$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A8B8E216176111EFBE4BA10DC4F9AE02.roa File: A8B8E216176111EFBE4BA10DC4F9AE02.roa (raw, json) Hash identifier: v8k4CsZ0SKxsbeAw0d71ZhTwSzCyFY7Ql4+E9BKLSUU= Subject key identifier: 8D:0D:16:37:79:87:1E:EE:57:7F:C0:91:8D:F5:9A:50:84:D0:E6:83 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0CC4 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A8B8E216176111EFBE4BA10DC4F9AE02.roa Signing time: Fri 31 May 2024 12:51:33 +0000 ROA not before: Fri 31 May 2024 12:51:33 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 140572 IP address blocks: 2406:840:ee00::/44 maxlen: 48 2406:840:fe9f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3268 (0xcc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 31 12:51:33 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6659c7d5-4018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:0c:28:c0:ac:0c:e7:5d:89:61:67:42:bb: da:bf:e0:c0:d3:28:f6:99:4f:ba:be:a1:fe:8c:2c: 0d:62:3a:4c:3c:ab:3c:1a:c3:c6:88:46:18:4b:3f: 38:b8:2d:a2:e4:16:d2:1d:e0:91:8f:15:c8:da:d2: 4a:48:35:85:5c:c1:1a:6d:b1:33:c5:ef:63:d6:2b: 78:3d:ff:15:3b:04:e2:d0:c1:76:fa:1b:a1:02:5c: 16:0b:0c:f6:09:c3:e8:25:41:32:88:94:93:1c:9c: 0b:31:71:99:60:69:ad:cc:90:51:68:d5:35:2b:14: 02:ff:13:a5:ea:42:99:a6:e7:5c:51:cc:21:37:02: c0:5c:cc:9d:59:f7:9a:a2:ec:5c:5f:76:be:7f:c6: cb:b7:2c:78:b7:f8:50:28:3e:39:96:dd:1d:ad:f1: c6:34:e2:8c:b5:10:23:3a:1a:c6:11:bd:af:d0:1d: c1:c9:74:27:3a:ed:ff:8d:e2:bd:be:4d:3d:e6:27: 6e:77:2d:c6:bb:54:3b:80:82:9d:b7:aa:96:57:4c: 32:1f:0e:10:2d:34:9a:12:37:dc:49:56:5f:48:e7: 0c:cc:df:68:04:0d:22:f5:ac:12:7a:43:63:f4:cd: a6:7a:f8:c3:97:4b:e1:1f:12:28:56:4b:99:95:6e: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0D:16:37:79:87:1E:EE:57:7F:C0:91:8D:F5:9A:50:84:D0:E6:83 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A8B8E216176111EFBE4BA10DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:ee00::/44 2406:840:fe9f::/48 Signature Algorithm: sha256WithRSAEncryption 4e:33:ad:f9:5c:8c:d2:65:1a:4f:6e:cd:5c:e1:83:c3:71:b6: b7:bc:2a:86:7a:1b:a1:45:64:4c:61:dd:03:1a:e1:22:76:e7: 4a:2b:2b:e1:2c:77:27:23:c6:17:16:97:78:2a:4a:00:84:8e: c2:96:09:7f:46:eb:35:1e:57:3d:fb:d7:ad:55:63:69:2c:1b: 19:db:c7:5d:ac:eb:3a:e2:f9:38:f4:35:e1:b8:4e:9c:3d:08: e3:5c:b4:e3:a0:92:c5:fa:5d:9c:d1:ce:34:ac:1c:49:fe:3f: a6:47:28:90:de:60:17:34:b7:35:11:64:84:ad:30:02:7d:2b: c5:a3:1f:f1:87:26:0c:01:1f:0a:10:4b:34:77:5a:90:7e:eb: 7f:1d:05:f4:a0:65:46:3f:a2:73:43:0f:38:88:30:11:f3:f6: eb:16:46:fd:21:f9:84:ef:a7:b9:b4:64:a9:f2:8c:f1:ae:93: 47:c6:83:e0:62:62:72:fb:e8:2c:e7:ce:d0:69:34:ee:d8:b7: 60:8b:d2:8f:07:8f:1d:74:c9:6b:31:91:e8:b8:27:8f:64:bd: a5:03:c7:0b:54:73:9e:09:4e:a7:7b:94:39:e8:b3:7a:b3:44: ca:da:54:91:ae:fa:71:fc:b1:d1:f0:e9:31:e0:38:ed:b8:20: bf:2a:fa:68 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTMxMTI1MTMzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU5YzdkNS00MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDcMKMCsDOddiWFnQrvav+DA0yj2mU+6vqH+jCwNYjpMPKs8GsPGiEYYSz84 uC2i5BbSHeCRjxXI2tJKSDWFXMEabbEzxe9j1it4Pf8VOwTi0MF2+huhAlwWCwz2 CcPoJUEyiJSTHJwLMXGZYGmtzJBRaNU1KxQC/xOl6kKZpudcUcwhNwLAXMydWfea ouxcX3a+f8bLtyx4t/hQKD45lt0drfHGNOKMtRAjOhrGEb2v0B3ByXQnOu3/jeK9 vk095idudy3Gu1Q7gIKdt6qWV0wyHw4QLTSaEjfcSVZfSOcMzN9oBA0i9awSekNj 9M2mevjDl0vhHxIoVkuZlW7zNwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFI0NFjd5 hx7uV3/AkY31mlCE0OaDMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQThCOEUyMTYx NzYxMTFFRkJFNEJBMTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA7gADBwAkBghA/p8wDQYJKoZIhvcNAQELBQADggEB AE4zrflcjNJlGk9uzVzhg8Nxtre8KoZ6G6FFZExh3QMa4SJ250orK+EsdycjxhcW l3gqSgCEjsKWCX9G6zUeVz37161VY2ksGxnbx12s6zri+Tj0NeG4Tpw9CONctOOg ksX6XZzRzjSsHEn+P6ZHKJDeYBc0tzURZIStMAJ9K8WjH/GHJgwBHwoQSzR3WpB+ 638dBfSgZUY/onNDDziIMBHz9usWRv0h+YTvp7m0ZKnyjPGuk0fGg+BiYnL76Czn ztBpNO7Yt2CL0o8Hjx10yWsxkei4J49kvaUDxwtUc54JTqd7lDnos3qzRMraVJGu +nH8sdHw6THgOO24IL8q+mg= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org