$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/2C06DFA22C4C11EFB6974530C4F9AE02.roa File: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (raw, json) Hash identifier: 2bjXe+meVGHX4gHk9C1BRznvc7Y7yBnbS1+42AwDQvU= Subject key identifier: 12:B2:32:D1:3F:DC:77:C3:6D:D9:79:42:8D:AD:A1:34:B9:99:C5:43 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 39 Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/2C06DFA22C4C11EFB6974530C4F9AE02.roa Signing time: Wed 19 Jun 2024 13:12:52 +0000 ROA not before: Wed 19 Jun 2024 13:12:52 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152464 IP address blocks: 2401:a7a0::/36 maxlen: 36 2401:a7a0:1000::/36 maxlen: 36 2401:a7a0:2000::/36 maxlen: 36 2401:a7a0:3000::/36 maxlen: 36 2401:a7a0:4000::/36 maxlen: 36 2401:a7a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jul 2024 07:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Jun 19 13:12:52 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6672d954-08c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:4d:f0:2c:88:89:17:97:7f:21:27:b9:f3: e6:a8:2c:6e:2f:e6:56:50:8d:d8:4a:87:1a:fa:4b: ed:58:44:85:9a:06:ff:91:db:0c:00:28:1b:37:19: c9:99:18:1b:f9:c3:3b:34:b8:a4:1d:f3:8b:b8:c3: 39:1c:2d:60:5b:bc:1a:c7:eb:68:1b:18:da:b6:f6: 03:7f:3d:78:c6:49:77:3b:b2:9a:86:b8:fc:fc:fd: 18:ad:b1:14:af:58:d8:6d:76:d2:fd:a4:e0:d8:34: 8b:8e:e1:3f:87:a7:0f:3b:7c:42:55:f8:8b:28:68: bf:e3:ca:26:62:61:aa:14:87:46:8a:15:43:c2:49: f8:17:b0:7d:0e:17:f1:f7:02:62:e5:5b:82:bd:1d: 01:52:1e:29:fa:89:f7:da:24:79:d1:ed:81:1c:eb: d7:ab:3f:5e:6e:38:92:c8:e1:e1:d2:d6:97:31:fa: 0e:48:3d:8e:6f:fb:14:70:56:57:09:5a:15:db:ce: 3a:ee:cf:4b:af:ad:1a:69:5f:46:16:12:31:f5:ea: 62:41:72:18:e1:5e:34:76:de:f4:2b:81:cf:47:ec: 7c:ed:8e:20:2b:ae:56:a0:76:33:49:83:b1:77:88: ba:c4:c5:2f:ba:1b:ce:37:d7:f4:79:76:ed:2d:8e: 53:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B2:32:D1:3F:DC:77:C3:6D:D9:79:42:8D:AD:A1:34:B9:99:C5:43 X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/2C06DFA22C4C11EFB6974530C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:a7a0::-2401:a7a0:4fff:ffff:ffff:ffff:ffff:ffff 2401:a7a0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 9d:e9:30:7b:79:8b:9b:86:a2:21:5b:2f:31:bc:a8:e5:87:77: 62:e5:63:dd:42:d9:a9:af:e1:97:e8:59:77:94:5e:cf:11:d5: 13:f2:6e:a7:56:9a:40:ec:2c:c5:4f:2a:e6:5d:a1:f8:5e:0b: e8:9c:70:5a:92:64:4c:00:fa:b5:9e:70:be:60:05:a2:aa:ce: de:7c:1c:31:6e:dd:d5:18:9e:c3:3e:86:92:5c:ed:9b:f0:09: 68:f3:6a:40:41:ab:c1:68:60:60:48:f3:9c:24:ea:b2:3f:4f: 76:b9:18:b0:ad:f0:6f:1b:8d:20:2f:ab:83:04:07:86:21:f0: 98:b6:ff:a1:87:43:85:6c:31:c4:61:2a:b3:7a:84:2c:1f:1c: 48:22:41:ba:1f:4b:b7:95:33:79:43:b2:a3:93:8a:9b:05:98: 20:59:76:88:54:7e:76:38:05:62:7a:3b:2a:57:a1:17:e5:43: cf:fa:79:0a:31:a3:70:97:a8:ef:db:21:45:20:e0:3f:9b:06: 22:7b:b8:f2:93:99:63:91:aa:fb:02:1e:6f:ac:a8:23:42:b3: 78:6f:b7:1a:34:ca:9d:67:8e:24:72:81:3c:89:07:44:e3:da: 00:ef:f1:24:6b:94:18:fa:d5:f5:68:05:31:87:8f:1c:b0:61: 9f:bb:79:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REFDMDExMC8GA1UEBRMoNTRCOTY2QUQ4QjU3MzE2NDE2NTI5NTA3RjVCQ0E5QzAw RTExODFCOTAeFw0yNDA2MTkxMzEyNTJaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NzJkOTU0LTA4YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH703wLIiJF5d/ISe58+aoLG4v5lZQjdhKhxr6S+1YRIWaBv+R2wwAKBs3GcmZ GBv5wzs0uKQd84u4wzkcLWBbvBrH62gbGNq29gN/PXjGSXc7spqGuPz8/RitsRSv WNhtdtL9pODYNIuO4T+Hpw87fEJV+IsoaL/jyiZiYaoUh0aKFUPCSfgXsH0OF/H3 AmLlW4K9HQFSHin6iffaJHnR7YEc69erP15uOJLI4eHS1pcx+g5IPY5v+xRwVlcJ WhXbzjruz0uvrRppX0YWEjH16mJBchjhXjR23vQrgc9H7HztjiArrlagdjNJg7F3 iLrExS+6G8431/R5du0tjlM9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUErIy0T/c d8Nt2XlCja2hNLmZxUMwHwYDVR0jBBgwFoAUVLlmrYtXMWQWUpUH9bypwA4Rgbkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEQUMwL0U3NjNBQThBREU4 ODExRUU5M0Q5QTc0NEM0RjlBRTAyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdi ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkxsbXJZdFhNV1FXVXBVSDlieXB3QTRSZ2JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi8yQzA2REZBMjJD NEMxMUVGQjY5NzQ1MzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAyBggrBgEFBQcBBwEB/wQj MCEwHwQCAAIwGTAPAwUFJAGnoAMGBCQBp6BAAwYEJAGnoPAwDQYJKoZIhvcNAQEL BQADggEBAJ3pMHt5i5uGoiFbLzG8qOWHd2LlY91C2amv4ZfoWXeUXs8R1RPybqdW mkDsLMVPKuZdofheC+iccFqSZEwA+rWecL5gBaKqzt58HDFu3dUYnsM+hpJc7Zvw CWjzakBBq8FoYGBI85wk6rI/T3a5GLCt8G8bjSAvq4MEB4Yh8Ji2/6GHQ4VsMcRh KrN6hCwfHEgiQbofS7eVM3lDsqOTipsFmCBZdohUfnY4BWJ6OypXoRflQ8/6eQox o3CXqO/bIUUg4D+bBiJ7uPKTmWORqvsCHm+sqCNCs3hvtxo0yp1njiRygTyJB0Tj 2gDv8SRrlBj61fVoBTGHjxywYZ+7eb0= -----END CERTIFICATE-----Generated at Tue Jun 25 10:52:14 2024 by rpki-client on console-ams.rpki-client.org