$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa File: A8949F64D86E11E982BA0712C4F9AE02.roa (raw, json) Hash identifier: oFLyaf6YOXONv9KOGlMDpV7u06F2Uq1w4mcwKVfVwXk= Subject key identifier: 7D:7A:A3:F1:9F:04:34:CD:66:C5:A8:47:28:F9:CA:C1:03:51:5C:32 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 11DF Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa Signing time: Fri 08 Dec 2023 17:44:56 +0000 ROA not before: Fri 08 Dec 2023 17:44:56 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139653 IP address blocks: 2403:cfc0:1014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4575 (0x11df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 8 17:44:56 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65735618-37d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:cc:23:56:70:8b:82:1a:19:03:77:f6:94: fc:00:8f:17:31:1b:a6:dc:21:d6:49:f3:6f:20:43: d0:db:38:4b:7a:3a:60:bd:f0:15:84:3b:45:8a:10: d9:84:65:59:81:f3:29:3f:6f:39:9e:28:a8:40:39: 11:07:c0:08:3d:60:2c:9a:a5:5f:76:b2:1c:1a:ce: 7d:e7:f1:fa:cb:54:ff:78:af:68:4a:b9:ee:08:f0: 1a:12:08:8e:58:8a:b5:5c:c2:10:14:b2:69:70:8d: 20:8d:42:fa:f7:75:f6:6f:3f:5a:b7:6b:c5:64:4f: c3:6e:bd:3a:20:00:1e:42:f5:b0:26:f3:8f:01:d8: ea:bb:e8:7f:c2:8f:3d:51:cc:58:f8:e0:19:eb:4e: 38:7b:14:36:c7:e2:45:47:a6:e5:4e:1f:5f:8a:9b: 6c:13:37:a0:af:58:7b:8b:7a:0b:a7:f1:90:96:25: 06:36:6a:6b:cc:ae:7a:3f:98:1c:e3:8e:32:b4:ac: 02:23:a2:85:c8:e3:c8:71:b4:8f:0f:27:0b:ac:98: 50:9f:a1:63:01:b6:21:7c:2a:ae:25:ea:44:ef:47: be:43:81:8d:dd:56:d0:e6:29:73:38:1b:a7:45:b4: 48:a3:4f:51:fe:f7:9a:ca:25:67:ee:95:2a:8e:d2: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7A:A3:F1:9F:04:34:CD:66:C5:A8:47:28:F9:CA:C1:03:51:5C:32 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1014::/48 Signature Algorithm: sha256WithRSAEncryption 73:40:fd:eb:a6:41:bb:15:89:8b:c4:c6:40:42:9d:c9:0f:ce: e0:6d:45:f0:2d:f3:2c:9c:19:44:2f:f7:65:cd:0f:25:90:25: 17:03:cf:38:87:ae:73:52:bb:cb:47:1a:a1:0a:b7:77:bc:da: 89:64:d2:0c:ea:8e:cd:4a:bf:27:71:96:52:36:7b:9f:d4:2f: b9:6e:4e:9e:39:07:34:e5:c8:c4:32:c0:7a:f3:4a:1b:35:8a: d1:ee:21:8b:66:00:e6:9c:52:80:e7:0e:fe:eb:7a:b6:98:e6: 15:b9:be:37:e4:81:f7:25:f8:ad:0e:45:91:b6:a7:39:bc:18: f6:bb:24:1c:53:40:4f:cb:bb:b1:49:d7:c0:09:50:f1:27:72: 2e:93:77:0e:3b:ac:a2:f9:8e:f6:6c:21:15:ef:16:b0:8b:f2: 37:02:ee:de:fb:2a:69:b4:07:07:a1:b5:ce:a6:60:d7:da:b5: 71:8a:37:29:17:d9:bc:7a:27:e2:7d:27:d5:f1:c7:e7:9e:67: 4f:80:d8:af:1b:86:f9:fc:e7:c6:6b:56:50:e1:20:bf:74:96: 45:f2:39:bf:ac:f2:49:94:1b:1d:da:b9:22:22:78:9a:1d:d8: b4:ee:e0:56:72:76:3b:e4:b5:55:22:b3:d2:f8:00:59:07:52: 14:e6:19:d4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICEd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjMxMjA4MTc0NDU2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczNTYxOC0zN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApn3MI1Zwi4IaGQN39pT8AI8XMRum3CHWSfNvIEPQ2zhLejpgvfAVhDtFihDZ hGVZgfMpP285niioQDkRB8AIPWAsmqVfdrIcGs595/H6y1T/eK9oSrnuCPAaEgiO WIq1XMIQFLJpcI0gjUL693X2bz9at2vFZE/Dbr06IAAeQvWwJvOPAdjqu+h/wo89 UcxY+OAZ6044exQ2x+JFR6blTh9fiptsEzegr1h7i3oLp/GQliUGNmprzK56P5gc 444ytKwCI6KFyOPIcbSPDycLrJhQn6FjAbYhfCquJepE70e+Q4GN3VbQ5ilzOBun RbRIo09R/veayiVn7pUqjtIFEwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFH16o/Gf BDTNZsWoRyj5ysEDUVwyMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvQTg5NDlGNjRE ODZFMTFFOTgyQkEwNzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA8/AEBQwDQYJKoZIhvcNAQELBQADggEBAHNA/eumQbsV iYvExkBCnckPzuBtRfAt8yycGUQv92XNDyWQJRcDzziHrnNSu8tHGqEKt3e82olk 0gzqjs1KvydxllI2e5/UL7luTp45BzTlyMQywHrzShs1itHuIYtmAOacUoDnDv7r eraY5hW5vjfkgfcl+K0ORZG2pzm8GPa7JBxTQE/Lu7FJ18AJUPEnci6Tdw47rKL5 jvZsIRXvFrCL8jcC7t77Kmm0Bwehtc6mYNfatXGKNykX2bx6J+J9J9Xxx+eeZ0+A 2K8bhvn858ZrVlDhIL90lkXyOb+s8kmUGx3auSIieJod2LTu4FZydjvktVUis9L4 AFkHUhTmGdQ= -----END CERTIFICATE-----Generated at Fri May 31 19:47:48 2024 by rpki-client on console-fra.rpki-client.org