$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/82ECD570A52311EE9E3A6A6DC4F9AE02.roa File: 82ECD570A52311EE9E3A6A6DC4F9AE02.roa (raw, json) Hash identifier: kQlo4TZudL/+3cVdukaI2Xt0SfMZfPOcB6vLAPmqmPY= Subject key identifier: DB:72:4C:CA:B0:0A:1B:A1:8C:7E:2C:E7:9D:B6:19:4F:BC:5F:03:50 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C48 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/82ECD570A52311EE9E3A6A6DC4F9AE02.roa Signing time: Sun 26 May 2024 21:31:20 +0000 ROA not before: Sun 26 May 2024 21:31:20 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 131075 IP address blocks: 2406:840:fdff::/48 maxlen: 48 2406:840:fec7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:31:20 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa28-3668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:6c:e0:87:d9:f1:a9:ba:25:42:cc:2f:67: bb:7c:aa:c5:57:e3:f1:6e:6d:49:dd:5b:cb:f0:5c: d7:cd:67:9b:39:6b:d9:51:1e:49:44:0d:0a:a2:1b: 45:44:06:31:e6:56:96:a5:5e:08:0b:6b:1d:27:04: 39:95:8a:02:db:27:e6:d3:7a:ed:06:17:40:3f:ee: eb:af:ff:7f:c1:e5:a1:a3:fd:ca:e8:eb:76:49:85: a7:07:a0:01:1c:49:61:02:7d:c7:0f:76:3c:be:6b: 05:20:fd:15:33:10:16:76:df:ac:f3:8a:8c:bb:83: 83:08:7d:28:4d:f5:68:89:9d:84:7e:49:e9:24:ca: 44:67:57:86:75:35:fc:ab:ea:aa:27:2a:fe:ce:11: f5:37:bf:64:eb:be:52:35:aa:ea:6b:14:e3:e8:0e: c0:0c:3d:6d:d0:6b:ee:ae:06:e7:42:bd:61:d2:9e: a1:a3:5e:eb:6c:a1:ae:6d:06:da:33:dd:44:82:22: e2:64:61:dd:f3:a3:bf:39:55:ac:c8:58:2c:eb:18: e8:bb:ac:10:6c:db:e8:02:e9:df:96:ad:f9:eb:24: ee:4d:b9:27:ca:0e:57:4f:38:d7:b9:15:12:eb:37: 46:99:d9:c8:8f:b0:70:45:3a:e8:30:a8:3d:cf:e8: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:72:4C:CA:B0:0A:1B:A1:8C:7E:2C:E7:9D:B6:19:4F:BC:5F:03:50 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/82ECD570A52311EE9E3A6A6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fdff::/48 2406:840:fec7::/48 Signature Algorithm: sha256WithRSAEncryption 74:2e:12:0f:7e:36:07:18:e5:96:e1:98:0b:4c:fa:2a:7d:6e: 6d:69:0b:d4:f5:4f:87:1c:f4:da:8d:d4:38:89:15:5e:c4:25: 2f:a1:7e:27:ce:8c:09:2c:31:4a:70:72:b2:06:1d:d0:da:ca: 1d:74:9a:0e:e2:17:9c:86:51:fa:3b:a5:59:1c:74:d6:98:f1: a6:fe:38:ae:ce:40:13:b6:77:30:38:8e:83:18:1d:53:7e:67: 5a:8b:58:de:62:3e:5e:e8:23:45:b9:1c:85:93:df:ec:1d:d9: 6f:d1:5c:3a:f5:17:6f:cf:28:70:9d:97:c3:33:6b:36:f1:36: 76:bc:72:7f:5a:7b:74:ca:6c:50:33:03:aa:b7:50:59:35:08: 17:f9:22:4b:a2:15:07:77:5e:c9:a3:c7:70:b9:5f:77:b7:0c: 4b:44:0f:50:9d:28:9f:49:01:2e:8e:b0:bd:6a:4c:ca:42:e8: bb:e9:54:2c:fe:6f:ed:da:79:13:14:21:06:92:a7:02:71:c3: d8:51:5e:76:0f:ea:b9:ce:52:e7:9c:57:d1:0d:6b:38:7d:fa: e5:e1:fc:02:f3:6a:2b:17:5b:db:6e:0f:86:c3:21:aa:a9:9d: 02:bc:a4:56:3b:d9:0b:db:b8:eb:21:24:ac:6b:bc:0c:cb:45: ee:96:dd:1e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMTIwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWEyOC0zNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszFs4IfZ8am6JULML2e7fKrFV+Pxbm1J3VvL8FzXzWebOWvZUR5JRA0KohtF RAYx5laWpV4IC2sdJwQ5lYoC2yfm03rtBhdAP+7rr/9/weWho/3K6Ot2SYWnB6AB HElhAn3HD3Y8vmsFIP0VMxAWdt+s84qMu4ODCH0oTfVoiZ2EfknpJMpEZ1eGdTX8 q+qqJyr+zhH1N79k675SNarqaxTj6A7ADD1t0GvurgbnQr1h0p6ho17rbKGubQba M91EgiLiZGHd86O/OVWsyFgs6xjou6wQbNvoAunflq356yTuTbknyg5XTzjXuRUS 6zdGmdnIj7BwRTroMKg9z+hIbQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNtyTMqw ChuhjH4s5522GU+8XwNQMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvODJFQ0Q1NzBB NTIzMTFFRTlFM0E2QTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBghA/f8DBwAkBghA/scwDQYJKoZIhvcNAQELBQADggEB AHQuEg9+NgcY5ZbhmAtM+ip9bm1pC9T1T4cc9NqN1DiJFV7EJS+hfifOjAksMUpw crIGHdDayh10mg7iF5yGUfo7pVkcdNaY8ab+OK7OQBO2dzA4joMYHVN+Z1qLWN5i Pl7oI0W5HIWT3+wd2W/RXDr1F2/PKHCdl8MzazbxNna8cn9ae3TKbFAzA6q3UFk1 CBf5IkuiFQd3Xsmjx3C5X3e3DEtED1CdKJ9JAS6OsL1qTMpC6LvpVCz+b+3aeRMU IQaSpwJxw9hRXnYP6rnOUuecV9ENazh9+uXh/ALzaisXW9tuD4bDIaqpnQK8pFY7 2QvbuOshJKxrvAzLRe6W3R4= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org