$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/533EA4DADAD211EA9DD74774C4F9AE02.roa File: 533EA4DADAD211EA9DD74774C4F9AE02.roa (raw, json) Hash identifier: Ku/EMAzW5epTr9luCXhEQs9ys9AEUlIJ18L1U+WUuwY= Subject key identifier: 79:93:EB:08:85:F3:47:DB:0C:6A:AB:07:93:41:17:E8:A8:A0:69:D8 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A2D Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/533EA4DADAD211EA9DD74774C4F9AE02.roa Signing time: Sun 14 May 2023 22:13:56 +0000 ROA not before: Sun 14 May 2023 22:13:56 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 133555 IP address blocks: 2406:840:f380::/44 maxlen: 48 2406:840:fefc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:13:56 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d24-8d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:90:80:ba:69:35:ac:70:8b:de:35:eb:5c: 8e:cd:5d:a0:22:df:59:dc:b5:c5:60:0d:c4:62:fa: 45:b4:ae:84:56:06:94:b1:3b:cd:8e:91:c5:ed:ba: 16:86:35:8c:b9:9a:78:76:83:c3:7f:7e:84:1a:c9: 1f:2e:cf:71:dd:b8:ca:a3:a3:ea:d8:84:b1:65:5c: 20:3e:54:f1:ad:c0:e9:d0:b3:54:02:e1:ab:bf:e8: 10:26:23:f1:2f:69:15:21:e9:c6:c7:f8:82:3c:0e: 6f:fc:4d:1a:3d:5b:3f:60:00:39:2c:ec:a7:28:75: 8a:00:2e:09:a9:a6:ce:4e:87:61:71:df:8e:4f:0d: d2:10:7c:42:b7:92:5d:ee:03:49:c6:c5:3d:00:ce: aa:92:0f:50:07:be:be:6c:ac:81:ad:f6:37:58:fa: bd:c6:16:68:84:b8:9b:9a:8b:41:46:38:09:6e:58: 54:a9:6f:a1:97:49:65:14:c1:9f:2b:ab:2b:b5:71: 2d:f7:b4:20:93:f2:03:2b:da:38:22:a5:ee:0a:3e: 47:ca:01:28:b7:03:5f:26:09:3a:79:76:86:a0:7e: a6:41:10:86:93:95:cc:11:2a:bc:4d:9c:9c:d8:8f: 81:6d:32:a0:c0:8c:9f:13:53:b5:70:e5:44:28:cb: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:93:EB:08:85:F3:47:DB:0C:6A:AB:07:93:41:17:E8:A8:A0:69:D8 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/533EA4DADAD211EA9DD74774C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:f380::/44 2406:840:fefc::/48 Signature Algorithm: sha256WithRSAEncryption 61:4a:6e:49:ce:04:9e:17:b8:99:ec:e3:1e:ca:12:1d:82:f2: 5b:8e:0d:f4:c1:f2:8f:d3:45:81:64:07:5f:e6:06:1a:d4:b2: 4f:f5:d0:62:39:f3:94:b4:df:d5:3e:e9:47:35:67:31:e5:37: 15:a9:a7:df:6d:65:28:22:75:f5:89:a4:e8:a7:e6:8b:89:0a: ab:4d:2f:37:60:9c:e4:f7:2d:2f:8a:56:43:7f:d7:9c:a2:4e: cf:e4:95:e2:41:0a:c7:4f:ff:8d:be:bd:0d:97:05:50:1c:f4: 6c:9f:38:16:ab:89:7e:d7:99:60:81:8d:57:09:6d:22:94:aa: 60:94:9e:dd:a8:fc:85:4c:3f:09:4f:6b:db:9f:9a:af:e5:f9: 49:86:cc:e1:d6:ae:67:2d:70:97:33:ac:34:5b:67:a0:e9:fe: e9:d6:2a:99:fc:f0:7d:9a:59:61:6e:c8:ee:38:e2:bf:37:a4: 32:eb:e9:7c:11:c2:52:6a:5d:df:2e:32:ee:cc:a5:21:6e:7a: 57:ee:a9:4a:98:e1:4b:ca:45:22:d9:e9:51:86:76:bf:d5:e2: 70:df:02:27:3a:98:00:0d:23:61:c0:3f:67:75:f4:c2:f8:2d: bf:97:16:e2:75:01:c3:26:83:14:8b:cb:e8:33:be:5c:91:3c: 8c:6b:09:ab -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxMzU2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQyNC04ZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0puQgLppNaxwi94161yOzV2gIt9Z3LXFYA3EYvpFtK6EVgaUsTvNjpHF7boW hjWMuZp4doPDf36EGskfLs9x3bjKo6Pq2ISxZVwgPlTxrcDp0LNUAuGrv+gQJiPx L2kVIenGx/iCPA5v/E0aPVs/YAA5LOynKHWKAC4JqabOTodhcd+OTw3SEHxCt5Jd 7gNJxsU9AM6qkg9QB76+bKyBrfY3WPq9xhZohLibmotBRjgJblhUqW+hl0llFMGf K6srtXEt97Qgk/IDK9o4IqXuCj5HygEotwNfJgk6eXaGoH6mQRCGk5XMESq8TZyc 2I+BbTKgwIyfE1O1cOVEKMvUFQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHmT6wiF 80fbDGqrB5NBF+iooGnYMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNTMzRUE0REFE QUQyMTFFQTlERDc0Nzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA84ADBwAkBghA/vwwDQYJKoZIhvcNAQELBQADggEB AGFKbknOBJ4XuJns4x7KEh2C8luODfTB8o/TRYFkB1/mBhrUsk/10GI585S039U+ 6Uc1ZzHlNxWpp99tZSgidfWJpOin5ouJCqtNLzdgnOT3LS+KVkN/15yiTs/kleJB CsdP/42+vQ2XBVAc9GyfOBariX7XmWCBjVcJbSKUqmCUnt2o/IVMPwlPa9ufmq/l +UmGzOHWrmctcJczrDRbZ6Dp/unWKpn88H2aWWFuyO444r83pDLr6XwRwlJqXd8u Mu7MpSFuelfuqUqY4UvKRSLZ6VGGdr/V4nDfAic6mAANI2HAP2d19ML4Lb+XFuJ1 AcMmgxSLy+gzvlyRPIxrCas= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org