$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa File: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (raw, json) Hash identifier: HbHv4qWw7Bi3HD3DwV6S1QogbBnD5z6n90sQhMS982k= Subject key identifier: DE:CF:8E:C7:30:FA:08:3D:C8:20:0C:70:08:BB:50:9E:CD:85:82:5A Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 07AD Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa Signing time: Wed 06 Dec 2023 10:08:22 +0000 ROA not before: Wed 06 Dec 2023 10:08:22 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 398109 IP address blocks: 2406:f380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: Dec 6 10:08:22 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65704816-7b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9d:b0:ee:25:1a:0e:4f:37:8c:5c:ea:8a:68: 80:67:74:0f:11:0d:a6:91:72:7b:d2:2c:35:43:0e: aa:06:ca:c7:d4:04:06:6a:1c:0d:21:88:59:b6:cf: 17:6a:39:a2:11:82:6c:a7:72:5c:d2:b3:8b:2a:7f: 1e:64:63:46:fb:9b:c2:5e:be:25:b3:ba:de:c6:d4: 17:2f:c4:cd:99:c9:e4:a7:8d:36:e5:e8:6a:7f:c1: c3:be:68:38:69:5a:17:72:20:24:62:20:6d:bf:d2: 86:95:48:f6:3b:10:81:54:99:90:34:07:8a:d9:4a: 0d:03:54:84:d3:d0:1e:9d:b0:71:05:3d:d4:81:8b: 19:f6:8d:7f:6b:9c:b3:35:cd:5a:a5:a7:f1:a5:f5: 34:18:97:21:22:b4:20:6f:02:bd:40:4a:f3:67:7a: 82:0b:ae:87:21:7c:85:82:76:fa:42:a8:9c:51:bf: fa:72:ed:df:47:00:79:a6:ef:8b:aa:17:6b:54:f1: a5:f3:5a:da:f6:83:f8:70:80:bd:89:5e:35:7b:5a: 95:18:a3:d2:02:bc:a2:e0:27:01:1d:81:f5:24:78: ae:0e:9f:4a:12:13:5f:f6:da:38:e7:d0:8a:eb:ce: b0:45:b3:92:be:38:b9:45:1c:56:ff:26:0c:90:ac: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CF:8E:C7:30:FA:08:3D:C8:20:0C:70:08:BB:50:9E:CD:85:82:5A X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:f380::/32 Signature Algorithm: sha256WithRSAEncryption 0d:50:b8:c8:58:eb:53:35:ad:f6:4d:b3:25:98:7b:c8:20:a9: 8f:8b:bc:77:4c:d4:57:f1:c0:93:68:a9:06:57:87:25:40:33: db:28:8b:38:90:63:5f:a1:2b:2b:65:df:21:2c:f9:75:7d:58: 95:b3:4f:83:c4:be:14:b9:ef:d0:d3:29:76:08:a2:41:58:c9: d1:70:53:11:16:f1:2c:ed:bf:80:25:98:63:ba:ef:90:3f:fe: c5:14:1c:39:8c:ab:40:40:7f:ee:16:12:0b:35:28:19:f9:95: ef:43:f5:59:29:9d:d2:8b:30:ab:de:80:fa:cc:f1:5a:1b:01: 80:00:ce:40:8d:06:f0:4e:75:bf:03:79:78:ab:3f:82:87:6a: c5:a2:ec:d4:fa:6b:82:3f:89:7d:e1:f0:f3:2f:2a:e5:f8:ab: 03:12:f3:17:d3:d3:7e:77:83:82:fb:a4:9a:7b:07:80:69:72: 5e:e7:00:2d:16:35:44:f2:9e:90:bb:08:38:20:ec:ba:2b:fb: e2:5b:b0:59:2f:b2:30:d4:65:f8:35:6b:bd:0f:18:a3:5a:b9: 48:20:46:51:84:e7:17:08:ef:e4:42:fa:db:fc:df:71:42:44: 95:51:a0:e8:fc:16:67:1e:01:6e:f8:90:4d:c5:c3:59:6a:78: c5:aa:c4:b1 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjMxMjA2MTAwODIyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTcwNDgxNi03YjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Z2w7iUaDk83jFzqimiAZ3QPEQ2mkXJ70iw1Qw6qBsrH1AQGahwNIYhZts8X ajmiEYJsp3Jc0rOLKn8eZGNG+5vCXr4ls7rextQXL8TNmcnkp4025ehqf8HDvmg4 aVoXciAkYiBtv9KGlUj2OxCBVJmQNAeK2UoNA1SE09AenbBxBT3UgYsZ9o1/a5yz Nc1apafxpfU0GJchIrQgbwK9QErzZ3qCC66HIXyFgnb6QqicUb/6cu3fRwB5pu+L qhdrVPGl81ra9oP4cIC9iV41e1qVGKPSAryi4CcBHYH1JHiuDp9KEhNf9to459CK 686wRbOSvji5RRxW/yYMkKx2IwIDAQABo4ICljCCApIwHQYDVR0OBBYEFN7Pjscw +gg9yCAMcAi7UJ7NhYJaMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdDNEMvQ0NCMjAzNTRCOUUyMTFFQUJDNTU0QjgzQzRGOUFFMDIvNjJDREVFNDI5 NDFGMTFFRUE3QzNFODZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBvOAMA0GCSqGSIb3DQEBCwUAA4IBAQANULjIWOtTNa32 TbMlmHvIIKmPi7x3TNRX8cCTaKkGV4clQDPbKIs4kGNfoSsrZd8hLPl1fViVs0+D xL4Uue/Q0yl2CKJBWMnRcFMRFvEs7b+AJZhjuu+QP/7FFBw5jKtAQH/uFhILNSgZ +ZXvQ/VZKZ3SizCr3oD6zPFaGwGAAM5AjQbwTnW/A3l4qz+Ch2rFouzU+muCP4l9 4fDzLyrl+KsDEvMX09N+d4OC+6SaeweAaXJe5wAtFjVE8p6Quwg4IOy6K/viW7BZ L7Iw1GX4NWu9DxijWrlIIEZRhOcXCO/kQvrb/N9xQkSVUaDo/BZnHgFu+JBNxcNZ anjFqsSx -----END CERTIFICATE-----Generated at Thu May 2 23:19:01 2024 by rpki-client on console-ams.rpki-client.org