$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/9929CD6EE93611EE984B9214C4F9AE02.roa File: 9929CD6EE93611EE984B9214C4F9AE02.roa (raw, json) Hash identifier: +2IJaM1L+Hh0SQMaBRHCB8zkCIdFjjP0EEuHveWUt40= Subject key identifier: D4:5F:C7:0B:CB:C2:B4:37:F5:38:D0:31:CE:0E:C8:72:F7:0B:A7:1B Certificate issuer: /CN=A9171D3B/serialNumber=C4A558BB7C23E7F728D6CE6899853414C8767F47 Certificate serial: 03D7 Authority key identifier: C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/9929CD6EE93611EE984B9214C4F9AE02.roa Signing time: Fri 30 Aug 2024 18:25:55 +0000 ROA not before: Fri 30 Aug 2024 18:25:55 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 136765 IP address blocks: 2404:5a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.crl rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Oct 2024 01:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3B/serialNumber=C4A558BB7C23E7F728D6CE6899853414C8767F47 Validity Not Before: Aug 30 18:25:55 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66d20eb3-f517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:f6:e1:a6:cd:4d:1b:77:1d:58:d9:fc:52: c5:e5:0b:ea:b2:6a:32:94:e7:a6:03:5b:5a:c6:5b: ec:5e:92:a6:5a:20:40:39:36:c7:a8:a3:91:e4:41: bd:38:d7:0a:b9:71:ca:70:3a:e3:71:1a:5e:79:5d: c1:be:06:7e:8a:04:b8:09:c6:7c:16:20:cd:d5:a9: 1d:9e:2f:0f:5a:d4:f2:5b:c9:8f:fe:ef:62:54:7f: 1d:af:c0:f6:3d:b1:6e:4c:4b:44:22:42:87:35:54: 92:c3:52:db:2e:e2:3e:bd:60:96:57:9e:1b:e4:d5: b5:e5:7c:37:f3:0d:97:e4:89:10:bc:b6:b8:76:ec: d1:8d:44:7c:8e:a9:52:5e:10:3b:38:d9:7d:6b:1d: e6:69:d4:16:bb:13:94:ec:3b:84:a5:5c:e6:eb:61: 77:39:0f:92:e0:b4:14:9a:e6:68:14:70:be:ae:5a: 41:a8:86:64:67:26:e2:22:c6:5f:c1:fa:de:ad:81: f4:8b:6e:6b:dd:a6:45:5b:24:d4:f5:0f:c3:fa:aa: 4e:d3:9e:ee:98:37:e8:ee:80:50:ef:75:aa:78:5a: 53:0f:75:c2:9d:50:ae:7c:44:f3:04:b7:8c:00:b5: 9d:ea:0b:75:f8:26:a1:66:19:91:c5:4e:13:50:18: ce:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5F:C7:0B:CB:C2:B4:37:F5:38:D0:31:CE:0E:C8:72:F7:0B:A7:1B X509v3 Authority Key Identifier: keyid:C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/9929CD6EE93611EE984B9214C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:5a40::/32 Signature Algorithm: sha256WithRSAEncryption 5a:ff:1f:20:02:fc:ed:ef:d5:c4:dc:43:6b:2d:85:94:96:80: 36:bc:cd:8e:c0:89:b1:35:c7:2f:00:99:c0:ef:d5:38:f0:21: fb:36:ac:80:5c:09:e0:36:5d:52:03:77:a3:db:11:86:db:c2: b6:69:a1:98:f0:5b:e1:80:36:da:2a:59:dc:28:4e:4e:c5:49: f3:9e:2b:96:65:79:1d:32:ca:b7:d0:cc:49:1f:4c:c0:c1:38: 15:77:c1:9a:1c:b8:00:1b:aa:23:7a:31:ef:ba:00:a2:a2:ef: ca:bb:ec:72:9d:cf:d3:a0:41:a5:9f:7c:aa:15:76:28:af:45: 3a:4a:0d:b1:16:da:2e:e4:f9:76:89:aa:be:e4:89:79:3f:a2: c5:23:83:5f:3c:bb:08:35:29:07:8f:e6:71:15:27:b7:02:e8: fe:a9:41:3e:1d:62:7d:84:91:21:72:93:67:d7:52:c4:1b:8d: 0c:75:57:d9:c1:aa:df:05:c5:10:08:27:d6:15:c9:c3:0f:ff: 23:27:c7:f1:d0:66:56:d4:8a:3d:90:08:07:8f:e4:d3:73:ea: bf:dc:6e:1d:bb:2c:00:a7:b4:81:b9:50:74:20:4e:11:9a:4f: e0:a2:0d:0f:44:75:e9:79:72:91:58:20:7a:8b:62:02:f7:a6: f2:88:08:9a -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0IxMTAvBgNVBAUTKEM0QTU1OEJCN0MyM0U3RjcyOEQ2Q0U2ODk5ODUzNDE0 Qzg3NjdGNDcwHhcNMjQwODMwMTgyNTU1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyMGViMy1mNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdr24abNTRt3HVjZ/FLF5QvqsmoylOemA1taxlvsXpKmWiBAOTbHqKOR5EG9 ONcKuXHKcDrjcRpeeV3BvgZ+igS4CcZ8FiDN1akdni8PWtTyW8mP/u9iVH8dr8D2 PbFuTEtEIkKHNVSSw1LbLuI+vWCWV54b5NW15Xw38w2X5IkQvLa4duzRjUR8jqlS XhA7ONl9ax3madQWuxOU7DuEpVzm62F3OQ+S4LQUmuZoFHC+rlpBqIZkZybiIsZf wfrerYH0i25r3aZFWyTU9Q/D+qpO057umDfo7oBQ73WqeFpTD3XCnVCufETzBLeM ALWd6gt1+CahZhmRxU4TUBjOhQIDAQABo4ICljCCApIwHQYDVR0OBBYEFNRfxwvL wrQ39TjQMc4OyHL3C6cbMB8GA1UdIwQYMBaAFMSlWLt8I+f3KNbOaJmFNBTIdn9H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQi9CMjQ5OTg1ODMx MzgxMUU5OURFMzI2NkZDNEY5QUUwMi94S1ZZdTN3ajVfY28xczVvbVlVMEZNaDJm MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLVll1M3dqNV9jbzFzNW9tWVUwRk1oMmYwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFEM0IvQjI0OTk4NTgzMTM4MTFFOTlERTMyNjZGQzRGOUFFMDIvOTkyOUNENkVF OTM2MTFFRTk4NEI5MjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBFpAMA0GCSqGSIb3DQEBCwUAA4IBAQBa/x8gAvzt79XE 3ENrLYWUloA2vM2OwImxNccvAJnA79U48CH7NqyAXAngNl1SA3ej2xGG28K2aaGY 8FvhgDbaKlncKE5OxUnzniuWZXkdMsq30MxJH0zAwTgVd8GaHLgAG6ojejHvugCi ou/Ku+xync/ToEGln3yqFXYor0U6Sg2xFtou5Pl2iaq+5Il5P6LFI4NfPLsINSkH j+ZxFSe3Auj+qUE+HWJ9hJEhcpNn11LEG40MdVfZwarfBcUQCCfWFcnDD/8jJ8fx 0GZW1Io9kAgHj+TTc+q/3G4duywAp7SBuVB0IE4Rmk/gog0PRHXpeXKRWCB6i2IC 96byiAia -----END CERTIFICATE-----Generated at Mon Oct 14 03:43:44 2024 by rpki-client on console-ams.rpki-client.org