$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/6DB6146E0E2F11EDB4659653C4F9AE02.roa File: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (raw, json) Hash identifier: ZPd0b5pncSqHwdSF6B6PNBDvF8PT+k9dwuzN/M5HIvU= Subject key identifier: 37:DD:B7:F4:51:C6:D8:1B:82:24:5B:E2:39:BB:23:79:60:F5:99:3E Certificate issuer: /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Certificate serial: 058A Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/6DB6146E0E2F11EDB4659653C4F9AE02.roa Signing time: Wed 24 Apr 2024 15:20:49 +0000 ROA not before: Wed 24 Apr 2024 15:20:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 7573 IP address blocks: 131.217.0.0/17 maxlen: 17 131.217.128.0/19 maxlen: 19 131.217.160.0/19 maxlen: 19 131.217.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1418 (0x58a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Validity Not Before: Apr 24 15:20:49 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66292350-7682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:b6:aa:ea:90:cf:ee:3b:d5:5d:fe:8c:7c: 9b:b5:8e:f8:0d:d6:75:1b:db:fb:36:5a:c8:dc:05: 2d:38:44:dd:aa:4c:e8:ba:e7:d7:4d:3f:9f:f9:ac: d7:7c:9f:0e:3f:90:3a:02:f5:86:18:d1:70:23:a3: ca:8d:08:b4:71:3c:53:4e:86:61:b0:2d:11:88:6f: 14:46:aa:a0:ec:7c:db:ec:95:2a:f9:27:1e:6c:7b: 84:a9:c4:96:ad:56:cf:14:0e:ba:53:b4:66:14:4b: 86:6d:ad:82:8b:91:27:38:72:cd:ef:26:ad:75:be: 33:08:d0:73:37:a0:bd:52:3e:b8:ad:91:f6:e1:40: 54:35:21:8b:14:b8:fa:f4:da:a0:74:ce:3a:0a:5a: 64:10:46:e8:c6:ab:52:0e:a8:c1:28:6f:cf:4c:08: 1f:d0:0c:f3:ee:81:1f:dc:95:c2:8a:d5:be:e0:2f: f8:91:bb:96:77:46:15:f7:d8:22:1f:4d:e9:47:8f: 39:f0:a3:3b:5d:7a:7c:18:ea:24:07:62:b5:ae:20: 1f:66:84:a6:9b:8f:7e:6b:84:18:a2:e6:66:6d:be: 93:51:8e:e5:52:95:17:37:69:44:c5:80:24:50:31: 40:43:6c:06:49:47:c0:1f:14:be:b3:64:0d:46:58: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DD:B7:F4:51:C6:D8:1B:82:24:5B:E2:39:BB:23:79:60:F5:99:3E X509v3 Authority Key Identifier: keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/6DB6146E0E2F11EDB4659653C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.217.0.0/16 Signature Algorithm: sha256WithRSAEncryption 72:0e:48:a2:fc:a1:41:3f:28:ca:c8:4f:49:b1:7c:aa:c0:88: 7b:ab:73:09:a2:d8:ba:8f:fe:d7:d1:f3:06:05:9c:63:90:4a: 8b:44:b8:23:d4:88:07:c3:27:a0:8a:d1:be:49:61:7f:02:ec: 0a:70:77:45:04:51:6b:59:c7:57:cb:dc:28:08:80:85:10:37: 12:8a:7f:51:b8:d0:d3:26:ec:4d:ae:95:7d:6f:f9:d4:4a:a1: 62:ec:87:ab:ab:97:df:92:d8:45:18:35:0f:1c:25:de:a2:34: 13:18:3f:8d:84:0a:71:4b:d6:81:9b:38:d0:79:4a:4f:1b:f5: 8a:48:8f:60:b2:79:fc:ed:5e:6b:b7:76:80:b3:41:33:e6:6d: f9:a5:fb:56:4e:eb:bd:2a:85:01:af:4e:7d:62:47:35:5a:16: 49:58:ac:89:5c:6c:64:9f:34:80:c7:40:83:b3:c3:fd:cb:12: d8:ac:fa:6a:c9:1c:2d:f7:ef:22:3f:79:3a:f6:1e:79:8a:13: fb:a1:d6:b7:20:fc:05:a9:23:41:48:55:a0:d9:91:bf:a5:77: 17:86:4f:99:45:2f:62:91:12:3d:5b:c4:01:f4:6d:f7:50:2c: ed:64:fa:92:4f:67:d3:db:c3:f0:40:9a:da:c7:95:25:3f:db: 2f:1f:ea:57 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKDU3Q0YzOUYzOUFCNjFCNTM4RUVBN0NCMkQ1NkEzNEJF NTdCODlBRkIwHhcNMjQwNDI0MTUyMDQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI5MjM1MC03NjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrK2quqQz+471V3+jHybtY74DdZ1G9v7NlrI3AUtOETdqkzouufXTT+f+azX fJ8OP5A6AvWGGNFwI6PKjQi0cTxTToZhsC0RiG8URqqg7Hzb7JUq+ScebHuEqcSW rVbPFA66U7RmFEuGba2Ci5EnOHLN7yatdb4zCNBzN6C9Uj64rZH24UBUNSGLFLj6 9NqgdM46ClpkEEboxqtSDqjBKG/PTAgf0Azz7oEf3JXCitW+4C/4kbuWd0YV99gi H03pR4858KM7XXp8GOokB2K1riAfZoSmm49+a4QYouZmbb6TUY7lUpUXN2lExYAk UDFAQ2wGSUfAHxS+s2QNRlj3QwIDAQABo4IClDCCApAwHQYDVR0OBBYEFDfdt/RR xtgbgiRb4jm7I3lg9Zk+MB8GA1UdIwQYMBaAFFfPOfOathtTjup8stVqNL5XuJr7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC8zQTA3RTBCQThE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcxT082bnl5MVdvMHZsZTRt dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Y4ODU4NXEyRzFPTzZueXkxV28wdmxlNG12cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q0QzQvM0EwN0UwQkE4RDdCMTFFQjhEOEJENjBCQzRGOUFFMDIvNkRCNjE0NkUw RTJGMTFFREI0NjU5NjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCD2TANBgkqhkiG9w0BAQsFAAOCAQEAcg5IovyhQT8oyshP SbF8qsCIe6tzCaLYuo/+19HzBgWcY5BKi0S4I9SIB8MnoIrRvklhfwLsCnB3RQRR a1nHV8vcKAiAhRA3Eop/UbjQ0ybsTa6VfW/51EqhYuyHq6uX35LYRRg1Dxwl3qI0 Exg/jYQKcUvWgZs40HlKTxv1ikiPYLJ5/O1ea7d2gLNBM+Zt+aX7Vk7rvSqFAa9O fWJHNVoWSVisiVxsZJ80gMdAg7PD/csS2Kz6askcLffvIj95OvYeeYoT+6HWtyD8 BakjQUhVoNmRv6V3F4ZPmUUvYpESPVvEAfRt91As7WT6kk9n09vD8ECa2seVJT/b Lx/qVw== -----END CERTIFICATE-----Generated at Sun May 12 17:42:46 2024 by rpki-client on console-fra.rpki-client.org