$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa File: 1A1E7A58D8FB11EC9827D678C4F9AE02.roa (raw, json) Hash identifier: 7CFHPMF9PT4QFHAelNCRPb/9K5uj/Dk9ESz/8A45j94= Subject key identifier: 9C:BA:2E:35:78:DE:71:BB:A0:55:CA:E1:EA:00:CD:7F:F5:9A:4E:55 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C60 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa Signing time: Sun 26 May 2024 21:31:42 +0000 ROA not before: Sun 26 May 2024 21:31:42 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 140731 IP address blocks: 2406:840:9200::/40 maxlen: 48 2406:840:9700::/40 maxlen: 48 2406:840:eb80::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:31:42 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa3d-9fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:df:e2:a0:b9:9e:33:1f:63:3c:d3:d9:a3: 97:0f:b8:17:16:7b:64:d9:80:6f:ee:71:18:c3:14: 85:0b:02:ee:0e:ad:56:6e:01:69:a1:be:70:b8:13: 1d:96:be:3c:e7:f9:c0:eb:f2:62:e5:df:2c:3c:ae: ed:79:d5:ea:38:48:f8:46:ca:0c:d1:68:78:f5:9c: 7e:d9:81:06:de:7a:51:1c:43:e2:47:9e:da:33:0a: e0:74:45:49:1e:55:d8:19:46:88:fc:10:4a:a5:c5: da:68:84:2e:43:88:b6:ba:04:c5:e9:a9:7e:88:b6: 8f:aa:ef:93:0c:c3:e6:62:2d:d4:4f:24:91:e7:fb: 79:ed:65:ea:36:2f:bf:d2:c0:73:9a:6d:f7:b5:c3: 26:fa:a9:c2:0b:8a:0e:da:9c:a8:d6:de:a5:f2:b8: cb:2f:1d:93:a2:4a:4f:a9:6c:18:2c:e5:13:5e:04: 30:90:50:6b:e2:ce:30:22:02:0b:77:af:b6:6d:87: 66:ee:16:8d:cc:3f:2c:57:01:38:c6:57:e5:cb:a3: 72:fa:c3:21:e2:e1:fb:77:a3:ca:46:b2:fb:15:e4: fa:a3:af:9f:06:f5:13:72:de:4d:06:f6:40:9a:a1: 40:d4:20:6d:b4:94:a3:ba:3e:7e:5b:e7:51:54:95: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BA:2E:35:78:DE:71:BB:A0:55:CA:E1:EA:00:CD:7F:F5:9A:4E:55 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9200::/40 2406:840:9700::/40 2406:840:eb80::/42 Signature Algorithm: sha256WithRSAEncryption 88:f9:4d:36:fd:17:f5:7c:38:1a:48:c8:c4:f4:fb:93:c7:98: 4d:e0:1b:ce:d4:bc:b4:94:38:47:83:b9:11:f4:69:ae:2b:dc: 19:17:93:57:e3:74:54:c7:53:7b:79:ca:d0:d4:4b:91:e6:a9: 96:6d:a6:5d:f9:21:4f:34:e2:4e:08:36:8c:a2:66:96:80:50: de:bb:a7:5a:d5:15:62:35:6b:6e:83:a7:2d:91:df:8e:b5:c2: 1a:20:de:64:05:2b:bc:18:92:07:52:ce:15:61:b7:03:1b:61: c0:5d:06:e9:88:31:38:53:43:68:ae:ca:19:e3:b5:e1:e6:92: ec:52:83:ac:f6:3f:da:87:91:60:54:fd:ca:86:f3:e6:3b:48: 03:3b:e3:92:1a:6b:55:1e:b1:b4:74:2a:47:c3:24:86:ff:15: 4e:61:75:2c:af:78:96:0c:76:80:34:67:f0:42:1e:7c:68:a5: 89:b6:5c:04:2f:2e:ff:2b:ec:01:fa:60:6d:1a:9f:9b:71:a6: 1d:bc:81:63:cf:c9:d2:57:1e:70:8f:90:d8:f4:87:13:c1:9b: d5:3d:7e:6b:57:8c:d8:13:19:1b:b0:de:7c:fd:6d:76:b4:34: 0f:6d:04:7c:4b:c7:ea:ec:66:9b:9c:eb:3f:f0:1c:92:11:e2: c2:55:5d:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMTQyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWEzZC05ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiXf4qC5njMfYzzT2aOXD7gXFntk2YBv7nEYwxSFCwLuDq1WbgFpob5wuBMd lr485/nA6/Ji5d8sPK7tedXqOEj4RsoM0Wh49Zx+2YEG3npRHEPiR57aMwrgdEVJ HlXYGUaI/BBKpcXaaIQuQ4i2ugTF6al+iLaPqu+TDMPmYi3UTySR5/t57WXqNi+/ 0sBzmm33tcMm+qnCC4oO2pyo1t6l8rjLLx2TokpPqWwYLOUTXgQwkFBr4s4wIgIL d6+2bYdm7haNzD8sVwE4xlfly6Ny+sMh4uH7d6PKRrL7FeT6o6+fBvUTct5NBvZA mqFA1CBttJSjuj5+W+dRVJW5ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJy6LjV4 3nG7oFXK4eoAzX/1mk5VMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMUExRTdBNThE OEZCMTFFQzk4MjdENjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgACMBkDBgAkBghAkgMGACQGCECXAwcGJAYIQOuAMA0GCSqGSIb3DQEB CwUAA4IBAQCI+U02/Rf1fDgaSMjE9PuTx5hN4BvO1Ly0lDhHg7kR9GmuK9wZF5NX 43RUx1N7ecrQ1EuR5qmWbaZd+SFPNOJOCDaMomaWgFDeu6da1RViNWtug6ctkd+O tcIaIN5kBSu8GJIHUs4VYbcDG2HAXQbpiDE4U0NorsoZ47Xh5pLsUoOs9j/ah5Fg VP3KhvPmO0gDO+OSGmtVHrG0dCpHwySG/xVOYXUsr3iWDHaANGfwQh58aKWJtlwE Ly7/K+wB+mBtGp+bcaYdvIFjz8nSVx5wj5DY9IcTwZvVPX5rV4zYExkbsN58/W12 tDQPbQR8S8fq7GabnOs/8BySEeLCVV1D -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:04 2024 by rpki-client on console-ams.rpki-client.org