$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa File: 7F77220A143811EE97A64D19C4F9AE02.roa (raw, json) Hash identifier: v44DpK2udap9Cdnoin9EPjNi4BGX9nvUK0cdh5t8QOM= Subject key identifier: 5A:DB:B9:E7:2C:09:4E:02:47:59:41:1A:4D:29:E3:B0:43:6F:86:AC Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 1701 Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa Signing time: Fri 04 Aug 2023 16:53:56 +0000 ROA not before: Fri 04 Aug 2023 16:53:56 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38551 IP address blocks: 2407:e500:c::/47 maxlen: 47 2407:e500:e::/47 maxlen: 47 2407:e500:10::/47 maxlen: 47 2407:e500:12::/47 maxlen: 47 2407:e500:80::/47 maxlen: 47 2407:e500:90::/47 maxlen: 47 2407:e500:a0::/47 maxlen: 47 2407:e500:b0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5889 (0x1701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Aug 4 16:53:56 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cd2d24-f99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:e0:a3:40:c8:dd:39:60:28:91:72:5f:84: 7a:27:e8:26:ac:3f:3c:5a:98:18:b4:03:ff:0b:d4: 2e:06:20:18:f5:fd:d8:95:da:11:54:62:04:c0:b6: 46:97:11:00:cf:f9:a8:ed:15:5f:11:f5:71:d0:38: 69:50:01:07:71:95:a2:08:a1:72:ab:f3:5e:33:33: b1:cb:b3:2a:95:fc:f7:26:78:87:28:d7:d1:d9:85: cb:d3:2a:33:dd:fd:3c:07:56:61:99:1b:d6:9c:f6: 27:e5:b9:7a:1f:5e:c3:c9:e0:94:40:f1:2b:0f:ab: 12:28:c2:c3:f2:43:37:af:5b:80:3e:30:a7:68:2a: b0:9b:b0:58:b6:d9:10:78:a0:21:18:82:d4:3e:9c: 05:36:ca:dc:64:05:5f:d9:cf:0e:89:41:93:a4:1f: bf:8f:02:27:c1:20:da:4a:04:db:f2:46:c1:6d:bd: 8f:6b:a7:56:fc:11:df:80:14:a0:18:8e:9c:3e:06: af:5a:a9:e3:3f:1a:c6:d5:e5:9f:38:8a:5b:33:a3: aa:0a:28:ed:40:e6:8d:95:ed:1f:e1:d4:ad:f4:ca: 99:32:02:42:33:61:f2:3c:2c:e9:8a:f1:20:7b:27: fa:27:f2:46:93:ef:d2:aa:5f:81:a7:57:90:c4:b9: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DB:B9:E7:2C:09:4E:02:47:59:41:1A:4D:29:E3:B0:43:6F:86:AC X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:e500:c::-2407:e500:13:ffff:ffff:ffff:ffff:ffff 2407:e500:80::/47 2407:e500:90::/47 2407:e500:a0::/47 2407:e500:b0::/47 Signature Algorithm: sha256WithRSAEncryption 97:b1:bb:b6:76:d5:50:d8:cd:3d:c6:0a:94:3b:d9:1d:74:61: 48:46:c0:f9:2a:f9:af:54:f1:18:65:09:36:9e:27:4a:b2:79: f2:7e:5c:3b:0c:91:ef:d0:80:5d:8b:9c:94:21:1c:37:5e:6e: 5c:92:bd:0a:31:d4:a3:9b:a6:fc:58:e9:08:21:32:7f:48:af: f2:99:fd:d0:63:0d:d7:40:5f:2d:51:a9:4a:d5:85:64:43:95: 9c:29:72:13:c7:93:4a:29:60:65:77:9e:bd:73:be:e5:70:6e: 4c:41:f1:43:02:09:32:3f:be:e7:9f:72:b2:01:d3:70:e4:9a: a7:0c:48:0e:1e:23:0e:3f:0c:40:21:8d:c6:74:10:19:c5:73: 75:2b:e0:9c:c1:b0:c3:1e:28:5d:26:fa:62:b3:44:78:a6:9f: 10:7a:7c:8e:47:7d:ac:d1:af:47:d9:c7:0f:b0:28:c8:8a:52: b9:58:58:94:3a:62:3c:06:08:69:0f:59:79:7b:6a:38:17:9b: 1c:05:01:14:c0:b9:7b:b1:21:98:60:9f:7c:38:85:e2:a4:66: d1:54:cf:08:c7:fa:97:4f:4d:ef:03:91:c0:fd:f6:12:ed:38: 57:7f:df:28:28:b2:36:76:e0:71:ef:82:a3:5d:91:d4:ee:c9: 29:4b:ab:a9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICFwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjMwODA0MTY1MzU2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNkMmQyNC1mOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gvgo0DI3TlgKJFyX4R6J+gmrD88WpgYtAP/C9QuBiAY9f3YldoRVGIEwLZG lxEAz/mo7RVfEfVx0DhpUAEHcZWiCKFyq/NeMzOxy7Mqlfz3JniHKNfR2YXL0yoz 3f08B1ZhmRvWnPYn5bl6H17DyeCUQPErD6sSKMLD8kM3r1uAPjCnaCqwm7BYttkQ eKAhGILUPpwFNsrcZAVf2c8OiUGTpB+/jwInwSDaSgTb8kbBbb2Pa6dW/BHfgBSg GI6cPgavWqnjPxrG1eWfOIpbM6OqCijtQOaNle0f4dSt9MqZMgJCM2HyPCzpivEg eyf6J/JGk+/Sql+Bp1eQxLnDnwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFFrbuecs CU4CR1lBGk0p47BDb4asMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvMzdBQkQ3MDhBQTlBMTFFN0JBQzQxMjUyQzRGOUFFMDIvN0Y3NzIyMEEx NDM4MTFFRTk3QTY0RDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgACMDgwEgMHAiQH5QAADAMHAiQH5QAAEAMHASQH5QAAgAMHASQH5QAA kAMHASQH5QAAoAMHASQH5QAAsDANBgkqhkiG9w0BAQsFAAOCAQEAl7G7tnbVUNjN PcYKlDvZHXRhSEbA+Sr5r1TxGGUJNp4nSrJ58n5cOwyR79CAXYuclCEcN15uXJK9 CjHUo5um/FjpCCEyf0iv8pn90GMN10BfLVGpStWFZEOVnClyE8eTSilgZXeevXO+ 5XBuTEHxQwIJMj++559ysgHTcOSapwxIDh4jDj8MQCGNxnQQGcVzdSvgnMGwwx4o XSb6YrNEeKafEHp8jkd9rNGvR9nHD7AoyIpSuVhYlDpiPAYIaQ9ZeXtqOBebHAUB FMC5e7EhmGCffDiF4qRm0VTPCMf6l09N7wORwP32Eu04V3/fKCiyNnbgce+Co12R 1O7JKUurqQ== -----END CERTIFICATE-----Generated at Thu May 16 17:51:21 2024 by rpki-client on console-ams.rpki-client.org