$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa File: B62D2E905C6F11EFAEA11916C4F9AE02.roa (raw, json) Hash identifier: 8mDqWMhFwjNqwCkLtNZiX+QP5qfqIKPqfLeHzqZW0Ig= Subject key identifier: C2:3A:E6:9D:F0:5F:65:76:3B:06:6E:FD:53:A8:1D:F7:F1:AA:67:24 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0DAB Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa Signing time: Tue 29 Oct 2024 14:50:35 +0000 ROA not before: Tue 29 Oct 2024 14:50:35 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 20473 IP address blocks: 2406:840:9190::/44 maxlen: 48 2406:840:9888::/48 maxlen: 48 2406:840:e060::/44 maxlen: 48 2406:840:fa60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 19:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3499 (0xdab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C Validity Not Before: Oct 29 14:50:35 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6720f63a-0095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:64:71:27:b7:2c:3c:b8:f6:11:1a:3a:0a: 49:2d:18:1f:ce:be:3b:3a:e1:13:b1:9f:55:20:9a: 42:3c:0b:e6:7a:cd:5c:d4:c0:64:37:42:15:aa:17: d4:a5:86:33:91:69:32:7d:33:61:19:dd:dc:63:a0: 2e:4f:97:fa:70:92:bb:aa:bb:d2:71:5e:ec:e0:ba: d4:a7:42:64:d1:29:3e:4a:63:0e:ae:32:97:11:9a: bc:80:55:30:9c:2c:1d:89:b4:28:d5:37:f0:b7:06: e2:1e:fb:46:15:b0:6c:1c:a8:45:36:a7:4a:19:b6: 71:3d:5d:49:fa:74:9a:10:10:f5:a9:9d:90:82:2d: 69:80:6d:ee:20:54:0d:df:31:c0:ef:55:d1:33:44: fe:61:26:a2:f5:ca:fb:96:71:2c:91:39:2b:bd:6d: 0a:9e:26:a8:b9:0d:74:7f:8b:15:88:54:e3:23:c7: 6c:2f:71:7c:09:ea:62:1a:b5:70:18:a9:07:9c:fe: c2:19:4a:8b:08:11:e5:73:f9:76:9d:f1:17:c4:06: 97:47:33:06:a3:22:52:3a:0d:22:43:97:f8:1e:74: a9:ed:9b:61:d7:9a:09:52:49:6b:f5:18:a2:d7:37: f3:4c:8e:3d:13:58:06:16:b8:ad:f9:d9:16:f0:92: 01:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3A:E6:9D:F0:5F:65:76:3B:06:6E:FD:53:A8:1D:F7:F1:AA:67:24 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B62D2E905C6F11EFAEA11916C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:9190::/44 2406:840:9888::/48 2406:840:e060::/44 2406:840:fa60::/44 Signature Algorithm: sha256WithRSAEncryption 1c:51:c9:34:16:fb:5e:0a:86:ba:73:0a:eb:e7:0f:53:1e:d4: e4:f1:b6:46:e3:49:df:7d:de:6a:3a:3f:1f:63:28:21:8c:43: bf:37:fe:8c:da:e7:d7:7f:e2:f5:b5:1f:1c:23:2b:20:b3:c9: d4:0c:8d:de:5c:88:dd:91:ec:82:30:50:84:d4:99:08:80:b2: 7c:08:59:ed:38:35:93:0f:f9:0f:fc:b0:2f:02:0e:54:07:19: b9:91:45:58:7c:04:18:89:72:d1:9e:0b:8e:d2:d5:bf:c6:be: 1c:ce:73:74:9e:92:4f:9b:5e:97:55:46:f4:5a:c8:0d:b0:d7: dd:69:e8:9f:92:2e:e3:cc:cc:b7:cf:08:0d:66:8e:04:eb:de: b7:03:96:20:d4:b5:11:6d:03:32:b9:88:ca:60:3a:03:6e:d5: 14:fc:f1:30:c5:6d:47:09:0f:20:80:d3:7d:90:2b:e9:d8:7c: 33:cf:1b:22:a2:29:9a:e4:14:b5:e2:50:1d:15:ab:01:68:ed: 75:af:65:33:8d:32:c2:49:7b:1c:69:cb:e1:aa:e9:8c:a6:fc: 4c:61:e5:c2:30:1b:60:2f:6c:93:c3:26:1e:d6:3e:39:dc:08: 28:9c:e6:3b:bc:1c:e9:e0:ab:f2:51:49:8b:c6:a2:6d:45:c6: fb:d7:6b:e8 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICDaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQxMDI5MTQ1MDM1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIwZjYzYS0wMDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNpkcSe3LDy49hEaOgpJLRgfzr47OuETsZ9VIJpCPAvmes1c1MBkN0IVqhfU pYYzkWkyfTNhGd3cY6AuT5f6cJK7qrvScV7s4LrUp0Jk0Sk+SmMOrjKXEZq8gFUw nCwdibQo1TfwtwbiHvtGFbBsHKhFNqdKGbZxPV1J+nSaEBD1qZ2Qgi1pgG3uIFQN 3zHA71XRM0T+YSai9cr7lnEskTkrvW0KniaouQ10f4sViFTjI8dsL3F8CepiGrVw GKkHnP7CGUqLCBHlc/l2nfEXxAaXRzMGoyJSOg0iQ5f4HnSp7Zth15oJUklr9Rii 1zfzTI49E1gGFrit+dkW8JIBEwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFMI65p3w X2V2OwZu/VOoHffxqmckMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQjYyRDJFOTA1 QzZGMTFFRkFFQTExOTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgACMCQDBwQkBghAkZADBwAkBghAmIgDBwQkBghA4GADBwQkBghA+mAw DQYJKoZIhvcNAQELBQADggEBABxRyTQW+14KhrpzCuvnD1Me1OTxtkbjSd993mo6 Px9jKCGMQ783/oza59d/4vW1HxwjKyCzydQMjd5ciN2R7IIwUITUmQiAsnwIWe04 NZMP+Q/8sC8CDlQHGbmRRVh8BBiJctGeC47S1b/GvhzOc3Sekk+bXpdVRvRayA2w 191p6J+SLuPMzLfPCA1mjgTr3rcDliDUtRFtAzK5iMpgOgNu1RT88TDFbUcJDyCA 032QK+nYfDPPGyKiKZrkFLXiUB0VqwFo7XWvZTONMsJJexxpy+Gq6Yym/Exh5cIw G2AvbJPDJh7WPjncCCic5ju8HOngq/JRSYvGom1FxvvXa+g= -----END CERTIFICATE-----Generated at Thu Mar 13 21:54:16 2025 by rpki-client