$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6DD477BC6AD411EE8DB0AF30C4F9AE02.roa File: 6DD477BC6AD411EE8DB0AF30C4F9AE02.roa (raw, json) Hash identifier: YJAsMCiyqrsjPkiJ6qRyvEkqB/lMVr4dN8ea8G360W4= Subject key identifier: 9B:46:D0:36:C1:02:54:09:79:DA:A0:08:AB:DD:89:8D:A0:C9:FD:31 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0B4F Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6DD477BC6AD411EE8DB0AF30C4F9AE02.roa Signing time: Sat 14 Oct 2023 20:58:30 +0000 ROA not before: Sat 14 Oct 2023 20:58:30 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 199436 IP address blocks: 2406:840:9990::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2895 (0xb4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Oct 14 20:58:30 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=652b00f6-3cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:cc:bf:0d:63:0e:f4:7b:84:ec:9d:8f:59: fd:a1:9d:d7:b1:fe:b5:94:79:ce:40:93:0b:94:9c: 53:5f:3a:8f:b6:b9:0a:19:a2:2e:7b:5f:00:ce:9c: 75:33:d0:dd:36:7a:6d:13:3c:58:db:70:2f:71:21: 6b:de:e0:e1:7a:59:b7:89:8b:64:84:97:a4:51:25: 33:c8:4a:aa:a1:06:68:d8:8a:ab:67:69:50:52:ec: c6:64:60:0d:f3:be:2e:fa:80:e8:bb:29:80:fc:6b: 83:22:18:0f:2e:d6:63:c4:b7:75:3a:55:27:b2:43: 51:ff:68:84:36:9b:fa:37:0b:f9:9e:91:03:bd:e0: 10:5f:b6:33:1b:43:49:06:94:0f:4c:07:69:97:7c: 74:97:07:f7:82:b4:5f:85:77:1b:94:d4:ea:84:f6: 74:73:9c:ed:87:44:41:13:e0:68:9a:e6:0f:3f:90: 52:3c:54:ba:df:7a:18:e0:96:d6:d6:e6:3d:47:44: 5d:e4:c6:7a:d0:27:6a:56:3d:42:b2:f8:57:85:51: 55:ae:20:9b:78:49:b8:2a:48:07:79:74:0f:af:8e: 1d:d2:b1:98:bf:29:5d:10:09:a9:63:e0:4a:a0:c1: 22:9a:f3:5a:c0:11:36:0a:47:8a:11:a7:88:40:db: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:46:D0:36:C1:02:54:09:79:DA:A0:08:AB:DD:89:8D:A0:C9:FD:31 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6DD477BC6AD411EE8DB0AF30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9990::/44 Signature Algorithm: sha256WithRSAEncryption 68:f6:81:3f:76:a7:5d:ea:11:c5:98:50:96:bb:00:1e:98:5c: 4f:8b:6e:c0:89:9a:ca:4e:9f:53:21:e2:ff:29:60:ab:07:f4: 5a:57:95:78:7d:70:45:a6:6d:8b:9e:a1:ad:29:f6:bb:76:93: 31:3f:55:e2:56:13:f2:cf:49:c1:c7:ed:23:3e:51:5f:53:92: 1e:7a:15:e4:7f:c6:d5:0b:23:27:6c:e9:ee:ff:9f:d7:e7:1d: f8:b7:42:fb:58:2d:88:b9:4f:a5:81:91:63:78:a7:63:c7:df: 2e:b6:37:2b:b8:be:c3:96:c5:a3:a0:09:8d:3d:45:45:a7:ca: ec:fa:97:ec:62:c3:74:45:0a:ac:5b:db:8e:18:e7:14:d3:ea: 51:b5:4e:9a:5f:be:f4:cb:61:d5:8f:33:d1:54:76:1e:a4:c5: 9f:6f:f3:78:a3:5c:9b:69:37:67:4c:8c:b5:26:08:1c:4b:28: 9f:97:97:2f:13:9b:d1:57:88:fc:4a:ca:23:cb:7b:fb:cd:48: 28:bd:ee:8e:4a:87:d9:2a:a4:45:cd:28:20:66:33:2e:82:a2: e0:46:37:b1:c7:e1:f4:af:84:b7:e0:54:06:d6:40:2c:72:65: 1d:6b:2b:c1:38:80:f8:0e:06:ea:b0:1a:67:45:53:f8:16:b6: 67:a9:01:b3 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICC08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMxMDE0MjA1ODMwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJiMDBmNi0zY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtczMvw1jDvR7hOydj1n9oZ3Xsf61lHnOQJMLlJxTXzqPtrkKGaIue18Azpx1 M9DdNnptEzxY23AvcSFr3uDhelm3iYtkhJekUSUzyEqqoQZo2IqrZ2lQUuzGZGAN 874u+oDouymA/GuDIhgPLtZjxLd1OlUnskNR/2iENpv6Nwv5npEDveAQX7YzG0NJ BpQPTAdpl3x0lwf3grRfhXcblNTqhPZ0c5zth0RBE+BomuYPP5BSPFS633oY4JbW 1uY9R0Rd5MZ60CdqVj1CsvhXhVFVriCbeEm4KkgHeXQPr44d0rGYvyldEAmpY+BK oMEimvNawBE2CkeKEaeIQNuX0QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJtG0DbB AlQJedqgCKvdiY2gyf0xMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNkRENDc3QkM2 QUQ0MTFFRThEQjBBRjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghAmZAwDQYJKoZIhvcNAQELBQADggEBAGj2gT92p13q EcWYUJa7AB6YXE+LbsCJmspOn1Mh4v8pYKsH9FpXlXh9cEWmbYueoa0p9rt2kzE/ VeJWE/LPScHH7SM+UV9Tkh56FeR/xtULIyds6e7/n9fnHfi3QvtYLYi5T6WBkWN4 p2PH3y62Nyu4vsOWxaOgCY09RUWnyuz6l+xiw3RFCqxb244Y5xTT6lG1TppfvvTL YdWPM9FUdh6kxZ9v83ijXJtpN2dMjLUmCBxLKJ+Xly8Tm9FXiPxKyiPLe/vNSCi9 7o5Kh9kqpEXNKCBmMy6CouBGN7HH4fSvhLfgVAbWQCxyZR1rK8E4gPgOBuqwGmdF U/gWtmepAbM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org