$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/440BBCC8D50411EB8AB09711C4F9AE02.roa File: 440BBCC8D50411EB8AB09711C4F9AE02.roa (raw, json) Hash identifier: n7yymcew5hzT7njduUJvlGlJ1K2WBEkhMccGENvjdEE= Subject key identifier: F3:E1:3E:CE:F8:32:D7:84:88:6B:DD:C3:3A:4C:48:6E:B7:C6:23:15 Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Certificate serial: 053D Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/440BBCC8D50411EB8AB09711C4F9AE02.roa Signing time: Thu 01 Feb 2024 00:52:42 +0000 ROA not before: Thu 01 Feb 2024 00:52:42 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 48024 IP address blocks: 2001:df2:5380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Validity Not Before: Feb 1 00:52:42 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65baeb5a-5060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:a7:ca:e5:55:b7:ef:e2:88:3a:b6:24:85: 94:51:9e:d5:4a:c2:ae:38:11:f1:98:1e:c6:f8:b6: 16:ad:d7:d8:11:b4:d0:b9:b5:2c:7e:6a:5f:57:9a: 9a:6d:92:0e:67:1c:3a:c1:9f:1d:06:d6:af:d7:38: 16:1e:d1:26:fa:29:98:90:ed:01:47:d8:26:48:ac: 47:4c:69:e5:86:e9:a8:9d:7d:d6:09:80:5f:90:95: 4d:10:d9:48:27:bc:c6:82:8d:f2:6a:12:ba:87:dc: 48:d7:0a:4d:e6:8c:6c:35:b5:be:23:70:9b:8f:5a: 80:97:c8:7b:36:1e:a9:17:24:65:9a:cd:8f:b8:b1: a8:ee:ed:3a:83:f6:0f:e1:aa:22:2d:9a:70:35:a4: ca:61:01:a3:29:78:0c:f1:7a:b5:dc:84:39:12:ef: 1d:5e:cc:57:37:bd:97:03:90:de:70:5f:e6:a6:db: f2:73:a7:02:b0:2b:62:4e:0f:74:47:6d:80:de:a1: bd:87:78:1f:15:81:e0:6b:c6:00:0b:9b:01:87:88: 88:9b:3b:34:9c:74:76:10:db:f1:1b:93:e7:28:9c: 24:d6:2a:1f:21:6d:4b:95:80:77:63:22:bd:ad:ab: ea:da:2d:3c:3a:92:fb:17:b5:71:51:e5:25:45:8d: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E1:3E:CE:F8:32:D7:84:88:6B:DD:C3:3A:4C:48:6E:B7:C6:23:15 X509v3 Authority Key Identifier: keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/440BBCC8D50411EB8AB09711C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df2:5380::/48 Signature Algorithm: sha256WithRSAEncryption 98:64:fc:20:94:64:5a:38:2f:33:c4:11:b4:80:2d:c2:30:ff: c9:cc:c5:6a:0c:d9:2b:f9:95:4d:66:01:79:be:ca:17:ae:6b: d1:c5:67:13:69:73:8c:98:f8:e5:1c:f3:14:d9:9c:3d:cb:7a: 8d:06:3c:e3:77:f5:a2:14:82:99:0a:bc:64:73:54:d9:6b:62: 39:06:d8:1b:9d:7c:62:70:05:28:c9:3d:a7:05:e0:3d:a9:e3: 5e:a5:39:3d:17:12:c1:31:7a:1a:46:2a:cc:fc:6f:19:85:e3: 07:7f:2d:51:3e:7f:1a:82:c0:5c:13:dd:99:b1:70:32:af:2c: 4f:82:06:29:f9:6c:88:dc:dc:ed:88:53:01:51:ae:38:c4:43: 0b:76:55:e7:07:e4:c7:ee:b4:a7:d1:49:cf:7c:e1:07:7d:b9: 52:14:83:c9:64:f3:6f:a7:ba:97:c9:a5:7d:15:e7:1c:7a:d8: 3a:17:b5:36:12:13:e4:60:9e:97:dc:bf:65:b1:97:7f:0c:85: 93:f6:ad:e3:a7:be:36:43:9b:24:57:58:f1:e8:f9:43:64:88: 72:aa:3a:15:4b:1e:42:67:45:25:ff:5c:b7:1b:cf:60:c0:28: 8b:24:8a:ab:49:52:5d:9a:97:60:5c:fe:aa:a3:c9:6c:ef:8b: 9a:d9:6c:11 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1 NjNBMkNFOTQwHhcNMjQwMjAxMDA1MjQyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJhZWI1YS01MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI6nyuVVt+/iiDq2JIWUUZ7VSsKuOBHxmB7G+LYWrdfYEbTQubUsfmpfV5qa bZIOZxw6wZ8dBtav1zgWHtEm+imYkO0BR9gmSKxHTGnlhumonX3WCYBfkJVNENlI J7zGgo3yahK6h9xI1wpN5oxsNbW+I3Cbj1qAl8h7Nh6pFyRlms2PuLGo7u06g/YP 4aoiLZpwNaTKYQGjKXgM8Xq13IQ5Eu8dXsxXN72XA5DecF/mptvyc6cCsCtiTg90 R22A3qG9h3gfFYHga8YAC5sBh4iImzs0nHR2ENvxG5PnKJwk1iofIW1LlYB3YyK9 ravq2i08OpL7F7VxUeUlRY0EvQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPPhPs74 MteEiGvdwzpMSG63xiMVMB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJBMUQvNDU0QkNEQTQ5RTk0MTFFQkJDODBERjIwQzRGOUFFMDIvNDQwQkJDQzhE NTA0MTFFQjhBQjA5NzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3yU4AwDQYJKoZIhvcNAQELBQADggEBAJhk/CCUZFo4 LzPEEbSALcIw/8nMxWoM2Sv5lU1mAXm+yheua9HFZxNpc4yY+OUc8xTZnD3Leo0G PON39aIUgpkKvGRzVNlrYjkG2BudfGJwBSjJPacF4D2p416lOT0XEsExehpGKsz8 bxmF4wd/LVE+fxqCwFwT3ZmxcDKvLE+CBin5bIjc3O2IUwFRrjjEQwt2VecH5Mfu tKfRSc984Qd9uVIUg8lk82+nupfJpX0V5xx62DoXtTYSE+Rgnpfcv2Wxl38MhZP2 reOnvjZDmyRXWPHo+UNkiHKqOhVLHkJnRSX/XLcbz2DAKIskiqtJUl2al2Bc/qqj yWzvi5rZbBE= -----END CERTIFICATE-----Generated at Sun May 5 02:13:01 2024 by rpki-client on console-ams.rpki-client.org