$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa File: E2D92650FE1A11EEBD74AE3AC4F9AE02.roa (raw, json) Hash identifier: GdFG3ue9vY0GJCrfDsFnGBUuVZYx4n63fX0yGQOLOzg= Subject key identifier: B8:C6:D3:03:05:58:CD:36:06:AF:70:3D:DE:40:D6:1B:94:A4:55:4F Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C1D Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa Signing time: Fri 10 May 2024 13:11:38 +0000 ROA not before: Fri 10 May 2024 13:11:37 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 142586 IP address blocks: 2406:840:ed00::/40 maxlen: 48 2406:840:fde0::/48 maxlen: 48 2406:840:fece::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3101 (0xc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 10 13:11:37 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=663e1d09-e45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bf:6b:f5:2e:60:56:b5:a1:22:df:f6:07:d3: a7:39:67:58:e7:b0:79:03:a5:2a:cb:aa:8d:4e:92: 85:0a:50:48:b6:0e:9e:30:73:66:d1:e3:96:d7:9d: 8a:43:46:5b:9d:54:82:23:8d:e0:d0:11:56:c9:e6: c8:86:88:00:88:e4:0f:df:71:2d:82:a0:c6:56:ec: cc:d0:02:8f:e8:c6:25:66:1d:bf:1c:bb:ad:ce:17: 22:3e:4a:8f:8c:4b:76:44:5b:92:1a:d2:ca:2a:72: 6e:ed:49:7e:ed:f4:f4:8a:c6:75:63:03:db:da:ea: b2:90:12:c3:a0:1e:5f:51:eb:38:4a:38:2b:dc:93: b4:70:b8:ce:eb:75:09:a7:78:e8:d2:64:f3:1f:27: 7d:06:06:10:6a:28:73:91:24:2a:c7:0a:c9:fe:db: cb:04:cb:ab:77:55:0c:fe:59:df:8e:26:6e:b4:af: af:d1:9a:73:9d:34:39:6e:41:04:64:76:0c:88:cf: b8:9e:c3:3b:35:9f:4e:1d:e2:17:8d:bc:46:d2:a1: 01:58:2a:b5:c1:b2:ac:21:1f:e8:ea:90:be:97:81: b5:f5:ce:2d:1c:cb:87:cd:e1:91:17:4e:d6:07:4d: f1:25:42:39:d7:b1:d3:50:0d:f5:76:2b:10:02:f8: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C6:D3:03:05:58:CD:36:06:AF:70:3D:DE:40:D6:1B:94:A4:55:4F X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:ed00::/40 2406:840:fde0::/48 2406:840:fece::/48 Signature Algorithm: sha256WithRSAEncryption 45:cb:77:cf:c8:c7:09:f5:7e:1a:67:52:6a:6f:4c:47:be:86: a3:56:92:e8:19:22:be:d1:6d:dd:83:51:4e:4a:8a:9d:ef:43: ac:89:44:43:39:5d:79:e7:71:3a:d9:c3:16:56:dd:0e:6f:40: 90:a4:b8:28:52:3f:58:b4:49:92:9f:33:85:46:88:dc:0b:ab: 0c:fb:d3:14:e8:34:1a:16:09:a7:12:d8:9f:7a:6b:9c:0f:57: 30:96:ab:67:02:bf:7e:40:48:b3:65:af:44:b0:f0:37:1a:ef: f7:ba:ce:71:54:1b:0a:e4:61:a2:a5:9d:3a:84:11:da:d3:7e: 94:1a:35:9b:a1:61:a5:aa:4d:bc:fd:78:cf:75:2d:6e:38:b6: c6:9a:2c:72:85:65:0b:c3:ab:e2:fd:05:48:e9:11:43:d1:09: 7e:f0:79:e1:c6:54:5c:b6:66:99:d2:11:e2:fb:27:19:29:62: 85:99:b8:cd:c8:f2:dd:5a:63:85:e3:10:f7:d1:7e:df:34:2b: 22:32:03:49:40:0b:5e:5b:ac:34:44:5b:76:2c:6d:75:fa:8e: a5:2a:0b:9c:9e:b9:b8:51:fb:b6:2f:e4:6a:cd:3c:fb:72:47: a6:4c:3f:db:32:0e:0e:0e:fa:34:b9:ff:f5:48:54:0a:ac:c9: 56:19:a3:8e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTEwMTMxMTM3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNlMWQwOS1lNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8b9r9S5gVrWhIt/2B9OnOWdY57B5A6Uqy6qNTpKFClBItg6eMHNm0eOW152K Q0ZbnVSCI43g0BFWyebIhogAiOQP33EtgqDGVuzM0AKP6MYlZh2/HLutzhciPkqP jEt2RFuSGtLKKnJu7Ul+7fT0isZ1YwPb2uqykBLDoB5fUes4Sjgr3JO0cLjO63UJ p3jo0mTzHyd9BgYQaihzkSQqxwrJ/tvLBMurd1UM/lnfjiZutK+v0ZpznTQ5bkEE ZHYMiM+4nsM7NZ9OHeIXjbxG0qEBWCq1wbKsIR/o6pC+l4G19c4tHMuHzeGRF07W B03xJUI517HTUA31disQAvi+nQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFLjG0wMF WM02Bq9wPd5A1huUpFVPMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRTJEOTI2NTBG RTFBMTFFRUJENzRBRTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgACMBoDBgAkBghA7QMHACQGCED94AMHACQGCED+zjANBgkqhkiG9w0B AQsFAAOCAQEARct3z8jHCfV+GmdSam9MR76Go1aS6BkivtFt3YNRTkqKne9DrIlE QzldeedxOtnDFlbdDm9AkKS4KFI/WLRJkp8zhUaI3AurDPvTFOg0GhYJpxLYn3pr nA9XMJarZwK/fkBIs2WvRLDwNxrv97rOcVQbCuRhoqWdOoQR2tN+lBo1m6FhpapN vP14z3Utbji2xposcoVlC8Or4v0FSOkRQ9EJfvB54cZUXLZmmdIR4vsnGSlihZm4 zcjy3VpjheMQ99F+3zQrIjIDSUALXlusNERbdixtdfqOpSoLnJ65uFH7ti/kas08 +3JHpkw/2zIODg76NLn/9UhUCqzJVhmjjg== -----END CERTIFICATE-----Generated at Fri May 10 23:04:08 2024 by rpki-client on console-ams.rpki-client.org