$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa File: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (raw, json) Hash identifier: z70dBdS9kIJlFC1osrUz56TwNaqNCALx0wTKkKuQOzQ= Subject key identifier: C3:D2:67:D4:7C:60:C8:A0:15:E6:E2:42:1B:85:CA:E5:C5:89:32:90 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 34DC Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa Signing time: Tue 26 Sep 2023 14:30:21 +0000 ROA not before: Tue 26 Sep 2023 14:30:21 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 17860 IP address blocks: 139.5.226.0/24 maxlen: 24 139.5.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13532 (0x34dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Sep 26 14:30:21 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6512eafd-6c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:53:7c:2f:5f:61:be:2b:22:78:c3:87:ec: b0:4f:75:92:20:c2:e8:38:80:bf:d0:a5:2f:6a:ee: de:0e:a4:d1:68:1f:f3:42:2c:24:6f:a7:0d:76:d9: ec:57:c6:c9:cd:a1:07:94:ac:a9:9c:5a:e5:93:a0: f7:3b:03:a9:00:6d:3b:4b:c7:1e:dd:07:cc:b2:9d: dd:10:b0:52:98:8d:6f:1d:72:28:8c:c5:b5:d0:d0: 57:0d:f9:c4:2d:6b:dd:3d:66:26:77:80:f1:77:47: af:8c:0b:55:a6:fa:6b:ee:bd:cd:fd:01:23:12:be: 6a:14:8e:0f:14:2f:b9:70:36:8f:54:d5:1f:8e:67: 9f:11:b8:5e:ef:75:25:89:36:1d:be:b7:8b:0b:a8: 4b:51:76:12:10:c1:c0:e2:5f:da:c9:c8:0a:43:22: f2:c7:49:4b:d7:89:a4:32:1f:41:95:78:d3:3a:b7: 2e:4b:98:1b:35:32:1d:95:70:ef:0c:0e:89:88:ea: 60:08:86:eb:09:42:ab:08:21:75:0a:6d:31:e5:7a: c5:52:ec:da:73:05:11:8a:9c:a8:22:56:b9:c7:05: 27:29:38:dc:db:4e:ee:9f:b9:e4:ee:8a:92:35:41: 4c:4c:7d:68:9f:86:01:89:39:da:df:56:b7:d9:5b: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D2:67:D4:7C:60:C8:A0:15:E6:E2:42:1B:85:CA:E5:C5:89:32:90 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.5.226.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:e5:f5:ba:8b:d4:75:29:22:b8:da:f9:ba:6c:e3:d3:05:d0: 40:aa:98:fc:0c:d2:78:04:9a:7e:0d:c3:d3:6e:ab:fb:22:1b: 94:a4:98:8c:2b:80:f1:3f:7d:fa:b3:71:e0:0c:b2:19:31:45: bf:5b:7e:3e:43:f2:bf:54:0a:df:f0:7a:52:25:fb:bb:7a:16: ac:06:28:b2:4e:b8:53:e7:99:aa:62:4d:f4:ef:35:c9:96:5e: 75:77:50:95:18:40:e1:5d:9d:33:78:60:a6:88:46:50:35:b2: 5b:4c:e9:10:a0:d8:ee:88:5e:44:60:36:9a:cb:f7:54:c7:be: bd:3d:02:bb:a4:27:a6:02:6c:d7:4c:00:80:31:f1:42:01:f5: f4:50:00:66:67:98:53:42:cf:89:e8:d1:69:c4:14:f1:6a:6f: e3:d6:c0:fd:dc:4d:a6:b2:cc:e2:3e:3c:66:62:7f:d3:aa:f2: 3e:fc:10:f7:42:32:7a:a2:54:30:38:23:b6:4f:98:32:06:d6: d1:97:67:c0:5c:3b:59:62:e1:11:e8:f2:f5:e4:1a:a2:21:8b: 13:79:8e:bf:a4:bc:75:02:06:eb:e8:fd:39:f4:8f:de:83:b4: 8c:89:2b:7e:28:1f:e6:c0:64:9f:4e:a1:ec:0f:71:bf:0d:9f: cb:0b:48:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjMwOTI2MTQzMDIxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEyZWFmZC02YzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk9TfC9fYb4rInjDh+ywT3WSIMLoOIC/0KUvau7eDqTRaB/zQiwkb6cNdtns V8bJzaEHlKypnFrlk6D3OwOpAG07S8ce3QfMsp3dELBSmI1vHXIojMW10NBXDfnE LWvdPWYmd4Dxd0evjAtVpvpr7r3N/QEjEr5qFI4PFC+5cDaPVNUfjmefEbhe73Ul iTYdvreLC6hLUXYSEMHA4l/aycgKQyLyx0lL14mkMh9BlXjTOrcuS5gbNTIdlXDv DA6JiOpgCIbrCUKrCCF1Cm0x5XrFUuzacwURipyoIla5xwUnKTjc207un7nk7oqS NUFMTH1on4YBiTna31a32Vud3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMPSZ9R8 YMigFebiQhuFyuXFiTKQMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvOUQ4RTZEMDJD MkE1MTFFQkIyMDI1QjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGLBeIwDQYJKoZIhvcNAQELBQADggEBAF7l9bqL1HUpIrja +bps49MF0ECqmPwM0ngEmn4Nw9Nuq/siG5SkmIwrgPE/ffqzceAMshkxRb9bfj5D 8r9UCt/welIl+7t6FqwGKLJOuFPnmapiTfTvNcmWXnV3UJUYQOFdnTN4YKaIRlA1 sltM6RCg2O6IXkRgNprL91THvr09ArukJ6YCbNdMAIAx8UIB9fRQAGZnmFNCz4no 0WnEFPFqb+PWwP3cTaayzOI+PGZif9Oq8j78EPdCMnqiVDA4I7ZPmDIG1tGXZ8Bc O1li4RHo8vXkGqIhixN5jr+kvHUCBuvo/Tn0j96DtIyJK34oH+bAZJ9OoewPcb8N n8sLSLs= -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org