$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa File: 7F77220A143811EE97A64D19C4F9AE02.roa (raw, json) Hash identifier: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs= Subject key identifier: 5A:6D:3A:7F:EE:40:80:13:0B:22:E9:4B:A5:FE:38:A7:A9:72:38:D9 Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 17C5 Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa Signing time: Tue 06 Aug 2024 16:54:20 +0000 ROA not before: Tue 06 Aug 2024 16:54:20 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 38551 IP address blocks: 2407:e500:c::/47 maxlen: 47 2407:e500:e::/47 maxlen: 47 2407:e500:10::/47 maxlen: 47 2407:e500:12::/47 maxlen: 47 2407:e500:80::/47 maxlen: 47 2407:e500:90::/47 maxlen: 47 2407:e500:a0::/47 maxlen: 47 2407:e500:b0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6085 (0x17c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Aug 6 16:54:20 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b2553c-9a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:44:75:6d:86:1a:ed:a0:86:dc:35:3b:94:a1: d7:59:de:6d:ee:f8:30:c9:c1:3a:8d:15:d4:db:aa: 0e:ed:4e:cd:11:ef:c2:d6:61:6b:b0:6c:ad:d7:d3: c6:67:88:76:8e:bc:be:3d:51:11:3f:ca:cf:1b:2c: bf:aa:af:de:53:92:00:97:4a:ac:24:25:37:65:96: 45:c7:8a:7e:72:9b:b3:3e:88:aa:8a:e7:f6:7a:54: 6b:dc:ec:c1:1c:59:e1:19:ae:a7:e5:25:14:a4:6a: b8:da:80:25:fa:f7:82:8f:99:3e:fa:05:fb:8e:cb: 78:75:21:bb:62:1a:93:1a:90:0f:12:41:25:f0:30: 66:07:20:82:29:9e:48:91:de:d4:03:c1:0d:11:20: e5:98:02:7d:eb:83:64:0d:db:61:41:ef:41:f4:62: 27:78:db:15:43:ca:58:fe:19:64:37:f0:8a:71:ce: c4:ab:f4:98:30:65:f9:95:03:24:44:90:47:f1:6a: d9:15:50:d6:bd:70:ba:43:a7:d0:3b:77:f8:ea:46: 61:20:b8:c6:ff:f6:e9:e6:00:97:6c:90:60:25:37: 7a:be:49:ac:1f:96:f7:34:a5:ca:d6:73:3f:d1:8d: 77:9d:6f:71:71:d5:7b:3d:34:f2:82:2b:d2:3c:a9: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6D:3A:7F:EE:40:80:13:0B:22:E9:4B:A5:FE:38:A7:A9:72:38:D9 X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:e500:c::-2407:e500:13:ffff:ffff:ffff:ffff:ffff 2407:e500:80::/47 2407:e500:90::/47 2407:e500:a0::/47 2407:e500:b0::/47 Signature Algorithm: sha256WithRSAEncryption 21:17:51:b4:ef:c3:67:68:09:52:97:23:25:cd:64:cd:8e:64: 2f:99:c2:51:3d:89:33:79:20:27:57:05:30:67:b6:88:02:e8: f3:db:06:0e:e9:89:6c:e9:f5:75:d1:76:3b:f7:89:3c:97:e3: 20:25:0d:22:41:1f:d6:c5:de:4e:19:ed:fc:c0:ff:e2:9b:ff: 10:48:01:33:c5:b9:1d:f5:cd:6a:77:ad:b8:8e:64:3a:f1:57: 8a:a8:14:a4:12:c8:24:d6:e5:4d:e6:64:30:18:95:7e:f1:e1: 8f:8a:6a:7a:cd:d5:14:3d:0a:63:aa:1a:c6:db:58:80:53:70: 63:da:56:81:44:6e:c5:05:30:d5:86:10:25:2d:9f:1a:4c:19: 61:b4:45:a4:3f:78:b9:87:8f:96:f6:60:5c:f1:13:fe:dd:ee: a9:ec:8f:59:b8:ff:ad:26:a4:a8:d4:42:0a:98:5b:08:ef:e9: 26:d4:9c:1d:19:6a:2c:1b:12:ea:9b:59:94:d6:e8:d3:bf:0f: b6:ae:49:9c:62:f3:4a:2c:cc:66:45:40:18:93:46:d3:6d:a7: 7c:53:7e:a0:56:2a:ce:1d:d6:d9:c9:73:de:13:ae:ab:e8:15: 7e:2c:d3:41:5c:70:0f:e3:c9:9c:5a:6e:29:93:75:1e:d9:41: f0:61:53:fc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICF8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjQwODA2MTY1NDIwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyNTUzYy05YTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ER1bYYa7aCG3DU7lKHXWd5t7vgwycE6jRXU26oO7U7NEe/C1mFrsGyt19PG Z4h2jry+PVERP8rPGyy/qq/eU5IAl0qsJCU3ZZZFx4p+cpuzPoiqiuf2elRr3OzB HFnhGa6n5SUUpGq42oAl+veCj5k++gX7jst4dSG7YhqTGpAPEkEl8DBmByCCKZ5I kd7UA8ENESDlmAJ964NkDdthQe9B9GIneNsVQ8pY/hlkN/CKcc7Eq/SYMGX5lQMk RJBH8WrZFVDWvXC6Q6fQO3f46kZhILjG//bp5gCXbJBgJTd6vkmsH5b3NKXK1nM/ 0Y13nW9xcdV7PTTygivSPKlEvwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFFptOn/u QIATCyLpS6X+OKepcjjZMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvMzdBQkQ3MDhBQTlBMTFFN0JBQzQxMjUyQzRGOUFFMDIvN0Y3NzIyMEEx NDM4MTFFRTk3QTY0RDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgACMDgwEgMHAiQH5QAADAMHAiQH5QAAEAMHASQH5QAAgAMHASQH5QAA kAMHASQH5QAAoAMHASQH5QAAsDANBgkqhkiG9w0BAQsFAAOCAQEAIRdRtO/DZ2gJ UpcjJc1kzY5kL5nCUT2JM3kgJ1cFMGe2iALo89sGDumJbOn1ddF2O/eJPJfjICUN IkEf1sXeThnt/MD/4pv/EEgBM8W5HfXNanetuI5kOvFXiqgUpBLIJNblTeZkMBiV fvHhj4pqes3VFD0KY6oaxttYgFNwY9pWgURuxQUw1YYQJS2fGkwZYbRFpD94uYeP lvZgXPET/t3uqeyPWbj/rSakqNRCCphbCO/pJtScHRlqLBsS6ptZlNbo078Ptq5J nGLzSizMZkVAGJNG022nfFN+oFYqzh3W2clz3hOuq+gVfizTQVxwD+PJnFpuKZN1 HtlB8GFT/A== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org