$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/76888B6AE9EF11EEA8EF9C78C4F9AE02.roa File: 76888B6AE9EF11EEA8EF9C78C4F9AE02.roa (raw, json) Hash identifier: V+txe5QrVc4+bHe9nkbQ7UNwyXjHg87xNyoaUJigfgA= Subject key identifier: D2:75:A9:2B:7B:5C:BD:DC:72:ED:E8:DC:0E:C5:A8:46:C4:63:D7:6C Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 02B5 Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/76888B6AE9EF11EEA8EF9C78C4F9AE02.roa Signing time: Mon 13 May 2024 04:08:06 +0000 ROA not before: Mon 13 May 2024 04:08:06 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 215310 IP address blocks: 2400:70e0:bb0::/44 maxlen: 44 2400:70e0:bf0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: May 13 04:08:06 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66419225-d931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e1:2b:39:17:9f:e7:4b:1e:74:47:3d:b0:11: a8:52:fd:d3:27:b7:32:3a:3b:29:b4:c8:91:b4:a9: 27:75:fd:77:f0:ed:6c:d8:89:6a:98:fd:72:4e:2d: 84:8f:7d:9d:0f:c1:cc:fa:19:fb:84:8a:7f:7d:3b: e1:6d:11:06:fa:4e:ca:69:1d:e9:9a:b4:1f:98:a6: 85:b1:06:fa:20:91:84:b4:62:85:6c:af:c2:9e:ed: e7:1a:f6:c7:88:20:f4:37:cb:e5:f8:bd:1e:4e:52: f7:4a:92:05:35:bb:e8:ea:73:8a:7d:69:df:6a:32: d2:e6:5b:a7:b1:28:50:d8:35:8e:43:54:17:88:01: 60:2f:41:a2:c0:11:8a:14:a3:61:ea:17:82:d9:8b: bb:36:1e:5d:c4:44:04:c7:19:c7:88:58:98:28:55: b6:2e:92:27:b0:3b:03:f2:c5:65:8f:54:43:4a:66: d3:51:ce:65:4a:21:c8:6a:fa:7b:c9:c5:65:51:d2: 54:95:1a:a6:dd:3a:18:6d:5b:d9:3e:b1:81:fa:a8: 99:93:59:ff:54:9b:bf:66:3b:e8:76:de:51:ef:7a: 9a:04:15:41:3e:ae:28:26:d9:af:08:49:51:42:99: 7b:d6:20:ef:43:f7:de:cf:73:6a:98:dc:b8:b0:b2: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:75:A9:2B:7B:5C:BD:DC:72:ED:E8:DC:0E:C5:A8:46:C4:63:D7:6C X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/76888B6AE9EF11EEA8EF9C78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:70e0:bb0::/44 2400:70e0:bf0::/44 Signature Algorithm: sha256WithRSAEncryption 7a:1a:ae:36:95:a3:e6:8d:04:29:8d:22:27:79:f4:b0:51:ee: 1f:bf:8e:6f:79:cf:b1:66:ae:3d:52:1a:a2:d1:76:f9:6e:68: 3b:33:0d:1d:7e:31:1c:2e:c5:4e:dd:cc:c4:d9:a9:d9:08:48: ef:a9:d8:13:3a:63:cd:0d:61:d3:a7:4f:97:b6:cd:43:ca:fc: d1:00:26:2b:0f:1a:db:74:ad:22:a1:79:2d:c6:6c:4a:2e:21: 04:c6:4e:53:cd:4a:d1:66:08:69:e9:ea:6b:e8:3a:5b:75:6d: b3:70:a8:3b:fd:6e:52:d5:3b:9e:44:2d:c7:68:1b:97:49:3f: c9:3e:49:ae:43:ef:eb:8f:44:f0:8c:eb:d7:d8:4e:39:f0:27: 5a:06:79:d1:38:91:11:41:3b:48:cd:0c:b3:7e:d6:2e:36:ae: f5:66:eb:99:3f:0f:e4:ac:87:31:6a:52:05:73:0c:68:72:12: 88:2b:7e:e2:37:30:32:f0:8b:12:de:ba:6a:5c:02:59:b1:e1: 08:34:c7:ef:7d:ee:88:b5:e6:23:67:a6:b4:dd:f5:66:73:94: 9d:51:df:8b:99:5a:0d:ec:1c:e8:0c:4d:11:db:d6:51:56:3d: a0:03:30:2c:58:fe:60:96:da:76:1d:36:a0:5b:a9:63:bb:4e: 40:74:9e:18 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjQwNTEzMDQwODA2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQxOTIyNS1kOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteErORef50sedEc9sBGoUv3TJ7cyOjsptMiRtKkndf138O1s2IlqmP1yTi2E j32dD8HM+hn7hIp/fTvhbREG+k7KaR3pmrQfmKaFsQb6IJGEtGKFbK/Cnu3nGvbH iCD0N8vl+L0eTlL3SpIFNbvo6nOKfWnfajLS5lunsShQ2DWOQ1QXiAFgL0GiwBGK FKNh6heC2Yu7Nh5dxEQExxnHiFiYKFW2LpInsDsD8sVlj1RDSmbTUc5lSiHIavp7 ycVlUdJUlRqm3ToYbVvZPrGB+qiZk1n/VJu/Zjvodt5R73qaBBVBPq4oJtmvCElR Qpl71iDvQ/fez3NqmNy4sLJjdwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNJ1qSt7 XL3ccu3o3A7FqEbEY9dsMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI4MzcvOUQ5MEFCNjJDMTVBMTFFQ0E0NEY1MzYwQzRGOUFFMDIvNzY4ODhCNkFF OUVGMTFFRUE4RUY5Qzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkAHDgC7ADBwQkAHDgC/AwDQYJKoZIhvcNAQELBQADggEB AHoarjaVo+aNBCmNIid59LBR7h+/jm95z7Fmrj1SGqLRdvluaDszDR1+MRwuxU7d zMTZqdkISO+p2BM6Y80NYdOnT5e2zUPK/NEAJisPGtt0rSKheS3GbEouIQTGTlPN StFmCGnp6mvoOlt1bbNwqDv9blLVO55ELcdoG5dJP8k+Sa5D7+uPRPCM69fYTjnw J1oGedE4kRFBO0jNDLN+1i42rvVm65k/D+SshzFqUgVzDGhyEogrfuI3MDLwixLe umpcAlmx4Qg0x+997oi15iNnprTd9WZzlJ1R34uZWg3sHOgMTRHb1lFWPaADMCxY /mCW2nYdNqBbqWO7TkB0nhg= -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org