$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EB3FE1C61B6411ECAAB1D328C4F9AE02.roa File: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (raw, json) Hash identifier: 0gjytxXMkRGpAfvhAn4DXXB7sM/E6Hqu+qPHX1nuJ0U= Subject key identifier: 96:35:EF:9D:57:90:6A:02:EC:15:9E:64:94:A1:00:F0:48:B8:46:A8 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 335F Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EB3FE1C61B6411ECAAB1D328C4F9AE02.roa Signing time: Tue 12 Sep 2023 15:31:08 +0000 ROA not before: Tue 12 Sep 2023 15:31:08 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 142501 IP address blocks: 2405:8a00:ffff::/48 maxlen: 48 2409:e:e0::/48 maxlen: 48 2409:e:e1::/48 maxlen: 48 2409:e:e2::/48 maxlen: 48 2409:e:e4::/48 maxlen: 48 2409:e:e6::/48 maxlen: 48 2409:e:e8::/48 maxlen: 48 2409:e:ea::/48 maxlen: 48 2409:e:ec::/48 maxlen: 48 2409:e:ee::/48 maxlen: 48 2409:f::/32 maxlen: 32 2409:f:f1::/48 maxlen: 48 2409:f:f3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13151 (0x335f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Sep 12 15:31:08 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6500843c-d328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:c0:89:ae:ab:59:57:1e:d7:18:35:7e:48: 8d:7a:ac:1d:13:f6:37:1f:24:8f:0b:57:86:04:6f: 35:6b:85:41:a3:20:37:fc:4f:55:b4:12:3b:f1:3b: 6a:2d:3a:0d:2a:a0:0d:48:ae:0f:25:9b:80:d7:ee: a2:75:77:f5:30:9e:27:17:3e:00:1c:ca:f3:fd:18: 42:0f:2f:67:44:3b:17:2d:b2:08:eb:87:75:5e:a9: 36:c6:00:a4:bc:37:26:14:20:2b:2b:09:2f:60:10: 67:98:37:1a:ac:a6:8a:48:aa:96:fc:e2:17:3c:f4: e9:6c:40:bb:6e:68:1d:dd:55:b1:f4:63:5a:34:80: f2:dd:cf:f6:b6:76:cb:c2:c2:34:a0:a0:bd:fa:38: f3:0c:f4:b3:d7:82:18:73:84:ab:c4:b4:de:2a:d6: 2a:46:bd:eb:d7:14:26:1b:d4:9a:f0:e9:2c:03:b5: bf:c4:58:8c:3a:79:e0:a6:4f:b7:71:fe:1a:1c:bc: 13:a5:12:af:54:b0:db:62:5f:8a:b8:e4:37:c9:83: 69:5e:92:17:cf:30:52:01:61:fe:45:d2:a6:3e:89: b3:a0:f0:19:89:c8:02:76:a8:00:89:69:70:b9:9d: 44:24:75:bb:59:ac:ce:8b:2b:e7:9d:5a:50:6e:25: 20:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:35:EF:9D:57:90:6A:02:EC:15:9E:64:94:A1:00:F0:48:B8:46:A8 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EB3FE1C61B6411ECAAB1D328C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:8a00:ffff::/48 2409:e:e0::-2409:e:e2:ffff:ffff:ffff:ffff:ffff 2409:e:e4::/48 2409:e:e6::/48 2409:e:e8::/48 2409:e:ea::/48 2409:e:ec::/48 2409:e:ee::/48 2409:f::/32 Signature Algorithm: sha256WithRSAEncryption 6e:06:ed:e8:11:75:00:00:0a:fe:55:94:c3:5a:0c:42:2d:38: b4:aa:1b:41:80:65:1c:ca:f7:83:00:a9:d1:6b:82:fb:1c:ae: 60:e0:ad:16:f1:c3:6c:21:02:78:d2:6b:90:c4:4b:0a:33:68: 59:d7:4a:3e:c1:5e:45:5d:23:df:ec:29:27:33:23:0a:2b:12: 6f:b3:8d:e5:67:27:b5:18:2d:ea:ed:3c:09:bb:d1:98:0f:d5: 83:de:87:dd:ef:f9:f0:5b:7e:5a:2e:41:d2:20:af:60:9d:b2: 25:53:d2:23:58:25:82:a8:d0:d2:e3:6b:fb:dd:93:fe:04:ba: 91:87:d3:e2:2e:af:e8:70:27:5b:16:d5:d5:3c:81:36:ed:08: 70:24:2d:29:17:a5:34:97:57:84:20:6d:ab:b4:61:51:72:1d: 8c:bb:72:aa:d9:05:2f:32:c8:aa:b4:42:a2:0e:e1:70:bb:6c: d6:3d:b8:f0:c9:ef:fc:8f:20:8b:0b:af:f3:4e:59:8d:56:21: ac:f9:f9:31:a8:09:32:fe:15:18:f1:6d:ad:92:c0:f2:61:4d: 1e:f1:97:c1:66:6b:c9:12:15:01:02:69:a8:e0:b1:f9:91:db: 5d:ff:8b:ff:ea:51:ab:20:e2:a9:67:02:9f:57:40:a1:15:65: 7d:d4:ad:dd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgICM18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjMwOTEyMTUzMTA4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAwODQzYy1kMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqN7Aia6rWVce1xg1fkiNeqwdE/Y3HySPC1eGBG81a4VBoyA3/E9VtBI78Ttq LToNKqANSK4PJZuA1+6idXf1MJ4nFz4AHMrz/RhCDy9nRDsXLbII64d1Xqk2xgCk vDcmFCArKwkvYBBnmDcarKaKSKqW/OIXPPTpbEC7bmgd3VWx9GNaNIDy3c/2tnbL wsI0oKC9+jjzDPSz14IYc4SrxLTeKtYqRr3r1xQmG9Sa8OksA7W/xFiMOnngpk+3 cf4aHLwTpRKvVLDbYl+KuOQ3yYNpXpIXzzBSAWH+RdKmPomzoPAZicgCdqgAiWlw uZ1EJHW7WazOiyvnnVpQbiUgUQIDAQABo4IC6TCCAuUwHQYDVR0OBBYEFJY1751X kGoC7BWeZJShAPBIuEaoMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvRUIzRkUxQzYx QjY0MTFFQ0FBQjFEMzI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcwYIKwYBBQUHAQcBAf8E ZDBiMGAEAgACMFoDBwAkBYoA//8wEgMHBSQJAA4A4AMHACQJAA4A4gMHACQJAA4A 5AMHACQJAA4A5gMHACQJAA4A6AMHACQJAA4A6gMHACQJAA4A7AMHACQJAA4A7gMF ACQJAA8wDQYJKoZIhvcNAQELBQADggEBAG4G7egRdQAACv5VlMNaDEItOLSqG0GA ZRzK94MAqdFrgvscrmDgrRbxw2whAnjSa5DESwozaFnXSj7BXkVdI9/sKSczIwor Em+zjeVnJ7UYLertPAm70ZgP1YPeh93v+fBbflouQdIgr2CdsiVT0iNYJYKo0NLj a/vdk/4EupGH0+Iur+hwJ1sW1dU8gTbtCHAkLSkXpTSXV4Qgbau0YVFyHYy7cqrZ BS8yyKq0QqIO4XC7bNY9uPDJ7/yPIIsLr/NOWY1WIaz5+TGoCTL+FRjxba2SwPJh TR7xl8Fma8kSFQECaajgsfmR213/i//qUasg4qlnAp9XQKEVZX3Urd0= -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org