$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/2C7BB8BAB92411EC8E787A55C4F9AE02.roa File: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (raw, json) Hash identifier: e5jtBOHOC98UGGoKqmozb8Xav7xhNA4e4v4grnTBN5g= Subject key identifier: D3:35:13:47:F8:DD:31:BC:41:C9:B0:41:3C:8B:82:F9:A5:6E:92:EA Certificate issuer: /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Certificate serial: 0236 Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/2C7BB8BAB92411EC8E787A55C4F9AE02.roa Signing time: Thu 23 Nov 2023 03:14:00 +0000 ROA not before: Thu 23 Nov 2023 03:14:00 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 133145 IP address blocks: 2001:df4:d080::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Validity Not Before: Nov 23 03:14:00 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=655ec377-5933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:26:74:ab:8e:53:be:e1:4d:75:58:28:7b: d8:ef:ae:b6:cd:a2:22:f0:be:17:a0:79:be:28:4d: fa:ca:2b:6e:13:d6:00:2c:21:04:97:a6:98:f1:13: 6b:8c:3b:de:51:0a:ac:d6:b8:1f:87:60:8e:b2:63: 46:97:b2:e4:57:5f:17:b6:76:4c:07:d9:f7:7a:f8: d7:53:71:1f:5e:76:09:ca:43:95:88:01:84:3a:92: a1:0b:a3:8d:11:ab:27:4f:de:cb:a7:53:77:21:b6: 43:56:f6:c3:53:99:67:e0:0d:80:e5:21:ee:30:6d: 46:ec:d9:16:49:3a:8e:4d:d5:1c:a4:41:df:c0:d1: ab:33:cf:b7:b9:1a:d2:a2:c9:25:eb:c5:2b:64:da: 46:a9:2f:99:f7:df:e0:2f:5a:16:d7:5f:d5:9b:46: 44:ee:88:6b:91:cd:a2:da:af:6a:97:d4:24:9a:67: 61:85:9b:ff:0e:52:5b:0a:22:1c:63:50:88:42:5e: 7b:5e:40:0b:5b:ef:fd:cd:8f:40:71:61:1d:68:2d: ac:63:51:6c:32:ea:4a:11:e8:7f:f2:77:b0:cd:22: 5a:2c:87:2e:b6:9f:ec:ad:f5:99:5d:08:e3:ce:ef: ac:61:db:78:04:d4:0b:09:4d:90:87:53:7a:1f:23: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:35:13:47:F8:DD:31:BC:41:C9:B0:41:3C:8B:82:F9:A5:6E:92:EA X509v3 Authority Key Identifier: keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/2C7BB8BAB92411EC8E787A55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:d080::/47 Signature Algorithm: sha256WithRSAEncryption 25:b4:ef:9c:09:21:52:94:a7:a1:8c:5c:77:ab:80:dd:79:56: 80:11:ac:a4:1c:2b:10:a4:43:af:a1:7e:92:bc:76:75:3e:7a: bb:50:8b:fe:8c:ca:39:10:22:d7:7d:0a:fd:0b:32:ea:ef:ef: eb:91:44:75:ab:fd:26:29:c2:51:fc:f7:5f:bc:21:dd:b8:5f: 3c:9e:75:21:04:c3:7d:3f:cd:15:17:1b:1b:07:2b:f3:a3:6b: 1d:69:4f:c0:70:d7:c8:da:fe:f6:13:d1:60:e8:e2:b6:e3:e2: ae:f9:83:7a:f0:8f:ca:2a:9d:23:95:d7:3b:05:34:42:00:93: 3b:b1:04:5f:91:99:7a:c0:5d:be:02:59:40:dd:5b:0a:b1:79: b6:5a:ee:a9:18:6c:3b:28:10:21:3b:b9:bb:63:c0:0f:4e:a7: 7f:93:df:b7:5d:29:16:90:89:a8:35:1c:77:e3:8e:93:76:bb: 92:0e:81:27:97:c0:ea:5d:82:ba:d1:39:57:d6:ba:b2:e0:45: e8:b2:33:bb:37:bb:30:0e:a8:e7:cc:93:80:ee:1e:6c:1c:14: 4f:e1:58:95:e6:91:5d:77:60:50:ef:ce:6f:2e:85:49:b8:0e: ae:95:8a:ae:45:39:28:76:84:fb:13:94:4a:9d:85:d4:ad:02: fc:51:e9:50 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQjAxMTAvBgNVBAUTKDJGRERCQjQ1RjM0RjI2MTkzM0FDMkI3RDY3QUM3M0Qz OTNBOUQxNjQwHhcNMjMxMTIzMDMxNDAwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVlYzM3Ny01OTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9UmdKuOU77hTXVYKHvY7662zaIi8L4XoHm+KE36yituE9YALCEEl6aY8RNr jDveUQqs1rgfh2COsmNGl7LkV18XtnZMB9n3evjXU3EfXnYJykOViAGEOpKhC6ON EasnT97Lp1N3IbZDVvbDU5ln4A2A5SHuMG1G7NkWSTqOTdUcpEHfwNGrM8+3uRrS oskl68UrZNpGqS+Z99/gL1oW11/Vm0ZE7ohrkc2i2q9ql9QkmmdhhZv/DlJbCiIc Y1CIQl57XkALW+/9zY9AcWEdaC2sY1FsMupKEeh/8newzSJaLIcutp/srfWZXQjj zu+sYdt4BNQLCU2Qh1N6HyPCKQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNM1E0f4 3TG8QcmwQTyLgvmlbpLqMB8GA1UdIwQYMBaAFC/du0XzTyYZM6wrfWesc9OTqdFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNCMC82MTg2NzMyQ0I5 MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpoa3pyQ3Q5WjZ4ejA1T3Aw V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5MjdSZk5QSmhrenJDdDlaNnh6MDVPcDBXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VDQjAvNjE4NjczMkNCOTIxMTFFQ0JERkZGNjUzQzRGOUFFMDIvMkM3QkI4QkFC OTI0MTFFQzhFNzg3QTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEgAQ300IAwDQYJKoZIhvcNAQELBQADggEBACW075wJIVKU p6GMXHergN15VoARrKQcKxCkQ6+hfpK8dnU+ertQi/6MyjkQItd9Cv0LMurv7+uR RHWr/SYpwlH891+8Id24XzyedSEEw30/zRUXGxsHK/Ojax1pT8Bw18ja/vYT0WDo 4rbj4q75g3rwj8oqnSOV1zsFNEIAkzuxBF+RmXrAXb4CWUDdWwqxebZa7qkYbDso ECE7ubtjwA9Op3+T37ddKRaQiag1HHfjjpN2u5IOgSeXwOpdgrrROVfWurLgReiy M7s3uzAOqOfMk4DuHmwcFE/hWJXmkV13YFDvzm8uhUm4Dq6Viq5FOSh2hPsTlEqd hdStAvxR6VA= -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org