$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/5B57754A026F11EDBE22EF64C4F9AE02.roa File: 5B57754A026F11EDBE22EF64C4F9AE02.roa (raw, json) Hash identifier: 8mDSez92eEkaglLsJMbn0fbrJK3EOKwOEODNJChdaCg= Subject key identifier: 14:2E:7A:D0:8D:C1:DE:40:0F:5B:90:77:CA:1A:31:43:49:85:AF:29 Certificate issuer: /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Certificate serial: 0931 Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/5B57754A026F11EDBE22EF64C4F9AE02.roa Signing time: Thu 30 May 2024 22:17:56 +0000 ROA not before: Thu 30 May 2024 22:17:56 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137549 IP address blocks: 2400:6100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 21:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2353 (0x931) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5 Validity Not Before: May 30 22:17:56 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6658fb14-aa90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:ea:2f:94:1e:b0:35:49:40:95:53:60:fd: a8:e2:73:e0:03:af:4d:24:73:e4:4c:59:d1:b6:b1: bb:6f:36:2c:ee:7e:0e:5f:ea:07:1b:3f:62:ad:35: 19:c3:a6:0b:bc:ca:db:98:5d:67:f9:2a:38:49:fd: ae:fe:41:bb:9f:d5:ea:d4:ad:89:64:49:05:c1:f3: a4:a7:10:13:23:02:01:59:ec:ed:16:53:9d:be:66: f9:fb:cf:9b:ae:0d:72:90:a0:9c:1c:7c:32:e6:98: 0a:9e:65:5e:6d:4d:57:e7:6b:ab:8d:eb:47:d4:13: 4c:bd:0d:3d:ea:38:19:9c:9c:10:a2:cf:b0:3b:e2: 73:e5:e6:80:ee:c8:19:87:d4:0c:54:59:84:62:4a: f0:11:f3:82:d9:f3:2a:bd:83:08:27:71:93:19:63: 5c:e9:0b:e1:dc:c0:fb:d3:63:eb:59:17:25:d0:56: fb:4b:34:d7:00:30:a1:58:fe:4a:64:2d:66:a8:59: bb:14:9a:96:87:49:cc:34:bf:4e:ee:96:40:66:3c: 83:62:69:f7:a9:49:31:f6:29:57:43:a6:c7:4c:3e: c2:c8:39:a3:68:75:4e:ea:90:da:3d:cc:31:e9:68: 48:5c:4b:c1:81:de:d0:06:47:6a:76:b1:d0:dc:ea: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2E:7A:D0:8D:C1:DE:40:0F:5B:90:77:CA:1A:31:43:49:85:AF:29 X509v3 Authority Key Identifier: keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/5B57754A026F11EDBE22EF64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:6100::/32 Signature Algorithm: sha256WithRSAEncryption 25:91:6c:3a:03:6e:d3:d5:24:1b:ce:41:97:1a:08:41:a1:2f: b5:7d:e2:7c:59:98:82:8d:49:5f:a8:60:6d:1b:c8:ac:17:1f: 58:be:8c:a5:f8:60:a8:0b:6c:de:79:11:b5:d4:d8:ba:29:2f: ee:7c:17:8e:08:b5:d3:5d:3e:ee:89:70:2e:5b:18:51:b1:fe: 51:d2:8b:18:a1:e7:5c:32:d0:58:ba:60:27:92:d9:2e:04:e2: e1:c8:ba:8f:b3:4a:fe:10:8c:28:3c:77:10:a3:2c:df:0e:e3: b8:0f:c6:4f:ff:59:e5:de:e5:4b:8b:a8:fe:dd:38:46:43:ee: 4f:f4:9d:8e:29:00:0d:34:e9:02:a1:16:10:6d:2e:a1:6c:75: 0d:a0:ea:b3:51:ef:fc:0c:72:c0:d9:49:a5:8b:10:aa:c6:d1: 20:35:d1:4d:36:5c:82:d0:b9:de:8b:cf:58:09:bc:db:b3:73: a8:05:46:a0:5a:0f:6f:88:f7:99:07:15:87:98:39:9f:2a:78: 58:3d:f4:34:51:33:c4:41:db:d2:7b:17:c5:29:15:57:8c:54: 6a:7d:c3:1b:1c:aa:2b:39:f8:27:3a:e4:4e:e2:77:72:96:f5: 1e:12:eb:4b:37:f2:5e:37:86:bc:e8:fd:b1:e3:cc:07:e6:57: ca:6e:b8:fd -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzNUExMTAvBgNVBAUTKERDNjIyMDA4QThBMUFENDJCRTJBMjU0OTQzNDkxQUZB QTg0NTQ5QTUwHhcNMjQwNTMwMjIxNzU2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4ZmIxNC1hYTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsrqL5QesDVJQJVTYP2o4nPgA69NJHPkTFnRtrG7bzYs7n4OX+oHGz9irTUZ w6YLvMrbmF1n+So4Sf2u/kG7n9Xq1K2JZEkFwfOkpxATIwIBWeztFlOdvmb5+8+b rg1ykKCcHHwy5pgKnmVebU1X52urjetH1BNMvQ096jgZnJwQos+wO+Jz5eaA7sgZ h9QMVFmEYkrwEfOC2fMqvYMIJ3GTGWNc6Qvh3MD702PrWRcl0Fb7SzTXADChWP5K ZC1mqFm7FJqWh0nMNL9O7pZAZjyDYmn3qUkx9ilXQ6bHTD7CyDmjaHVO6pDaPcwx 6WhIXEvBgd7QBkdqdrHQ3OrAZQIDAQABo4ICljCCApIwHQYDVR0OBBYEFBQuetCN wd5AD1uQd8oaMUNJha8pMB8GA1UdIwQYMBaAFNxiIAiooa1CviolSUNJGvqoRUml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDM1QS8zQzYwOUI0NDdD NjYxMUVBODA4OUYzNTFDNEY5QUUwMi8zR0lnQ0tpaHJVSy1LaVZKUTBrYS1xaEZT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHSWdDS2loclVLLUtpVkpRMGthLXFoRlNhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTAzNUEvM0M2MDlCNDQ3QzY2MTFFQTgwODlGMzUxQzRGOUFFMDIvNUI1Nzc1NEEw MjZGMTFFREJFMjJFRjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAGEAMA0GCSqGSIb3DQEBCwUAA4IBAQAlkWw6A27T1SQb zkGXGghBoS+1feJ8WZiCjUlfqGBtG8isFx9Yvoyl+GCoC2zeeRG11Ni6KS/ufBeO CLXTXT7uiXAuWxhRsf5R0osYoedcMtBYumAnktkuBOLhyLqPs0r+EIwoPHcQoyzf DuO4D8ZP/1nl3uVLi6j+3ThGQ+5P9J2OKQANNOkCoRYQbS6hbHUNoOqzUe/8DHLA 2UmlixCqxtEgNdFNNlyC0Lnei89YCbzbs3OoBUagWg9viPeZBxWHmDmfKnhYPfQ0 UTPEQdvSexfFKRVXjFRqfcMbHKorOfgnOuRO4ndylvUeEutLN/JeN4a86P2x48wH 5lfKbrj9 -----END CERTIFICATE-----Generated at Thu Jun 6 22:35:25 2024 by rpki-client on console-fra.rpki-client.org