$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa File: 74C6D504AAED11EC87200C63C4F9AE02.roa (raw, json) Hash identifier: m3uVN2aHApddvDhwvy5DA028PkI9Ooy6+6FZj9qyQOk= Subject key identifier: 54:DE:53:AD:A4:28:C2:5D:B8:81:A4:F5:9C:73:ED:44:21:F5:4F:D2 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A76 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa Signing time: Sun 14 May 2023 22:15:22 +0000 ROA not before: Sun 14 May 2023 22:15:22 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 210041 IP address blocks: 2406:840:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2678 (0xa76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:15:22 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d7a-37aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:24:2e:dc:0e:7f:66:fa:c1:ed:51:ee:0d: 45:90:99:d8:4a:2f:8f:a9:e7:2a:bd:7f:ba:70:ac: df:ea:5a:9d:1e:5a:a4:c7:ce:d5:d4:33:43:cd:f5: fe:89:10:f0:2e:d7:80:9c:d0:51:6f:87:ee:f0:3b: 04:b1:23:8b:67:ab:ce:d2:7b:22:29:58:94:d1:79: 7a:30:43:0d:43:9b:3d:6e:9b:78:06:01:cc:27:61: df:22:98:42:7b:a9:16:22:da:fc:e0:58:e9:17:cd: ff:e4:38:05:d0:f2:5d:b9:a1:57:0a:05:91:1c:0c: 62:e5:39:ed:ed:49:67:db:2d:35:75:ae:87:7d:86: 16:c2:b5:e4:57:9d:c6:d3:e9:18:14:07:ad:ac:c3: ed:f2:f7:2f:91:e7:7c:d8:fd:9c:61:1c:df:d2:31: 16:a6:a0:0a:a6:ce:4d:c6:77:a9:47:18:d4:cb:04: 43:06:e0:71:3c:15:56:b8:da:77:7a:c2:ee:19:03: 80:3a:06:ff:a7:4e:a0:a1:db:2d:9d:b6:25:b4:f3: ef:0c:a9:1c:5b:95:f5:3c:6b:ba:6d:96:a3:8e:04: c3:c3:00:c9:a1:0a:7f:b0:0e:58:cc:45:ba:d5:bc: 65:b6:3a:78:06:be:f3:61:04:48:ee:60:48:c0:3d: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DE:53:AD:A4:28:C2:5D:B8:81:A4:F5:9C:73:ED:44:21:F5:4F:D2 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9000::/44 Signature Algorithm: sha256WithRSAEncryption a2:cb:24:13:b9:41:41:68:e9:50:72:6a:07:c5:7b:18:68:16: a8:f4:fb:af:2c:64:8d:76:60:53:0c:97:36:b6:13:9f:dd:f9: 46:a7:4c:04:96:97:a4:d7:31:64:23:56:b5:7b:ff:4a:a8:9c: a1:fe:a5:f4:fc:71:c7:b1:e4:b6:a9:de:b6:44:be:d3:69:b5: 65:71:24:18:68:24:b9:54:67:28:98:67:50:b9:90:45:7c:7a: 89:0f:7b:51:9b:95:d8:f4:77:ea:9a:84:d4:9b:bc:b2:f4:bd: 82:86:68:4e:fc:f5:ae:83:08:0c:90:e1:23:cb:5e:12:a6:4e: e4:c0:02:0e:58:1c:03:f2:09:27:fa:55:0f:62:db:21:a9:b1: f5:1f:11:be:04:b4:ff:0b:e8:23:2b:a8:2f:e9:e8:34:0c:07: 74:02:40:8a:8a:42:e5:c0:10:f0:a6:f4:6f:4d:3d:19:ce:ba: 61:72:1f:a5:51:00:02:ab:a1:13:b7:de:85:04:3e:52:88:01: 08:16:38:db:71:54:53:43:a3:1e:b6:a6:59:43:57:68:16:8f: 44:36:7c:f1:c7:5a:68:3f:5e:0a:c6:e2:46:69:4c:b8:bc:09: 05:14:ac:38:7b:9a:c9:a3:3e:f3:aa:3d:65:62:eb:b3:91:a8: 1f:78:28:2b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNTIyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQ3YS0zN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcYkLtwOf2b6we1R7g1FkJnYSi+PqecqvX+6cKzf6lqdHlqkx87V1DNDzfX+ iRDwLteAnNBRb4fu8DsEsSOLZ6vO0nsiKViU0Xl6MEMNQ5s9bpt4BgHMJ2HfIphC e6kWItr84FjpF83/5DgF0PJduaFXCgWRHAxi5Tnt7Uln2y01da6HfYYWwrXkV53G 0+kYFAetrMPt8vcvked82P2cYRzf0jEWpqAKps5NxnepRxjUywRDBuBxPBVWuNp3 esLuGQOAOgb/p06godstnbYltPPvDKkcW5X1PGu6bZajjgTDwwDJoQp/sA5YzEW6 1bxltjp4Br7zYQRI7mBIwD2v5QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFTeU62k KMJduIGk9Zxz7UQh9U/SMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNzRDNkQ1MDRB QUVEMTFFQzg3MjAwQzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghAkAAwDQYJKoZIhvcNAQELBQADggEBAKLLJBO5QUFo 6VByagfFexhoFqj0+68sZI12YFMMlza2E5/d+UanTASWl6TXMWQjVrV7/0qonKH+ pfT8ccex5Lap3rZEvtNptWVxJBhoJLlUZyiYZ1C5kEV8eokPe1Gbldj0d+qahNSb vLL0vYKGaE789a6DCAyQ4SPLXhKmTuTAAg5YHAPyCSf6VQ9i2yGpsfUfEb4EtP8L 6CMrqC/p6DQMB3QCQIqKQuXAEPCm9G9NPRnOumFyH6VRAAKroRO33oUEPlKIAQgW ONtxVFNDox62pllDV2gWj0Q2fPHHWmg/XgrG4kZpTLi8CQUUrDh7msmjPvOqPWVi 67ORqB94KCs= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org