$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2D130CE8CBEF11EA9FBE4515C4F9AE02.roa File: 2D130CE8CBEF11EA9FBE4515C4F9AE02.roa (raw, json) Hash identifier: jclRi2mTqJvfyqWJ1ZpFgHHjwZTNWnOYTKJxmvOF6Bk= Subject key identifier: 04:F1:5B:56:8D:45:77:CA:E6:84:B5:A2:44:AB:E5:D2:DA:AF:ED:F8 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A45 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2D130CE8CBEF11EA9FBE4515C4F9AE02.roa Signing time: Sun 14 May 2023 22:14:23 +0000 ROA not before: Sun 14 May 2023 22:14:23 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 140936 IP address blocks: 2406:840:edd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:14:23 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d3f-0039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:09:d7:2a:34:88:01:b9:03:4f:ca:67:37: 6a:1f:49:75:d1:4c:94:ce:f1:ed:6e:f5:3a:5c:cb: 17:1e:a8:4e:69:b4:4c:29:c4:65:67:aa:95:7d:c6: 83:bc:e4:34:72:31:e6:63:42:6d:e3:47:1b:ad:5c: 1c:a0:0d:82:a8:bb:17:22:14:d6:ad:ea:dd:fd:5b: 2d:ab:6b:21:d5:e4:58:f6:f6:93:be:99:f3:61:1c: e0:bf:0b:2e:fd:a8:67:8a:67:45:06:be:ca:9e:22: a7:0d:24:d5:5a:21:e0:cc:25:e0:20:0a:52:af:72: bb:76:f5:ad:f0:cf:91:4b:e8:30:37:d1:dd:bc:e4: 67:22:dd:43:65:f1:3b:a6:75:87:d6:04:95:55:5f: 9d:ad:96:e2:f6:b1:bd:69:87:8c:d3:5e:cc:e7:d5: 53:8f:32:ff:c8:02:25:b7:fc:34:da:2f:fd:50:b5: a2:67:43:8e:2c:14:17:6c:ed:06:5d:91:ce:98:c9: 83:dd:b7:c5:ab:c6:21:69:96:a4:b8:33:36:cc:b9: 4f:fa:cc:70:82:b5:fc:53:ba:89:82:5f:29:1c:65: 8e:98:15:ae:d1:3a:49:18:42:f4:77:31:59:01:45: cd:12:9a:a8:90:1a:58:e4:6f:75:9d:d6:de:bf:d2: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F1:5B:56:8D:45:77:CA:E6:84:B5:A2:44:AB:E5:D2:DA:AF:ED:F8 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2D130CE8CBEF11EA9FBE4515C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:edd0::/44 Signature Algorithm: sha256WithRSAEncryption 7a:68:eb:48:9d:92:ff:b1:cb:4a:ed:b0:2b:14:77:ec:bb:21: fe:be:f9:b9:21:45:a9:42:96:00:3e:60:06:bf:3e:47:a5:1f: f1:c9:91:46:f4:e0:72:87:a0:af:0f:07:d4:96:e2:b6:71:ae: 00:da:6e:31:f2:ce:82:2d:ac:92:69:6e:b3:27:bc:f4:7f:34: 65:33:6f:49:62:b7:15:4e:8c:a7:e9:a1:fb:a8:0d:4a:28:0c: 1c:66:0f:d1:9b:d1:a5:9c:a0:7f:7c:77:08:a3:72:6d:24:43: 99:61:63:26:f3:94:31:82:f8:34:93:ac:17:3e:60:02:a2:0f: fe:36:23:96:c3:33:44:c0:4f:43:fe:df:23:e7:2b:a4:6f:c1: 90:45:fd:8e:8b:e6:49:e5:91:73:dc:b0:87:6c:c2:f2:68:f3: 48:5c:58:83:25:aa:c1:7a:cc:99:4a:8d:b2:35:6c:fa:57:47: 43:a4:7f:09:ea:12:f1:71:ca:3a:56:ec:8c:52:c5:38:37:e7: 3d:87:ab:5f:ee:0e:ae:94:be:1e:1d:2c:91:80:4a:b5:c0:59: 4e:34:1e:74:fd:af:ad:4a:fd:2e:f6:1d:05:81:2e:3c:d3:82: b4:bc:53:ad:58:54:92:85:b1:27:6e:28:72:59:d1:f6:0f:13: df:f7:57:ef -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNDIzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQzZi0wMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VEJ1yo0iAG5A0/KZzdqH0l10UyUzvHtbvU6XMsXHqhOabRMKcRlZ6qVfcaD vOQ0cjHmY0Jt40cbrVwcoA2CqLsXIhTWrerd/Vstq2sh1eRY9vaTvpnzYRzgvwsu /ahnimdFBr7KniKnDSTVWiHgzCXgIApSr3K7dvWt8M+RS+gwN9HdvORnIt1DZfE7 pnWH1gSVVV+drZbi9rG9aYeM017M59VTjzL/yAIlt/w02i/9ULWiZ0OOLBQXbO0G XZHOmMmD3bfFq8YhaZakuDM2zLlP+sxwgrX8U7qJgl8pHGWOmBWu0TpJGEL0dzFZ AUXNEpqokBpY5G91ndbev9LGZQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFATxW1aN RXfK5oS1okSr5dLar+34MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMkQxMzBDRThD QkVGMTFFQTlGQkU0NTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA7dAwDQYJKoZIhvcNAQELBQADggEBAHpo60idkv+x y0rtsCsUd+y7If6++bkhRalClgA+YAa/PkelH/HJkUb04HKHoK8PB9SW4rZxrgDa bjHyzoItrJJpbrMnvPR/NGUzb0litxVOjKfpofuoDUooDBxmD9Gb0aWcoH98dwij cm0kQ5lhYybzlDGC+DSTrBc+YAKiD/42I5bDM0TAT0P+3yPnK6RvwZBF/Y6L5knl kXPcsIdswvJo80hcWIMlqsF6zJlKjbI1bPpXR0OkfwnqEvFxyjpW7IxSxTg35z2H q1/uDq6Uvh4dLJGASrXAWU40HnT9r61K/S72HQWBLjzTgrS8U61YVJKFsSduKHJZ 0fYPE9/3V+8= -----END CERTIFICATE-----Generated at Wed Apr 24 22:30:01 2024 by rpki-client on console-fra.rpki-client.org