$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/89941464091011EFB4285910C4F9AE02.roa File: 89941464091011EFB4285910C4F9AE02.roa (raw, json) Hash identifier: S/MLxJi/3t6W59wA2hmEaCFDMovoPXGzkTtSK8w2P9M= Subject key identifier: 8E:D8:EB:66:A1:F0:C4:80:B6:39:3E:BE:85:3F:0E:77:CD:43:C0:02 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C19 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/89941464091011EFB4285910C4F9AE02.roa Signing time: Fri 03 May 2024 05:46:50 +0000 ROA not before: Fri 03 May 2024 05:46:50 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 212027 IP address blocks: 2406:840:e520::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3097 (0xc19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 3 05:46:50 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=66347a4a-5986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:fa:49:07:cc:89:56:d8:6e:8a:de:38:45: 8d:90:b8:92:69:26:83:15:a9:82:ff:43:02:7a:66: b9:e7:48:89:8c:93:e2:bf:49:bc:01:f9:e5:77:85: f0:95:90:6d:30:b6:25:85:59:20:91:dd:46:51:a8: 0f:b1:c6:44:79:df:08:ec:cb:f4:b3:f1:82:02:49: 01:d7:21:9e:70:22:e0:45:2a:ce:18:bc:60:f2:99: 3a:7a:fd:3c:65:91:c6:bb:71:26:53:d3:eb:f0:90: 53:cb:dd:46:41:a2:a9:61:a2:05:8f:d9:52:89:48: e1:c2:a8:ab:a5:7a:3e:c5:e8:b5:b6:5e:2c:c3:7b: e1:cc:f9:78:61:f3:40:a8:24:a5:d7:e7:14:08:c0: a2:2a:53:4c:57:d7:27:e1:7b:14:45:4d:7a:86:9e: b1:51:2b:cf:44:77:81:ef:cf:6f:2f:03:0a:9a:cd: 79:f7:ce:27:99:7f:24:13:6a:29:9e:9a:4c:62:0f: 26:1b:67:26:ca:e8:85:25:fd:83:56:5d:f3:c6:a5: ff:dd:60:68:88:79:c1:9d:12:9e:73:d9:e6:33:d3: 51:0e:98:ef:a5:d1:72:ab:99:d7:b1:9f:3a:f1:8c: 6a:8d:b1:ed:0f:80:64:f0:5a:2a:0a:8c:0b:13:0f: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D8:EB:66:A1:F0:C4:80:B6:39:3E:BE:85:3F:0E:77:CD:43:C0:02 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/89941464091011EFB4285910C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e520::/44 Signature Algorithm: sha256WithRSAEncryption 95:90:9c:5a:e7:e7:d3:47:b1:f9:8a:12:a0:ef:81:c4:4c:02: 01:73:cf:09:15:30:04:04:ef:85:8c:1f:01:02:27:10:0c:ad: 32:c8:8d:1f:3d:35:a4:68:a1:9d:4a:2e:74:77:ff:6f:6d:5b: 37:f9:66:ba:15:07:85:e2:f8:cc:dd:18:d5:ac:63:d8:44:98: 3f:09:c0:df:78:67:11:9c:0c:b2:6e:25:5f:71:b9:35:36:d2: 7c:e1:d2:76:50:30:57:f1:71:ef:02:e8:85:19:26:4d:ec:e4: 36:75:40:a9:dd:1e:60:5d:18:74:98:71:b7:40:34:d9:f6:aa: 23:f9:dd:f6:0f:bb:3b:a5:c4:f7:dc:c8:ec:26:cb:cd:94:2f: fb:98:30:2c:81:e7:63:0e:f2:25:6a:1a:02:5d:36:87:05:66: 5d:e2:93:a9:02:f5:5b:25:d3:d0:60:56:3f:13:cb:ec:3a:a8: 30:42:3f:19:a8:25:95:6c:bc:36:98:64:8b:8c:55:67:df:18: f2:89:68:97:de:fc:1d:b7:3b:ac:20:47:68:33:64:0a:85:71: 43:43:3c:44:eb:c3:0f:07:50:53:35:aa:0b:3e:1d:0c:a9:1d: 80:dc:c6:9f:2d:99:6c:8f:75:f2:b4:82:82:57:52:bd:85:99: 42:08:28:5e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTAzMDU0NjUwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0N2E0YS01OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2X6SQfMiVbYboreOEWNkLiSaSaDFamC/0MCema550iJjJPiv0m8Afnld4Xw lZBtMLYlhVkgkd1GUagPscZEed8I7Mv0s/GCAkkB1yGecCLgRSrOGLxg8pk6ev08 ZZHGu3EmU9Pr8JBTy91GQaKpYaIFj9lSiUjhwqirpXo+xei1tl4sw3vhzPl4YfNA qCSl1+cUCMCiKlNMV9cn4XsURU16hp6xUSvPRHeB789vLwMKms15984nmX8kE2op nppMYg8mG2cmyuiFJf2DVl3zxqX/3WBoiHnBnRKec9nmM9NRDpjvpdFyq5nXsZ86 8YxqjbHtD4Bk8FoqCowLEw9EMQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFI7Y62ah 8MSAtjk+voU/DnfNQ8ACMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvODk5NDE0NjQw OTEwMTFFRkI0Mjg1OTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA5SAwDQYJKoZIhvcNAQELBQADggEBAJWQnFrn59NH sfmKEqDvgcRMAgFzzwkVMAQE74WMHwECJxAMrTLIjR89NaRooZ1KLnR3/29tWzf5 ZroVB4Xi+MzdGNWsY9hEmD8JwN94ZxGcDLJuJV9xuTU20nzh0nZQMFfxce8C6IUZ Jk3s5DZ1QKndHmBdGHSYcbdANNn2qiP53fYPuzulxPfcyOwmy82UL/uYMCyB52MO 8iVqGgJdNocFZl3ik6kC9Vsl09BgVj8Ty+w6qDBCPxmoJZVsvDaYZIuMVWffGPKJ aJfe/B23O6wgR2gzZAqFcUNDPETrww8HUFM1qgs+HQypHYDcxp8tmWyPdfK0goJX Ur2FmUIIKF4= -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org