$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966C7BEC71DC11EFAC022E35C4F9AE02.roa File: 966C7BEC71DC11EFAC022E35C4F9AE02.roa (raw, json) Hash identifier: fTUvmmJUSdi3hruG2y4NYz/uLGWpBNq3/mEhomdi9PU= Subject key identifier: B4:86:B9:A9:38:1B:93:41:94:A4:7D:01:8B:B5:C2:0C:83:FB:78:9E Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0D69 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966C7BEC71DC11EFAC022E35C4F9AE02.roa Signing time: Fri 13 Sep 2024 14:29:30 +0000 ROA not before: Fri 13 Sep 2024 14:29:30 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 136725 IP address blocks: 2406:840:fc10::/44 maxlen: 48 2406:840:fea4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3433 (0xd69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Sep 13 14:29:30 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66e44c4a-cb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:72:69:74:0f:25:69:a0:43:22:8d:eb:ae: 0d:11:ca:d6:bf:32:70:53:54:1b:0f:78:f2:1d:bc: d6:45:13:01:96:63:f7:7f:d6:c2:25:c4:b1:bb:c6: e0:b2:d7:4d:03:e2:f4:1c:6e:34:82:e2:55:17:a8: a1:3f:05:f1:a8:69:75:85:b2:66:12:e1:50:b5:1d: 7a:2a:86:48:83:66:37:e7:f0:52:4f:7f:0b:64:45: 19:d5:53:a8:b3:86:2e:8c:f0:bd:5b:45:79:5c:96: e7:2a:61:c8:2d:02:32:fa:82:10:f3:cb:d6:1e:1e: cc:df:da:eb:3c:65:5a:21:ba:66:90:8f:b1:cf:e2: e5:04:6a:bd:d9:b5:2a:03:2c:98:74:91:c4:df:c8: 08:ef:65:71:98:7a:1e:a4:2d:d3:fb:7c:f4:ce:2a: 4d:f3:bf:eb:c6:45:b6:f4:dc:f6:fd:17:aa:26:61: e5:a3:64:8c:6f:19:01:f5:36:57:1a:a1:0a:34:83: 53:73:a2:16:11:67:8e:8f:51:14:3c:26:51:82:ba: 63:6f:f8:34:29:59:4b:cc:5a:9c:e6:99:11:0c:93: ab:cf:2b:db:e8:b8:95:52:76:ee:a8:6f:18:11:5a: ef:d5:1b:6d:ef:f4:05:12:c2:de:65:76:d0:a5:2b: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:86:B9:A9:38:1B:93:41:94:A4:7D:01:8B:B5:C2:0C:83:FB:78:9E X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966C7BEC71DC11EFAC022E35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fc10::/44 2406:840:fea4::/48 Signature Algorithm: sha256WithRSAEncryption 56:5a:72:77:38:ec:2d:73:e2:aa:c1:61:13:d0:15:fe:89:07: f0:3c:25:a3:38:aa:7e:29:bd:95:5f:d5:7f:d2:aa:e0:1d:a5: c6:fc:ca:85:8f:34:05:b4:0f:da:c0:6c:fa:a4:df:95:b9:14: cf:72:99:7c:89:14:8d:ec:a9:e3:49:ab:84:69:bc:1a:11:53: 53:b2:8a:a5:d3:95:4c:12:b1:88:1d:3b:31:b2:27:b7:7b:61: 6c:ad:11:42:d4:db:71:7b:8b:94:88:79:f5:98:af:3a:10:22: 1e:4f:f6:e6:8a:6e:0e:4a:1a:9f:36:37:50:9c:23:92:f5:1c: 4d:ad:c6:7f:9d:0d:77:01:71:43:c2:56:ab:26:97:59:8f:f9: 77:93:b2:5f:b7:40:5a:95:02:2b:96:43:0a:8b:1e:69:f3:ee: c0:26:33:9a:ef:1c:94:9c:34:86:c8:93:6c:5f:53:a4:cf:8a: 8c:7e:e2:31:91:d7:9c:d0:8c:df:d6:f6:06:42:6b:2d:26:db: c9:71:a7:99:e3:5c:0e:e4:71:cc:c9:4e:2c:4f:f6:4c:44:5b: 95:8b:1b:0d:85:11:04:c0:23:b2:e6:de:1a:0d:f8:a7:b0:88: 8a:be:bb:60:99:fd:dd:13:7c:15:60:dd:18:c2:2f:29:99:98: 16:25:89:7d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwOTEzMTQyOTMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU0NGM0YS1jYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAundyaXQPJWmgQyKN664NEcrWvzJwU1QbD3jyHbzWRRMBlmP3f9bCJcSxu8bg stdNA+L0HG40guJVF6ihPwXxqGl1hbJmEuFQtR16KoZIg2Y35/BST38LZEUZ1VOo s4YujPC9W0V5XJbnKmHILQIy+oIQ88vWHh7M39rrPGVaIbpmkI+xz+LlBGq92bUq AyyYdJHE38gI72VxmHoepC3T+3z0zipN87/rxkW29Nz2/ReqJmHlo2SMbxkB9TZX GqEKNINTc6IWEWeOj1EUPCZRgrpjb/g0KVlLzFqc5pkRDJOrzyvb6LiVUnbuqG8Y EVrv1Rtt7/QFEsLeZXbQpSvqdwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLSGuak4 G5NBlKR9AYu1wgyD+3ieMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTY2QzdCRUM3 MURDMTFFRkFDMDIyRTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA/BADBwAkBghA/qQwDQYJKoZIhvcNAQELBQADggEB AFZacnc47C1z4qrBYRPQFf6JB/A8JaM4qn4pvZVf1X/SquAdpcb8yoWPNAW0D9rA bPqk35W5FM9ymXyJFI3sqeNJq4RpvBoRU1OyiqXTlUwSsYgdOzGyJ7d7YWytEULU 23F7i5SIefWYrzoQIh5P9uaKbg5KGp82N1CcI5L1HE2txn+dDXcBcUPCVqsml1mP +XeTsl+3QFqVAiuWQwqLHmnz7sAmM5rvHJScNIbIk2xfU6TPiox+4jGR15zQjN/W 9gZCay0m28lxp5njXA7kcczJTixP9kxEW5WLGw2FEQTAI7Lm3hoN+KewiIq+u2CZ /d0TfBVg3RjCLymZmBYliX0= -----END CERTIFICATE-----Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org