$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/1040CDC4EBB411EE9D86095BC4F9AE02.roa File: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (raw, json) Hash identifier: HX1UJ6Z1gWtshlGvKrZML4BzjT3RV1AiLypvinMfc/s= Subject key identifier: 34:01:31:87:E0:89:C1:8A:79:0F:DC:D5:92:22:D6:0F:A1:0D:A5:4D Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: 19 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/1040CDC4EBB411EE9D86095BC4F9AE02.roa Signing time: Tue 26 Mar 2024 21:01:50 +0000 ROA not before: Tue 26 Mar 2024 21:01:50 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152470 IP address blocks: 2401:7f20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: Mar 26 21:01:50 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660337bd-d5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:79:51:01:d4:cc:c7:e6:2d:02:c2:d4:fc: d3:04:62:48:68:d3:49:de:dd:e7:76:c2:39:fd:d9: 72:ac:04:c5:d9:9d:25:64:28:8d:32:5f:50:45:85: 0b:41:ba:87:c2:da:33:c2:31:45:b7:1b:54:00:c5: aa:ad:89:ef:be:75:bf:d0:37:c2:f1:98:2b:99:7b: 90:49:8d:06:7b:a5:10:58:28:bc:ed:71:83:bd:45: 7e:6d:c7:c7:f8:3f:ea:d3:38:ec:00:44:14:87:97: 1c:86:51:5e:12:c5:26:92:44:9a:4e:d4:95:a5:77: eb:92:f9:a8:61:41:ae:5d:81:93:bd:f1:e5:92:2c: d2:3b:be:60:1c:c9:3e:c3:4d:9c:70:b7:b4:ed:cd: 61:be:e4:ae:84:07:32:fd:85:46:95:41:5e:67:79: 26:cd:f1:1a:8b:3c:f1:cf:a4:60:1a:c5:c4:45:9e: 48:65:6d:e6:10:12:e7:8f:19:7d:33:5a:43:f8:f8: 89:97:10:a6:7f:a6:d3:bb:27:88:40:f3:9b:56:88: a6:3f:b3:bd:f5:0f:cf:90:b0:f2:69:28:c2:da:3d: ea:cc:50:a2:ca:85:1f:ef:ff:3d:77:1e:71:f4:c5: 92:9e:8e:b8:fd:2c:e2:1b:b9:a0:93:11:df:18:ba: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:01:31:87:E0:89:C1:8A:79:0F:DC:D5:92:22:D6:0F:A1:0D:A5:4D X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/1040CDC4EBB411EE9D86095BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:7f20::/32 Signature Algorithm: sha256WithRSAEncryption 7a:97:5a:d1:b6:ea:e4:b1:1b:5d:b4:26:52:d7:1b:e7:64:aa: 25:0c:f0:2e:64:88:87:ef:8b:69:6f:f9:ed:b1:6f:80:cf:c6: da:c5:81:c2:3f:87:4b:d9:a6:df:bf:6b:b6:6d:61:18:a2:84: 49:bc:5e:f8:75:5c:c5:bb:c4:ff:2b:43:f0:bc:e5:c2:10:a7: 30:3e:91:ed:f4:a9:dc:2d:12:e6:9b:fa:41:e3:89:f0:88:e9: 66:4a:d6:68:5e:0b:e7:1a:12:86:85:11:68:d9:70:11:3e:eb: b4:77:38:e7:9a:39:8f:0f:a3:ac:2a:d5:ab:e3:e1:3c:fa:f7: ed:0b:69:99:6b:11:95:b9:5c:1a:7f:bc:5a:f8:f9:55:65:e5: 86:34:1f:7c:91:2f:64:57:d5:ac:0d:44:ac:1b:2b:2f:d2:18: be:b9:df:bc:3a:1c:b8:dc:f4:d6:46:f9:d7:93:df:a8:3e:05: 5a:a4:a7:0a:f9:f3:a7:30:f5:70:2a:fc:6d:c2:0b:ff:0e:0d: f0:66:aa:66:ac:84:e4:ce:03:5f:3c:89:25:d1:7b:09:d8:e0: 71:86:fd:6c:5b:ac:25:4a:cc:37:3c:fe:56:2c:ad:0c:4e:93: 7d:eb:64:9f:a0:62:f9:ec:6c:90:3b:67:fd:e1:4e:29:6b:a1: e5:a5:1d:f5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzQ5MDExMC8GA1UEBRMoMTM3MzUzRDBFOEMxNDVBNTgwQ0IwMEJDMzIyMjA4OUM0 MDQ4QUU1MTAeFw0yNDAzMjYyMTAxNTBaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MDMzN2JkLWQ1Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFw3lRAdTMx+YtAsLU/NMEYkho00ne3ed2wjn92XKsBMXZnSVkKI0yX1BFhQtB uofC2jPCMUW3G1QAxaqtie++db/QN8LxmCuZe5BJjQZ7pRBYKLztcYO9RX5tx8f4 P+rTOOwARBSHlxyGUV4SxSaSRJpO1JWld+uS+ahhQa5dgZO98eWSLNI7vmAcyT7D TZxwt7TtzWG+5K6EBzL9hUaVQV5neSbN8RqLPPHPpGAaxcRFnkhlbeYQEuePGX0z WkP4+ImXEKZ/ptO7J4hA85tWiKY/s731D8+QsPJpKMLaPerMUKLKhR/v/z13HnH0 xZKejrj9LOIbuaCTEd8YurnPAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUNAExh+CJ wYp5D9zVkiLWD6ENpU0wHwYDVR0jBBgwFoAUE3NT0OjBRaWAywC8MiIInEBIrlEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNDkwLzk5MTk4RjEyRDA1 NDExRUVBRjc5OUYxNkM0RjlBRTAyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJs RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRTNOVDBPakJSYVdBeXdDOE1pSUluRUJJcmxFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi8xMDQwQ0RDNEVC QjQxMUVFOUQ4NjA5NUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBfyAwDQYJKoZIhvcNAQELBQADggEBAHqXWtG26uSxG120 JlLXG+dkqiUM8C5kiIfvi2lv+e2xb4DPxtrFgcI/h0vZpt+/a7ZtYRiihEm8Xvh1 XMW7xP8rQ/C85cIQpzA+ke30qdwtEuab+kHjifCI6WZK1mheC+caEoaFEWjZcBE+ 67R3OOeaOY8Po6wq1avj4Tz69+0LaZlrEZW5XBp/vFr4+VVl5YY0H3yRL2RX1awN RKwbKy/SGL6537w6HLjc9NZG+deT36g+BVqkpwr586cw9XAq/G3CC/8ODfBmqmas hOTOA188iSXRewnY4HGG/WxbrCVKzDc8/lYsrQxOk33rZJ+gYvnsbJA7Z/3hTilr oeWlHfU= -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:13 2024 by rpki-client on console-ams.rpki-client.org