$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa File: 385FE4729A3011EA97979D38C4F9AE02.roa (raw, json) Hash identifier: zK1zjqnTgNHzUFiHfC5a5+G7sHiGoqQs3YcOqkevwXA= Subject key identifier: 8B:42:FC:43:EE:A8:42:8A:F7:29:9D:84:40:7B:AE:77:5D:1F:9C:DA Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A7B Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa Signing time: Sun 14 May 2023 22:15:27 +0000 ROA not before: Sun 14 May 2023 22:15:27 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 213215 IP address blocks: 2406:840:ece0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2683 (0xa7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:15:27 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d7f-01f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e7:87:71:4f:6f:0a:f6:68:c8:41:c4:64:41: b2:3b:dc:b7:7a:75:50:a8:fe:62:81:0a:05:4b:dc: 8c:e7:af:45:2c:17:6f:3e:1f:05:ca:31:29:bb:7e: 00:28:45:d3:25:16:0c:ed:20:82:ae:8c:6d:8f:90: c4:95:95:73:0b:07:f8:c5:20:58:4b:bc:b7:90:b4: df:97:05:6b:5c:e7:ac:ac:61:d6:b7:b2:a8:8e:30: 6e:28:b9:85:ff:f0:86:00:51:d8:40:34:6c:7d:a9: c7:d6:94:c4:62:0d:a5:42:e8:57:34:36:90:62:19: cf:5f:c5:99:45:ce:0e:ba:8b:bd:02:88:8d:7b:5c: 34:47:6f:62:17:30:70:e4:4e:65:60:56:2b:f0:e9: 4e:b2:38:e1:43:b8:a4:94:b7:4d:16:a0:ee:b6:e9: d8:2e:e6:f7:a7:4f:ba:1a:90:ad:20:77:e2:fc:00: 24:2f:44:76:2a:b8:8c:4c:ab:61:5b:69:cc:07:e6: c2:41:c6:86:43:03:81:23:9a:e9:5b:02:ca:b5:36: 71:ca:25:e5:7c:f7:4f:51:c3:6f:a1:a5:46:76:ac: c4:bc:ed:a0:cd:2a:3e:21:01:1d:22:6b:50:71:fc: db:af:fb:fb:2d:da:bf:9d:c6:ef:19:31:ec:d4:bd: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:42:FC:43:EE:A8:42:8A:F7:29:9D:84:40:7B:AE:77:5D:1F:9C:DA X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/385FE4729A3011EA97979D38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:ece0::/44 Signature Algorithm: sha256WithRSAEncryption a9:d6:c3:40:72:c5:92:0e:72:78:04:c1:1c:a4:d8:15:99:98: fd:c8:37:f4:b9:27:f6:62:a6:e9:79:e0:d5:82:e8:ba:2a:2c: 67:c5:2d:0a:c5:4c:60:f7:72:ea:0d:c1:44:e3:3a:7a:ad:16: 9b:22:f4:8d:14:dd:1e:f7:ac:2a:70:36:a6:bd:60:6e:27:44: 58:46:7b:51:06:97:57:66:9f:6c:a1:25:ff:84:b8:8e:8d:ad: 6d:5f:58:ac:d6:d8:b0:e7:13:29:fa:33:80:91:57:a6:e3:0c: 21:f6:ad:dd:53:85:9a:27:ae:cf:0c:b9:9f:ac:cf:a9:a8:d6: d7:64:dc:a7:68:39:4d:a1:6d:e3:7f:ab:45:ae:94:c1:fb:c5: 1b:f3:8c:63:1c:36:a7:39:e2:7b:38:81:50:d1:f2:5d:da:27: d9:4e:0c:c9:61:90:04:26:db:53:1f:1d:d7:1f:c8:b2:65:8c: ad:c7:c0:fc:3c:5f:a2:88:0e:3c:bc:72:51:76:a5:2d:f5:31: 09:e5:7e:cd:b4:e8:f6:f3:44:b8:3f:9f:1e:86:8f:c0:34:51: a0:d5:fb:e4:d2:46:97:88:ef:89:f4:61:aa:5e:55:5b:99:96: 7d:bd:c4:d3:2c:0e:6b:95:02:32:c7:86:ef:ff:00:90:81:b0: 7c:35:0e:54 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNTI3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQ3Zi0wMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+eHcU9vCvZoyEHEZEGyO9y3enVQqP5igQoFS9yM569FLBdvPh8FyjEpu34A KEXTJRYM7SCCroxtj5DElZVzCwf4xSBYS7y3kLTflwVrXOesrGHWt7KojjBuKLmF //CGAFHYQDRsfanH1pTEYg2lQuhXNDaQYhnPX8WZRc4Ouou9AoiNe1w0R29iFzBw 5E5lYFYr8OlOsjjhQ7iklLdNFqDutunYLub3p0+6GpCtIHfi/AAkL0R2KriMTKth W2nMB+bCQcaGQwOBI5rpWwLKtTZxyiXlfPdPUcNvoaVGdqzEvO2gzSo+IQEdImtQ cfzbr/v7Ldq/ncbvGTHs1L1z1QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFItC/EPu qEKK9ymdhEB7rnddH5zaMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMzg1RkU0NzI5 QTMwMTFFQTk3OTc5RDM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA7OAwDQYJKoZIhvcNAQELBQADggEBAKnWw0ByxZIO cngEwRyk2BWZmP3IN/S5J/Zipul54NWC6LoqLGfFLQrFTGD3cuoNwUTjOnqtFpsi 9I0U3R73rCpwNqa9YG4nRFhGe1EGl1dmn2yhJf+EuI6NrW1fWKzW2LDnEyn6M4CR V6bjDCH2rd1ThZonrs8MuZ+sz6mo1tdk3KdoOU2hbeN/q0WulMH7xRvzjGMcNqc5 4ns4gVDR8l3aJ9lODMlhkAQm21MfHdcfyLJljK3HwPw8X6KIDjy8clF2pS31MQnl fs206PbzRLg/nx6Gj8A0UaDV++TSRpeI74n0YapeVVuZln29xNMsDmuVAjLHhu// AJCBsHw1DlQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org