$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7DE7E76AF80D11EBAE08AF82C4F9AE02.roa File: 7DE7E76AF80D11EBAE08AF82C4F9AE02.roa (raw, json) Hash identifier: aFws91LlfZUDW6NegzEUKdBVGJoOjcuYyjyNix3Z2Ec= Subject key identifier: 87:CA:C2:29:B5:B1:73:25:B4:31:74:97:59:73:C9:B0:B5:44:C0:AA Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A78 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7DE7E76AF80D11EBAE08AF82C4F9AE02.roa Signing time: Sun 14 May 2023 22:15:24 +0000 ROA not before: Sun 14 May 2023 22:15:24 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 211843 IP address blocks: 2406:840:e666::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2680 (0xa78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:15:24 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d7b-62f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:15:ee:be:f8:a1:6a:ff:96:88:7f:ba:5e: e3:8f:6f:bb:b2:95:1c:4b:b9:a0:57:ba:c3:51:c8: 2b:c5:47:0c:3b:97:94:b4:b3:fa:32:3f:46:d6:46: e3:3a:2a:95:28:ad:a3:6e:c8:51:74:ba:69:94:b4: dd:6e:cc:f0:8b:d4:d2:94:93:7b:c2:4e:0b:a6:d2: 4b:fe:2d:43:69:18:e9:7d:b6:09:94:09:80:68:4a: bf:c2:7e:19:ef:f5:d5:80:6d:d8:87:cb:7a:98:6b: ee:f3:0c:8a:2e:9e:01:30:57:71:fc:c8:36:87:6d: 2d:15:65:57:05:a2:a6:83:4a:01:3e:e0:59:78:9d: b3:22:65:af:1c:61:35:30:6b:b0:a2:60:c4:27:53: 62:a3:7a:ce:c9:96:49:82:90:9b:59:af:f4:78:17: 9c:37:13:55:72:1c:18:12:3e:54:99:a5:4e:40:76: 13:90:53:77:a8:2b:2e:e2:32:5a:12:24:f6:a2:d6: 6c:33:a6:1c:cd:75:f9:eb:9b:62:a6:aa:68:7d:a1: a2:b8:e6:0d:ff:bc:f0:c3:fb:98:fe:98:08:7c:dc: e3:e5:af:11:03:82:c1:a5:d7:2d:22:52:c9:57:51: 98:d6:8b:83:c8:4d:16:d5:14:db:f2:e0:8a:4b:97: 0f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CA:C2:29:B5:B1:73:25:B4:31:74:97:59:73:C9:B0:B5:44:C0:AA X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7DE7E76AF80D11EBAE08AF82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e666::/47 Signature Algorithm: sha256WithRSAEncryption 32:2e:2d:3b:3b:88:f9:a7:be:bb:ec:c0:d4:7c:2c:f6:e5:86: 76:2f:03:3a:03:62:b0:42:61:eb:39:ec:33:09:db:13:9b:30: 87:4d:78:5a:f1:7c:e0:56:03:95:c3:28:b3:1b:8f:37:6a:64: 48:f8:a3:20:77:f3:de:96:ec:07:98:80:ad:1c:93:d7:e8:1f: ec:71:3c:23:8e:64:42:a3:58:99:9b:ad:45:32:46:4c:f7:64: 9c:90:56:fe:0c:d7:ea:04:12:f3:8f:0d:4b:9c:9b:63:97:ad: fd:cd:7d:63:47:a2:c1:b7:b8:b7:56:27:55:7c:d6:e8:59:56: 30:c7:d6:0e:1a:02:4a:77:0a:50:23:ef:2e:3f:51:6d:1f:73: e0:c3:c3:49:b0:54:96:3d:c0:5c:f8:6f:8d:6a:89:b5:1f:6a: 3c:ff:3d:ed:c1:c2:d3:0c:e0:93:4c:4a:3e:22:2d:ec:d4:c1: 10:b7:ef:27:1a:ec:66:eb:df:f5:d6:b9:32:bb:35:f6:87:f7: 9a:62:e6:02:52:1e:63:ea:63:e5:42:1e:df:af:d0:d3:67:91: 28:f9:1d:53:eb:94:25:a5:13:79:c3:c3:b9:f4:79:8b:eb:e0: 37:81:5c:94:ae:82:b7:de:98:2b:32:00:18:ac:eb:21:73:17: ad:48:95:3b -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNTI0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQ3Yi02MmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGkV7r74oWr/loh/ul7jj2+7spUcS7mgV7rDUcgrxUcMO5eUtLP6Mj9G1kbj OiqVKK2jbshRdLpplLTdbszwi9TSlJN7wk4LptJL/i1DaRjpfbYJlAmAaEq/wn4Z 7/XVgG3Yh8t6mGvu8wyKLp4BMFdx/Mg2h20tFWVXBaKmg0oBPuBZeJ2zImWvHGE1 MGuwomDEJ1Nio3rOyZZJgpCbWa/0eBecNxNVchwYEj5UmaVOQHYTkFN3qCsu4jJa EiT2otZsM6YczXX565tipqpofaGiuOYN/7zww/uY/pgIfNzj5a8RA4LBpdctIlLJ V1GY1ouDyE0W1RTb8uCKS5cPZQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIfKwim1 sXMltDF0l1lzybC1RMCqMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvN0RFN0U3NkFG ODBEMTFFQkFFMDhBRjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkBghA5mYwDQYJKoZIhvcNAQELBQADggEBADIuLTs7iPmn vrvswNR8LPblhnYvAzoDYrBCYes57DMJ2xObMIdNeFrxfOBWA5XDKLMbjzdqZEj4 oyB3896W7AeYgK0ck9foH+xxPCOOZEKjWJmbrUUyRkz3ZJyQVv4M1+oEEvOPDUuc m2OXrf3NfWNHosG3uLdWJ1V81uhZVjDH1g4aAkp3ClAj7y4/UW0fc+DDw0mwVJY9 wFz4b41qibUfajz/Pe3BwtMM4JNMSj4iLezUwRC37yca7Gbr3/XWuTK7NfaH95pi 5gJSHmPqY+VCHt+v0NNnkSj5HVPrlCWlE3nDw7n0eYvr4DeBXJSugrfemCsyABis 6yFzF61IlTs= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org