$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/75B289249B4311EFA6D2403DC4F9AE02.roa File: 75B289249B4311EFA6D2403DC4F9AE02.roa (raw, json) Hash identifier: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8= Subject key identifier: 41:69:A1:36:D3:7F:67:A0:8F:2B:40:5F:28:90:FE:AB:80:EF:67:D3 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: 15 Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/75B289249B4311EFA6D2403DC4F9AE02.roa Signing time: Tue 05 Nov 2024 06:59:11 +0000 ROA not before: Tue 05 Nov 2024 06:59:11 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153337 IP address blocks: 2001:df4:4d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Validity Not Before: Nov 5 06:59:11 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6729c23f-a2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:a0:66:70:d3:1a:c7:34:87:49:44:52:fc: eb:8b:ba:a3:ca:6d:e0:bb:8b:b4:30:fe:03:e4:77: e0:a7:d0:19:79:f2:10:e3:6a:12:e5:80:55:cc:15: 46:e7:42:31:c4:f1:31:01:62:ad:4f:5a:3b:dd:79: 8c:85:f4:f9:40:f7:23:64:80:71:6c:b4:11:16:0c: 04:b2:b4:ff:e0:28:ed:73:89:e6:8d:b2:ca:16:3a: b6:25:3e:ac:12:68:f1:3c:cc:57:d5:fd:a0:be:a7: 9c:ff:71:c3:74:e9:e4:a7:a4:68:25:ee:a7:e9:df: 2e:39:4e:c7:b3:f7:87:38:0c:72:93:71:6f:db:2f: 63:69:0d:22:68:fc:75:76:03:44:5b:fb:fd:76:8c: f0:17:41:4a:f8:ba:ff:50:14:3c:f4:a3:5a:01:0b: 42:f5:e7:b2:d8:89:1b:9f:a2:8f:ba:eb:3c:a2:c3: 21:8c:70:55:e2:1f:22:6f:08:44:a2:6c:7a:75:16: 94:08:ab:8f:f3:29:2b:e6:62:28:25:5f:77:07:5f: ab:c7:91:ab:1d:d2:b2:97:08:ec:95:d0:8d:2a:51: 18:7e:20:8d:e4:3c:c8:6d:c3:7f:e8:a6:4a:3a:54: f2:a7:9d:a1:d4:07:bd:42:ae:47:05:e4:a1:9d:9f: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:69:A1:36:D3:7F:67:A0:8F:2B:40:5F:28:90:FE:AB:80:EF:67:D3 X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/75B289249B4311EFA6D2403DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:4d40::/48 Signature Algorithm: sha256WithRSAEncryption 8a:6d:30:99:a3:89:c9:36:e0:f7:69:31:19:8b:8a:3c:26:1c: 7a:e4:13:eb:5b:31:47:d1:a6:89:e1:cf:f4:d1:0e:72:6e:5a: fb:d4:fd:18:3d:6a:02:5c:df:d5:5f:49:e1:22:5d:b2:12:cf: 1e:63:d4:41:27:59:fe:c6:84:cb:76:1a:56:00:4b:2f:1e:11: 18:a4:9c:ff:09:eb:dd:ee:fc:0d:dd:61:c5:ca:95:0b:de:3c: 85:61:b0:97:ce:91:cf:3f:13:ec:5e:ca:c4:2e:09:79:ec:bc: 07:a1:c4:c4:3c:0c:11:7d:f6:6a:50:da:02:6c:da:30:ba:cc: 95:3c:ab:25:ea:21:1e:c8:87:a4:96:0b:cc:b6:9f:7e:df:5a: b7:e9:37:ee:33:da:3a:4d:2c:77:ac:12:dc:8b:e2:0e:99:01: ba:4d:f3:c4:4b:93:a8:96:95:ed:11:91:bb:3a:7d:4b:70:08: 4f:2c:fa:54:af:f5:e3:e0:db:ab:d8:31:ef:94:f1:12:48:6b: 8d:5e:e6:6e:a3:ac:40:73:c6:fb:b6:26:6a:b4:41:ee:a8:f1: 03:b4:89:70:14:f5:40:93:35:9b:1e:cf:bb:a2:35:22:bd:db: 6a:77:39:90:d3:7f:4e:08:fa:08:1d:5e:e5:3e:2f:30:fb:36: 87:f3:e9:d6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUQ0RTExMC8GA1UEBRMoREM2QTIzNzRDNTE0RThDRjRBQzc2NEEwRjNDODQ2RjA5 QjMzRDI4MjAeFw0yNDExMDUwNjU5MTFaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MjljMjNmLWEyYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRoKBmcNMaxzSHSURS/OuLuqPKbeC7i7Qw/gPkd+Cn0Bl58hDjahLlgFXMFUbn QjHE8TEBYq1PWjvdeYyF9PlA9yNkgHFstBEWDASytP/gKO1zieaNssoWOrYlPqwS aPE8zFfV/aC+p5z/ccN06eSnpGgl7qfp3y45Tsez94c4DHKTcW/bL2NpDSJo/HV2 A0Rb+/12jPAXQUr4uv9QFDz0o1oBC0L157LYiRufoo+66zyiwyGMcFXiHyJvCESi bHp1FpQIq4/zKSvmYiglX3cHX6vHkasd0rKXCOyV0I0qURh+II3kPMhtw3/opko6 VPKnnaHUB71CrkcF5KGdnyhvAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUQWmhNtN/ Z6CPK0BfKJD+q4DvZ9MwHwYDVR0jBBgwFoAU3GojdMUU6M9Kx2Sg88hG8Jsz0oIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RDRFLzY0MjNCRTA2N0ZG MjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0dvamRNVVU2TTlLeDJTZzg4aEc4SnN6MG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS82NDIzQkUwNjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi83NUIyODkyNDlC NDMxMUVGQTZEMjQwM0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfRNQDANBgkqhkiG9w0BAQsFAAOCAQEAim0wmaOJyTbg 92kxGYuKPCYceuQT61sxR9GmieHP9NEOcm5a+9T9GD1qAlzf1V9J4SJdshLPHmPU QSdZ/saEy3YaVgBLLx4RGKSc/wnr3e78Dd1hxcqVC948hWGwl86Rzz8T7F7KxC4J eey8B6HExDwMEX32alDaAmzaMLrMlTyrJeohHsiHpJYLzLafft9at+k37jPaOk0s d6wS3IviDpkBuk3zxEuTqJaV7RGRuzp9S3AITyz6VK/14+Dbq9gx75TxEkhrjV7m bqOsQHPG+7YmarRB7qjxA7SJcBT1QJM1mx7Pu6I1Ir3banc5kNN/Tgj6CB1e5T4v MPs2h/Pp1g== -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org