$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa File: 1A1E7A58D8FB11EC9827D678C4F9AE02.roa (raw, json) Hash identifier: R9jA8kABsuY3r7NQgl3bxP8DGBjZQ9L3SYcFu+z08t4= Subject key identifier: 86:79:8C:50:2F:18:21:6B:1B:E5:1B:80:C7:0A:C0:40:E1:8D:6B:33 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A44 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa Signing time: Sun 14 May 2023 22:14:22 +0000 ROA not before: Sun 14 May 2023 22:14:22 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 140731 IP address blocks: 2406:840:9200::/40 maxlen: 48 2406:840:9700::/40 maxlen: 48 2406:840:eb80::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2628 (0xa44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:14:22 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d3e-cbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:13:15:da:62:fd:dc:dc:40:15:b2:aa:ec: 07:f7:cd:e5:44:9a:4d:6d:5b:ac:e1:d3:83:4d:d2: f4:06:77:13:6a:87:8f:09:2f:26:30:f9:5e:cb:a5: 95:5e:8a:92:6a:41:4e:1d:e3:57:6e:0c:d5:57:3c: e0:00:53:85:a6:de:6d:a7:29:df:70:06:93:ea:d7: 62:19:62:7b:e5:72:ba:e5:44:12:9a:c2:59:32:e3: 4d:c6:c6:03:ff:ad:a5:4e:8c:9e:01:6b:98:44:24: de:e5:70:28:c0:1f:97:37:ec:2d:81:8e:26:ee:07: 0e:8b:a5:42:e2:b6:28:88:6a:06:41:b0:d7:9c:bd: e9:ad:54:d6:9d:69:d3:57:86:bc:0f:3f:a3:40:e2: e2:22:68:26:69:c4:c4:83:6b:67:35:0a:e0:61:f6: 05:c1:39:3b:4b:70:d4:ac:db:66:98:38:a4:7d:d2: 47:8e:8a:8e:5d:04:aa:2f:8f:ae:fe:c2:67:ab:91: 98:e8:30:5b:4c:81:76:1f:e4:01:82:28:2f:6c:01: 84:e4:25:80:0e:99:d8:e6:35:a2:75:e8:95:59:e6: c9:21:10:c5:66:2a:f4:72:62:e4:33:3c:d0:16:b8: ff:58:f2:b7:2f:1b:a2:eb:c3:c9:a2:ef:22:17:58: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:79:8C:50:2F:18:21:6B:1B:E5:1B:80:C7:0A:C0:40:E1:8D:6B:33 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1A1E7A58D8FB11EC9827D678C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9200::/40 2406:840:9700::/40 2406:840:eb80::/42 Signature Algorithm: sha256WithRSAEncryption 36:4c:2c:31:e6:d2:03:f8:5b:38:12:cc:fc:9a:de:11:ed:3f: 7e:5d:ad:e1:62:1b:c3:af:0c:8d:88:ec:c7:f8:d5:9a:8e:23: 91:53:6e:17:b9:d9:86:e0:66:93:c1:30:0b:0f:37:ea:bf:dd: e2:1f:bc:c6:94:4d:2e:e1:ad:8e:5c:5f:8b:0c:0f:e5:af:8c: 77:db:b2:e8:1e:96:bd:62:da:01:51:b6:4b:4a:8c:c3:cc:e0: 96:70:5f:1e:05:6a:84:ad:fb:58:b8:35:35:c3:b6:14:69:60: 5b:11:7e:d3:6e:19:07:0b:b7:d6:09:78:50:72:fb:85:32:a6: 39:a2:15:21:5e:78:2d:d7:3c:01:ca:f3:2a:68:9f:e8:f1:43: 73:d7:be:e0:18:29:65:8e:01:56:77:6d:a8:bd:13:f9:72:27: 2b:6b:82:3a:06:29:bd:42:a6:97:fd:19:30:c2:08:4b:ae:ef: c0:76:06:69:bd:cc:5a:b8:f3:23:47:fd:6a:de:f5:a5:f0:fd: b4:8d:36:97:ab:a2:44:88:8a:6d:9f:73:d6:c5:fe:77:59:cb: 1a:8f:59:8d:1d:3a:07:da:0a:7d:6a:b6:c1:41:8f:44:21:cf: aa:54:d2:ba:6d:3b:18:df:e2:5a:38:32:2e:d6:b7:50:d8:ee: 6f:b3:71:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNDIyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQzZS1jYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1wTFdpi/dzcQBWyquwH983lRJpNbVus4dODTdL0BncTaoePCS8mMPley6WV XoqSakFOHeNXbgzVVzzgAFOFpt5tpynfcAaT6tdiGWJ75XK65UQSmsJZMuNNxsYD /62lToyeAWuYRCTe5XAowB+XN+wtgY4m7gcOi6VC4rYoiGoGQbDXnL3prVTWnWnT V4a8Dz+jQOLiImgmacTEg2tnNQrgYfYFwTk7S3DUrNtmmDikfdJHjoqOXQSqL4+u /sJnq5GY6DBbTIF2H+QBgigvbAGE5CWADpnY5jWideiVWebJIRDFZir0cmLkMzzQ Frj/WPK3Lxui68PJou8iF1iH2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZ5jFAv GCFrG+UbgMcKwEDhjWszMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMUExRTdBNThE OEZCMTFFQzk4MjdENjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgACMBkDBgAkBghAkgMGACQGCECXAwcGJAYIQOuAMA0GCSqGSIb3DQEB CwUAA4IBAQA2TCwx5tID+Fs4Esz8mt4R7T9+Xa3hYhvDrwyNiOzH+NWajiORU24X udmG4GaTwTALDzfqv93iH7zGlE0u4a2OXF+LDA/lr4x327LoHpa9YtoBUbZLSozD zOCWcF8eBWqErftYuDU1w7YUaWBbEX7TbhkHC7fWCXhQcvuFMqY5ohUhXngt1zwB yvMqaJ/o8UNz177gGClljgFWd22ovRP5cicra4I6Bim9QqaX/RkwwghLru/AdgZp vcxauPMjR/1q3vWl8P20jTaXq6JEiIptn3PWxf53Wcsaj1mNHToH2gp9arbBQY9E Ic+qVNK6bTsY3+JaODIu1rdQ2O5vs3GL -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org