$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/76E5D6AE727411EFAD2ACD27C4F9AE02.roa File: 76E5D6AE727411EFAD2ACD27C4F9AE02.roa (raw, json) Hash identifier: seqCKD6Db6uHjZMFtslvwJ+ELyFHvSU96+t1eEuQ2I0= Subject key identifier: 41:7B:5F:07:E2:CD:18:E2:FE:44:D8:A7:EC:CC:3C:F1:C2:0C:75:A4 Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0EC5 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/76E5D6AE727411EFAD2ACD27C4F9AE02.roa Signing time: Sat 14 Sep 2024 08:36:41 +0000 ROA not before: Sat 14 Sep 2024 08:36:41 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 104 IP address blocks: 2406:2c0:1132::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3781 (0xec5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF Validity Not Before: Sep 14 08:36:41 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66e54b19-d5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:2b:60:e9:61:47:f7:c2:8c:8c:9a:89:3e: 67:bd:13:07:6f:74:0d:d0:d8:9f:6d:35:ec:d5:3f: fd:13:84:3d:fe:af:5b:47:4b:bb:d1:d3:40:50:26: 24:8a:c9:b9:0e:39:8f:b7:db:08:bc:a9:f9:4b:50: 97:29:4d:2f:e3:67:9c:c5:f5:e4:be:43:48:a1:57: 13:60:62:13:67:14:d0:45:c9:5b:91:5f:93:5e:b1: 52:de:4e:15:97:d2:84:66:09:11:93:14:84:57:bd: f1:42:a8:76:78:ec:12:99:60:c5:da:05:45:ac:2a: ce:a8:c3:6c:d6:09:1f:40:e1:f4:0c:69:ec:50:8e: 19:14:e2:ab:17:8d:fe:58:b1:e5:b1:9c:28:8c:24: 04:9e:06:3c:c2:40:57:13:6a:ec:90:c2:9e:de:00: b1:ca:8c:f2:a4:32:fb:81:fd:c8:ca:6a:98:fe:6f: 2e:8d:df:73:d0:b4:0c:b2:ad:c1:c5:a9:6b:92:68: f4:fe:f0:5b:89:1f:b4:6a:45:8f:f9:29:15:9c:e9: cf:be:51:51:f1:01:b8:c1:64:dd:e2:71:5e:f8:81: 06:02:89:9e:da:bf:c1:d4:d8:e4:66:db:e9:75:95: c7:8f:0d:df:bc:0e:06:ec:6f:5c:bd:52:19:9f:c4: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7B:5F:07:E2:CD:18:E2:FE:44:D8:A7:EC:CC:3C:F1:C2:0C:75:A4 X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/76E5D6AE727411EFAD2ACD27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:2c0:1132::/48 Signature Algorithm: sha256WithRSAEncryption 40:53:7f:b7:a2:f8:b6:35:4b:0a:03:97:c6:f9:08:d0:39:65: 44:63:41:91:b7:f1:1a:12:42:59:63:e8:b9:c3:e5:cf:c2:47: 16:13:e5:85:5d:ad:1d:70:7f:72:2f:07:17:1d:2e:77:74:de: 36:0e:d2:2f:24:00:7b:bd:b8:75:c3:cd:77:a3:40:b1:21:c1: 8a:28:de:eb:43:82:d9:bd:57:96:35:47:fa:df:b9:5f:e2:5f: 8d:08:e3:43:43:88:21:09:0b:b1:7a:2a:b8:32:ea:e1:7d:03: d0:7f:4e:a1:a7:36:17:cc:d8:6a:0b:34:be:66:b9:8f:a1:cb: 57:b6:c7:29:18:e4:3e:a8:55:83:c6:8b:54:2a:8b:b2:f3:bf: fc:97:da:96:32:e9:b0:71:fe:5e:59:27:ca:cd:66:3a:f0:95: b5:0f:de:b5:c0:7c:40:e7:dd:e5:9a:71:74:a9:a7:7d:1b:33: 7b:c8:b1:9a:2a:25:e8:7b:31:7e:13:ea:b0:98:86:4c:ca:a9: 12:08:3c:a7:d8:ea:c8:e7:4b:93:07:db:34:2f:60:28:38:be: 82:2c:37:a8:69:c9:dc:ed:44:f5:9f:a1:b3:bb:af:24:88:7d: c7:ac:b4:b1:fa:1a:ef:51:75:de:ee:20:4d:99:7a:3f:c6:05: e8:63:83:1c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjQwOTE0MDgzNjQxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU1NGIxOS1kNWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs4rYOlhR/fCjIyaiT5nvRMHb3QN0NifbTXs1T/9E4Q9/q9bR0u70dNAUCYk ism5DjmPt9sIvKn5S1CXKU0v42ecxfXkvkNIoVcTYGITZxTQRclbkV+TXrFS3k4V l9KEZgkRkxSEV73xQqh2eOwSmWDF2gVFrCrOqMNs1gkfQOH0DGnsUI4ZFOKrF43+ WLHlsZwojCQEngY8wkBXE2rskMKe3gCxyozypDL7gf3IymqY/m8ujd9z0LQMsq3B xalrkmj0/vBbiR+0akWP+SkVnOnPvlFR8QG4wWTd4nFe+IEGAome2r/B1NjkZtvp dZXHjw3fvA4G7G9cvVIZn8QmswIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEF7Xwfi zRji/kTYp+zMPPHCDHWkMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlCREYvRTcwRTBBOTg3MDkzMTFFOTgwQkQ3QzNEQzRGOUFFMDIvNzZFNUQ2QUU3 Mjc0MTFFRkFEMkFDRDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBgLAETIwDQYJKoZIhvcNAQELBQADggEBAEBTf7ei+LY1 SwoDl8b5CNA5ZURjQZG38RoSQllj6LnD5c/CRxYT5YVdrR1wf3IvBxcdLnd03jYO 0i8kAHu9uHXDzXejQLEhwYoo3utDgtm9V5Y1R/rfuV/iX40I40NDiCEJC7F6Krgy 6uF9A9B/TqGnNhfM2GoLNL5muY+hy1e2xykY5D6oVYPGi1Qqi7Lzv/yX2pYy6bBx /l5ZJ8rNZjrwlbUP3rXAfEDn3eWacXSpp30bM3vIsZoqJeh7MX4T6rCYhkzKqRII PKfY6sjnS5MH2zQvYCg4voIsN6hpydztRPWfobO7rySIfcestLH6Gu9Rdd7uIE2Z ej/GBehjgxw= -----END CERTIFICATE-----Generated at Sun Feb 16 20:31:34 2025 by rpki-client