$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/197526BC16C811EFAA6A4727C4F9AE02.roa File: 197526BC16C811EFAA6A4727C4F9AE02.roa (raw, json) Hash identifier: Q8edZ7GSWavQtYov8JfYCZ8r74V7vjihX5UsYaR0Fr0= Subject key identifier: 98:BA:8D:65:08:5E:13:AD:C6:78:C7:19:BD:54:90:D9:7A:4C:A1:93 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0D3F Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/197526BC16C811EFAA6A4727C4F9AE02.roa Signing time: Sat 17 Aug 2024 04:32:19 +0000 ROA not before: Sat 17 Aug 2024 04:32:19 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 14618 IP address blocks: 2406:840:e666::/47 maxlen: 48 2406:840:fd9f::/48 maxlen: 48 2406:840:fdd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 20:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3391 (0xd3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Aug 17 04:32:19 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66c027d2-aee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:e6:e2:8f:c2:4c:6c:6f:d7:3d:34:0c:22: b9:52:00:26:65:8f:ed:8f:a0:2f:29:43:c2:86:a8: f1:88:e1:5c:86:48:a4:14:76:b7:0d:04:d1:5d:ff: cf:87:57:06:45:80:51:57:6a:82:e8:92:bd:6b:56: 4b:ae:a5:19:85:ad:8a:9e:02:a5:70:e2:55:65:a1: d8:4c:3f:96:34:0b:53:40:3d:2b:4a:b8:7a:d7:0f: 55:61:af:db:43:94:e5:36:65:47:f7:da:42:f4:61: dc:f4:41:58:54:3f:e4:e5:8f:99:2e:07:a9:28:2b: 1c:ee:48:de:f2:ea:c7:76:71:3f:4d:73:02:49:17: 18:2f:72:01:da:fe:7a:e3:7d:0c:19:c8:6e:10:28: 39:19:8c:fc:37:60:ff:58:74:cd:a4:07:04:60:f5: 6d:db:3c:a1:70:2d:58:d4:f8:59:44:af:d8:d3:ae: a2:3f:51:36:eb:40:67:7e:11:e4:98:e4:39:0a:17: 59:f4:0d:82:5f:ba:90:5b:86:76:d6:26:a2:85:8d: 7e:21:27:ba:fd:94:80:91:6f:a0:a9:af:69:94:9c: 14:8f:f3:ac:ab:95:f8:28:53:3a:57:20:d5:b3:75: 71:52:69:3a:58:f3:60:99:0e:d7:e8:32:9a:43:de: b8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:8D:65:08:5E:13:AD:C6:78:C7:19:BD:54:90:D9:7A:4C:A1:93 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/197526BC16C811EFAA6A4727C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e666::/47 2406:840:fd9f::/48 2406:840:fdd0::/44 Signature Algorithm: sha256WithRSAEncryption 0b:8e:ae:d5:05:7c:dc:8c:8f:83:bd:13:7d:04:5a:af:b8:c6: 90:8d:f7:06:e1:16:12:4d:dd:99:78:95:81:18:70:4b:45:d1: 7f:5c:1d:c3:bc:cf:8d:6b:f0:60:5b:ce:9d:f4:27:ff:19:f5: 84:31:18:7f:29:8e:2f:6e:0b:ba:9f:5b:1b:2b:57:80:67:e4: bd:3a:09:ff:e6:bf:fa:09:93:53:c8:4b:fb:83:92:7a:56:53: 9a:e0:e8:60:1b:03:69:fb:98:51:e0:fc:56:31:76:1b:e3:c5: ae:cd:d8:52:87:d9:56:0b:29:57:31:3a:8a:8e:ca:82:cc:ad: 7a:99:8b:b3:0e:6e:62:46:7b:02:5c:bd:d6:6c:01:4a:49:98: ab:10:f5:a9:cd:93:aa:55:40:20:c6:30:d0:c9:6a:25:e9:1b: 79:32:c5:2c:3b:d6:f5:b9:46:74:a1:89:27:1d:02:bd:e4:7e: 73:94:c8:31:6a:f5:90:fc:47:d3:8f:2f:54:c2:74:12:03:eb: b1:6e:71:39:e6:a7:05:43:ed:b8:9b:1b:e0:03:18:fe:8b:0a: c3:91:db:9a:64:e6:de:0a:8d:bb:bc:d0:56:2c:da:77:d0:f4: 42:86:f3:8f:0c:26:e5:3f:f7:6c:6f:6b:ca:d5:95:a3:67:69: 2d:59:72:73 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwODE3MDQzMjE5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmMwMjdkMi1hZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5Lm4o/CTGxv1z00DCK5UgAmZY/tj6AvKUPChqjxiOFchkikFHa3DQTRXf/P h1cGRYBRV2qC6JK9a1ZLrqUZha2KngKlcOJVZaHYTD+WNAtTQD0rSrh61w9VYa/b Q5TlNmVH99pC9GHc9EFYVD/k5Y+ZLgepKCsc7kje8urHdnE/TXMCSRcYL3IB2v56 430MGchuECg5GYz8N2D/WHTNpAcEYPVt2zyhcC1Y1PhZRK/Y066iP1E260BnfhHk mOQ5ChdZ9A2CX7qQW4Z21iaihY1+ISe6/ZSAkW+gqa9plJwUj/Osq5X4KFM6VyDV s3VxUmk6WPNgmQ7X6DKaQ964ZwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJi6jWUI XhOtxnjHGb1UkNl6TKGTMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMTk3NTI2QkMx NkM4MTFFRkFBNkE0NzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBsDBwEkBghA5mYDBwAkBghA/Z8DBwQkBghA/dAwDQYJKoZIhvcN AQELBQADggEBAAuOrtUFfNyMj4O9E30EWq+4xpCN9wbhFhJN3Zl4lYEYcEtF0X9c HcO8z41r8GBbzp30J/8Z9YQxGH8pji9uC7qfWxsrV4Bn5L06Cf/mv/oJk1PIS/uD knpWU5rg6GAbA2n7mFHg/FYxdhvjxa7N2FKH2VYLKVcxOoqOyoLMrXqZi7MObmJG ewJcvdZsAUpJmKsQ9anNk6pVQCDGMNDJaiXpG3kyxSw71vW5RnShiScdAr3kfnOU yDFq9ZD8R9OPL1TCdBID67FucTnmpwVD7bibG+ADGP6LCsOR25pk5t4Kjbu80FYs 2nfQ9EKG848MJuU/92xva8rVlaNnaS1ZcnM= -----END CERTIFICATE-----Generated at Tue Oct 22 21:15:07 2024 by rpki-client on console-ams.rpki-client.org