$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa File: 74C6D504AAED11EC87200C63C4F9AE02.roa (raw, json) Hash identifier: w1vPKWtxQcUbPpGWYBU4b2LyBVNcD/PkLrGoDfxuiXk= Subject key identifier: 4A:51:F2:48:BD:64:4A:58:E6:EB:2C:8E:34:94:59:20:42:B1:D5:C7 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0CA4 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa Signing time: Sun 26 May 2024 21:32:46 +0000 ROA not before: Sun 26 May 2024 21:32:46 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 210041 IP address blocks: 2406:840:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:32:46 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa7e-de9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:43:4c:7d:4c:2b:40:ad:b4:61:6c:46:95: 2f:be:7a:83:25:ea:8e:d3:ba:2d:0d:fc:7f:7a:bb: 8d:22:7f:32:e6:f2:36:64:5c:7d:7b:3d:71:8b:01: 3c:7f:03:c7:8f:56:9a:8e:9f:73:cb:3c:e2:51:5a: 75:f6:0b:fc:17:11:7e:77:1b:83:73:2a:9a:84:7c: 67:e0:c1:e0:17:ed:e4:a0:d8:91:e3:91:98:5b:15: dc:78:5e:44:cc:27:0e:49:33:74:4d:51:cf:3a:0d: d0:20:3c:9b:dd:96:e5:e2:72:fd:24:47:e2:2e:16: fd:4c:fc:0f:29:45:76:6f:b4:8a:ce:fa:1a:d6:44: d4:2a:90:eb:90:3c:f9:cd:a0:ba:0a:75:fe:15:cb: 2d:3e:7f:33:45:ba:d2:80:9d:ef:4d:71:4d:f3:b7: 05:e1:c8:0e:61:62:6f:88:0e:d7:19:ab:df:3a:a6: 65:07:82:f1:20:a6:2f:ba:3d:ba:2b:ed:8c:c8:58: dc:f0:50:d1:41:f6:88:44:7d:6f:ce:3f:2a:45:42: 43:20:d3:b7:12:96:bc:15:a1:92:01:18:b3:63:c1: e5:c0:5b:7b:bb:28:3d:02:52:b2:4c:0c:d8:06:c9: 90:c3:2f:10:86:5a:f4:fd:ed:52:54:0e:a7:14:23: 34:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:51:F2:48:BD:64:4A:58:E6:EB:2C:8E:34:94:59:20:42:B1:D5:C7 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9000::/44 Signature Algorithm: sha256WithRSAEncryption 7c:87:d5:cf:ea:c7:d4:bf:21:b7:8e:f4:84:7b:92:e7:ed:a5: 14:c1:0b:63:26:3f:bf:8d:e6:fe:19:8a:a4:f4:18:3b:10:d9: 02:06:a5:6a:27:57:58:29:a2:85:89:3e:b9:42:13:c7:4b:df: 82:36:13:66:0f:48:23:43:87:eb:43:66:dd:0e:41:09:3a:6b: 8c:ff:e8:bb:0c:e8:4c:31:85:fb:62:d4:3b:92:77:55:64:5a: 74:9f:40:0d:dd:e3:c7:ff:fb:3b:08:67:f1:fb:b6:7a:2b:be: 44:16:af:ca:c9:b0:ee:a2:2b:49:6e:db:e6:68:65:8e:6e:ab: 9a:bb:cd:33:54:1a:9b:1f:3f:c5:32:bf:72:ad:63:3b:53:e0: b0:ac:16:37:c5:7d:97:70:84:25:06:5f:4a:22:ed:8e:f5:d4: b8:5d:92:ff:b0:d5:72:a7:3c:d7:d6:15:40:f0:46:67:e6:e0: bb:56:55:19:a9:4b:21:29:7d:23:72:2a:77:0b:a6:7c:a7:2b: 6c:0e:c7:fa:7b:80:8b:cd:0d:23:12:24:00:74:30:f1:d0:04: 68:2b:07:14:2b:10:84:c7:6a:73:e4:7e:fc:83:13:e5:63:e9: 27:08:ba:c2:de:66:a8:24:7b:e2:b3:6c:13:1c:28:83:eb:24: 96:d1:ab:2f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMjQ2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWE3ZS1kZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXRDTH1MK0CttGFsRpUvvnqDJeqO07otDfx/eruNIn8y5vI2ZFx9ez1xiwE8 fwPHj1aajp9zyzziUVp19gv8FxF+dxuDcyqahHxn4MHgF+3koNiR45GYWxXceF5E zCcOSTN0TVHPOg3QIDyb3Zbl4nL9JEfiLhb9TPwPKUV2b7SKzvoa1kTUKpDrkDz5 zaC6CnX+FcstPn8zRbrSgJ3vTXFN87cF4cgOYWJviA7XGavfOqZlB4LxIKYvuj26 K+2MyFjc8FDRQfaIRH1vzj8qRUJDINO3Epa8FaGSARizY8HlwFt7uyg9AlKyTAzY BsmQwy8Qhlr0/e1SVA6nFCM0SwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEpR8ki9 ZEpY5ussjjSUWSBCsdXHMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNzRDNkQ1MDRB QUVEMTFFQzg3MjAwQzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghAkAAwDQYJKoZIhvcNAQELBQADggEBAHyH1c/qx9S/ IbeO9IR7kuftpRTBC2MmP7+N5v4ZiqT0GDsQ2QIGpWonV1gpooWJPrlCE8dL34I2 E2YPSCNDh+tDZt0OQQk6a4z/6LsM6Ewxhfti1DuSd1VkWnSfQA3d48f/+zsIZ/H7 tnorvkQWr8rJsO6iK0lu2+ZoZY5uq5q7zTNUGpsfP8Uyv3KtYztT4LCsFjfFfZdw hCUGX0oi7Y711Lhdkv+w1XKnPNfWFUDwRmfm4LtWVRmpSyEpfSNyKncLpnynK2wO x/p7gIvNDSMSJAB0MPHQBGgrBxQrEITHanPkfvyDE+Vj6ScIusLeZqgke+KzbBMc KIPrJJbRqy8= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org