$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0CEF3704DA8111EDB838713AC4F9AE02.roa File: 0CEF3704DA8111EDB838713AC4F9AE02.roa (raw, json) Hash identifier: tYGrq4BRtiLPBXDWLOJ39ncxbB6ODjN/QyyJ0CURNPA= Subject key identifier: 2F:3D:20:9C:72:95:9A:88:5C:E6:64:5B:19:97:26:41:00:18:4D:D5 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C52 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0CEF3704DA8111EDB838713AC4F9AE02.roa Signing time: Sun 26 May 2024 21:31:29 +0000 ROA not before: Sun 26 May 2024 21:31:29 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135120 IP address blocks: 2406:840:95a0::/43 maxlen: 48 2406:840:fed6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:31:29 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa31-40b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:38:18:35:a6:6e:e5:ae:1d:df:b9:23:82:ef: c2:00:52:8e:18:70:13:e2:42:3d:55:39:83:4c:1a: 2c:83:40:1a:36:a0:1e:b9:54:4b:7a:52:95:29:64: e2:6a:d1:a8:17:c7:88:61:df:15:3b:59:6e:4c:d1: 03:21:18:b9:a4:a5:71:dd:d6:ff:bd:d2:f6:e6:00: 1a:86:a5:d7:e1:5d:89:4b:4e:50:b4:6a:69:8b:5e: ef:7b:d6:68:68:18:98:7c:2d:3a:2d:8f:21:2e:5f: 38:da:8e:07:ba:6b:06:04:28:a2:a7:59:fc:91:04: 70:d2:cb:ba:1b:9d:19:d7:f5:6c:06:35:6b:ff:dd: 4d:3d:f0:5b:e3:71:b9:35:97:16:8b:a1:83:26:24: 5b:1c:55:42:d4:04:ee:4b:60:9c:bf:43:e8:dd:28: 2c:31:a2:e6:e9:95:f3:b6:aa:f6:2d:25:3e:04:9a: 08:bd:0c:52:dc:5e:a8:d0:c9:81:11:c2:27:3e:b4: c2:30:24:38:8b:9c:ce:48:9d:7a:74:c7:93:33:78: dd:a3:ac:87:f6:1e:2b:f8:68:a5:2c:75:c8:cc:0e: cb:2b:a9:43:1b:75:4e:3e:ad:69:a1:e7:d4:ca:5b: c9:09:4f:ae:94:e1:d2:67:30:ca:85:bd:8f:07:41: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3D:20:9C:72:95:9A:88:5C:E6:64:5B:19:97:26:41:00:18:4D:D5 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0CEF3704DA8111EDB838713AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:95a0::/43 2406:840:fed6::/48 Signature Algorithm: sha256WithRSAEncryption ac:4c:46:59:ed:de:52:0a:98:3a:64:e6:d7:08:d7:ef:be:c1: 0d:54:a9:74:1b:45:8f:dc:a2:6f:fe:13:4c:ee:6e:b7:ac:f8: cb:fa:b1:8c:4a:46:33:75:e0:e1:54:ed:33:b9:91:e9:e7:a1: b4:1b:b1:28:36:f0:9b:1e:f5:c3:60:68:86:9b:00:33:e2:cd: f3:7e:e4:57:ee:b0:07:ec:44:e0:65:10:00:91:e6:9f:89:83: 0f:37:57:2d:6a:42:fe:33:30:9c:2a:1e:87:e6:c1:c8:b0:4c: a2:3c:84:04:77:f1:93:dc:e6:2f:d8:29:ff:62:c9:4d:e1:13: 5b:2a:7e:26:55:c6:2d:80:d9:df:04:5e:ab:6e:13:dc:8f:8d: 11:ec:f0:12:4d:62:6b:0d:33:45:54:88:3e:07:d2:14:a4:76: 9e:6b:e2:60:9b:c3:47:b5:f9:8a:b2:15:47:f3:bc:85:37:59: c1:53:2a:73:23:ba:3b:37:30:2a:5c:d0:8c:5a:bc:bb:a0:f1: e3:a7:49:ba:61:4b:3d:c8:ff:b3:99:80:2b:c0:bd:76:21:d2: af:61:ee:25:5e:3c:9f:aa:05:a2:71:0c:54:06:4a:9a:a9:3f: 7d:49:19:9d:cf:30:b2:b5:57:7a:aa:5f:f8:aa:e6:ec:3d:05: c5:bc:47:17 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMTI5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWEzMS00MGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkjgYNaZu5a4d37kjgu/CAFKOGHAT4kI9VTmDTBosg0AaNqAeuVRLelKVKWTi atGoF8eIYd8VO1luTNEDIRi5pKVx3db/vdL25gAahqXX4V2JS05QtGppi17ve9Zo aBiYfC06LY8hLl842o4HumsGBCiip1n8kQRw0su6G50Z1/VsBjVr/91NPfBb43G5 NZcWi6GDJiRbHFVC1ATuS2Ccv0Po3SgsMaLm6ZXztqr2LSU+BJoIvQxS3F6o0MmB EcInPrTCMCQ4i5zOSJ16dMeTM3jdo6yH9h4r+GilLHXIzA7LK6lDG3VOPq1poefU ylvJCU+ulOHSZzDKhb2PB0FkwQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFC89IJxy lZqIXOZkWxmXJkEAGE3VMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMENFRjM3MDRE QTgxMTFFREI4Mzg3MTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwUkBghAlaADBwAkBghA/tYwDQYJKoZIhvcNAQELBQADggEB AKxMRlnt3lIKmDpk5tcI1+++wQ1UqXQbRY/com/+E0zubres+Mv6sYxKRjN14OFU 7TO5kennobQbsSg28Jse9cNgaIabADPizfN+5FfusAfsROBlEACR5p+Jgw83Vy1q Qv4zMJwqHofmwciwTKI8hAR38ZPc5i/YKf9iyU3hE1sqfiZVxi2A2d8EXqtuE9yP jRHs8BJNYmsNM0VUiD4H0hSkdp5r4mCbw0e1+YqyFUfzvIU3WcFTKnMjujs3MCpc 0IxavLug8eOnSbphSz3I/7OZgCvAvXYh0q9h7iVePJ+qBaJxDFQGSpqpP31JGZ3P MLK1V3qqX/iq5uw9BcW8Rxc= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org