$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1E59F9D4A11A11EDB1A0A23DC4F9AE02.roa File: 1E59F9D4A11A11EDB1A0A23DC4F9AE02.roa (raw, json) Hash identifier: NrWLErD1B6vuyn9BVTNhzX3LtCajIWU3kYtqU7vxi/k= Subject key identifier: 3D:33:7B:C0:D9:D1:B4:4E:F6:CB:5B:45:4F:BF:54:DE:CF:DF:52:22 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C99 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1E59F9D4A11A11EDB1A0A23DC4F9AE02.roa Signing time: Sun 26 May 2024 21:32:37 +0000 ROA not before: Sun 26 May 2024 21:32:37 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 203236 IP address blocks: 2406:840:9ef0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:32:37 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa74-85bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:9e:b1:c5:d8:f2:53:2b:fa:f3:18:5c:88: b4:24:3c:b9:ec:ec:c9:31:2c:72:51:28:8c:a3:3e: f7:dd:01:12:50:96:f1:34:82:37:72:e4:ba:3d:d1: c3:4b:63:cb:59:6f:00:30:4f:7e:fc:6c:ce:70:6c: 7f:47:dd:d3:ef:f0:e3:6c:42:1a:f3:ac:1b:7c:cf: 8b:e1:4a:ce:d5:4c:49:f3:63:cc:4e:a1:5e:e5:0b: d7:b8:80:48:29:62:d4:4b:07:cb:87:fe:a2:60:15: d7:b1:d5:33:4d:f7:77:b4:93:44:09:a0:8b:45:08: 1d:15:04:e0:0e:21:1b:71:d2:60:28:98:fb:82:e4: 36:99:35:7b:c3:33:a7:90:60:02:d1:a3:13:42:2c: 41:ba:82:e0:ff:ac:dc:2e:88:53:65:64:d2:ed:bc: 67:48:b4:11:b2:45:23:5a:b3:88:06:b4:3e:d0:ea: 61:52:0c:be:80:9f:42:ff:40:78:b2:01:13:ac:bf: 29:0c:39:97:3a:5a:88:aa:40:91:12:97:ce:54:2f: 09:45:60:28:ad:d2:13:9f:3c:b8:08:ce:32:c6:90: d6:22:b2:0f:31:a7:85:d1:34:3b:31:8e:f9:08:1b: 61:d6:d9:a4:07:2e:94:d7:50:f6:14:3e:76:c2:f9: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:33:7B:C0:D9:D1:B4:4E:F6:CB:5B:45:4F:BF:54:DE:CF:DF:52:22 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1E59F9D4A11A11EDB1A0A23DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9ef0::/44 Signature Algorithm: sha256WithRSAEncryption 51:2c:6e:52:d5:dd:c0:e4:47:e7:53:37:74:f9:c7:90:0a:e5: 55:73:64:06:29:0f:fa:90:01:2a:37:6a:f0:b3:3d:fa:2f:f0: c6:0b:15:6f:2d:ed:d5:d7:6e:88:1d:b7:b6:d7:9d:52:fe:67: 5c:4c:16:9a:ab:ad:79:66:c0:16:2d:3e:89:43:4c:cf:69:bc: 3a:45:2b:e4:5c:b5:4d:70:b3:ed:a8:21:2f:61:81:84:4e:8a: 1b:d7:d3:7c:f6:e4:6e:1f:53:70:cf:64:39:62:42:96:95:f9: 49:fc:06:15:f0:03:2d:60:49:69:ba:1b:30:77:54:85:eb:2f: d6:00:0b:bc:80:de:5e:33:53:a9:32:2b:78:69:04:f7:21:7f: 9e:94:47:d1:46:8c:b9:b2:e6:86:b9:7b:7c:00:6f:ea:f1:28: c4:bd:ff:46:91:b1:f4:b9:8b:e7:44:14:32:04:30:12:83:17: e1:93:82:3b:08:d8:1c:00:4d:92:3f:b9:82:4c:c1:78:8c:45: f1:49:4e:44:41:d8:1a:1d:21:c5:b2:6a:4d:9d:7f:d8:45:a0: dd:99:58:01:7f:71:58:bc:95:7a:ee:f2:af:8c:97:b4:99:bf: bd:3c:71:2b:ca:0b:78:09:02:e5:b9:fe:a9:7b:8e:3b:ed:e7: 28:7a:67:be -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMjM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWE3NC04NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ2escXY8lMr+vMYXIi0JDy57OzJMSxyUSiMoz733QESUJbxNII3cuS6PdHD S2PLWW8AME9+/GzOcGx/R93T7/DjbEIa86wbfM+L4UrO1UxJ82PMTqFe5QvXuIBI KWLUSwfLh/6iYBXXsdUzTfd3tJNECaCLRQgdFQTgDiEbcdJgKJj7guQ2mTV7wzOn kGAC0aMTQixBuoLg/6zcLohTZWTS7bxnSLQRskUjWrOIBrQ+0OphUgy+gJ9C/0B4 sgETrL8pDDmXOlqIqkCREpfOVC8JRWAordITnzy4CM4yxpDWIrIPMaeF0TQ7MY75 CBth1tmkBy6U11D2FD52wvlrTQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFD0ze8DZ 0bRO9stbRU+/VN7P31IiMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMUU1OUY5RDRB MTFBMTFFREIxQTBBMjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghAnvAwDQYJKoZIhvcNAQELBQADggEBAFEsblLV3cDk R+dTN3T5x5AK5VVzZAYpD/qQASo3avCzPfov8MYLFW8t7dXXbogdt7bXnVL+Z1xM FpqrrXlmwBYtPolDTM9pvDpFK+RctU1ws+2oIS9hgYROihvX03z25G4fU3DPZDli QpaV+Un8BhXwAy1gSWm6GzB3VIXrL9YAC7yA3l4zU6kyK3hpBPchf56UR9FGjLmy 5oa5e3wAb+rxKMS9/0aRsfS5i+dEFDIEMBKDF+GTgjsI2BwATZI/uYJMwXiMRfFJ TkRB2BodIcWyak2df9hFoN2ZWAF/cVi8lXru8q+Ml7SZv708cSvKC3gJAuW5/ql7 jjvt5yh6Z74= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org