: ea:78:02:26:7a:1c:bf:70:a5:9c:a1:b6:c6:8a:84:f9:dd:f0: 3c:bb:1c:2e:6e:61:a1:60:6e:83:c7:b1:bf:d8:ab:7d:6b:3a: 8f:48:08:72:a5:04:f5:0f:b6:5e:8b:e3:67:c1:6c:17:8c:4b: 20:f6:8b:89:25:de:89:29:e7:4f:c7:3c:ca:14:13:1a:d8:87: af:6e:cb:f0:6a:46:90:fc:b4:91:98:5a:8f:89:fd:a0:c0:b2: f6:6a:e3:1e:af:d4:5d:85:69:4f:7b:d6:49:e1:3f:9d:b9:99: 9f:5d:2e:be -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUJFRDExMC8GA1UEBRMoMjc2ODkwNDNDNDNGRTYxQjNDRTNDNEVCRTZCNkMxNUZC Q0NEMkQwNzAeFw0yMzA3MzEwNTAxNTdaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0Yzc0MDQ1LWY0NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyiMUzlftHk/NzWEOAO+9uoSF7ZRZNcOzR0EFvMkq29pjeDNM/9gAcP8xdVecQ 5395R6YnWUh+o2Z4Xw5pPyiQanYZ+tKMx5VGfzAVi/uOf7NJzugjogq/IcLHIzVd Pp1yZAvPefATTz/E5hwqXqx12QP/MHw8SZ6GMO4OszU3XdvEgbWQBURi8JmiN+69 HXiHIGzLICJn/8GNXGKH2mfYX+Hv5QjQeMFyi23XAKs7tUmh4BOOxJ0AfKyijFgC rG81q5APwBM6ZFuV7Q5HNpqUhNRXFnl47pCfQMwoG/PnoXHZ4epoqn/tLFvE9nAb BUvMAOVtcwLhzzE+dg67+qITAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUKaC1s+yM lmj1iHOPCOa5sX7oftgwHwYDVR0jBBgwFoAUJ2iQQ8Q/5hs848Tr5rbBX7zNLQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQkVEL0ZCMkFBOEVDQjcy QTExRUQ4ODRBMDkxREM0RjlBRTAyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjJpUVE4UV81aHM4NDhUcjVyYkJYN3pOTFFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi82MDIzQUZCMjJG NUYxMUVFQkUzMTE1NzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQBRkABcDANBgkqhkiG9w0BAQsFAAOCAQEAcyh9FiEaiR2p ceUK9EZ0MEwQEa3+tEhN3VhIXBLL15ZoEBABttNOVgXDN8cpvO4A4DUZ0E9HSlyc VCkS54blVmfjXY7PMtifvPWT02qptY0KVPjvTEQ3WmgPJWLiO7iTaxUUa0T8tcWK UlOFK1XOsQNILlvKSU1bxD10sF5TziC/iY5AmY2DZ07j7dUZmPN96ngCJnocv3Cl nKG2xoqE+d3wPLscLm5hoWBug8exv9irfWs6j0gIcqUE9Q+2XovjZ8FsF4xLIPaL iSXeiSnnT8c8yhQTGtiHr27L8GpGkPy0kZhaj4n9oMCy9mrjHq/UXYVpT3vWSeE/ nbmZn10uvg== -----END CERTIFICATE-----Generated at Fri May 17 08:13:49 2024 by rpki-client on console-fra.rpki-client.org