$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/24C46B7CE9EE11EBA7E58E66C4F9AE02.roa File: 24C46B7CE9EE11EBA7E58E66C4F9AE02.roa (raw, json) Hash identifier: 7AJe13WCl9Fy4tMePorx0fYfJzQsinkiNxIASBmzpgk= Subject key identifier: 5E:10:67:7E:63:22:58:2B:71:90:34:BA:05:3C:FD:61:38:01:8C:9C Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A72 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/24C46B7CE9EE11EBA7E58E66C4F9AE02.roa Signing time: Sun 14 May 2023 22:15:17 +0000 ROA not before: Sun 14 May 2023 22:15:17 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 208753 IP address blocks: 2406:840:feb0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:15:17 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d75-dd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:5e:aa:97:56:5e:fa:80:fb:18:3b:f0:8f: 4c:9b:e1:2c:4d:df:7a:f0:f9:4d:c4:9a:b8:8c:39: a6:87:5f:5f:0e:86:93:15:32:cc:f6:10:60:8c:2f: f2:0d:31:dd:20:f8:72:e8:b0:d8:9a:bf:e5:7f:d7: 27:c7:3a:d1:2b:df:b6:05:73:c0:27:18:38:e6:2c: 6b:5d:8f:b7:26:6b:15:08:4e:e1:cd:18:03:1e:b5: 10:e7:35:27:39:10:2b:bf:a5:29:07:aa:a3:ab:fe: 6c:42:f1:e7:98:fe:87:2d:87:1f:a2:bd:78:49:12: 96:29:52:17:b0:f5:87:a4:37:a4:9c:6b:b6:ef:1f: 89:1b:bc:b2:16:51:56:df:5b:db:70:df:4c:f3:a8: 10:12:d1:b3:b3:ff:84:68:0e:3d:3e:a8:9b:80:8c: 6b:56:90:8b:86:85:be:53:a7:81:40:e7:b0:d6:e4: 87:74:66:34:b6:2a:63:0e:bc:e6:cd:2c:59:8b:d5: fe:bc:b2:e6:25:60:3b:b5:88:4f:85:82:bc:32:d6: 1e:db:21:de:13:7f:95:4e:65:6c:fb:b1:b6:e8:10: a7:6c:bc:80:b2:63:16:09:f2:07:69:08:74:e7:c0: cd:92:2c:96:52:59:f2:da:1c:63:64:8d:19:1d:9f: 81:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:10:67:7E:63:22:58:2B:71:90:34:BA:05:3C:FD:61:38:01:8C:9C X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/24C46B7CE9EE11EBA7E58E66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:feb0::/44 Signature Algorithm: sha256WithRSAEncryption a6:a9:6f:61:d9:de:d0:5d:42:3c:d3:9d:cb:ef:92:7a:14:29: 8d:c0:9c:db:ae:25:40:6b:f0:d2:13:5d:41:cd:8e:01:c1:91: af:86:45:18:08:b7:bc:5f:26:c9:e8:94:c6:37:fe:9a:14:4d: 36:01:b2:44:07:9f:1c:dd:43:71:82:2b:8d:16:19:a1:01:e8: 95:09:9a:6d:1b:b4:e4:bd:65:5f:0f:24:46:0c:71:e2:90:81: 26:73:9c:25:7f:f6:2e:7c:b2:d4:75:85:c4:50:aa:1b:75:ce: 58:9f:97:df:bf:b4:a6:0c:d8:23:32:55:a4:90:74:6e:3a:88: e7:e0:4b:c8:2a:39:11:07:cb:07:c5:93:c4:8b:e6:df:44:73: 6c:fa:e2:e7:2b:3e:31:3c:4c:b8:a9:c5:34:2f:9f:e3:b4:8c: 3f:d6:16:d3:70:bf:b3:63:cb:e9:33:f0:cc:ba:18:93:9f:a1: 6b:b6:2c:59:f8:86:59:c9:4c:a4:05:c4:0e:d9:55:02:88:cd: 57:94:8f:b6:52:b4:53:22:16:9a:7a:77:18:8e:e5:53:74:07: 63:61:b0:1c:d1:5b:10:a5:7a:31:a4:4b:91:13:7c:db:82:68: 2b:be:53:5b:c5:b5:b6:c5:14:d9:a5:5c:7b:30:63:35:73:9e: 50:39:a6:65 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNTE3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQ3NS1kZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsBeqpdWXvqA+xg78I9Mm+EsTd968PlNxJq4jDmmh19fDoaTFTLM9hBgjC/y DTHdIPhy6LDYmr/lf9cnxzrRK9+2BXPAJxg45ixrXY+3JmsVCE7hzRgDHrUQ5zUn ORArv6UpB6qjq/5sQvHnmP6HLYcfor14SRKWKVIXsPWHpDeknGu27x+JG7yyFlFW 31vbcN9M86gQEtGzs/+EaA49PqibgIxrVpCLhoW+U6eBQOew1uSHdGY0tipjDrzm zSxZi9X+vLLmJWA7tYhPhYK8MtYe2yHeE3+VTmVs+7G26BCnbLyAsmMWCfIHaQh0 58DNkiyWUlny2hxjZI0ZHZ+B1QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFF4QZ35j IlgrcZA0ugU8/WE4AYycMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMjRDNDZCN0NF OUVFMTFFQkE3RTU4RTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA/rAwDQYJKoZIhvcNAQELBQADggEBAKapb2HZ3tBd QjzTncvvknoUKY3AnNuuJUBr8NITXUHNjgHBka+GRRgIt7xfJsnolMY3/poUTTYB skQHnxzdQ3GCK40WGaEB6JUJmm0btOS9ZV8PJEYMceKQgSZznCV/9i58stR1hcRQ qht1zlifl9+/tKYM2CMyVaSQdG46iOfgS8gqOREHywfFk8SL5t9Ec2z64ucrPjE8 TLipxTQvn+O0jD/WFtNwv7Njy+kz8My6GJOfoWu2LFn4hlnJTKQFxA7ZVQKIzVeU j7ZStFMiFpp6dxiO5VN0B2NhsBzRWxClejGkS5ETfNuCaCu+U1vFtbbFFNmlXHsw YzVznlA5pmU= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org