$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa File: 6E59D5EE1A3C11EE8A846877C4F9AE02.roa (raw, json) Hash identifier: HrTmXWXPOORMQDBzt9QpcRMaFsDj+LBssg0Op865ci4= Subject key identifier: 63:50:DB:9C:20:47:87:D9:0C:A5:B3:DB:43:0A:79:60:FE:90:B9:CC Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0ABA Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa Signing time: Tue 04 Jul 2023 07:28:55 +0000 ROA not before: Tue 04 Jul 2023 07:28:55 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 151490 IP address blocks: 2406:840:fedb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2746 (0xaba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Jul 4 07:28:55 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64a3ca36-4490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:de:9b:fe:17:fd:35:58:8e:be:fb:a3:a5: 95:c1:56:83:64:3d:53:2d:28:e7:18:5c:8b:df:98: bb:4f:cc:60:51:34:87:2f:25:6c:2f:92:0b:43:ca: 56:b9:69:12:b2:b8:14:e0:0d:69:d6:8b:b0:4f:68: 33:dc:bc:2e:06:b8:08:21:a5:f6:77:57:46:7b:2e: 59:8c:05:7c:f0:50:55:35:8d:88:24:2b:66:2e:c1: 71:13:42:16:d7:5d:0a:1c:fb:90:8c:9a:ba:e6:1b: 49:d4:16:f2:82:eb:ac:e0:6b:17:57:1c:94:c3:cb: b6:eb:fa:0e:05:22:c5:ee:2d:a9:f8:a0:8c:71:e9: 77:a4:df:fe:10:9c:d1:4f:a7:b4:16:a6:6d:7e:6b: ff:ae:d6:44:a1:c7:25:2d:d2:25:73:84:6e:c5:44: c7:3f:e8:38:73:36:c0:73:f8:90:b3:59:9f:b9:44: c4:90:5c:e7:d1:70:f0:11:90:52:5d:31:99:ed:4b: 06:bb:e3:98:80:4a:59:46:81:74:3a:76:9b:ee:fb: d9:49:a3:ff:5e:2b:7c:f4:9c:87:f7:b4:ba:e6:bf: e0:31:6d:98:ef:3b:f3:38:fb:be:59:d8:1c:3e:24: de:55:96:56:54:f6:e9:9b:53:18:39:6d:1b:a9:95: f5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:50:DB:9C:20:47:87:D9:0C:A5:B3:DB:43:0A:79:60:FE:90:B9:CC X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fedb::/48 Signature Algorithm: sha256WithRSAEncryption 67:be:68:e7:c3:ba:d8:e6:66:36:77:5d:39:bd:b9:54:ac:11: d3:56:a2:9e:69:1e:1e:f3:14:77:1a:e2:ab:dc:7c:84:5e:20: cf:d2:37:64:a5:2b:a6:5e:dd:92:a5:7e:f5:f8:6a:02:45:96: 16:00:2e:2c:6b:cd:21:e0:8e:3b:41:95:bb:7e:5d:99:8d:f5: 41:dc:95:01:7a:ce:ca:c6:8b:f8:d9:02:6e:5a:87:c2:a6:64: eb:96:bf:94:e8:1b:e5:91:4b:b4:23:0c:41:95:0c:1f:15:54: 22:06:12:87:27:df:95:42:71:ab:9e:bf:95:1b:69:20:58:5a: c6:54:10:90:ea:b6:07:08:30:56:55:1f:2e:ce:3a:87:e7:56: 68:73:fb:06:f8:ed:88:56:e0:23:72:13:8c:75:b2:70:0a:71: c5:d5:1d:29:27:78:06:9f:50:18:8b:3b:7b:b0:a3:cd:6a:2f: a5:f7:f6:f9:e4:63:dc:2e:54:63:e0:8c:73:66:71:63:b0:f0: 9b:7e:75:2a:04:a2:c3:79:21:ea:93:62:d0:6e:69:9b:b3:3d: 4c:e5:68:54:1f:76:6e:66:09:eb:46:9d:2a:b9:70:3e:99:8a: 11:d6:39:82:99:2a:93:83:ce:ce:9c:23:07:e9:8d:f0:34:e2: b3:db:47:67 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNzA0MDcyODU1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGEzY2EzNi00NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqPem/4X/TVYjr77o6WVwVaDZD1TLSjnGFyL35i7T8xgUTSHLyVsL5ILQ8pW uWkSsrgU4A1p1ouwT2gz3LwuBrgIIaX2d1dGey5ZjAV88FBVNY2IJCtmLsFxE0IW 110KHPuQjJq65htJ1Bbyguus4GsXVxyUw8u26/oOBSLF7i2p+KCMcel3pN/+EJzR T6e0FqZtfmv/rtZEocclLdIlc4RuxUTHP+g4czbAc/iQs1mfuUTEkFzn0XDwEZBS XTGZ7UsGu+OYgEpZRoF0Onab7vvZSaP/Xit89JyH97S65r/gMW2Y7zvzOPu+Wdgc PiTeVZZWVPbpm1MYOW0bqZX13QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGNQ25wg R4fZDKWz20MKeWD+kLnMMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNkU1OUQ1RUUx QTNDMTFFRThBODQ2ODc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBghA/tswDQYJKoZIhvcNAQELBQADggEBAGe+aOfDutjm ZjZ3XTm9uVSsEdNWop5pHh7zFHca4qvcfIReIM/SN2SlK6Ze3ZKlfvX4agJFlhYA LixrzSHgjjtBlbt+XZmN9UHclQF6zsrGi/jZAm5ah8KmZOuWv5ToG+WRS7QjDEGV DB8VVCIGEocn35VCcauev5UbaSBYWsZUEJDqtgcIMFZVHy7OOofnVmhz+wb47YhW 4CNyE4x1snAKccXVHSkneAafUBiLO3uwo81qL6X39vnkY9wuVGPgjHNmcWOw8Jt+ dSoEosN5IeqTYtBuaZuzPUzlaFQfdm5mCetGnSq5cD6ZihHWOYKZKpODzs6cIwfp jfA04rPbR2c= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org