$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/24C46B7CE9EE11EBA7E58E66C4F9AE02.roa File: 24C46B7CE9EE11EBA7E58E66C4F9AE02.roa (raw, json) Hash identifier: Ppb0lUVLV59MYb6CNXp6beNhjOpDi3sllq/JnOX6dXI= Subject key identifier: 58:AB:C0:B2:C9:C4:0C:E8:96:5C:60:B2:31:E8:26:32:58:85:D9:B6 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0CA0 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/24C46B7CE9EE11EBA7E58E66C4F9AE02.roa Signing time: Sun 26 May 2024 21:32:43 +0000 ROA not before: Sun 26 May 2024 21:32:43 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 208753 IP address blocks: 2406:840:feb0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:32:43 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa7a-6fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:b9:77:23:89:3d:d0:ab:5b:bd:74:20:cc: 0e:fc:c7:97:03:c2:b2:16:ca:c7:44:68:cf:21:33: bf:8f:33:13:7b:01:3f:01:5a:d6:81:7e:97:7b:35: ed:27:b2:20:c9:c7:b5:9f:5b:27:65:94:fc:42:c5: 84:40:b2:f7:21:28:58:2c:14:6e:55:32:68:82:c2: a9:03:02:71:98:37:a0:43:41:bf:e7:ac:a7:ee:9e: 80:64:48:73:dc:b9:4b:7d:ab:07:38:d9:6f:98:73: 1e:ef:95:1e:75:a5:73:97:f9:e3:26:a4:2a:40:61: 58:d5:52:8b:c6:f2:02:33:f8:e7:3c:0a:c3:50:56: dd:be:fe:e8:dd:e0:8d:e0:dd:ea:eb:f6:6b:33:ef: 22:60:1d:ab:bd:68:25:bf:b6:30:c2:08:96:0f:6d: dc:7a:f8:69:a8:29:7a:cd:c8:e5:41:c6:28:68:25: 46:9b:d7:4e:a6:b7:7a:39:3b:82:48:b0:da:e3:26: 37:5d:56:83:92:78:63:3f:8c:49:10:84:c6:ef:43: 27:e4:05:58:5b:19:9c:60:17:fb:6c:cb:66:85:ec: 13:f1:8b:80:23:8b:e9:ba:2c:a2:d7:da:8b:cf:cd: 12:44:aa:c6:f1:c5:a1:7f:34:d6:70:77:6f:49:dc: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AB:C0:B2:C9:C4:0C:E8:96:5C:60:B2:31:E8:26:32:58:85:D9:B6 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/24C46B7CE9EE11EBA7E58E66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:feb0::/44 Signature Algorithm: sha256WithRSAEncryption 97:c9:0a:97:a9:00:3a:41:76:00:bb:ad:aa:23:b7:5f:e1:81: 5b:78:a4:af:22:aa:6c:67:f9:99:9f:ed:6f:90:e8:03:bd:8f: 7b:0b:0a:c9:01:45:7e:14:32:7e:88:c5:ec:04:16:62:17:05: b5:31:04:a5:ed:b9:6f:af:d0:8a:3b:af:9d:b4:07:14:9c:1d: 9d:ac:ca:e3:54:23:e5:df:86:3a:23:91:ca:ad:fb:3e:c2:69: d7:ba:bc:1c:3b:60:b6:4a:3f:8f:c5:e7:23:2f:0e:c1:3b:d0: 43:c8:1d:ca:a2:99:ee:be:1c:71:22:04:66:14:35:8a:ba:63: 75:8c:88:8d:e0:fb:30:85:5a:5a:ae:01:4a:a0:39:6e:08:03: 19:09:ba:4e:40:9f:bf:34:a2:2e:0e:1f:b8:c3:aa:06:30:d4: 81:a4:74:d7:21:f4:57:f3:55:39:c8:9e:4f:7d:84:75:f9:a4: 51:83:74:d5:63:e3:39:31:6b:7d:5b:37:16:22:9e:84:c8:fc: 88:49:f4:0b:1b:95:1b:5f:16:ed:47:4f:9a:85:50:a0:d2:88: 30:1c:ad:37:7e:5e:75:39:8e:90:a6:42:c3:64:d3:e0:14:e9: 9d:e0:8c:a6:e2:7a:b7:5e:e7:5a:12:60:ee:3a:b2:24:76:4e: c9:62:56:e2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMjQzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWE3YS02ZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kS5dyOJPdCrW710IMwO/MeXA8KyFsrHRGjPITO/jzMTewE/AVrWgX6XezXt J7Igyce1n1snZZT8QsWEQLL3IShYLBRuVTJogsKpAwJxmDegQ0G/56yn7p6AZEhz 3LlLfasHONlvmHMe75UedaVzl/njJqQqQGFY1VKLxvICM/jnPArDUFbdvv7o3eCN 4N3q6/ZrM+8iYB2rvWglv7YwwgiWD23cevhpqCl6zcjlQcYoaCVGm9dOprd6OTuC SLDa4yY3XVaDknhjP4xJEITG70Mn5AVYWxmcYBf7bMtmhewT8YuAI4vpuiyi19qL z80SRKrG8cWhfzTWcHdvSdxCtwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFirwLLJ xAzollxgsjHoJjJYhdm2MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMjRDNDZCN0NF OUVFMTFFQkE3RTU4RTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA/rAwDQYJKoZIhvcNAQELBQADggEBAJfJCpepADpB dgC7raojt1/hgVt4pK8iqmxn+Zmf7W+Q6AO9j3sLCskBRX4UMn6IxewEFmIXBbUx BKXtuW+v0Io7r520BxScHZ2syuNUI+Xfhjojkcqt+z7Cade6vBw7YLZKP4/F5yMv DsE70EPIHcqime6+HHEiBGYUNYq6Y3WMiI3g+zCFWlquAUqgOW4IAxkJuk5An780 oi4OH7jDqgYw1IGkdNch9FfzVTnInk99hHX5pFGDdNVj4zkxa31bNxYinoTI/IhJ 9AsblRtfFu1HT5qFUKDSiDAcrTd+XnU5jpCmQsNk0+AU6Z3gjKbierde51oSYO46 siR2TsliVuI= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org