$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4CAF6AB078C611EE83FF7E6FC4F9AE02.roa File: 4CAF6AB078C611EE83FF7E6FC4F9AE02.roa (raw, json) Hash identifier: VXtnrCDxn4lmsTTNj2Jcm9VXwm938api5AmAvdwC9yo= Subject key identifier: CE:D2:86:D6:E4:C4:1E:BF:6E:27:FA:02:E7:4E:CF:4B:7D:C7:D3:7B Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0B63 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4CAF6AB078C611EE83FF7E6FC4F9AE02.roa Signing time: Wed 01 Nov 2023 14:52:38 +0000 ROA not before: Wed 01 Nov 2023 14:52:38 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 20473 IP address blocks: 2406:840:9888::/48 maxlen: 48 2406:840:e060::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Nov 1 14:52:38 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65426636-dd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:37:a0:c8:88:a3:12:88:31:b6:2b:b5:13: 02:4e:b8:d6:0a:c3:87:e4:97:ca:bb:bd:6e:0e:06: 0b:36:2b:9d:d7:7d:9b:21:79:16:29:cf:79:5b:f6: 80:4f:da:d8:17:ef:d4:af:7c:a2:b9:5a:db:65:48: e6:54:f1:f2:ca:df:54:47:97:d4:a4:32:f5:83:66: ec:9f:83:32:6c:2f:8d:a8:ba:a1:a6:e8:61:1c:92: cb:cc:e6:06:52:95:2c:de:77:71:08:ea:8a:67:94: 64:d6:21:ba:93:85:13:29:e5:ed:9e:b2:92:87:16: e4:d3:bc:d6:36:35:b5:65:16:04:8c:66:3e:fe:33: e2:a5:d2:1f:68:d1:39:5d:41:83:c3:ae:4e:55:7c: c6:84:00:c0:2e:cb:1a:a6:88:59:9a:81:c5:b6:73: b7:48:1e:e5:94:ed:56:d4:3d:40:68:6d:27:a0:56: d6:ce:b3:c7:6f:1d:31:35:20:74:5a:29:b8:23:0e: 3a:b9:d0:40:55:9e:4a:8e:9d:8f:89:52:42:c3:25: 9c:22:67:42:62:03:d1:42:21:23:10:ae:88:2a:32: 85:23:24:7a:f3:e6:dd:cb:9c:ff:62:e7:6a:dc:94: 97:a8:46:de:de:e2:0a:e5:62:58:79:f8:47:a3:00: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D2:86:D6:E4:C4:1E:BF:6E:27:FA:02:E7:4E:CF:4B:7D:C7:D3:7B X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4CAF6AB078C611EE83FF7E6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9888::/48 2406:840:e060::/44 Signature Algorithm: sha256WithRSAEncryption 94:4c:7c:6d:dc:72:cb:33:3c:84:28:e7:20:86:e4:7e:21:e1: b8:c0:a0:f2:11:74:d5:e0:78:49:5f:2a:a4:38:6a:de:5a:5c: b4:e5:98:bd:4c:02:e7:38:b3:8f:16:55:23:54:83:1b:a1:7c: 39:5f:2b:b1:f0:be:cf:d7:54:ee:b4:9f:c2:b0:25:4b:df:0c: 3b:a2:9e:1d:f4:a5:19:77:b4:d8:e5:b2:fb:98:22:7e:52:83: fc:48:76:5e:f3:c5:68:38:9b:c4:84:14:03:57:1b:23:a2:72: a3:0b:29:bf:47:1a:ca:86:19:41:e2:54:b6:f8:64:88:fe:2b: 81:ac:fc:89:bd:57:11:b8:42:f6:63:73:ae:4a:3a:07:d8:a8: e3:9f:f2:ef:4e:22:39:ea:e7:a4:8e:24:fc:a9:44:d0:ba:e6: b7:6f:a7:e9:90:ee:4a:fe:3e:06:5d:04:63:2c:86:91:13:bb: ff:53:99:0b:ea:b1:49:41:9c:cf:68:99:91:5e:10:88:4d:bd: 8d:cf:ec:a8:c3:16:98:58:72:f8:7a:ba:62:65:72:e1:0a:63: f2:55:88:7e:0d:b6:4a:40:c6:ab:41:bf:86:04:5d:43:f9:94: e8:32:16:aa:bc:bc:f7:5f:ec:77:9a:aa:fb:b5:41:30:36:13: c0:4a:af:47 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMxMTAxMTQ1MjM4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQyNjYzNi1kZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6o3oMiIoxKIMbYrtRMCTrjWCsOH5JfKu71uDgYLNiud132bIXkWKc95W/aA T9rYF+/Ur3yiuVrbZUjmVPHyyt9UR5fUpDL1g2bsn4MybC+NqLqhpuhhHJLLzOYG UpUs3ndxCOqKZ5Rk1iG6k4UTKeXtnrKShxbk07zWNjW1ZRYEjGY+/jPipdIfaNE5 XUGDw65OVXzGhADALssapohZmoHFtnO3SB7llO1W1D1AaG0noFbWzrPHbx0xNSB0 Wim4Iw46udBAVZ5Kjp2PiVJCwyWcImdCYgPRQiEjEK6IKjKFIyR68+bdy5z/Yudq 3JSXqEbe3uIK5WJYefhHowDu5QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFM7Shtbk xB6/bif6AudOz0t9x9N7MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNENBRjZBQjA3 OEM2MTFFRTgzRkY3RTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBghAmIgDBwQkBghA4GAwDQYJKoZIhvcNAQELBQADggEB AJRMfG3ccsszPIQo5yCG5H4h4bjAoPIRdNXgeElfKqQ4at5aXLTlmL1MAuc4s48W VSNUgxuhfDlfK7Hwvs/XVO60n8KwJUvfDDuinh30pRl3tNjlsvuYIn5Sg/xIdl7z xWg4m8SEFANXGyOicqMLKb9HGsqGGUHiVLb4ZIj+K4Gs/Im9VxG4QvZjc65KOgfY qOOf8u9OIjnq56SOJPypRNC65rdvp+mQ7kr+PgZdBGMshpETu/9TmQvqsUlBnM9o mZFeEIhNvY3P7KjDFphYcvh6umJlcuEKY/JViH4NtkpAxqtBv4YEXUP5lOgyFqq8 vPdf7Heaqvu1QTA2E8BKr0c= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org