$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/70235D8E8DC611EE89EDB22DC4F9AE02.roa File: 70235D8E8DC611EE89EDB22DC4F9AE02.roa (raw, json) Hash identifier: 4Rqjz51qTbvb9x6Nll+Y85xXOGxKLAEhnU5EUEYZ8z8= Subject key identifier: B4:0D:F9:6A:11:78:0C:39:AF:17:E3:F1:C0:44:49:86:2E:82:94:24 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0B7A Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/70235D8E8DC611EE89EDB22DC4F9AE02.roa Signing time: Tue 28 Nov 2023 08:16:32 +0000 ROA not before: Tue 28 Nov 2023 08:16:32 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 152134 IP address blocks: 2406:840:fec3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Nov 28 08:16:32 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6565a1e0-5baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:fe:09:e8:d1:44:8e:0c:37:0b:5f:ec:59: ab:72:c7:e5:2a:1f:d3:ad:5d:e5:73:98:9f:fa:53: ca:7c:51:31:f8:d5:41:78:c7:e4:90:f2:65:d3:89: 63:0d:84:6e:12:59:18:01:d2:3d:ad:99:21:ee:eb: 54:c5:89:16:38:d6:3f:d8:fc:5e:3d:0b:73:61:69: f4:6a:96:05:04:ab:c1:2f:7d:f5:28:4d:1d:5f:84: 59:e4:cd:d0:a4:8c:7e:78:18:fb:25:1e:61:74:57: 91:94:f3:89:db:76:91:ea:32:9b:3d:94:bd:4d:b2: fd:a2:2d:26:68:09:70:08:b1:7a:d8:2d:9e:53:f5: 50:9d:89:43:5d:96:a1:1a:12:1f:d6:04:ac:aa:77: 4e:38:d7:49:6e:9f:be:77:03:cd:82:5e:51:db:2e: c1:a6:ea:75:55:0e:4d:5a:12:b0:45:84:07:41:30: 4c:c1:86:52:57:4f:6e:78:e3:72:1a:02:5a:a5:8b: 7e:f0:cc:33:d9:86:f0:bc:75:d2:48:c7:25:90:9e: 77:15:a2:0a:90:45:2b:d7:de:51:69:46:f0:79:4d: ff:65:5d:bd:29:b4:0d:3d:fc:57:ca:f4:8b:23:fc: d2:95:48:a2:3e:82:5d:d4:80:85:e3:91:87:d8:29: 14:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0D:F9:6A:11:78:0C:39:AF:17:E3:F1:C0:44:49:86:2E:82:94:24 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/70235D8E8DC611EE89EDB22DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fec3::/48 Signature Algorithm: sha256WithRSAEncryption 87:78:b9:b0:68:1d:e3:fd:4f:c3:4d:a9:0f:ff:f1:47:a2:63: 92:aa:3d:04:4e:44:75:0a:90:e4:a6:fb:21:81:b5:37:dd:97: 34:e7:94:bf:50:0b:12:80:12:25:b9:1f:34:49:9a:e4:57:71: 87:99:ec:31:c9:35:1e:e9:06:2c:75:69:86:23:26:a1:34:05: 39:aa:b1:9c:fc:7b:ec:34:5b:f2:61:9a:eb:d7:91:e7:c3:76: ff:fb:1b:6a:92:aa:2c:f2:f2:52:28:8c:55:7f:8e:be:6c:d7: 4b:14:3e:0e:67:7a:d3:32:bf:2a:67:f7:83:59:9d:08:7c:16: 24:e2:21:97:b6:64:5b:0c:8e:0d:6a:d0:20:95:ff:35:25:de: 68:fc:e1:b6:fd:41:a0:50:c1:79:e5:12:94:a3:d4:bb:c1:88: 53:ea:07:c0:4d:2b:5c:13:b9:9a:a6:d9:9a:80:9b:4e:fe:9f: bd:26:87:10:b6:3c:d6:b5:a6:32:30:e9:4d:ff:4f:5f:6b:5a: f8:dc:8d:33:49:32:c7:10:b5:0a:49:88:70:9f:3c:51:21:99: fe:80:7f:95:7d:e3:eb:a0:47:22:19:d5:3d:21:1d:89:53:6a: be:c0:ea:df:cf:c0:be:3f:0f:84:9f:c2:4c:12:75:50:60:bb: 16:63:b8:d2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMxMTI4MDgxNjMyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY1YTFlMC01YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU7+CejRRI4MNwtf7FmrcsflKh/TrV3lc5if+lPKfFEx+NVBeMfkkPJl04lj DYRuElkYAdI9rZkh7utUxYkWONY/2PxePQtzYWn0apYFBKvBL331KE0dX4RZ5M3Q pIx+eBj7JR5hdFeRlPOJ23aR6jKbPZS9TbL9oi0maAlwCLF62C2eU/VQnYlDXZah GhIf1gSsqndOONdJbp++dwPNgl5R2y7Bpup1VQ5NWhKwRYQHQTBMwYZSV09ueONy GgJapYt+8Mwz2YbwvHXSSMclkJ53FaIKkEUr195RaUbweU3/ZV29KbQNPfxXyvSL I/zSlUiiPoJd1ICF45GH2CkUZwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLQN+WoR eAw5rxfj8cBESYYugpQkMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNzAyMzVEOEU4 REM2MTFFRTg5RURCMjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBghA/sMwDQYJKoZIhvcNAQELBQADggEBAId4ubBoHeP9 T8NNqQ//8UeiY5KqPQRORHUKkOSm+yGBtTfdlzTnlL9QCxKAEiW5HzRJmuRXcYeZ 7DHJNR7pBix1aYYjJqE0BTmqsZz8e+w0W/JhmuvXkefDdv/7G2qSqizy8lIojFV/ jr5s10sUPg5netMyvypn94NZnQh8FiTiIZe2ZFsMjg1q0CCV/zUl3mj84bb9QaBQ wXnlEpSj1LvBiFPqB8BNK1wTuZqm2ZqAm07+n70mhxC2PNa1pjIw6U3/T19rWvjc jTNJMscQtQpJiHCfPFEhmf6Af5V94+ugRyIZ1T0hHYlTar7A6t/PwL4/D4SfwkwS dVBguxZjuNI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org