$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/981F16B8AD3711ED87EC630DC4F9AE02.roa File: 981F16B8AD3711ED87EC630DC4F9AE02.roa (raw, json) Hash identifier: B2qoNtHjAlr5oK75Gmf7cK6SialgLV547+BSA4fgyWE= Subject key identifier: 8A:72:81:26:D5:8C:77:41:56:B4:78:6E:C8:C2:D6:B8:D3:79:9E:F1 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C6D Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/981F16B8AD3711ED87EC630DC4F9AE02.roa Signing time: Sun 26 May 2024 21:31:54 +0000 ROA not before: Sun 26 May 2024 21:31:54 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 142553 IP address blocks: 2406:840:eb00::/44 maxlen: 48 2406:840:fef3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:31:54 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa4a-fff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:02:70:bb:56:54:31:a8:ec:91:ba:18:d7: 45:03:8e:c3:c9:63:9c:96:ec:89:54:80:ef:5e:76: da:db:ac:dc:89:b8:a3:b2:b9:af:48:38:39:56:44: d5:a8:c5:eb:8f:91:55:32:d6:5c:01:65:16:52:39: 84:75:30:dc:9d:69:e9:56:37:70:12:d1:8e:fb:91: 19:bf:08:cf:ca:87:db:a1:ec:32:dc:36:70:05:2d: 41:9c:51:55:57:af:fd:3c:56:3a:5f:98:1c:ed:02: b3:f0:9a:dc:4c:6d:f5:47:64:67:40:cd:6c:d7:22: 11:16:11:ef:51:61:99:df:66:93:b6:35:24:eb:4b: 16:24:14:53:b3:3e:31:9d:ec:18:56:f2:f8:84:c2: f7:7d:37:d1:3a:9b:50:67:40:15:a2:38:89:76:1a: ce:d8:85:67:fe:fd:b6:3b:34:35:54:b2:f5:03:57: 10:d1:25:a4:a9:44:73:76:c2:17:e8:e1:10:fc:3c: 59:7e:69:18:ca:03:83:36:64:c7:d0:19:db:43:dd: 2e:ea:18:2a:7d:5e:6c:06:e5:a7:3e:9b:8c:e4:9c: 1a:b9:2e:42:16:fa:56:ce:fd:81:f9:7b:47:6b:20: 00:a6:a5:99:0c:32:18:fa:6d:09:74:f3:fb:72:2d: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:72:81:26:D5:8C:77:41:56:B4:78:6E:C8:C2:D6:B8:D3:79:9E:F1 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/981F16B8AD3711ED87EC630DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:eb00::/44 2406:840:fef3::/48 Signature Algorithm: sha256WithRSAEncryption 7c:a1:26:9c:f0:25:f7:96:ca:87:1e:59:03:dc:6d:63:0b:dd: 67:a0:31:ca:6f:0b:83:ca:dc:26:01:4f:29:6e:cb:41:ae:86: f5:4a:6a:58:ed:7a:c0:54:42:a0:1f:36:72:03:79:c4:8c:ec: 3a:08:ae:3d:d5:0d:ad:c3:14:91:f8:45:7f:58:d7:d9:92:f0: 26:71:8e:e2:c5:ed:1d:2b:80:7a:7f:8e:2c:b7:0a:4b:55:7c: 6e:df:b1:d4:40:7e:46:23:44:c2:7f:1a:f6:4e:ae:32:de:5d: 17:1b:c5:ea:c2:ae:dd:ef:ec:71:dd:bd:35:21:e4:43:f9:f9: f7:3d:e3:da:bd:c8:bf:75:e2:c7:01:48:6d:6a:da:7c:6a:e4: 6d:5e:3b:f7:61:f2:fc:f7:27:34:90:9b:d7:5d:80:fc:57:43: 08:8a:3d:1f:b8:62:6a:08:cd:96:41:ce:42:b0:ec:1a:36:ce: a2:52:41:63:61:b9:3d:33:60:26:fc:68:61:b4:3b:4c:de:99: 63:83:64:7f:d9:ba:99:fc:29:d9:90:6a:97:91:da:0b:a5:98: 2d:d1:22:70:d8:6b:05:34:7d:33:48:80:b6:61:3e:1f:3f:c5: 6e:07:78:78:ac:5f:cb:20:4f:16:d1:50:e1:64:89:96:3a:88: e9:18:b9:eb -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMTU0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWE0YS1mZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iECcLtWVDGo7JG6GNdFA47DyWOcluyJVIDvXnba26zcibijsrmvSDg5VkTV qMXrj5FVMtZcAWUWUjmEdTDcnWnpVjdwEtGO+5EZvwjPyofboewy3DZwBS1BnFFV V6/9PFY6X5gc7QKz8JrcTG31R2RnQM1s1yIRFhHvUWGZ32aTtjUk60sWJBRTsz4x newYVvL4hML3fTfROptQZ0AVojiJdhrO2IVn/v22OzQ1VLL1A1cQ0SWkqURzdsIX 6OEQ/DxZfmkYygODNmTH0BnbQ90u6hgqfV5sBuWnPpuM5JwauS5CFvpWzv2B+XtH ayAApqWZDDIY+m0JdPP7ci1FNQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIpygSbV jHdBVrR4bsjC1rjTeZ7xMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTgxRjE2QjhB RDM3MTFFRDg3RUM2MzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA6wADBwAkBghA/vMwDQYJKoZIhvcNAQELBQADggEB AHyhJpzwJfeWyoceWQPcbWML3WegMcpvC4PK3CYBTyluy0GuhvVKaljtesBUQqAf NnIDecSM7DoIrj3VDa3DFJH4RX9Y19mS8CZxjuLF7R0rgHp/jiy3CktVfG7fsdRA fkYjRMJ/GvZOrjLeXRcbxerCrt3v7HHdvTUh5EP5+fc949q9yL914scBSG1q2nxq 5G1eO/dh8vz3JzSQm9ddgPxXQwiKPR+4YmoIzZZBzkKw7Bo2zqJSQWNhuT0zYCb8 aGG0O0zemWODZH/Zupn8KdmQapeR2gulmC3RInDYawU0fTNIgLZhPh8/xW4HeHis X8sgTxbRUOFkiZY6iOkYues= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org