$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/64782D1E607E11ED9CD7EF0FC4F9AE02.roa File: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (raw, json) Hash identifier: RdvlkapM35MRJfHVT6ITjiEohu/282iaA5oNrFH45uM= Subject key identifier: 7E:1E:75:B3:C0:4F:05:E4:0D:FD:F5:87:A4:84:23:B0:C8:95:05:04 Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 032A Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/64782D1E607E11ED9CD7EF0FC4F9AE02.roa Signing time: Thu 21 Mar 2024 02:45:15 +0000 ROA not before: Thu 21 Mar 2024 02:45:15 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 150404 IP address blocks: 2400:58a0:1800::/44 maxlen: 44 2400:58a0:1800::/48 maxlen: 48 2400:58a0:1801::/48 maxlen: 48 2400:58a0:1802::/48 maxlen: 48 2400:58a0:1803::/48 maxlen: 48 2400:58a0:1804::/48 maxlen: 48 2400:58a0:1805::/48 maxlen: 48 2400:58a0:1806::/48 maxlen: 48 2400:58a0:1807::/48 maxlen: 48 2400:58a0:1808::/48 maxlen: 48 2400:58a0:1809::/48 maxlen: 48 2400:58a0:180a::/48 maxlen: 48 2400:58a0:180b::/48 maxlen: 48 2400:58a0:180c::/48 maxlen: 48 2400:58a0:180d::/48 maxlen: 48 2400:58a0:180e::/48 maxlen: 48 2400:58a0:180f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 03:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Mar 21 02:45:15 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65fb9f3a-f0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:cd:34:d2:54:34:24:24:41:24:11:9a:25: c6:73:d8:dc:46:f0:80:72:c4:41:3f:09:7b:06:64: 4f:78:d3:63:7d:17:86:d3:fd:dd:b7:36:cd:c7:89: 9a:a8:dd:f4:73:f0:a7:3d:10:1e:cf:8b:08:65:d2: af:5f:2e:82:5b:96:d7:7a:20:46:27:f2:c5:9f:d2: ad:fd:16:dd:9b:8f:59:99:b6:2d:68:8f:10:77:e5: dc:2e:25:84:d2:9d:7f:e4:9c:85:6a:7e:62:96:c6: 5f:f5:03:0a:00:47:e0:98:9b:61:e1:ef:d9:5f:8f: 96:bb:1b:56:1a:5c:cc:3d:9f:c0:75:b5:ad:7a:7d: e2:7d:85:14:9c:9f:20:fe:3a:10:26:28:a0:b5:ff: 85:01:5b:6a:cf:dd:ed:4e:31:a9:07:63:e5:1a:21: 78:ba:97:ca:32:a9:d1:8c:0f:c1:73:09:a9:55:71: af:83:17:1d:8a:73:12:cd:c2:a4:38:b1:80:8f:b1: 62:97:26:6d:86:43:fa:56:87:14:e8:dd:b9:65:fb: 03:fb:95:4f:70:5a:9a:68:9b:49:34:5d:4d:17:b1: 1a:d4:61:f0:f5:c5:2f:b1:4f:5c:c4:b4:e2:82:a2: dd:8e:a2:d1:a3:ec:2a:f3:64:3c:4b:1a:56:07:5f: 83:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1E:75:B3:C0:4F:05:E4:0D:FD:F5:87:A4:84:23:B0:C8:95:05:04 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/64782D1E607E11ED9CD7EF0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:58a0:1800::/44 Signature Algorithm: sha256WithRSAEncryption b9:f9:34:77:39:1f:57:40:63:fd:78:44:4f:34:0f:55:6d:ec: 97:37:22:ba:0f:77:5a:2a:00:0f:20:22:c9:ec:ee:bf:7b:56: 2e:7c:f0:1f:55:de:0a:db:7a:c0:b3:b5:1a:e5:e6:f9:90:b8: 0a:c1:c5:10:91:76:6e:16:a3:f1:1f:66:b5:66:bd:61:1d:21: 47:59:61:2f:67:56:c3:73:24:4c:65:bd:f3:3b:a1:c6:1a:5c: 67:4b:69:79:18:c7:b6:d2:07:5d:b0:35:d8:23:de:7d:58:cf: f4:a6:1d:32:af:a5:cf:66:3a:1f:90:03:6b:f2:26:22:c5:38: 31:b3:d1:ac:50:79:b2:b0:67:90:85:d5:ca:99:44:cc:ec:91: 4d:08:10:8d:de:7e:be:0f:c8:66:ec:65:ba:9a:2c:cb:55:86: 91:1b:1e:72:0b:20:a3:6d:7f:e7:b5:8c:2e:8d:80:73:f2:ad: 6b:cc:c9:49:3e:01:fe:62:94:84:72:c6:b5:fa:88:df:e3:1c: 69:49:27:8f:87:d4:ef:c8:68:f4:f9:be:dc:34:c9:38:32:2e: fc:2b:c8:0c:52:a1:48:ff:94:99:bd:33:a7:0c:d2:6e:f0:ba: a2:d2:a7:9e:94:92:37:ae:be:71:70:ff:d0:2d:59:b1:cf:d3: 0b:a0:59:84 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjQwMzIxMDI0NTE1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWZiOWYzYS1mMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8nNNNJUNCQkQSQRmiXGc9jcRvCAcsRBPwl7BmRPeNNjfReG0/3dtzbNx4ma qN30c/CnPRAez4sIZdKvXy6CW5bXeiBGJ/LFn9Kt/Rbdm49ZmbYtaI8Qd+XcLiWE 0p1/5JyFan5ilsZf9QMKAEfgmJth4e/ZX4+WuxtWGlzMPZ/AdbWten3ifYUUnJ8g /joQJiigtf+FAVtqz93tTjGpB2PlGiF4upfKMqnRjA/BcwmpVXGvgxcdinMSzcKk OLGAj7FilyZthkP6VocU6N25ZfsD+5VPcFqaaJtJNF1NF7Ea1GHw9cUvsU9cxLTi gqLdjqLRo+wq82Q8SxpWB1+D6QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFH4edbPA TwXkDf31h6SEI7DIlQUEMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I0QkYvQjhDQzY5M0M4NTVDMTFFQzhFM0NCQjUxQzRGOUFFMDIvNjQ3ODJEMUU2 MDdFMTFFRDlDRDdFRjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkAFigGAAwDQYJKoZIhvcNAQELBQADggEBALn5NHc5H1dA Y/14RE80D1Vt7Jc3IroPd1oqAA8gIsns7r97Vi588B9V3grbesCztRrl5vmQuArB xRCRdm4Wo/EfZrVmvWEdIUdZYS9nVsNzJExlvfM7ocYaXGdLaXkYx7bSB12wNdgj 3n1Yz/SmHTKvpc9mOh+QA2vyJiLFODGz0axQebKwZ5CF1cqZRMzskU0IEI3efr4P yGbsZbqaLMtVhpEbHnILIKNtf+e1jC6NgHPyrWvMyUk+Af5ilIRyxrX6iN/jHGlJ J4+H1O/IaPT5vtw0yTgyLvwryAxSoUj/lJm9M6cM0m7wuqLSp56UkjeuvnFw/9At WbHP0wugWYQ= -----END CERTIFICATE-----Generated at Fri Jun 7 04:48:34 2024 by rpki-client on console-fra.rpki-client.org