$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8E5C64CA8F6A11EAB0A06E6BC4F9AE02.roa File: 8E5C64CA8F6A11EAB0A06E6BC4F9AE02.roa (raw, json) Hash identifier: aXLS6KJEc+vEAxUHx2+kQSj9PEcpE8RKN2T/HjoD7oQ= Subject key identifier: 61:BB:EA:A9:A2:C6:DD:8C:B3:EA:9B:0F:49:ED:75:A2:74:10:85:3D Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A74 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8E5C64CA8F6A11EAB0A06E6BC4F9AE02.roa Signing time: Sun 14 May 2023 22:15:20 +0000 ROA not before: Sun 14 May 2023 22:15:20 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 209294 IP address blocks: 2406:840:e840::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:15:20 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d78-0ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:64:ad:8d:3b:44:02:67:b6:b8:72:4e:c9: e6:f1:ec:3c:6a:c1:05:5d:b5:b2:43:09:89:06:15: 8c:ce:b7:78:12:a2:06:3d:a4:cb:41:a8:d6:bd:d9: 7b:76:71:f5:93:e3:67:c9:37:4f:78:bb:ce:9c:a8: c0:d8:03:90:32:65:f9:fa:fb:66:c7:ba:be:d5:35: f5:d0:ca:8a:a7:ea:3f:c3:de:4c:1b:5f:b5:bc:4c: a2:97:89:ff:23:14:cf:c6:22:04:8d:96:65:a6:db: de:7f:41:4c:33:28:eb:24:20:de:dc:bf:43:a3:eb: ae:7e:cb:dd:4c:e0:11:72:cb:f8:ba:12:26:f0:66: dc:01:89:9a:13:b5:17:39:5c:b6:2e:ad:7a:76:96: 5a:84:5f:37:05:88:b8:18:d4:bf:98:b7:b5:32:b9: 6f:70:ea:e5:53:5d:17:19:63:f3:b9:78:5f:55:be: c2:46:e9:04:ab:8b:a2:de:23:30:25:d5:ce:01:1e: 6c:20:b5:8b:6a:7c:8d:56:cd:65:99:74:22:83:7a: f9:b8:21:04:e4:c8:ce:99:3f:90:d9:1c:88:1c:5b: 71:89:7a:4a:aa:db:83:d7:d7:bc:9a:24:7c:42:b9: be:cf:b6:10:13:aa:85:74:be:87:20:77:ae:45:1a: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BB:EA:A9:A2:C6:DD:8C:B3:EA:9B:0F:49:ED:75:A2:74:10:85:3D X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/8E5C64CA8F6A11EAB0A06E6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e840::/44 Signature Algorithm: sha256WithRSAEncryption 8c:8f:d0:26:a1:ad:58:6b:dc:66:1c:cc:6f:42:8f:21:94:69: 42:6c:3d:10:8f:db:e3:7e:79:ab:9a:94:09:b6:2f:c6:b7:f6: a9:30:66:0a:89:3b:68:0b:31:3d:39:62:f7:b0:67:d3:5a:fd: d9:af:2f:64:bd:d0:23:87:24:55:68:5b:ae:27:9a:ba:91:90: cf:48:3e:cc:ba:4a:c7:87:67:d0:a9:09:1c:23:32:bf:f6:de: 51:d6:df:00:91:a5:f5:0e:2b:16:66:dd:b0:e6:3d:bf:96:3e: 10:ae:36:73:aa:61:f0:1c:60:93:ee:f3:7d:5f:10:27:44:27: 53:82:20:82:43:8c:51:54:7b:39:6c:81:ed:b6:34:57:29:58: 26:f8:56:d9:fb:94:af:fc:80:5d:f1:3c:44:11:00:20:0c:16: 82:ef:e4:98:ae:65:27:89:42:03:bf:8b:56:12:24:7a:8b:f4: e6:f9:94:61:bf:95:ee:78:9b:b7:a1:f3:75:72:31:9b:ee:bf: a1:71:fe:6f:12:74:21:4f:2c:4f:b8:fb:44:a8:38:e0:44:85: b3:4a:ce:18:6c:7b:e3:52:dd:13:dc:f5:a7:41:df:33:fb:ae: 73:fb:d3:f8:2c:d3:6b:59:dd:5f:a4:00:dc:d7:ca:74:35:47: 4e:a2:da:63 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNTIwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQ3OC0wZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwZkrY07RAJntrhyTsnm8ew8asEFXbWyQwmJBhWMzrd4EqIGPaTLQajWvdl7 dnH1k+NnyTdPeLvOnKjA2AOQMmX5+vtmx7q+1TX10MqKp+o/w95MG1+1vEyil4n/ IxTPxiIEjZZlptvef0FMMyjrJCDe3L9Do+uufsvdTOARcsv4uhIm8GbcAYmaE7UX OVy2Lq16dpZahF83BYi4GNS/mLe1MrlvcOrlU10XGWPzuXhfVb7CRukEq4ui3iMw JdXOAR5sILWLanyNVs1lmXQig3r5uCEE5MjOmT+Q2RyIHFtxiXpKqtuD19e8miR8 Qrm+z7YQE6qFdL6HIHeuRRqJRwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGG76qmi xt2Ms+qbD0ntdaJ0EIU9MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOEU1QzY0Q0E4 RjZBMTFFQUIwQTA2RTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA6EAwDQYJKoZIhvcNAQELBQADggEBAIyP0CahrVhr 3GYczG9CjyGUaUJsPRCP2+N+eaualAm2L8a39qkwZgqJO2gLMT05YvewZ9Na/dmv L2S90COHJFVoW64nmrqRkM9IPsy6SseHZ9CpCRwjMr/23lHW3wCRpfUOKxZm3bDm Pb+WPhCuNnOqYfAcYJPu831fECdEJ1OCIIJDjFFUezlsge22NFcpWCb4Vtn7lK/8 gF3xPEQRACAMFoLv5JiuZSeJQgO/i1YSJHqL9Ob5lGG/le54m7eh83VyMZvuv6Fx /m8SdCFPLE+4+0SoOOBEhbNKzhhse+NS3RPc9adB3zP7rnP70/gs02tZ3V+kANzX ynQ1R06i2mM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org