$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AF6E03DA57C611EEB082153EC4F9AE02.roa File: AF6E03DA57C611EEB082153EC4F9AE02.roa (raw, json) Hash identifier: X8NQJW4Y6MlQlnduJhq9kuHP99ALa7zENe1hhC5/FCU= Subject key identifier: D6:95:52:83:7F:13:1E:96:C3:6F:32:33:97:93:BA:81:7D:99:DA:FD Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0B2A Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AF6E03DA57C611EEB082153EC4F9AE02.roa Signing time: Wed 20 Sep 2023 15:02:15 +0000 ROA not before: Wed 20 Sep 2023 15:02:15 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 208698 IP address blocks: 2406:840:eee0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2858 (0xb2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Sep 20 15:02:15 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=650b0977-57ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:28:cb:28:af:d4:b7:4a:a2:fe:39:1a:c7: db:b8:5c:cf:11:95:95:5f:46:a2:df:13:d0:c3:a2: 83:63:68:88:11:34:96:72:d4:a0:15:2b:b2:d8:56: 64:ad:b6:12:64:51:c4:48:f7:f4:e4:4e:2d:de:d7: 70:95:42:e6:fa:40:e6:5e:01:52:c0:7d:17:c2:7e: 4b:47:e7:cf:a6:11:27:0c:d0:dd:ad:66:25:06:65: bd:ff:11:c1:d1:c4:71:d8:52:bb:e3:4b:d6:49:19: 33:d2:43:2b:9e:d8:c3:61:82:41:81:dc:25:6c:63: 87:08:31:86:2a:06:bf:2c:8f:36:6f:1e:5d:01:c5: db:d6:65:ad:b8:e4:67:5f:62:bb:b3:6b:89:a5:30: 79:49:ae:c0:7c:cb:14:33:82:ad:68:4f:0a:78:34: ab:77:2e:73:61:79:1f:06:a0:8d:e2:80:c8:ed:c5: ab:27:9d:62:7d:f8:57:4c:5f:67:33:f4:fb:f0:3d: 03:1d:2a:95:86:7f:69:bc:d6:f2:c7:24:22:e4:6b: fa:aa:d0:f1:74:dd:0d:58:f2:7b:10:d9:88:a4:34: 7c:5e:a3:03:76:77:35:43:5e:8c:20:13:0c:32:6c: 2d:b6:14:87:d7:ef:c2:c3:cd:8a:4f:d7:27:ce:ed: 87:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:95:52:83:7F:13:1E:96:C3:6F:32:33:97:93:BA:81:7D:99:DA:FD X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AF6E03DA57C611EEB082153EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:eee0::/44 Signature Algorithm: sha256WithRSAEncryption a7:96:06:5d:ee:f2:c6:4d:e5:13:a8:eb:0e:4e:56:db:64:96: 93:5f:ca:9c:9e:9f:9a:0d:7e:14:31:4f:a6:ec:e2:19:fd:d8: 13:04:93:85:a0:66:aa:46:01:6b:01:b1:b3:ad:0f:3e:ef:57: 2e:be:66:73:7c:23:ea:01:b4:31:05:70:17:fa:7f:b7:72:4a: 1f:12:27:d9:80:c0:96:24:7a:2d:62:40:e4:8f:8d:47:04:9d: ef:7c:bf:73:84:f5:9c:ee:86:89:c0:f0:1a:df:f0:a6:92:2f: 40:45:c0:26:7b:9a:e0:96:fb:67:bc:fe:5c:50:92:08:a7:d0: b4:6a:04:90:11:10:48:25:f1:4f:6c:6a:09:9a:1f:b5:3d:0f: dc:49:02:88:f7:01:2f:9d:da:eb:a5:be:2e:1b:46:1c:47:e9: 34:32:79:75:e5:9e:74:7b:15:81:f8:69:4c:07:5c:ea:1f:78: 3a:cf:02:24:c8:a0:8c:ef:c8:38:7e:a5:9b:c0:a4:8a:da:cc: fa:91:c7:5f:f8:a3:6c:e4:29:5a:5b:d5:03:76:03:fd:f3:df: 29:eb:c2:7b:e8:93:43:cd:22:48:d7:f6:d2:25:44:68:7b:0b: be:af:77:90:a7:09:85:bf:2a:5a:46:ee:28:d6:18:39:9e:fd: 4c:e3:c7:60 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwOTIwMTUwMjE1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBiMDk3Ny01N2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/ooyyiv1LdKov45GsfbuFzPEZWVX0ai3xPQw6KDY2iIETSWctSgFSuy2FZk rbYSZFHESPf05E4t3tdwlULm+kDmXgFSwH0Xwn5LR+fPphEnDNDdrWYlBmW9/xHB 0cRx2FK740vWSRkz0kMrntjDYYJBgdwlbGOHCDGGKga/LI82bx5dAcXb1mWtuORn X2K7s2uJpTB5Sa7AfMsUM4KtaE8KeDSrdy5zYXkfBqCN4oDI7cWrJ51iffhXTF9n M/T78D0DHSqVhn9pvNbyxyQi5Gv6qtDxdN0NWPJ7ENmIpDR8XqMDdnc1Q16MIBMM MmwtthSH1+/Cw82KT9cnzu2HYQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNaVUoN/ Ex6Ww28yM5eTuoF9mdr9MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQUY2RTAzREE1 N0M2MTFFRUIwODIxNTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA7uAwDQYJKoZIhvcNAQELBQADggEBAKeWBl3u8sZN 5ROo6w5OVttklpNfypyen5oNfhQxT6bs4hn92BMEk4WgZqpGAWsBsbOtDz7vVy6+ ZnN8I+oBtDEFcBf6f7dySh8SJ9mAwJYkei1iQOSPjUcEne98v3OE9ZzuhonA8Brf 8KaSL0BFwCZ7muCW+2e8/lxQkgin0LRqBJAREEgl8U9sagmaH7U9D9xJAoj3AS+d 2uulvi4bRhxH6TQyeXXlnnR7FYH4aUwHXOofeDrPAiTIoIzvyDh+pZvApIrazPqR x1/4o2zkKVpb1QN2A/3z3ynrwnvok0PNIkjX9tIlRGh7C76vd5CnCYW/KlpG7ijW GDme/Uzjx2A= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org