$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7562D2DA0FFD11EE86648956C4F9AE02.roa File: 7562D2DA0FFD11EE86648956C4F9AE02.roa (raw, json) Hash identifier: 0ffKODXvSh1dc6dYOsK1eO8rzZ5wEC3mNYcYqC/ofmA= Subject key identifier: BD:FC:35:6A:31:35:EC:69:5B:01:F0:E2:77:27:78:A8:73:02:6A:31 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0AAF Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7562D2DA0FFD11EE86648956C4F9AE02.roa Signing time: Wed 21 Jun 2023 06:32:57 +0000 ROA not before: Wed 21 Jun 2023 06:32:57 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 151416 IP address blocks: 2406:840:fe80::/48 maxlen: 48 2406:840:fed9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2735 (0xaaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Jun 21 06:32:57 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64929998-a283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:30:5d:5a:f0:39:85:e9:02:0d:3d:b1:d9: 5d:d9:ff:4e:46:75:83:79:b9:6b:b3:60:e7:a2:68: 28:b0:5e:e0:4a:23:19:b7:3c:25:fe:e1:75:d5:8b: 35:71:93:76:e8:84:fe:bd:fc:81:ca:47:69:04:10: d0:d0:8f:10:46:4a:b8:f7:3a:ea:30:2d:1e:8f:2c: 4e:05:64:2a:63:6e:db:98:03:2e:31:3c:98:3c:f3: 43:8a:f8:85:b3:8a:01:98:52:ec:f5:84:b5:44:47: 2a:72:48:44:bf:71:0b:ca:5c:f7:10:49:14:6b:93: 06:87:34:08:9e:75:2a:c4:6b:7f:23:4b:1b:b8:47: 85:bd:c2:f1:8f:4f:cc:23:41:5a:32:3b:66:90:58: da:c1:ea:5a:62:f8:4c:67:b0:82:a9:9e:ef:d0:5a: ed:fd:5a:ef:f5:9e:2b:7f:8e:3e:0b:03:de:97:63: 2c:3d:6f:ac:b5:d2:64:c4:de:2b:20:bc:fe:10:6d: 54:ae:5e:3d:c3:db:3d:e6:cb:77:60:db:31:42:cf: 2a:01:19:f0:52:5d:a7:41:36:c9:b5:d2:9b:53:bc: 10:11:4f:f6:d8:e5:cb:87:85:9d:af:ef:f3:2b:a9: 9b:e9:a6:46:e7:12:8a:fa:4f:90:a3:55:f5:81:7e: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FC:35:6A:31:35:EC:69:5B:01:F0:E2:77:27:78:A8:73:02:6A:31 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7562D2DA0FFD11EE86648956C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fe80::/48 2406:840:fed9::/48 Signature Algorithm: sha256WithRSAEncryption a2:5b:6d:eb:10:1d:67:5c:14:88:60:8a:e3:fa:68:16:d2:af: 66:87:5d:96:5f:35:fa:b0:fe:88:fd:3b:74:4c:51:db:7c:d6: 1b:26:ee:53:fc:e0:4f:79:d8:63:91:26:23:03:15:06:ab:5d: 87:0d:5a:ff:91:72:10:80:0b:37:fe:cf:ff:12:f3:8d:45:6f: 38:d8:bf:e3:be:92:13:2a:de:00:8c:7c:f5:10:79:1e:57:a5: 06:86:05:d2:6f:27:d0:b5:cd:60:7c:be:bc:90:c6:1e:ce:31: 95:8c:99:f9:73:b3:d3:ef:d1:9a:0e:26:85:12:0b:f2:f3:83: 9a:4a:a3:37:b4:bd:94:62:4a:92:c3:a9:e6:5a:f9:d8:f7:6b: ea:26:41:88:38:de:fd:5f:70:f9:f8:57:5a:86:d5:8e:7e:d6: dc:7e:dc:69:7b:df:f7:fb:5c:00:27:e9:de:3e:e5:1b:1f:9c: c8:66:a7:b7:b1:65:e6:ca:1d:5a:4a:09:56:07:33:b1:d0:77: 1d:f5:0e:c8:df:5a:7d:14:2c:02:28:26:a6:79:2c:41:71:89: 87:5f:59:63:fe:79:0a:0c:e6:1e:02:36:ed:32:ff:7e:9c:c9: fc:72:10:4e:a0:a6:4c:a4:af:66:77:2c:15:97:04:80:81:f6: 51:c3:ca:af -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNjIxMDYzMjU3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkyOTk5OC1hMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAswXVrwOYXpAg09sdld2f9ORnWDeblrs2DnomgosF7gSiMZtzwl/uF11Ys1 cZN26IT+vfyBykdpBBDQ0I8QRkq49zrqMC0ejyxOBWQqY27bmAMuMTyYPPNDiviF s4oBmFLs9YS1REcqckhEv3ELylz3EEkUa5MGhzQInnUqxGt/I0sbuEeFvcLxj0/M I0FaMjtmkFjawepaYvhMZ7CCqZ7v0Frt/Vrv9Z4rf44+CwPel2MsPW+stdJkxN4r ILz+EG1Url49w9s95st3YNsxQs8qARnwUl2nQTbJtdKbU7wQEU/22OXLh4Wdr+/z K6mb6aZG5xKK+k+Qo1X1gX5lfQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFL38NWox NexpWwHw4ncneKhzAmoxMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNzU2MkQyREEw RkZEMTFFRTg2NjQ4OTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBghA/oADBwAkBghA/tkwDQYJKoZIhvcNAQELBQADggEB AKJbbesQHWdcFIhgiuP6aBbSr2aHXZZfNfqw/oj9O3RMUdt81hsm7lP84E952GOR JiMDFQarXYcNWv+RchCACzf+z/8S841FbzjYv+O+khMq3gCMfPUQeR5XpQaGBdJv J9C1zWB8vryQxh7OMZWMmflzs9Pv0ZoOJoUSC/Lzg5pKoze0vZRiSpLDqeZa+dj3 a+omQYg43v1fcPn4V1qG1Y5+1tx+3Gl73/f7XAAn6d4+5RsfnMhmp7exZebKHVpK CVYHM7HQdx31DsjfWn0ULAIoJqZ5LEFxiYdfWWP+eQoM5h4CNu0y/36cyfxyEE6g pkykr2Z3LBWXBICB9lHDyq8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org